41f877fb760c7c769292055bedef58c32db380da75c4ef7ef725af43b4c8b76e91070732ce479e9f1853aedc858273fd138395c0f1198a17b206706120a30367ea40ac9e85fcf3b6e51ec35e832b9f0abc1e662a22ae67107f67ee09998c1980d1e4903", 0xf5}], 0x8, &(0x7f0000007f80)=[{0x1010, 0x111, 0x8, "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"}, {0xf8, 0x101, 0x7ff, "163d4248e574386a8ac3d42705b92608cf06e6657da0043627bd34c11754f21b54cf13f09a2d0c1f0a6ea254953913acb38ef5ce3f79e6872ddc74cb917634f8a7018a473137a6083aea6fdc724dd7bd8f39581a5f6df05517cb48a91f5b77f625cda3d053875f278da6a2150dd349ebab49b84f6142c1e68472bda6447db25bd40058db4434e78fd05d2406ac7b4d3de1f984496ded12fb97c621e43d98217b402dd1dac3d80e8917e6c21afafe00db3825113350bd1a4b9167653c03d5bd6102fa5da48db9bf0d926cd071129986d5ad2663dec0289bfbdbe6fc448bb5873f0d49ccbf7ad3c4c7"}, {0x60, 0xb4, 0x4, "fbbf9a8f1ca7f6ca17bbb43073f19b362178a01d2c42b24d5756e15323617eceaa722e659952ce249af7c51f157c035a1ec47a2ee40a684ce3ef71551b8a419cfc3547b67359bb62910c4187b9cee4"}, {0x40, 0x3a, 0x5c12, "7002e9bf0f55b9baefc4c5fff54408e42f47473c07f80df8bac4b6a1370220c07d0f721b9df9f1838e9b"}, {0xb0, 0x107, 0x9, "220c2d964aba597d08d99d7e4422bdf885ed760ceeb3a70c840a69594f02ce4b738531388ec76f9e537d9042fa14fde521022bace466f03e484a93c7a28f48c7b7c717c28b8f6a067a3c212310c99e2bb6a0977b19e3068b10caee4047b2d5f108739bb8267509cd44c53108b6f1ad33e6172b74f1815d2d043cdb59b4ba5928efc9c40a9c1023242012ef7919c589c497fd68e0759db7784dbc7d4e1b10"}, {0x70, 0x113, 0x701, "7889a37ceb3608faf8d9e4147fb522553e32c784e5e1a97f20fd1d8f8a96c5688f89d5ca563610238bb5e48700e3bd54e27e4015d9593d61d8c55e661a942f57b597be3c157c81de942697398133ad3619687e9ab94cd4a0f9bd790b649f65"}, {0x18, 0x118, 0xf91, "029d"}, {0x60, 0x107, 0x6, "9e9a9456bc1a5753540598bb1dadb64617bd008415e2d02fec17fb6dd92a56eaba7c418af6eac397d1a99b139234a5d9125a51b14e43125d9c633d9b79ef8fae2193ffa520850ecbca796dc4"}], 0x1340}}], 0x7, 0x8044) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001740)={"3f3979dac6dd6fddd0b714e4dbd97878", 0x0, 0x0, {0x1, 0x7ff}, {0x20, 0x6}, 0xff, [0x2, 0xff, 0x7, 0x0, 0x9, 0x1, 0x0, 0x400, 0x7, 0x80, 0x0, 0x8013, 0x8001, 0x9, 0x0, 0x100000000]}) 17:57:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x9, "3397cb", 0x8, 0x89}) [ 334.043077] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 334.047096] audit: type=1326 audit(1649959075.129:49): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4532 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 334.092170] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 334.116748] audit: type=1326 audit(1649959075.178:50): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4532 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 17:57:55 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) keyctl$instantiate(0xc, r5, &(0x7f00000005c0)=@encrypted_load={'load ', 'default', 0x20, 'user:', '(^*\'$,!+!-\xcf\x00', 0x20, 0xe5, 0x20, [0x66, 0x0, 0x35, 0x37, 0x36, 0x39, 0x65]}, 0x3c, r4) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 17:57:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$nl_netfilter(0x10, 0x3, 0xc) 17:57:55 executing program 5: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) keyctl$instantiate(0xc, r5, &(0x7f00000005c0)=@encrypted_load={'load ', 'default', 0x20, 'user:', '(^*\'$,!+!-\xcf\x00', 0x20, 0xe5, 0x20, [0x66, 0x0, 0x35, 0x37, 0x36, 0x39, 0x65]}, 0x3c, r4) r6 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r6, 0x7) keyctl$revoke(0x3, r6) add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, r0) 17:57:55 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000200)={'veth0_virt_wifi\x00', {0x2, 0x0, @empty}}) sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) memfd_create(&(0x7f00000001c0)='%::\x00', 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0xa0481, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000340)=""/76, 0x4c, 0x40000000, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000680)=[{0x20, 0x2, 0x81, "2083cf0ad874aadbd9fabb45acbc"}, {0x98, 0x10e, 0x401, "71b4016fe8dac32eb70e9182059b661f01b26de1a2a04268ee597c85be70781a6390c61a5aab38326380932a55bf9952ea702eb6087d9198ccfcb20a7accff121ecd6bbf705633987ffd93ab4c9dec4fe460e283e9a0fe4170a4703023a2c92e8854981b2dfc17b0a09cd024647c551a71cfb29f95f86272f4c314ef09a175cdf0fd4f031bcc9b8a"}, {0xf8, 0x29, 0x2, "3ec0d01ccff0adcab0402e75d0240e9fd88f297cf9fd48e9488d5a17f8adb2eab27dfb80eaa7d2a9f0e11036a03b5bbf43807f2ef0b71c3b3a1420bd7b53861f25d84ce2397c2d205600c12e740fc522eaaed683b9883f8f136ecccf2673a0b4ec5e5e9ee84935367e726470837b370a6b8c0a82b0d27843ee3810bc253a82b15f1072fd532fbd381e4c0262ceb69242715acf963df3e673cda82b2931751f8cac1db9b0caedab57ecd6cd150e982092cd278a304e775762f7b2bdac96700a4dcc5a62bda76b14c8a96960c13776fc8b2eb3c64795d60bb639f7f9de46b1092445"}, {0x18, 0x118, 0x40, "ee335a"}, {0xb8, 0x112, 0x1c46, "e705d9fab50bd2c4eb6014267ad322346552949e768107c40382976de84a88c854eec35eeeb7d7a06a9c136fbd92fb3d800d6d328e811223370703a5c7b2baebbb5b7be53a01f7dbab63bfa91c5b011d46f8eaf70b2e084a866b6e9c34a8d077dbef0408efcc341a6b450aafd91a67048d30ccb45d68b4d2317f62d520ffc8f530e269f8d2e39d15e29bd7b1bad5484422da6d124246a6817acd7dc9332314c5c7dd7a5e2a"}, {0x10, 0x84, 0x40}], 0x290}}, {{&(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x4}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000440)="4fe10cf783e46e6a4ab9eb0e3508240bbdb53425eb5f79a64baf05c6e038296a6cd15309af8430873cf86771f8a942cf3f9fcacc1d3b7b7007f6fe991ced5f621164b07d208fff4186f84c6546287353c44950e9a351c17f0b60c36623079547d57e3f74c2786973b2ba0fb279111dec09f05b0668783d3bc178ec13ac6c0d33ad032af1f307e64cf60d473d7faae90b5e96b2d68cb1dac3893ad7aa9b22fe85b9ba14da1fb51437ac9c1205ccde16b47f2d84e9c97c04b3d264c7d1c81aef40aec834470f877b2161730bc0", 0xcc}, {&(0x7f0000000540)="7362e926c29bba501caff86e3628cf6447b3baf47bc3d3a1d0ce3ff7a732dae8b18c50e2e42e030231a0b3b7dd85fae11887cf80152469d075f63006362347d549595963bdc9fc285da25b751148b7ba831b30b38855a99898f24d11d37d737a9bc53b6791fc96f7fd30672199e71736eeedf84f95b9c8926747d40b0c323c802c8a9b94fff478f2f6f443a4e3d5507540ae2707f854b81a6be86c22fadd2092c4fa9bc5d54bce2ea26bac9856638235620b9ddb", 0xb4}, {&(0x7f0000000940)="54de7ac142ef02e0c66866988bedf3838363cc5c4151e267b0c30514a2849b7712eeea040df9de00749323303b1c9f2237aba494e69ace21cdda126ee55c8a3418182390f7", 0x45}], 0x3, &(0x7f0000001840)=[{0x38, 0x105, 0x22e, "c5acf68030599dea1e9d471d10c6cb546f536ec84e3fbee9fdc6493f106d03e8c81f0ecaec"}, {0x90, 0x10a, 0x4, "ce1ee2132badcde53735e755e9334a1630cf2b532a3e422c3d00d3ac97000e5d30be556a9228965e765909d0771662257026994451f5faf0e22b041ac7dee5e7797bc61340a6d01ad2842fb04c5efef97c1bd71009cf0d979218e362e23cafe051daebf95c33f5e34df258cd5e651aed320233078aff954da5"}, {0x110, 0x10f, 0x3, "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"}, {0x60, 0x10a, 0x6, "7886d2bc6c05a835943f6d516c24c100e4fe30e0858d9a5d8ece7361150a236ee9b94d01fc96d8f096699c134e52fdf0c8df8a71a84851933742e5d738efccc4ab0197fe0aaae3e14d1a74a6a075932a"}, {0x1010, 0x1, 0x5, "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"}, {0x110, 0x10a, 0x8, "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"}], 0x1358}}, {{&(0x7f00000009c0)=@xdp={0x2c, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000a40)="ccc8895775d47fc682c7a7da5291c967f0ba1929b20dae93d4c9c4a3a28acb2af6a2e17bd04dd5083dd889e22c5c52c52f71e8d59278671d3fdd9132eaf2e550b3cc670a4c35e47575c75b761b50c83f2fe457c4b00b19bbc9320bd4ff992ab1c3041eb8302c401342bd33caf4cf5a5d16d6f33a388cddd7f405e4f32ee271d0051922c64d9c97a4f0ad34476453085ecef485772c1172d0ddb58eeae31c1e5fbfeced096720a2558257cfdc7060a7027b619f4e81a3eab95f5ea843af0c3d0fe74e4cb05d549bb9d3a2cb87cd85d0ff35aee403f32f561631c7e400d5403b9c8101373557", 0xe5}, {&(0x7f0000000b40)="98dd16a69c4efbb11764889d862ad56e82157a7158b99368cb3f64474cea9e43f55524e480c6423a67ef3900d27d35a6c92217e7becbaf9247b907ae48701a92a1006618c1f0893edc33496018fea67f1ed47b5cb3174d91511b8dc875d1bb6355dd341b59aeb4b55c2ea9a792", 0x6d}, {&(0x7f0000000bc0)="e1c2d5bb2807f09c3d7458b2ecea2e81ee77ffaf023f48c9e2c22896f0645d803cc69c000b650f02052d793388e1afb7478ec140d8aa47f5e2f3ad1dfe92a9f346d9ba82c0acd6eba42a89c9bd5d395ea83e8f56887dd83633dac0cbff7f99a330b209ed8199074d139040bc1e9f7d89a03744bc52f38d37090c855abcafad9a32e2cdf910fe39c56feefd46182e11c821c5b4e9686f9aeddf008001799b81afdd9820c6ed3abf699995b19c63ff4ff0ab6edd5e3656814a0ba4e58f32ebc2a6bd55d78c8e95718aaaa99884db47f716ea787a74931e008b1a9ae1927861", 0xde}, {&(0x7f0000000cc0)="56a8e5085a7d865062302728ef52684fb99eee49535b80607fd102f6bd318171860b6603d794817ee6851e7c12aed0a6899d274cf16ee056579e0abf9a7e024bb31ba13acd6a3f6cc33df9e3c66c9b58c5a9c95d5d2b3e74ed020bacf0feee95d9c0ab33befafac24afdf953e2081fbaa24fd5d289ec05d0fcee3ad5d6180390b3128ef0b32f9b3a5192f0f74093db61637cfebcdbf61d2407ca7849fb76728f842b739ec4c393", 0xa7}, {&(0x7f0000000d80)="d2f653549d476629324d195d08baf5652a588affef7eb0af980586ce59dacc09e7211bf10406ad749026943c3bca38e333404eb8af4f53b28c6a74666898575442e4cea4964989dca5125f95a6388fad8bb4315e29ddcf794fb4cebb828c52d03880fece8e74bdfd4434030b95ead8ffb751fe5ed47dc92af7a8ddbc27c0c5c61dec950026d7966a8c2c4611fb71b7e7589cb2b877f2be705cf3fc84b5995d05e67ada2d1f03b1cbdc91c30c4672b62456f789458a6fd3215ce0aaef7c5902b578dc675354ccc9f41a5ae77457286bf190e1", 0xd2}], 0x5, &(0x7f0000002bc0)=[{0x1010, 0x113, 0x1f, "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"}, {0xc8, 0x1, 0x3, "6ab3bd728a4869bc64188aa6cc3ab387743370a99f1e9b18ef197984ae583b1c7aa3b294ae570ad6624bc65ed91d0d50ec7d54eb82df688eea1c5f7466a71f65a6e968c83657b564dafc346df970a7f38e1f75e170217101e75547726572a1f8addb6d9d8ad1022c85ee56e742c416f05f09bb46fa2e970c75c89774803acc54b6f22700646939b7adc90e9527a865b30ab045d07e199eb708982b6f296f159eac3e4500b433a3adc154b6ee2ed515587f9ac2de553d2d78"}], 0x10d8}}, {{&(0x7f0000000f00)=@llc={0x1a, 0x6, 0x6, 0x1, 0x3, 0x9, @local}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f80)="09d57e2c15b45187e3dbb7ed37e3c166ad7871801286ae08b51a82b668a0ddf2763d3a8ab860c1a875f0043c456549eaf17c99505753086317c3816058330919b4ded461b6e7cbd697bd1db36d33af239a22668c43431630675ba758c6ebcf962d06ef9e641345d30990164bb3253d7de177bb08920f3b76e453334dd27924732b75239d6f9a", 0x86}, {&(0x7f0000004280)="d7fe5842092476ce303b6ed5bc16890830753e345b143c258fdc1234122b6b0929452fdcd6764bbf73b9f616514f68b0a5f41e0df531c1427cba7505a9fc7a21dcf68418bd3b9d21b2f9b9e35e83b2b2e1911790939746293dbce9fe554f51d71642a9221452dc5f204e47d3b6d92048f5ab7ecdb081dbe7294435603c7ca9cb4ea6dee88b1da3a352a18a06e91fd2cf7e508d99e4afe32fd8789c91485dada3b27d34395443cfe4fed6fc9d340076f24591e699402e1f6ba1ff1cf969385255798feca6bd66bf616c9729ff89a28c8cb070e2cbc222774cb7f2d7758af3be1ce956aaaa9efaa88ba02ca48721bf52c587923920d04ade18d684cf39970c5b2f4e07f1c05cc28e2f908eae443cd5c7e3160b6e02e128bf8fbd49b5f2831552a583d328d3e3b21f1387dba2710e3038bbf6a79a1b5eb5dedaaa90186b7df86ece578e5de7444ce6261c78eee2fe19a36eaffb6c6689deac9f0807412c49d124aa60bdffb41b659a73af2c13d1401a6541371ffdf01d43e9e8d5e9e5bc53f1a675fee8d27f311aba9295f352cb88e5e25dd5ffecaf66a5bb5bacebccf9305835717bbc958e4e185290f02d2f8abf1d7205224d40138e92714816687ae9718ee4c52f6daf7e73108279b0fd9bcffc37e07481a9bec981437095e098acde51118568449da8c68c29cff0be38055d2493a8d99fa0be4b879070e5c52ae40548c93543c9c3d89f6abb3b5bb227db2342fa241fb0af5f24ca75766c04f2449510136d8500ca78a2b105c3e2f6498cf908b37cad4ddc9a13a279e025032640b5b6e23ac9d2415ac059dc975695b22327a6f4ddc201a561d60bb7785c4ab9e889f65abc7b6d083d758a00acdcda76ddfd42d2da54209ef15ac8588a2a4fc16025fcac248f8766fbd46768035da1ccff370bbba24b691cf5c7b0f35d374c0af9fcc70306be535a18a9ea04c66d5465ce2b7de20b1703924d29259441904cda2c85da11f58847cc7054656bf191965e3c31c392d6d970ae3a60004ef8acbde65ed74ca6022e1b60914ae625e7c2366a9f95fd24e003b8d2368d756f58a8695ac94ebbd1365b57d3d9138f57756fbbc2c71906bfbb7ad5b05c18ce8a26dc5ace21455b95509dae9c561d8b89d7e2032df2ce389c9f1df6e3953bc529517ad5cdbf17ecc7d06503f786380d4a058052a8ae617509a7c15c0c622b0a37f46ddb64ecba3402232bcaf265bd9899e709ebf8fe245ebe3dd286dc0a1e9d4a906a269069601395785e284971d50de86c1105f1326e5635671a3622825a8a4642adeeba377d307a8af9dac7043914971979af3becf8166b71b5b9bfc0a18897a3cf75959117fca28d6bd40347698ec007f1bc5fab6d9f40532da845bd8d984f54c77a7c1a90236907d4c1432e6c7abae08d9f0fb1e7bc2e03d72d070ff8efa28093ad0364cfee33955cc04e6085a5c8ff49d698e5896c2dd759a897e668a5009f8bd836ab38a8ea84ebe8842fd0295003d7daf59e1d7c3b09d1476d65d860fb1eb77bb00b43dfbe05e4bb9fa92265951910b2da2be3ab95a06f05c2420dc97e2fcbab37adf72aaa4c718534abcce64692a795b7882eb55821d3da291730330f06ebfb308e0e38cb433d9dff7ebc23612d86b4b38972149042c53ac25c144eed0d6f3845a7e95090fe3a5c90e2db36219cd85f11e1dd710d3c8b9e3b9e0ff18cf4633398c5e252d2e6dfbdf7354ba235747e465293d4ead6f7ad0ac65e10c218ea57b21c85a819c4cfdb93a41a24f69badf5937ab3254cc5b470f1b70bdf5fd7f12d97980b79eac2ed563245b0fafdb60fd4f97c2fe1b1f94a99ee0e778619e7584c24021dbf9a61b61f2619ec4cd3979235e914686fca7fc4f59a22e42f1f21fdc0bd38ccebc37f692431d9b74cfd47be55221a460968c0c1bdb7f12d1f91bd3e826a7c29e6b5e2f0f743dfd5d1653eedeb8d7351b3b6e6252121e14c7a560d22ed76b6fce3c306f5d0703147a2b90af10a19eeffc6abd8e93a21333b44e575db025373ca7539e4f646bcc0fa6a5e546e6017e6a71cf2f7525b47bebced132b8f783d4bcc15e09438067e04f937a9d996df5c32bd23a190a46cbbc815d396329f9b0eb0b3a76a62341ff67c9b6bf82e2af049e58bdbde81df05fd16ffa46a39499cb0caf8e39fd6bf8f38f5f01f767951a169849021e45c78a716f2e73992a085856a8b942b843e651f9c3677064621d814accf6fbdffee8e5e65e4a6859c275e0cb203a58bd8d1538638c88f5fe9ffaf9cd06f1f8919c757972b41d1a7ee7ddb6c5986e9343cfd1c820b1777d2e89107141b4f0595138c3c998f2a477ad204cac62239abf99e3bd10da650b276ca5ae4fce214d3791ecdd73d3ed609a79ed8c26dba2432df84b0bca4daca55a0d9ff858edd7f56760ada53fc08ffcec3e88d1f1997c5ded2c63f69d78ff38ba233a5d3242fc57a826e0168133095342d46b0c59110ea40f5efe4ce426c3a843934c3b8534e9722c737ac286fe25390ea59069e6336f0cedb6bddbb3b96e0f136c50711a8ad92a869f1dc615ecbd605e2ac6bdc85392e67e3f4cb3b369e4b3e896e071fccd7fd5f7e027bec6fe5fb46391e31798b3131788981cec922037f089d204a1df1876529f1518d42453d43a7ee37db2d4735dce90a4c071e89dddc3ccf5dfe52d4e888689b2e87970b90839d91ba40dd2b17380fa0f6c9ac62b27b761b11643ab4da8aa8767862316c308b7fd198c81ba235afff97f888f10916f62206ef5c2ee588012e9a9f466e739607eae75e1782f00a06650b58fbd197dbddd13302d679ac8de97894b8ec618ab8dc6de2af569349da2ba83e8863d2d8447737ee3738bade800fb0eccdd81fef75a77e6aae0fc50cc6190d5cab2df2e42fdcbdee3ec866b54ade0dc1d3bd3803f952cd0462557f4ef47aa788fe2ae3df62c50dafbb424b38b7f75208739838f7feb41ed4bc0da22d7c8aa4c9e1379ae3eb81663e684922c270bc0d570a60d4c738032373d669e6cdbc7f49c9c7101d7a3b2e631e67897c97cbc6fece66c4ae347cc515ce6fe383bc5f7db4ecda93a634410889e4b2935589fb87f60e8e85281146590013426f70edb87f168048cce96934bfea69d04764eb125439195f4f201d4be89d1083cbc8876b72366a98bcc9798b0dd9d279652c9d400f9b7898959461c12358a338cc9c9be538e317d08af908db6a52383c9453765eaea4c70b60a110af4d1fd5c7faa57503b2ee359c8a7cf9bacb48576a339da38b1d8f1836ff29fbe4fea0a57c5de2fe7b28b0d4013c94c7f684f501aa3579ae146ffc158a663d137497f2535f81d45b23f8ec41ed42dba43183ed52977560f0c59f52dc7609a67c367c6bbf4406ac59b33f987934c69c6ba72a39e97be812945f64e93ba6296fe85140100f8a440eb6c533a9f299a2fa4c80ba4f83d58eb05bbabffbb768c6028c2f8842a7162c1e87bb741077dd58a82c904ff6215d6061f853e171670e8b1226addcae2244fe8e9ac8fc5f85207dd8fdfa87b7fa0ed69fb10fd40d64f22fc759fc299e9413569143d64fb0924245f747dd373e6a07738177258daf5b7a01f62a935b3bea00573788265e469d50fd69b706d1540f32f6df2e76314c8d7b0afe1200a4b2a66fec23a7aaf129e813079604d9b532a37cf50a6fe7f4bc68c063c74da46367a5573d7e54dabdad84795c3f828bac86298b1a5f546ad4e4ba190c31504cafee9c625d82270ad2fbfd0969eed659f46aaa87abbcf637c0016c376dc995bd752e9b3efb36070e07ede7658909d2ad5ef0cc52d57dc6ad173b1d8bd299f9009e8f0b9178bc2ce55f89ddee03aaee0e95c6aaf139ee8f44c8cb1bd8b21fe12fb4c3cd8b432d1d779dab38782b064d5410fb15abc0965a60c6cac549ceb255c20f5627de9292fe2ec4c1e7f799630962860e512769e08ccbcc5e3e186b563ea0de4b80da786139f63b0ef828636b2bea7ec40c31654349dd5f77a6ec711ab59fa3e2d8dafb7d4ba0ac9ce44a4484891fda772b0c9b8a63b7456ac27da869572731596a701891efa8ca0b8df2ba6ba2b8f69ba339aab4dd037f85b8e41a6ceed0ab824e24318f6206580980449506eb1b940758d0ff010d4499eb31fd3264d2d4fa99e70869a9371ee79402a9cc34bf1ab377d9d0b8aa4a760a1d774ea39c7e699fb14f4d2630a0be9959295f6676ca7deef12680f16981cc383bffe6957fe06a7a550bb19d92a1cedc4100e1741dc70b689d3fb59ed78d8261d85162e713578d65208559ba775b8d0ab96467441b330f11932cb68eed4cbe2a7b29aefa259292a42e247d46f09b01dc443b97c097e78e97ffa8e03b70b41b68a31c843a89180898a0080bc0ff0c463ce49824c46e143c569ef1ae79ad8d20ae118e13119e81b3be6f8b829edf60b367d8ac0775ef468f669b60def18fb77d5726858ee9e4fefdf4e19cfb7133da3b4a1cd5b64ed273c024bab544045f069453e6848b42a80690ce3b7645f3a7abff6d82ff3993373d88069e15dd12d9912bdb4f54657019d9238158ce174f0c8408238f97d48d25282af0c93c69ad7b9b74a254723591b7c37a6b8a538402197354c7354469d46cd9d4d524ddb66e94ca61cf49786dab0ada3d3a04db3aeca5e69570483dda6bb9c1b57d31725bd7802473c9284436013e1bd29e1d25a472bbd3ac47076a2c58e83328594f1f5e6bd63464ccf71deeb6a1c79b52658bec0e59e851c6a01c488a87de2903ad4cc9a11a60d211022e67d61a3124937e7d834078dc51e1960827771b0007c10f97f4622aaa2c11a6f0185eb49024dae675d83f2a86f38b504fe8f914ce7cc20113013ebb1039b3f00846d0037216a2fc94b0c250ffb2303730c90fccc7e107fa4812cf575ff0693000a7a2eb5f6fe1710e2e6e01815b3769420ed013d2cfbe259279cb2c10048ddc74b2417cf6d3ad3fee6df90f82f37d2298083c7cd35881c45a5385105e0d3ff83377cea741d46ebd2c4760a5b3b1f5d2f244a26a258eb413d593e4371bf1b2e796e077e9236067cd7f998c773ebeccf288abadccbb09c3c59e170df4870be747ee00ac3953ad7e6400bdf00da411a6ccd9910b7eac2f39911b29c49cdc4a291702035ce215434989070641fda86b8c75697282092943b8bf340c708d3606cd0b44024d09ada535e68cdde4fe2c86714d3db0b04542282483c7b149f345ee96a8d48972121d671dcb0cd3014a014d1d4b14cdb5e540c9b593aa0e5d5070adc3be4a4267907f8550927ce6f12f0bc6c916377597e87bc50a425000bd257fd882bcf72cf3cf11c6b15a2003aca5685a206392c284b43d1a8d6284f2ccffa4d5da02addbb0420ca194f8094efb310fcc8f3e32c7af0b304872849a3e20f1d18f014a38635e7b8ea6e6832a24a0693f3e804abc2406a014142aa3362c1527ece0123f28196271462694174aa03080494f412cb0c36c860e29d25b1b6e52bb6e745a1e39849ce6bbe63315cc07ceaa314c9266f26dbd1d989275bbe5df8765717193d1ac6bb09edbc861dd63a6c743397e0e37389deb813206f45544f8b31963f97d8e3bf45277e1958eaf70d60b32450c8fb3f15f11503b21146994aeee611d124f4bb3ebe7e70ad3473216eb8739a25243cce6c25e68984195e787df119c5c1c6db92e9529280d56ac801b902b43190b29d1a5f141c24bd3c7c45c5fbebdde1b4b29aa63c6f6cadf1722124742ccb2d40c0accbda87824149bdc0ad8a65a2279fc8fe6d4b20e7b11ba81b20940a14d09f844590877304b", 0x1000}, {&(0x7f0000001040)="fcf551b06ecc1bf5fcfda1fc73c1531811303c971b6a03ab47649536c9c8ebee6bcfb18e8d894874a37e6bae5a7de6fea37b14056c64474d63dcefc1746ffa09a8b13fe99be43429476a57e07eff5ff5557156c6243e631b7c5a376ca89f8dfff5709b4f4f21c6fd37e5d63f2eb06bf5123505582a09c55720", 0x79}, {&(0x7f00000010c0)="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", 0xff}, {&(0x7f0000000240)='\f', 0x1}], 0x5, &(0x7f0000005280)=[{0x1010, 0x10b, 0x8fa, "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"}, {0x1010, 0x110, 0x8, "2afa752342751fd8053b80cbbb2bdaeca10cdb0f160f5eff659d0518ae5834470e64f6b626cea336a5913de7f95a6746411b99699f5dcb61e6b5f5d95a2c41ecfe97ce7c8acc06908b0f4e460de9abba784d910b829649c9c71a17da60e4aa41194d4d9b78f79dfee10c1c41247838bc38be46408a86691c72884de1b4510404929aa236fa1bf618ed5e0c7da034933cf6dbed387f5abfa3f39154a278e4557ee87927618cae171608cf1ebc8e72579cee20aadf35ae606f6e98816c952bb8f6598e107649302c40ee74671159311a3ee24643d1580473206ab55706efda71a16411d3e86a8896bd647aff737ab4a320531aa97bec95ece5c4d060bd57fed5dea080b7a109347cfa504947c0c32853f5998a57d887077b396c35bfb2ac5004f80e00b1d9802da20149e8cb817f89f525d1b94e8ea3fef592e43368a1a227add26142abb4c9ece8e891cce2ef8f0472018bd16fb2d710eb237df3db71ab23d53d87359dea9caef5f50fb082cd03a36baafe6e1f5141a527c250be3704dff37457659ad9cbf9eafe811a5e58e0959f6b3b10e998234cce9270022bb80658710750bab00260a7c88cd74684d3c2f55abdc63af3b51a2421b02665bc99e746dfe0e4393122e2aa93c6260a02c13857d3cc5fb566511ca50d8fb263f827b73446db77ff6fbea557d79e58cb26e1b56c60a89b4168ea4b651fcb8ecf346d67d4b5cce6287fe4365fc76e74b399f548056bc1bc6c3aaa61efa78641177b42e0348d25d2386979e53d039b42e8f394abb0ec11ec89f39191a71c2987ed5e6518dc84e6cb08d011aebc67ef56878f2c1f4cc06b0efb1767f6e910e5c578ef1d16c7a2ec9cfc01f4b128f7e8f05ffdbe969d8610764a6344b4fafaad5a9215c8302538eb790ff5244620e4dccd538da6315e473ab573fe047829c54be5371038b30cd68c6ad3df6523ef525f1d7f5172c5ef042b809d4bbc85f6f09253f25d5e33a79f9bd714878f2d11c120923282fdbd607e9c18a37f72ac6914b038ae57e3758a5cd85ff9589c4b389c267d116f75c8ebc782d152eca83eff177a91e920c85a9ac2df901469ca77f97d35d45dedf0fbd92c51bb06d25f19e5c037dd0c35058b73be611a4b7cb1f3911be774b57f8d9c124fcc08187b3ad1e9b02406f83ff98385218e75fd5cdcfb1a3dd98d02ecd1e0cd7fa43ae5b14cfe44a94cb426e74d841d229f0c8fb3b9712a660a360ec0b0e03e1a98852753d97cb9a43055261faf6ae7a17e1e77fc3dc5e29cfbf7425e9648ba1b5dbc335e83c7441577c000bb2f48580c1a9bf81eb3cd6512adddb11900c7b87fd8183b42913d34db76dc105ac31ee9c542b3b53b355833ebe5a204742b62d7124a9a4534d9d0d3398471516a86ddb1d5d501b37d4b6b976796ca9707377815f598e949927be819ca0c29a8c976ce39f2183c81554d4f078beec016bde3bdb557881984ca84ee98aaa49b90f6d536dab9108bed29b509adabe641dfcd6e5d5f401d17809c98570121ce4a6cdd36c1e2edc6cb77d72192a88708f02cdaf566e42dbcd0dde8a7411be6cba9c26f53a6969a65cdb9cae8acc5b31d004d1c3052efdedf0b473a15a818b1a722b151a1e56d63edd0eea039167f54e61849baca6057f98d0811098ee4e20b23e955a87772cca1e6668d440c3f2f346bff502ddb7b09c41b16b260149cde4ad726cdce30c76aa41cd41930f4ba341dcbd6d9cff160a4f93b8d16faef3052e14678b7cca4509ac28c598f697af9b5af06d7fef79be524eb8a48ffb7f57531e24ccddbcfbb444fa15f6bc8afb56b3b79e88b7a1b8f65d26572b5883dda433f99dfe01e74f18a5d512f9da113f895b0b93dd61d8eb435b476d2b40b5fd51e1d5de39599c343f8b937a0176f1de8d1f3289edfb9e2a5228965be19b81f1621a92319f210f5348f28c4bed13aa85fa1bf51ba2997b26b2dd3e8566c9f18e4cd6cfc902a3553a8a41050f92a88f82ea7c3ff255da23eedb334396b064c297122c6a45ade58423e4f81e56e8b64ee05a821bb9926d5278845f171dbcc18da4251e87be892e79db1f89ea9d0abc96bd13f02e881e6e67eae6ee202294328f2acad5e6472f1f58939d9012317b38a53bfd1cc4ed889d74d155e6bf87fbfb81331bf0f2d7007932e40f4f13f878367b2855b87dec0fee7db9673c327ba9aae5aece946b255f9e63d39782b141828f0be960d2f253be35449d7c89da7ec74d17ae4cbce342a8e40a36b650a8a77853157cb6d86b3287a9cd13c59ed5220e9aaeb05019bff5147a82fb0df14a1a1406e056e1dad97e42faff3b2eae7b1de429bbe97f84c63ec4b1f6ce846e7e373439555229179533e6ff8a4b007e52d687ac7204f30c89149923ad900d0a0fa04e3dd6dbb1aaacf9487b84ea9237d3eb64c740c2f208fed655b9529ce1fdf573e959600860704067b36ae18efa0d77db518e5de13e9f0a90b323787631cd2cfd318e361092c01447dbcacc0ea90d28f2b29bc1838a2ddf0372e314ec0e100525f0d03c55260f47b2cc0346eaa4ab90d5539e37b4f63a65f048ecd17a30017dffcd3caa214200612882fc8d89ddd7167a22f22e0eee9ef759ef3b0f99a728b29017cde4b749a7bd50c2886dc89905095d3773d27ccfc50d381034957158bfb4dbde9985f56417b838bcc633795834487562a7e4848aeb78c7802a4a17e103b164e7f55935347b18a3a0ad9d3a29dbdb9987fa26b733fee5de8d8333b9c6a3f8644d797aff2435867700374e0fb89355e13bc02f48f643ec3c1a47cedddd2e73c10f0f4d3aeef724916fc0e0056a10735c3dead7acef3049530b18956bdfff1d1a73d101385d7e91606ad71253a97563dd51f425584d0d05c23d6feeb106c76401b9017c2c15a5e76160d55ba93b153db1e77e745163bdcdc0d145ee66748f48ab81fa5b5bb514c2745eb0c7c868502412324c6774f728579047db902b19f01881a2c83e2b1bb37c8fe7541c558066a0be9b98f100b83c8ebdca057c7d17acfd8193a2ac28254da10d269dee0cad9b3b5e86b4384499df3d07c72099cafc0985daf47e8145677d3f370cc4c7b6a1bb8278b20fa3a5f227cdb187bae4539ac28353fc9d66dd8faf316d784aa6f948abc5f6feec29db18d43aaaf193325bf102ad79e82c271113cfc22f371982fd7c584c67eabae8bcbfb535f953669f7473d857b795833cf0c4746430528553a5ea22d594b6e5e5f434e6932a9418771f5db925b20b38dfd702e9f64e4db24a80f8dab2d8d8f9c47e35047c3d2ac3623d973099171b5786e4d1b425812bc2c4e873ec5a9a29dfdb99facfb575a7c726f985855d65a0685cfa351b70235b13da393832e2cb2d744bb848fac6ff630c301a75858ca18ec7ee271fffff5ac110f01118a872511fdb6792529b3df9e9f8082e0e2b9af88b30e57a550b07b00454aa77a21273a8dd127d6fd45ed72e620c6e7edf545b9a3696b6fd4daf789049e5737d58a42fbac7cf0a26928ce751a21dcc0fb8fd77a49084e19de2c11ce761251c8a8039781011cca0a1fc9c974259713163f12dcd345d43f02d37d858d6a6e0a0b9404f71dfa1bc3a70ffaa52e1b3864f2a59d297231e31d50a39cb5da361e2282fa2a39a51723a71c62aef2610960c9027af7c9bb1d81624b36559a5ec0e0ad8dc5e1a9cc6f1e30476152b072099c12e94d780f6de6b2b1839188c30205cba1ad06ee962bf59c5c099f74aedad9349d4d1009c449bcc9990615e206c37c4beb57b3fa347742ff32951d4ddc0c090bf7764905144044b7b271cb7151f8caab1b0707e323dcd34e2a5dca2acab5f9ba47fb467caa426610b3d992350dece727e61eed58002e73327977f39dc6d4295b6528b2a4625b35d73f73f64438a0def901a799ae44c0e68c8d98b7d2fd8e4080af0089406146c8e9312082f3bc394172137d31f73a67f3400e9e2450589d0818b343b8bd3936e6d0889ba103117cb3c5a7f97c62fd9961f381cfdee64665f36944e1922502d828d994b9595ed1e5d3a190a0c7febd4867cc0d2e468ab52f9429d7f4ca4a5c2225a2ee3c8fa895b59b5fd6708c7bd25bdb4512f4d2fabb6d438c3d97889849b7df839acc383fd892b6fdddacdbbb3752d859107d575da5d86fb36fc5cbbc8ba52cbb6e80b060a5efc835597eb50eaeb6dd4271511dc6c9ab753d1ab45f5db97de3591eceaf812d0066375eda7f74a85c1aabcc37683ea5041cab288d764623181bf214ea76f29273e5395c77b33aca7458eb51649ca923d73f5f7be289535dcd73f4e333e9674dfdd38b282a22b17bee18f0c02f667065a25a0759017276b1ded05fafe3791cd95d3c605089cefab8e6b3d773f2c36f782b9e9086a28854dc46a1b00d60fbf0b4bd784432ece529a603f5f2e4b38322d3f67de6b7d0b3a4d2031ca6cee0accc171f9e9e346cf8c267563de84afe3634d7b1edff527b0eb5ed043ff995b59087d4f18b660f37c2c23e61da87a0fc7b2aa1e1f380ff57a3a57654d33ba447d2f1bb65b91d4034a67489fbc45d02d0d260d3af8bdb1fa6f7c57c95698ec602d9e1c9cf7716eb21a3f688af1a3f62bd425d5c073503856ee444be6525b3b2e21a6f01214f0802db88abbd65184e87323852fe9b7eddb0a67cc77a0e2c0b5d1cd6eea2ed825b6682c6ad2f311b9e52ad5eb41c47b71b866ea6ccf3e1feccca5264735c4cc94025465a73a525114ad6a38040f003b8a289022d3055eebdf24a6936fc0f5724a0371f51cd14c2d22f49c432f87ef53e2745bb2d46706fed271267a73f5c14689063e9c7ee0bc5442b45f2300569203752e2ec2932f84e26c684ec0148b18b7795f8cfdd0b4e4ef8c1c8749bd7edc85bd047a15dc49b663b6f40f95b4c0f75828320c75661eddd20e16aebd188214f8f91120b7f0296ae9eb399927868156e0f624cab22ca2158da7c8398fd954e0d5cb4ae74baedad6733b40b9bfd1bf0130412b060291b9697bf3631093fc04771d4bfcdcd981350ea2087ce3793dd42c7d0d75b65b52b7e58519d5c7be3a099172b9d0fc6e07f2b138a3a6c012f8cb5837e15f506e34f290d8dcb0433910a7779f8f2ce9c8c7d8cc01726354d9512b3d63c15193c3df7a5aeda0e57e71359d44fb79f83c172ae9b88b6b562322c80f552806652686ca8348860ad5678d70ce1b61bc192d66079ccdc24f30ebf0f0a62a68088dbb0e7e218ac2599b9475c7a73501bfd378124ba51f0ff0521c4645095650c8dbc2ccb03c791592022c41c2e428d5b3a53d46b28640a84eec116b7e9a7c0eec3fd0bcde659d496e8b1d0c65019036e61dd5a610fce615270321420d186da736bec7036f94e87eed3b087c59ffde393046a5406a06f6ad2637d04fbfa25018f15f37342210f15472257a198668ccda2f07e532b31c1e7e717a0365cac70112e16beb2bc682f4552edf7af5f8b93eb870384da4aa1b44ec13fad1ea2932bc781fbcd56474ae2a50e9f596da094ae31b4edbb9603b806d1b9372a2ed5b64757aa1e22496ea2e0b7260963c0e749c7ad6d07d4f834608a33542a00bbec3359abf74108ec49059edd27fb978fff000d1b48098b09e13cd1d59f7003ef446cd297f0521d884f397d242048ca54bce246d38d5248ea733b73b4b86c87c9037842ab1dbf231bc277eea835c9e1f21b2109df12d0b0273dc635809b1ad5b31877db90986730bb65b05ec6221ae4cdeb0d99e2aaba0d4934d2608af62fcd0bd3d4148067b4ccc1b5f47d904b3d4f4f8c1c4ab592a1207276d9cfadc8e1"}, {0xb0, 0xff, 0x2, "1d4c899c646aaf9dcbaab9cdc6dc8a789f69d062f95e88f5ca509f97fe3763aef5e1397384f249eddee90500874ec9656a9834022cdcd7ec4be25b7f09105370c28110576e16b20ecf6fcd73f4b9e402c899b56af1920a924d9dcc45c3630eb8485d6d18ff595d91c564ad519dc6dd9569d5c5b6035c482ca2b3d64a306246c80186ebabe3f757174919bb893773149037eac134da837bf6d4b234c739dfbab5"}, {0xf8, 0x0, 0xffffffff, "2f5e6db09584958e54129c4388f1fc7ec88a67ee80970a55725b1a5462312e8bc7f68dd0e95476b7a05dcc43df481e8172a66f67e7d84dfc64b9ab19f3e93a16616fbabb8837ea1afe027f0d54063833dc38798faced59cfad669679b27b1f22b043fd0d48fdb0ebaddb0c967ecf6e52852d38b24cc171eef1be35a9e54d94c734329c688b6a4e654b0cd702f644e804eb94167ac20b8779ad7c25837e6f52d7b0fd6f87637ea18369f76f0e4c0eba3f80fc89b26ca06bf8de0858e9426a1ee0885348473d595afdac2f58ac77ff24f12c2e4c6b1c24df4b7ad3555ccae8c050e58b37ecf8"}, {0xe0, 0x117, 0x2, "917065a85abd823217a2e73d3d43623f9b5fa2cf0ed8ef151edc19fd62cad1923091279f769cdf89346b7b0d33d388f10a991094f2f862d4db2a12cb1d43a79d0123b849aa59388ef3dbc1a596979b2b655400f8b8515b14c0b01c2532e3f7627cc27f2fded74aafd8c233cb61ff70284213ef0929b7e9b48f4f48806b2dcaf3fbb349aa2ec9aead0eb2d0f6f0646add08342fe846fc8194d179e8ee02b5b822a9479be6682a415eccf597492751836032b97d3536ed39e45627755eda53871d2773e0eb0a2880cb2b1fce621eab"}, {0x50, 0x108, 0xfffffffd, "5ad766e1de0dbabd78868bacf5323a93703121a19955e929f2b37d15d187bd144ea7b02c4815ca1bcfee9b8a5cbacb9160c6ba941cf59b9b04651f"}, {0x110, 0x113, 0x37, "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"}, {0xf0, 0x114, 0xffffffff, "7cbcb2ee71885f2a6a4336211df9b28f87ea5a1881636ece9909a1eb52302240cba23e20c520538cb66b243b024064681d2f4f031e31be33b5e9e06da8c53764f38883cb08ad02fb9db8a18203dff29175f6dc24ea6eb979a5cca4eba1447ff8934adc44068701626cd6ec969d6939b587e08a3a5d7a743bec72cc1133410e1214ab7064e84050a75ce82b33092e15b057e6d94e6c910448e02fb94fec1e8f9ad6a30e56ccc92d745cc4ccd8d658db3d2a1dda496e5e17159fb7e2b5e71f49fd1dc94bcc229f6d8a8cf5a66a6f74e5e8933704511c1c8ad77c1958"}, {0xc8, 0x10f, 0x3, "1352f33e1c7905af28e0ef4f7eb6b9c3605b04499e7fd42a5d03ebee801f5d4c426270a243983803d9d257bc5ac96dace90eead6607571b58e2ad430214043417317ece46b905effa0d7d26c14b7093c950fee171325f0cc62061ffd3924ea9f2296debf126ffc562b59b1acc31983d7e9d008d964d9ee053abb64ec688613646c9ca6f6b1d2593a8bb4574ef4c0180c5b51733d27d1d455237843d8bd6e4b93e8d5a0992703f0605af75333a118bec414cf2f5a"}, {0xb0, 0x108, 0x7, "b6e047c1340d439c9253d77d07ee29a0fc4699440bfe1e860b00c1c27821c7793105609f30a923f74702549e5dd2564b371bd1440459ab3e2462fa98e7c97f27d4d6351fe2461c2db3d1de03c1889d0f52841f465fd6636482986ce7d000a5f160872ed249375177ec4e308968ccdc9b8a9bee885b9578e09434fd6954a3ebce9e5c9cfdfe02eda40ef755d75eec16a39a18ff7b452c06c391c99115020108b0"}], 0x2670}}, {{&(0x7f0000001240)=@sco={0x1f, @none}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000600)="5532db26a1115a0637b0ae6beddaeef64607d56e5fb28a0c36143a4b0f86f7e8b8c9434f46", 0x25}, {&(0x7f00000012c0)="d33b36b0979c24895ccb7ff98d1485385fe807de6163d314ba8c957227c08c7c521b8b8a7994acb697bfebdbb76d206bc7106de8fb4cd10efe2fb637970e8b249ac16601b12f3dd7d2d01151cb6da68447fcb1e2eab4247539774959ac02d6ab799c8ca375342a891166b30943bb34786c78a0ec84de", 0x76}, {&(0x7f0000001340)="abefcda3ce9465da7d0011ff6b1ad16178da6596f4db1cb193a324a23c3bda73aa12eddbee5fbe9e43720019065e0b972da63118a8bd2a097814503ce24f0819e5fc8ba83debbbe67379175a62b49c153e47e4885c58ae6af3ba62a50b72baa9816480b7c17305e0591c236cf53cc02941205c46fe5d9c", 0x77}, {&(0x7f00000013c0)="f10425dec7c99ec33038cc5e741b21ea9ac1803b86138cfa648f89c27b8dbf1fa241f69bc5612f3894b097511a474eff1a045230361bd98acf971260af1331db9dfa76ebd80f496caef43a440a3bcfe9d2c1ea", 0x53}, {&(0x7f0000001440)}], 0x5, &(0x7f0000003cc0)=[{0x20, 0x29, 0x4, "6ac98b291e0511e47a02d6"}, {0xd8, 0x109, 0x800, "f795be811935b3a666948581649a5421018048489bd269bab3eae694b966d96e59afdb260f8b43ae92bff14f68670406933b7560bd91c1abae3cfc9ceccbda660cf3c05eceec95f76109b3aaf500fd7d50c48e6f0dd2bf8f604449a101af7cb37c1320dac9b996450d34929fd6c6e5f3dbe177f5c9c91dc628a4dfa2798109711748a1d729906e9b58436d4a920dfdf7d19a4c24c43dcbd2985adb301d41affed728fb711924d83fcf78905d7279100829a1c1f6d3ec2565d3bf2cda63304145541ba6eecd3b20"}, {0xd8, 0x1d, 0x2, "77e86d31dfe4b8cc617e477b1e761bf958b9d309d60cb261a0c5214632f8f24fb3f895c7950b22ac1a971ddaeade9a9b3c87d3c4d482ef78c75374e8d90ca4af48531d2c456c4051c1416d4758b584ceb58cc2e9154bf0fee7f97d499d8d103c73ec6a91c161b93271ad188372119f7c76cf237574e64577dc3cb86c5cea7162c921eb1b195dfe43b8b1c830070ffa569ed7b3bcf591ce524a47e2ee9edadbb9025fdf950b7a3c5dd9cff7920b98ed6c5901021789b4665cf8d1d6e7e54929aa74f964db9bf0c326"}, {0x88, 0x115, 0x800, "c02da9e9ecea930f6eeb307e3bf36b8dcfa556016d60d70cb5b1359231d88e68ad3ee3e703b85afcff0bf1a7156928a1c78852452a3e8d823eb3b2a0ee56b036d0a314f198bff2629d0911dc7a943fe695d17141eb6341af06529a34454fbdf6f6cea0d3436bb26528eaf89fed6cbeee9e5f5286"}, {0x40, 0x117, 0x400, "76b11b348c064ca917428746b907998c4c306aaea95af03f8b55a5e348ddb6f5bbe066cb16ebafee3fabea53"}, {0x88, 0x103, 0x5, "fa3986929d18c95ea76c80b3b11f4538fa10ccd979b50a88bd47755b6a3cabf92309fd291e894cc1512efd727e43f01545574f9d5a991a95fe9f03548ecd69ec9135b5d2df210c7dac0ed19bed41766b446bb196f8a4daf26b417570a95c66000a6dd92881768c6f860b64968a49dc4ed8cd"}], 0x320}}, {{&(0x7f0000001500)=@l2={0x1f, 0x7f7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7fff}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001580)="7b7f84384831e054115213c8c1bb647bc1e150acf2259d580fe1796b8d243882f278ff08057c985a270fe5285f11a032630b250765f327e49d8b3377a4bf6348b67d218793650a", 0x47}], 0x1, &(0x7f0000007900)=[{0x110, 0x1, 0x3, "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"}, {0x88, 0x119, 0xbe9, "300fb5753f72a7410a407d6eb57aa676d1b1eaa899d49b19a1b1d0ec1599ee85c579349499fce44be668c7de646b7489efca68199713019df4f49179ad5c97954e976036db59be03fd1404ab2768cf163cf2ae6f2cac0ef4f682bcdb9ff7d76254425452804ffe3674563cdd045bdf80bd40fe"}, {0x100, 0x112, 0x4, "4f6824f362f81f39d525bc3c816deec852ecd3673e2f442899020404e4e4795e2c3181c05c06befc5cf2957416f42cb70be9125b70476b3372060d51397197437e19e5e401cf20111a3262b85a613f08c9ab53d122cb8cca24e48acdf8ed9db2106f59b8b43f808fc850591f920e5ff9b480a024af0b7a64a33b903682fa79fcb76f7996808fb3a9181d47003ae8d8f70ab0e05581bca89adccbb62384ab0b93edfc99eed1b9f025312ec32987da2ffeb6cb5290ea809987c0e182d619df6b9dc7b42a061151fb7fa124301b70a765fa187ccad02e97ed474cf1be950889cf4c4a9f4cbb95ce8c1377aeec81"}, {0x30, 0x107, 0x1, "62986ce3e07329b72038d8a00bc3a4ace592d63dd8809051d85e3f15ba"}, {0xc8, 0x105, 0xfffffff8, "973288e8fa39f9b4e6973b29b9aaf4d4ed121595209a91c544ca6fe33b62e01f1685a62b114703b23f03f9ded6ecf82bb0338ef8c6d37a7d5dcf72ed7624acffaa2db2125f3555f937915caa857e3211c27e96753244e0b2fc6ed0ae99e560b8e4923930cfdb12366fb0d607328b62810de14ca3cc6fc32668709b271b423f3744aa215a5d2072c5d4288e1f79c7725eeea46dd7b41e99a9505e4f086cd23c265c8b0e62ee5db179b0a0427018668b8be4939bdeb08171"}], 0x390}}, {{&(0x7f0000001640)=@isdn={0x22, 0x2, 0x80, 0x7f, 0x1}, 0x80, &(0x7f0000007f00)=[{&(0x7f00000016c0)="fea63d6760af91509e5164fb8990bf892add0fb75e7db7c9483a071b8cac6190d52bbd43f8947432cd1109ff35f5d563522d58801e500f65a01b39deff019f25ece868e093a62f203b66cf74e5e977e963eee44593c8a657919ebd24716527e852460b9ca41c74fbc511d618009cb3ec", 0x70}, {&(0x7f0000004000)="b732f52e2af7929bc7fd1a85799e659a21d19361ae6a63ac6feeb017368f4a9faf59606623afd98c70f07c4c8b3f237d69e2b6e3596cfdf9c58bfb3187ce3ee33883a2fddf75a47e400e55742c80ecff90f90c19ed71b50f11fe14c68f685e193918aea927ffe19b1f110caf879e692cde53dbd2a69a6005889c02157430102531a2e2fb5085380ba4584bfae12e962e3db32aa5b080aa1e0a2c", 0x9a}, {&(0x7f00000040c0)="42b89662998f72bad7788162b155e25074aa7696783fff8de227a5a5e240d767a127263de51cc48fa274770417b1c0a592e91aa0cc100ea46e29ea85299f4e5ababb747c584192b097215771aeaa9a216581507db276a8198148bff6fc1270ea8cfe2b9d72e2f5f48b16ea355816567f0ecd902bc39b8145b9ae29cd50e614bf72534b325dfa4d0ca23e51be8484d1b1c8558e691e3c9cc903cfef12161b8d938ff2638163c08cd05197ae2d5484c2", 0xaf}, {&(0x7f0000004180)="9bb3ab7119228c754facf320b5aa82792391eda392981f82778ea774470a701b5b880ac7488e88b8c62e5941dc8b99d4d8dcb45b0e5e091c6ee7d440ce8438577995cdc9fd3e8fbd7cb6c6", 0x4b}, {&(0x7f0000004200)="54f36b57ccd3a46c22df99c37703fbab49eb09f4b2a2fb45f7fd", 0x1a}, {&(0x7f0000007cc0)="13434002ee5b17d9e85866196d0c3841c1f058d92ab1ebf1356714c24fc2121ea35e9a2c36c0798f5a0c0db7e5683478ea104c00f723d42bea913102fb1ce1026e34c4fe7439aefa693ff05388634ba35ea246154a422332e715c20695151f2b2d7aa8ac674dae7cd3012160f28c29ceef", 0x71}, {&(0x7f0000007d40)="db34dfd88c1a887372b336a8fc6d34a0ac9b2231c4942d67c0f361783d04dfda9a8f089dd7bb52e128b0aec90770eacf9c03cea8da9c10b4273c4cc6789a54101c9af4254e51fcfbccf2653ebeabd6550fcab4e971eaf8681428b6aaa5cc1cae173dbb9397b47a5c03e2f9e205c79cc31c90fc38caa873e30dfd8a0c3be0290754846464e6c0162132f098d73e926309632522a35bcafb26931de619209ae2a92eccaef2ac8ff3", 0xa7}, {&(0x7f0000007e00)="a93b57362169fe5c53cded85ed4ccef41b5e19848d305b7374a4340a8db8d6f0957a059a5205965abc649ea568a9835ecd36e4bfa86f750bb1eefaf72218f92e468c7ac6446d3c872740f677b7377e9a2dd1ebd30c92c7081abe8a78704b4b78b5c81d49c5bd1b578c206b3db2aacae462e0421dd2b6f12a4d98dade157627b7f073e92790de053802eb93cc4769cc5d09c41f877fb760c7c769292055bedef58c32db380da75c4ef7ef725af43b4c8b76e91070732ce479e9f1853aedc858273fd138395c0f1198a17b206706120a30367ea40ac9e85fcf3b6e51ec35e832b9f0abc1e662a22ae67107f67ee09998c1980d1e4903", 0xf5}], 0x8, &(0x7f0000007f80)=[{0x1010, 0x111, 0x8, "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"}, {0xf8, 0x101, 0x7ff, "163d4248e574386a8ac3d42705b92608cf06e6657da0043627bd34c11754f21b54cf13f09a2d0c1f0a6ea254953913acb38ef5ce3f79e6872ddc74cb917634f8a7018a473137a6083aea6fdc724dd7bd8f39581a5f6df05517cb48a91f5b77f625cda3d053875f278da6a2150dd349ebab49b84f6142c1e68472bda6447db25bd40058db4434e78fd05d2406ac7b4d3de1f984496ded12fb97c621e43d98217b402dd1dac3d80e8917e6c21afafe00db3825113350bd1a4b9167653c03d5bd6102fa5da48db9bf0d926cd071129986d5ad2663dec0289bfbdbe6fc448bb5873f0d49ccbf7ad3c4c7"}, {0x60, 0xb4, 0x4, "fbbf9a8f1ca7f6ca17bbb43073f19b362178a01d2c42b24d5756e15323617eceaa722e659952ce249af7c51f157c035a1ec47a2ee40a684ce3ef71551b8a419cfc3547b67359bb62910c4187b9cee4"}, {0x40, 0x3a, 0x5c12, "7002e9bf0f55b9baefc4c5fff54408e42f47473c07f80df8bac4b6a1370220c07d0f721b9df9f1838e9b"}, {0xb0, 0x107, 0x9, "220c2d964aba597d08d99d7e4422bdf885ed760ceeb3a70c840a69594f02ce4b738531388ec76f9e537d9042fa14fde521022bace466f03e484a93c7a28f48c7b7c717c28b8f6a067a3c212310c99e2bb6a0977b19e3068b10caee4047b2d5f108739bb8267509cd44c53108b6f1ad33e6172b74f1815d2d043cdb59b4ba5928efc9c40a9c1023242012ef7919c589c497fd68e0759db7784dbc7d4e1b10"}, {0x70, 0x113, 0x701, "7889a37ceb3608faf8d9e4147fb522553e32c784e5e1a97f20fd1d8f8a96c5688f89d5ca563610238bb5e48700e3bd54e27e4015d9593d61d8c55e661a942f57b597be3c157c81de942697398133ad3619687e9ab94cd4a0f9bd790b649f65"}, {0x18, 0x118, 0xf91, "029d"}, {0x60, 0x107, 0x6, "9e9a9456bc1a5753540598bb1dadb64617bd008415e2d02fec17fb6dd92a56eaba7c418af6eac397d1a99b139234a5d9125a51b14e43125d9c633d9b79ef8fae2193ffa520850ecbca796dc4"}], 0x1340}}], 0x7, 0x8044) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001740)={"3f3979dac6dd6fddd0b714e4dbd97878", 0x0, 0x0, {0x1, 0x7ff}, {0x20, 0x6}, 0xff, [0x2, 0xff, 0x7, 0x0, 0x9, 0x1, 0x0, 0x400, 0x7, 0x80, 0x0, 0x8013, 0x8001, 0x9, 0x0, 0x100000000]}) 17:57:55 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) keyctl$instantiate(0xc, r5, &(0x7f00000005c0)=@encrypted_load={'load ', 'default', 0x20, 'user:', '(^*\'$,!+!-\xcf\x00', 0x20, 0xe5, 0x20, [0x66, 0x0, 0x35, 0x37, 0x36, 0x39, 0x65]}, 0x3c, r4) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 17:57:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x7ffffff7) socket$nl_netfilter(0x10, 0x3, 0xc) 17:57:55 executing program 5: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) keyctl$instantiate(0xc, r5, &(0x7f00000005c0)=@encrypted_load={'load ', 'default', 0x20, 'user:', '(^*\'$,!+!-\xcf\x00', 0x20, 0xe5, 0x20, [0x66, 0x0, 0x35, 0x37, 0x36, 0x39, 0x65]}, 0x3c, r4) r6 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r6, 0x7) keyctl$revoke(0x3, r6) add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, r0) 17:57:55 executing program 1: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x149802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000280)=[{&(0x7f0000000100)="fa73390043e55595ff93f6efc496ef751de971b792fa3ed987591763f03e2f2e1e5c4aee2f2a30b580c0e7dff34958717f1f1c0c6a63d237183cb374990f882fda0485f30fc96d2b55ee79a9c7830cbabee80a3b588823956f86c62f6254b4c6fb7606b313ce07bb0d940558078101345bd407bfa1f7aaaac87c2f75662f7933b05c7a8c42704345d29bdad0e47b7db0731998989facff2795d847f7d7369ded6be905c3cc", 0xa5, 0x3}, {&(0x7f00000001c0)="711cb42759fe1caf61b2c58fef6e9db48fba512ee7c3a5a73caa143dd7c5fa9ddad2f3d32b987be6cdf05513d60f54f943bfc63f1464e1ee8df918de34f0f8e50a782abf9c5c217e9441c7aeb4d44aae55dda114ec25160b048fd0027c909970d42594277ff5c859824781143b9a7550b3d0f4408fa920d532d0c77bf1731cbefff13c1af2e3c989a456f2739c55ca08e601572860e65c6b0d6848d8c4ef2da6307fcaf03d82502615", 0xa9, 0x5}], 0x40, &(0x7f00000002c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@quota}, {@errors_continue}, {@nomblk_io_submit}], [{@subj_user={'subj_user', 0x3d, '/dev/net/tun\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '[-{!]%!!['}}, {@context={'context', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@subj_type}, {@smackfstransmute}]}) r3 = fcntl$dupfd(r2, 0x0, r1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) pwritev2(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) syz_io_uring_setup(0x6546, &(0x7f0000000500), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0xbff3473d5abe9253, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x10801, 0x0) r7 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r8, &(0x7f0000000240)={0x10002000}, r7, 0x1, 0x0, 0x1}, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000380)=0x5) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000000)={0x0, 0x3938700}, 0x1, 0x1, 0x1, {0x0, r9}}, 0xffff) syz_io_uring_submit(0x0, r5, &(0x7f0000000400)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r6, 0x0, &(0x7f00000003c0)='./file0\x00', 0x21, 0x400480, 0x12345, {0x0, r9}}, 0x1f) 17:57:55 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) keyctl$instantiate(0xc, r5, &(0x7f00000005c0)=@encrypted_load={'load ', 'default', 0x20, 'user:', '(^*\'$,!+!-\xcf\x00', 0x20, 0xe5, 0x20, [0x66, 0x0, 0x35, 0x37, 0x36, 0x39, 0x65]}, 0x3c, r4) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 17:57:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x7ffffff7) socket$nl_netfilter(0x10, 0x3, 0xc) [ 334.582096] loop1: detected capacity change from 0 to 264192 [ 334.586417] ======================================================= [ 334.586417] WARNING: The mand mount option has been deprecated and [ 334.586417] and is ignored by this kernel. Remove the mand [ 334.586417] option from the mount to silence this warning. [ 334.586417] ======================================================= [ 334.601688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.602553] ext3: Unknown parameter 'subj_user' [ 334.719390] loop1: detected capacity change from 0 to 264192 [ 334.721900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.723582] ext3: Unknown parameter 'subj_user' [ 336.121450] Bluetooth: hci0: command 0x0401 tx timeout 17:58:12 executing program 5: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) keyctl$instantiate(0xc, r5, &(0x7f00000005c0)=@encrypted_load={'load ', 'default', 0x20, 'user:', '(^*\'$,!+!-\xcf\x00', 0x20, 0xe5, 0x20, [0x66, 0x0, 0x35, 0x37, 0x36, 0x39, 0x65]}, 0x3c, r4) r6 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r6, 0x7) keyctl$revoke(0x3, r6) add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, r0) 17:58:12 executing program 6: syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 17:58:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb", 0x8, 0x89}) 17:58:12 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000200)={'veth0_virt_wifi\x00', {0x2, 0x0, @empty}}) sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) memfd_create(&(0x7f00000001c0)='%::\x00', 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0xa0481, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000340)=""/76, 0x4c, 0x40000000, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000680)=[{0x20, 0x2, 0x81, "2083cf0ad874aadbd9fabb45acbc"}, {0x98, 0x10e, 0x401, "71b4016fe8dac32eb70e9182059b661f01b26de1a2a04268ee597c85be70781a6390c61a5aab38326380932a55bf9952ea702eb6087d9198ccfcb20a7accff121ecd6bbf705633987ffd93ab4c9dec4fe460e283e9a0fe4170a4703023a2c92e8854981b2dfc17b0a09cd024647c551a71cfb29f95f86272f4c314ef09a175cdf0fd4f031bcc9b8a"}, {0xf8, 0x29, 0x2, "3ec0d01ccff0adcab0402e75d0240e9fd88f297cf9fd48e9488d5a17f8adb2eab27dfb80eaa7d2a9f0e11036a03b5bbf43807f2ef0b71c3b3a1420bd7b53861f25d84ce2397c2d205600c12e740fc522eaaed683b9883f8f136ecccf2673a0b4ec5e5e9ee84935367e726470837b370a6b8c0a82b0d27843ee3810bc253a82b15f1072fd532fbd381e4c0262ceb69242715acf963df3e673cda82b2931751f8cac1db9b0caedab57ecd6cd150e982092cd278a304e775762f7b2bdac96700a4dcc5a62bda76b14c8a96960c13776fc8b2eb3c64795d60bb639f7f9de46b1092445"}, {0x18, 0x118, 0x40, "ee335a"}, {0xb8, 0x112, 0x1c46, "e705d9fab50bd2c4eb6014267ad322346552949e768107c40382976de84a88c854eec35eeeb7d7a06a9c136fbd92fb3d800d6d328e811223370703a5c7b2baebbb5b7be53a01f7dbab63bfa91c5b011d46f8eaf70b2e084a866b6e9c34a8d077dbef0408efcc341a6b450aafd91a67048d30ccb45d68b4d2317f62d520ffc8f530e269f8d2e39d15e29bd7b1bad5484422da6d124246a6817acd7dc9332314c5c7dd7a5e2a"}, {0x10, 0x84, 0x40}], 0x290}}, {{&(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x4}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000440)="4fe10cf783e46e6a4ab9eb0e3508240bbdb53425eb5f79a64baf05c6e038296a6cd15309af8430873cf86771f8a942cf3f9fcacc1d3b7b7007f6fe991ced5f621164b07d208fff4186f84c6546287353c44950e9a351c17f0b60c36623079547d57e3f74c2786973b2ba0fb279111dec09f05b0668783d3bc178ec13ac6c0d33ad032af1f307e64cf60d473d7faae90b5e96b2d68cb1dac3893ad7aa9b22fe85b9ba14da1fb51437ac9c1205ccde16b47f2d84e9c97c04b3d264c7d1c81aef40aec834470f877b2161730bc0", 0xcc}, {&(0x7f0000000540)="7362e926c29bba501caff86e3628cf6447b3baf47bc3d3a1d0ce3ff7a732dae8b18c50e2e42e030231a0b3b7dd85fae11887cf80152469d075f63006362347d549595963bdc9fc285da25b751148b7ba831b30b38855a99898f24d11d37d737a9bc53b6791fc96f7fd30672199e71736eeedf84f95b9c8926747d40b0c323c802c8a9b94fff478f2f6f443a4e3d5507540ae2707f854b81a6be86c22fadd2092c4fa9bc5d54bce2ea26bac9856638235620b9ddb", 0xb4}, {&(0x7f0000000940)="54de7ac142ef02e0c66866988bedf3838363cc5c4151e267b0c30514a2849b7712eeea040df9de00749323303b1c9f2237aba494e69ace21cdda126ee55c8a3418182390f7", 0x45}], 0x3, &(0x7f0000001840)=[{0x38, 0x105, 0x22e, "c5acf68030599dea1e9d471d10c6cb546f536ec84e3fbee9fdc6493f106d03e8c81f0ecaec"}, {0x90, 0x10a, 0x4, "ce1ee2132badcde53735e755e9334a1630cf2b532a3e422c3d00d3ac97000e5d30be556a9228965e765909d0771662257026994451f5faf0e22b041ac7dee5e7797bc61340a6d01ad2842fb04c5efef97c1bd71009cf0d979218e362e23cafe051daebf95c33f5e34df258cd5e651aed320233078aff954da5"}, {0x110, 0x10f, 0x3, "a6527401d66af86e7cb65bd4785b5edd6243d8cc1615ab7cf2c40a5c19c1877a55bb750c56fd45d65cf61e4fad6a31007348491163a4fe950896ea65b44660aceb0ed6cb6d744ed5c76fda900fa4a42e1c7cd45f9e2d3d4e5193858d0f65a5709501dfc70b7476cf770aa64a9d76ef9152f38108549908b2da81ebac7f08b4a736c2491a3e65e792034e1b71a84b9639d153d976012c47bc63774aa656d76af4e0c78c2868eed8ba24c847f87d93588eb9b245e28bd9392daba0455559cda30081f6de46dcd4112f074c67919dc4fe76a72bc876512ff7ed0026428f04309f63ac5a632971545c140cc0859825f19a91a57d7863a86ba39bf06650b32bc1b0"}, {0x60, 0x10a, 0x6, "7886d2bc6c05a835943f6d516c24c100e4fe30e0858d9a5d8ece7361150a236ee9b94d01fc96d8f096699c134e52fdf0c8df8a71a84851933742e5d738efccc4ab0197fe0aaae3e14d1a74a6a075932a"}, {0x1010, 0x1, 0x5, "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"}, {0x110, 0x10a, 0x8, "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"}], 0x1358}}, {{&(0x7f00000009c0)=@xdp={0x2c, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000a40)="ccc8895775d47fc682c7a7da5291c967f0ba1929b20dae93d4c9c4a3a28acb2af6a2e17bd04dd5083dd889e22c5c52c52f71e8d59278671d3fdd9132eaf2e550b3cc670a4c35e47575c75b761b50c83f2fe457c4b00b19bbc9320bd4ff992ab1c3041eb8302c401342bd33caf4cf5a5d16d6f33a388cddd7f405e4f32ee271d0051922c64d9c97a4f0ad34476453085ecef485772c1172d0ddb58eeae31c1e5fbfeced096720a2558257cfdc7060a7027b619f4e81a3eab95f5ea843af0c3d0fe74e4cb05d549bb9d3a2cb87cd85d0ff35aee403f32f561631c7e400d5403b9c8101373557", 0xe5}, {&(0x7f0000000b40)="98dd16a69c4efbb11764889d862ad56e82157a7158b99368cb3f64474cea9e43f55524e480c6423a67ef3900d27d35a6c92217e7becbaf9247b907ae48701a92a1006618c1f0893edc33496018fea67f1ed47b5cb3174d91511b8dc875d1bb6355dd341b59aeb4b55c2ea9a792", 0x6d}, {&(0x7f0000000bc0)="e1c2d5bb2807f09c3d7458b2ecea2e81ee77ffaf023f48c9e2c22896f0645d803cc69c000b650f02052d793388e1afb7478ec140d8aa47f5e2f3ad1dfe92a9f346d9ba82c0acd6eba42a89c9bd5d395ea83e8f56887dd83633dac0cbff7f99a330b209ed8199074d139040bc1e9f7d89a03744bc52f38d37090c855abcafad9a32e2cdf910fe39c56feefd46182e11c821c5b4e9686f9aeddf008001799b81afdd9820c6ed3abf699995b19c63ff4ff0ab6edd5e3656814a0ba4e58f32ebc2a6bd55d78c8e95718aaaa99884db47f716ea787a74931e008b1a9ae1927861", 0xde}, {&(0x7f0000000cc0)="56a8e5085a7d865062302728ef52684fb99eee49535b80607fd102f6bd318171860b6603d794817ee6851e7c12aed0a6899d274cf16ee056579e0abf9a7e024bb31ba13acd6a3f6cc33df9e3c66c9b58c5a9c95d5d2b3e74ed020bacf0feee95d9c0ab33befafac24afdf953e2081fbaa24fd5d289ec05d0fcee3ad5d6180390b3128ef0b32f9b3a5192f0f74093db61637cfebcdbf61d2407ca7849fb76728f842b739ec4c393", 0xa7}, {&(0x7f0000000d80)="d2f653549d476629324d195d08baf5652a588affef7eb0af980586ce59dacc09e7211bf10406ad749026943c3bca38e333404eb8af4f53b28c6a74666898575442e4cea4964989dca5125f95a6388fad8bb4315e29ddcf794fb4cebb828c52d03880fece8e74bdfd4434030b95ead8ffb751fe5ed47dc92af7a8ddbc27c0c5c61dec950026d7966a8c2c4611fb71b7e7589cb2b877f2be705cf3fc84b5995d05e67ada2d1f03b1cbdc91c30c4672b62456f789458a6fd3215ce0aaef7c5902b578dc675354ccc9f41a5ae77457286bf190e1", 0xd2}], 0x5, &(0x7f0000002bc0)=[{0x1010, 0x113, 0x1f, "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"}, {0xc8, 0x1, 0x3, "6ab3bd728a4869bc64188aa6cc3ab387743370a99f1e9b18ef197984ae583b1c7aa3b294ae570ad6624bc65ed91d0d50ec7d54eb82df688eea1c5f7466a71f65a6e968c83657b564dafc346df970a7f38e1f75e170217101e75547726572a1f8addb6d9d8ad1022c85ee56e742c416f05f09bb46fa2e970c75c89774803acc54b6f22700646939b7adc90e9527a865b30ab045d07e199eb708982b6f296f159eac3e4500b433a3adc154b6ee2ed515587f9ac2de553d2d78"}], 0x10d8}}, {{&(0x7f0000000f00)=@llc={0x1a, 0x6, 0x6, 0x1, 0x3, 0x9, @local}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f80)="09d57e2c15b45187e3dbb7ed37e3c166ad7871801286ae08b51a82b668a0ddf2763d3a8ab860c1a875f0043c456549eaf17c99505753086317c3816058330919b4ded461b6e7cbd697bd1db36d33af239a22668c43431630675ba758c6ebcf962d06ef9e641345d30990164bb3253d7de177bb08920f3b76e453334dd27924732b75239d6f9a", 0x86}, {&(0x7f0000004280)="d7fe5842092476ce303b6ed5bc16890830753e345b143c258fdc1234122b6b0929452fdcd6764bbf73b9f616514f68b0a5f41e0df531c1427cba7505a9fc7a21dcf68418bd3b9d21b2f9b9e35e83b2b2e1911790939746293dbce9fe554f51d71642a9221452dc5f204e47d3b6d92048f5ab7ecdb081dbe7294435603c7ca9cb4ea6dee88b1da3a352a18a06e91fd2cf7e508d99e4afe32fd8789c91485dada3b27d34395443cfe4fed6fc9d340076f24591e699402e1f6ba1ff1cf969385255798feca6bd66bf616c9729ff89a28c8cb070e2cbc222774cb7f2d7758af3be1ce956aaaa9efaa88ba02ca48721bf52c587923920d04ade18d684cf39970c5b2f4e07f1c05cc28e2f908eae443cd5c7e3160b6e02e128bf8fbd49b5f2831552a583d328d3e3b21f1387dba2710e3038bbf6a79a1b5eb5dedaaa90186b7df86ece578e5de7444ce6261c78eee2fe19a36eaffb6c6689deac9f0807412c49d124aa60bdffb41b659a73af2c13d1401a6541371ffdf01d43e9e8d5e9e5bc53f1a675fee8d27f311aba9295f352cb88e5e25dd5ffecaf66a5bb5bacebccf9305835717bbc958e4e185290f02d2f8abf1d7205224d40138e92714816687ae9718ee4c52f6daf7e73108279b0fd9bcffc37e07481a9bec981437095e098acde51118568449da8c68c29cff0be38055d2493a8d99fa0be4b879070e5c52ae40548c93543c9c3d89f6abb3b5bb227db2342fa241fb0af5f24ca75766c04f2449510136d8500ca78a2b105c3e2f6498cf908b37cad4ddc9a13a279e025032640b5b6e23ac9d2415ac059dc975695b22327a6f4ddc201a561d60bb7785c4ab9e889f65abc7b6d083d758a00acdcda76ddfd42d2da54209ef15ac8588a2a4fc16025fcac248f8766fbd46768035da1ccff370bbba24b691cf5c7b0f35d374c0af9fcc70306be535a18a9ea04c66d5465ce2b7de20b1703924d29259441904cda2c85da11f58847cc7054656bf191965e3c31c392d6d970ae3a60004ef8acbde65ed74ca6022e1b60914ae625e7c2366a9f95fd24e003b8d2368d756f58a8695ac94ebbd1365b57d3d9138f57756fbbc2c71906bfbb7ad5b05c18ce8a26dc5ace21455b95509dae9c561d8b89d7e2032df2ce389c9f1df6e3953bc529517ad5cdbf17ecc7d06503f786380d4a058052a8ae617509a7c15c0c622b0a37f46ddb64ecba3402232bcaf265bd9899e709ebf8fe245ebe3dd286dc0a1e9d4a906a269069601395785e284971d50de86c1105f1326e5635671a3622825a8a4642adeeba377d307a8af9dac7043914971979af3becf8166b71b5b9bfc0a18897a3cf75959117fca28d6bd40347698ec007f1bc5fab6d9f40532da845bd8d984f54c77a7c1a90236907d4c1432e6c7abae08d9f0fb1e7bc2e03d72d070ff8efa28093ad0364cfee33955cc04e6085a5c8ff49d698e5896c2dd759a897e668a5009f8bd836ab38a8ea84ebe8842fd0295003d7daf59e1d7c3b09d1476d65d860fb1eb77bb00b43dfbe05e4bb9fa92265951910b2da2be3ab95a06f05c2420dc97e2fcbab37adf72aaa4c718534abcce64692a795b7882eb55821d3da291730330f06ebfb308e0e38cb433d9dff7ebc23612d86b4b38972149042c53ac25c144eed0d6f3845a7e95090fe3a5c90e2db36219cd85f11e1dd710d3c8b9e3b9e0ff18cf4633398c5e252d2e6dfbdf7354ba235747e465293d4ead6f7ad0ac65e10c218ea57b21c85a819c4cfdb93a41a24f69badf5937ab3254cc5b470f1b70bdf5fd7f12d97980b79eac2ed563245b0fafdb60fd4f97c2fe1b1f94a99ee0e778619e7584c24021dbf9a61b61f2619ec4cd3979235e914686fca7fc4f59a22e42f1f21fdc0bd38ccebc37f692431d9b74cfd47be55221a460968c0c1bdb7f12d1f91bd3e826a7c29e6b5e2f0f743dfd5d1653eedeb8d7351b3b6e6252121e14c7a560d22ed76b6fce3c306f5d0703147a2b90af10a19eeffc6abd8e93a21333b44e575db025373ca7539e4f646bcc0fa6a5e546e6017e6a71cf2f7525b47bebced132b8f783d4bcc15e09438067e04f937a9d996df5c32bd23a190a46cbbc815d396329f9b0eb0b3a76a62341ff67c9b6bf82e2af049e58bdbde81df05fd16ffa46a39499cb0caf8e39fd6bf8f38f5f01f767951a169849021e45c78a716f2e73992a085856a8b942b843e651f9c3677064621d814accf6fbdffee8e5e65e4a6859c275e0cb203a58bd8d1538638c88f5fe9ffaf9cd06f1f8919c757972b41d1a7ee7ddb6c5986e9343cfd1c820b1777d2e89107141b4f0595138c3c998f2a477ad204cac62239abf99e3bd10da650b276ca5ae4fce214d3791ecdd73d3ed609a79ed8c26dba2432df84b0bca4daca55a0d9ff858edd7f56760ada53fc08ffcec3e88d1f1997c5ded2c63f69d78ff38ba233a5d3242fc57a826e0168133095342d46b0c59110ea40f5efe4ce426c3a843934c3b8534e9722c737ac286fe25390ea59069e6336f0cedb6bddbb3b96e0f136c50711a8ad92a869f1dc615ecbd605e2ac6bdc85392e67e3f4cb3b369e4b3e896e071fccd7fd5f7e027bec6fe5fb46391e31798b3131788981cec922037f089d204a1df1876529f1518d42453d43a7ee37db2d4735dce90a4c071e89dddc3ccf5dfe52d4e888689b2e87970b90839d91ba40dd2b17380fa0f6c9ac62b27b761b11643ab4da8aa8767862316c308b7fd198c81ba235afff97f888f10916f62206ef5c2ee588012e9a9f466e739607eae75e1782f00a06650b58fbd197dbddd13302d679ac8de97894b8ec618ab8dc6de2af569349da2ba83e8863d2d8447737ee3738bade800fb0eccdd81fef75a77e6aae0fc50cc6190d5cab2df2e42fdcbdee3ec866b54ade0dc1d3bd3803f952cd0462557f4ef47aa788fe2ae3df62c50dafbb424b38b7f75208739838f7feb41ed4bc0da22d7c8aa4c9e1379ae3eb81663e684922c270bc0d570a60d4c738032373d669e6cdbc7f49c9c7101d7a3b2e631e67897c97cbc6fece66c4ae347cc515ce6fe383bc5f7db4ecda93a634410889e4b2935589fb87f60e8e85281146590013426f70edb87f168048cce96934bfea69d04764eb125439195f4f201d4be89d1083cbc8876b72366a98bcc9798b0dd9d279652c9d400f9b7898959461c12358a338cc9c9be538e317d08af908db6a52383c9453765eaea4c70b60a110af4d1fd5c7faa57503b2ee359c8a7cf9bacb48576a339da38b1d8f1836ff29fbe4fea0a57c5de2fe7b28b0d4013c94c7f684f501aa3579ae146ffc158a663d137497f2535f81d45b23f8ec41ed42dba43183ed52977560f0c59f52dc7609a67c367c6bbf4406ac59b33f987934c69c6ba72a39e97be812945f64e93ba6296fe85140100f8a440eb6c533a9f299a2fa4c80ba4f83d58eb05bbabffbb768c6028c2f8842a7162c1e87bb741077dd58a82c904ff6215d6061f853e171670e8b1226addcae2244fe8e9ac8fc5f85207dd8fdfa87b7fa0ed69fb10fd40d64f22fc759fc299e9413569143d64fb0924245f747dd373e6a07738177258daf5b7a01f62a935b3bea00573788265e469d50fd69b706d1540f32f6df2e76314c8d7b0afe1200a4b2a66fec23a7aaf129e813079604d9b532a37cf50a6fe7f4bc68c063c74da46367a5573d7e54dabdad84795c3f828bac86298b1a5f546ad4e4ba190c31504cafee9c625d82270ad2fbfd0969eed659f46aaa87abbcf637c0016c376dc995bd752e9b3efb36070e07ede7658909d2ad5ef0cc52d57dc6ad173b1d8bd299f9009e8f0b9178bc2ce55f89ddee03aaee0e95c6aaf139ee8f44c8cb1bd8b21fe12fb4c3cd8b432d1d779dab38782b064d5410fb15abc0965a60c6cac549ceb255c20f5627de9292fe2ec4c1e7f799630962860e512769e08ccbcc5e3e186b563ea0de4b80da786139f63b0ef828636b2bea7ec40c31654349dd5f77a6ec711ab59fa3e2d8dafb7d4ba0ac9ce44a4484891fda772b0c9b8a63b7456ac27da869572731596a701891efa8ca0b8df2ba6ba2b8f69ba339aab4dd037f85b8e41a6ceed0ab824e24318f6206580980449506eb1b940758d0ff010d4499eb31fd3264d2d4fa99e70869a9371ee79402a9cc34bf1ab377d9d0b8aa4a760a1d774ea39c7e699fb14f4d2630a0be9959295f6676ca7deef12680f16981cc383bffe6957fe06a7a550bb19d92a1cedc4100e1741dc70b689d3fb59ed78d8261d85162e713578d65208559ba775b8d0ab96467441b330f11932cb68eed4cbe2a7b29aefa259292a42e247d46f09b01dc443b97c097e78e97ffa8e03b70b41b68a31c843a89180898a0080bc0ff0c463ce49824c46e143c569ef1ae79ad8d20ae118e13119e81b3be6f8b829edf60b367d8ac0775ef468f669b60def18fb77d5726858ee9e4fefdf4e19cfb7133da3b4a1cd5b64ed273c024bab544045f069453e6848b42a80690ce3b7645f3a7abff6d82ff3993373d88069e15dd12d9912bdb4f54657019d9238158ce174f0c8408238f97d48d25282af0c93c69ad7b9b74a254723591b7c37a6b8a538402197354c7354469d46cd9d4d524ddb66e94ca61cf49786dab0ada3d3a04db3aeca5e69570483dda6bb9c1b57d31725bd7802473c9284436013e1bd29e1d25a472bbd3ac47076a2c58e83328594f1f5e6bd63464ccf71deeb6a1c79b52658bec0e59e851c6a01c488a87de2903ad4cc9a11a60d211022e67d61a3124937e7d834078dc51e1960827771b0007c10f97f4622aaa2c11a6f0185eb49024dae675d83f2a86f38b504fe8f914ce7cc20113013ebb1039b3f00846d0037216a2fc94b0c250ffb2303730c90fccc7e107fa4812cf575ff0693000a7a2eb5f6fe1710e2e6e01815b3769420ed013d2cfbe259279cb2c10048ddc74b2417cf6d3ad3fee6df90f82f37d2298083c7cd35881c45a5385105e0d3ff83377cea741d46ebd2c4760a5b3b1f5d2f244a26a258eb413d593e4371bf1b2e796e077e9236067cd7f998c773ebeccf288abadccbb09c3c59e170df4870be747ee00ac3953ad7e6400bdf00da411a6ccd9910b7eac2f39911b29c49cdc4a291702035ce215434989070641fda86b8c75697282092943b8bf340c708d3606cd0b44024d09ada535e68cdde4fe2c86714d3db0b04542282483c7b149f345ee96a8d48972121d671dcb0cd3014a014d1d4b14cdb5e540c9b593aa0e5d5070adc3be4a4267907f8550927ce6f12f0bc6c916377597e87bc50a425000bd257fd882bcf72cf3cf11c6b15a2003aca5685a206392c284b43d1a8d6284f2ccffa4d5da02addbb0420ca194f8094efb310fcc8f3e32c7af0b304872849a3e20f1d18f014a38635e7b8ea6e6832a24a0693f3e804abc2406a014142aa3362c1527ece0123f28196271462694174aa03080494f412cb0c36c860e29d25b1b6e52bb6e745a1e39849ce6bbe63315cc07ceaa314c9266f26dbd1d989275bbe5df8765717193d1ac6bb09edbc861dd63a6c743397e0e37389deb813206f45544f8b31963f97d8e3bf45277e1958eaf70d60b32450c8fb3f15f11503b21146994aeee611d124f4bb3ebe7e70ad3473216eb8739a25243cce6c25e68984195e787df119c5c1c6db92e9529280d56ac801b902b43190b29d1a5f141c24bd3c7c45c5fbebdde1b4b29aa63c6f6cadf1722124742ccb2d40c0accbda87824149bdc0ad8a65a2279fc8fe6d4b20e7b11ba81b20940a14d09f844590877304b", 0x1000}, {&(0x7f0000001040)="fcf551b06ecc1bf5fcfda1fc73c1531811303c971b6a03ab47649536c9c8ebee6bcfb18e8d894874a37e6bae5a7de6fea37b14056c64474d63dcefc1746ffa09a8b13fe99be43429476a57e07eff5ff5557156c6243e631b7c5a376ca89f8dfff5709b4f4f21c6fd37e5d63f2eb06bf5123505582a09c55720", 0x79}, {&(0x7f00000010c0)="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", 0xff}, {&(0x7f0000000240)='\f', 0x1}], 0x5, &(0x7f0000005280)=[{0x1010, 0x10b, 0x8fa, "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"}, {0x1010, 0x110, 0x8, "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"}, {0xb0, 0xff, 0x2, "1d4c899c646aaf9dcbaab9cdc6dc8a789f69d062f95e88f5ca509f97fe3763aef5e1397384f249eddee90500874ec9656a9834022cdcd7ec4be25b7f09105370c28110576e16b20ecf6fcd73f4b9e402c899b56af1920a924d9dcc45c3630eb8485d6d18ff595d91c564ad519dc6dd9569d5c5b6035c482ca2b3d64a306246c80186ebabe3f757174919bb893773149037eac134da837bf6d4b234c739dfbab5"}, {0xf8, 0x0, 0xffffffff, "2f5e6db09584958e54129c4388f1fc7ec88a67ee80970a55725b1a5462312e8bc7f68dd0e95476b7a05dcc43df481e8172a66f67e7d84dfc64b9ab19f3e93a16616fbabb8837ea1afe027f0d54063833dc38798faced59cfad669679b27b1f22b043fd0d48fdb0ebaddb0c967ecf6e52852d38b24cc171eef1be35a9e54d94c734329c688b6a4e654b0cd702f644e804eb94167ac20b8779ad7c25837e6f52d7b0fd6f87637ea18369f76f0e4c0eba3f80fc89b26ca06bf8de0858e9426a1ee0885348473d595afdac2f58ac77ff24f12c2e4c6b1c24df4b7ad3555ccae8c050e58b37ecf8"}, {0xe0, 0x117, 0x2, "917065a85abd823217a2e73d3d43623f9b5fa2cf0ed8ef151edc19fd62cad1923091279f769cdf89346b7b0d33d388f10a991094f2f862d4db2a12cb1d43a79d0123b849aa59388ef3dbc1a596979b2b655400f8b8515b14c0b01c2532e3f7627cc27f2fded74aafd8c233cb61ff70284213ef0929b7e9b48f4f48806b2dcaf3fbb349aa2ec9aead0eb2d0f6f0646add08342fe846fc8194d179e8ee02b5b822a9479be6682a415eccf597492751836032b97d3536ed39e45627755eda53871d2773e0eb0a2880cb2b1fce621eab"}, {0x50, 0x108, 0xfffffffd, "5ad766e1de0dbabd78868bacf5323a93703121a19955e929f2b37d15d187bd144ea7b02c4815ca1bcfee9b8a5cbacb9160c6ba941cf59b9b04651f"}, {0x110, 0x113, 0x37, "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"}, {0xf0, 0x114, 0xffffffff, "7cbcb2ee71885f2a6a4336211df9b28f87ea5a1881636ece9909a1eb52302240cba23e20c520538cb66b243b024064681d2f4f031e31be33b5e9e06da8c53764f38883cb08ad02fb9db8a18203dff29175f6dc24ea6eb979a5cca4eba1447ff8934adc44068701626cd6ec969d6939b587e08a3a5d7a743bec72cc1133410e1214ab7064e84050a75ce82b33092e15b057e6d94e6c910448e02fb94fec1e8f9ad6a30e56ccc92d745cc4ccd8d658db3d2a1dda496e5e17159fb7e2b5e71f49fd1dc94bcc229f6d8a8cf5a66a6f74e5e8933704511c1c8ad77c1958"}, {0xc8, 0x10f, 0x3, "1352f33e1c7905af28e0ef4f7eb6b9c3605b04499e7fd42a5d03ebee801f5d4c426270a243983803d9d257bc5ac96dace90eead6607571b58e2ad430214043417317ece46b905effa0d7d26c14b7093c950fee171325f0cc62061ffd3924ea9f2296debf126ffc562b59b1acc31983d7e9d008d964d9ee053abb64ec688613646c9ca6f6b1d2593a8bb4574ef4c0180c5b51733d27d1d455237843d8bd6e4b93e8d5a0992703f0605af75333a118bec414cf2f5a"}, {0xb0, 0x108, 0x7, "b6e047c1340d439c9253d77d07ee29a0fc4699440bfe1e860b00c1c27821c7793105609f30a923f74702549e5dd2564b371bd1440459ab3e2462fa98e7c97f27d4d6351fe2461c2db3d1de03c1889d0f52841f465fd6636482986ce7d000a5f160872ed249375177ec4e308968ccdc9b8a9bee885b9578e09434fd6954a3ebce9e5c9cfdfe02eda40ef755d75eec16a39a18ff7b452c06c391c99115020108b0"}], 0x2670}}, {{&(0x7f0000001240)=@sco={0x1f, @none}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000600)="5532db26a1115a0637b0ae6beddaeef64607d56e5fb28a0c36143a4b0f86f7e8b8c9434f46", 0x25}, {&(0x7f00000012c0)="d33b36b0979c24895ccb7ff98d1485385fe807de6163d314ba8c957227c08c7c521b8b8a7994acb697bfebdbb76d206bc7106de8fb4cd10efe2fb637970e8b249ac16601b12f3dd7d2d01151cb6da68447fcb1e2eab4247539774959ac02d6ab799c8ca375342a891166b30943bb34786c78a0ec84de", 0x76}, {&(0x7f0000001340)="abefcda3ce9465da7d0011ff6b1ad16178da6596f4db1cb193a324a23c3bda73aa12eddbee5fbe9e43720019065e0b972da63118a8bd2a097814503ce24f0819e5fc8ba83debbbe67379175a62b49c153e47e4885c58ae6af3ba62a50b72baa9816480b7c17305e0591c236cf53cc02941205c46fe5d9c", 0x77}, {&(0x7f00000013c0)="f10425dec7c99ec33038cc5e741b21ea9ac1803b86138cfa648f89c27b8dbf1fa241f69bc5612f3894b097511a474eff1a045230361bd98acf971260af1331db9dfa76ebd80f496caef43a440a3bcfe9d2c1ea", 0x53}, {&(0x7f0000001440)}], 0x5, &(0x7f0000003cc0)=[{0x20, 0x29, 0x4, "6ac98b291e0511e47a02d6"}, {0xd8, 0x109, 0x800, "f795be811935b3a666948581649a5421018048489bd269bab3eae694b966d96e59afdb260f8b43ae92bff14f68670406933b7560bd91c1abae3cfc9ceccbda660cf3c05eceec95f76109b3aaf500fd7d50c48e6f0dd2bf8f604449a101af7cb37c1320dac9b996450d34929fd6c6e5f3dbe177f5c9c91dc628a4dfa2798109711748a1d729906e9b58436d4a920dfdf7d19a4c24c43dcbd2985adb301d41affed728fb711924d83fcf78905d7279100829a1c1f6d3ec2565d3bf2cda63304145541ba6eecd3b20"}, {0xd8, 0x1d, 0x2, "77e86d31dfe4b8cc617e477b1e761bf958b9d309d60cb261a0c5214632f8f24fb3f895c7950b22ac1a971ddaeade9a9b3c87d3c4d482ef78c75374e8d90ca4af48531d2c456c4051c1416d4758b584ceb58cc2e9154bf0fee7f97d499d8d103c73ec6a91c161b93271ad188372119f7c76cf237574e64577dc3cb86c5cea7162c921eb1b195dfe43b8b1c830070ffa569ed7b3bcf591ce524a47e2ee9edadbb9025fdf950b7a3c5dd9cff7920b98ed6c5901021789b4665cf8d1d6e7e54929aa74f964db9bf0c326"}, {0x88, 0x115, 0x800, "c02da9e9ecea930f6eeb307e3bf36b8dcfa556016d60d70cb5b1359231d88e68ad3ee3e703b85afcff0bf1a7156928a1c78852452a3e8d823eb3b2a0ee56b036d0a314f198bff2629d0911dc7a943fe695d17141eb6341af06529a34454fbdf6f6cea0d3436bb26528eaf89fed6cbeee9e5f5286"}, {0x40, 0x117, 0x400, "76b11b348c064ca917428746b907998c4c306aaea95af03f8b55a5e348ddb6f5bbe066cb16ebafee3fabea53"}, {0x88, 0x103, 0x5, "fa3986929d18c95ea76c80b3b11f4538fa10ccd979b50a88bd47755b6a3cabf92309fd291e894cc1512efd727e43f01545574f9d5a991a95fe9f03548ecd69ec9135b5d2df210c7dac0ed19bed41766b446bb196f8a4daf26b417570a95c66000a6dd92881768c6f860b64968a49dc4ed8cd"}], 0x320}}, {{&(0x7f0000001500)=@l2={0x1f, 0x7f7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7fff}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001580)="7b7f84384831e054115213c8c1bb647bc1e150acf2259d580fe1796b8d243882f278ff08057c985a270fe5285f11a032630b250765f327e49d8b3377a4bf6348b67d218793650a", 0x47}], 0x1, &(0x7f0000007900)=[{0x110, 0x1, 0x3, "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"}, {0x88, 0x119, 0xbe9, "300fb5753f72a7410a407d6eb57aa676d1b1eaa899d49b19a1b1d0ec1599ee85c579349499fce44be668c7de646b7489efca68199713019df4f49179ad5c97954e976036db59be03fd1404ab2768cf163cf2ae6f2cac0ef4f682bcdb9ff7d76254425452804ffe3674563cdd045bdf80bd40fe"}, {0x100, 0x112, 0x4, "4f6824f362f81f39d525bc3c816deec852ecd3673e2f442899020404e4e4795e2c3181c05c06befc5cf2957416f42cb70be9125b70476b3372060d51397197437e19e5e401cf20111a3262b85a613f08c9ab53d122cb8cca24e48acdf8ed9db2106f59b8b43f808fc850591f920e5ff9b480a024af0b7a64a33b903682fa79fcb76f7996808fb3a9181d47003ae8d8f70ab0e05581bca89adccbb62384ab0b93edfc99eed1b9f025312ec32987da2ffeb6cb5290ea809987c0e182d619df6b9dc7b42a061151fb7fa124301b70a765fa187ccad02e97ed474cf1be950889cf4c4a9f4cbb95ce8c1377aeec81"}, {0x30, 0x107, 0x1, "62986ce3e07329b72038d8a00bc3a4ace592d63dd8809051d85e3f15ba"}, {0xc8, 0x105, 0xfffffff8, "973288e8fa39f9b4e6973b29b9aaf4d4ed121595209a91c544ca6fe33b62e01f1685a62b114703b23f03f9ded6ecf82bb0338ef8c6d37a7d5dcf72ed7624acffaa2db2125f3555f937915caa857e3211c27e96753244e0b2fc6ed0ae99e560b8e4923930cfdb12366fb0d607328b62810de14ca3cc6fc32668709b271b423f3744aa215a5d2072c5d4288e1f79c7725eeea46dd7b41e99a9505e4f086cd23c265c8b0e62ee5db179b0a0427018668b8be4939bdeb08171"}], 0x390}}, {{&(0x7f0000001640)=@isdn={0x22, 0x2, 0x80, 0x7f, 0x1}, 0x80, &(0x7f0000007f00)=[{&(0x7f00000016c0)="fea63d6760af91509e5164fb8990bf892add0fb75e7db7c9483a071b8cac6190d52bbd43f8947432cd1109ff35f5d563522d58801e500f65a01b39deff019f25ece868e093a62f203b66cf74e5e977e963eee44593c8a657919ebd24716527e852460b9ca41c74fbc511d618009cb3ec", 0x70}, {&(0x7f0000004000)="b732f52e2af7929bc7fd1a85799e659a21d19361ae6a63ac6feeb017368f4a9faf59606623afd98c70f07c4c8b3f237d69e2b6e3596cfdf9c58bfb3187ce3ee33883a2fddf75a47e400e55742c80ecff90f90c19ed71b50f11fe14c68f685e193918aea927ffe19b1f110caf879e692cde53dbd2a69a6005889c02157430102531a2e2fb5085380ba4584bfae12e962e3db32aa5b080aa1e0a2c", 0x9a}, {&(0x7f00000040c0)="42b89662998f72bad7788162b155e25074aa7696783fff8de227a5a5e240d767a127263de51cc48fa274770417b1c0a592e91aa0cc100ea46e29ea85299f4e5ababb747c584192b097215771aeaa9a216581507db276a8198148bff6fc1270ea8cfe2b9d72e2f5f48b16ea355816567f0ecd902bc39b8145b9ae29cd50e614bf72534b325dfa4d0ca23e51be8484d1b1c8558e691e3c9cc903cfef12161b8d938ff2638163c08cd05197ae2d5484c2", 0xaf}, {&(0x7f0000004180)="9bb3ab7119228c754facf320b5aa82792391eda392981f82778ea774470a701b5b880ac7488e88b8c62e5941dc8b99d4d8dcb45b0e5e091c6ee7d440ce8438577995cdc9fd3e8fbd7cb6c6", 0x4b}, {&(0x7f0000004200)="54f36b57ccd3a46c22df99c37703fbab49eb09f4b2a2fb45f7fd", 0x1a}, {&(0x7f0000007cc0)="13434002ee5b17d9e85866196d0c3841c1f058d92ab1ebf1356714c24fc2121ea35e9a2c36c0798f5a0c0db7e5683478ea104c00f723d42bea913102fb1ce1026e34c4fe7439aefa693ff05388634ba35ea246154a422332e715c20695151f2b2d7aa8ac674dae7cd3012160f28c29ceef", 0x71}, {&(0x7f0000007d40)="db34dfd88c1a887372b336a8fc6d34a0ac9b2231c4942d67c0f361783d04dfda9a8f089dd7bb52e128b0aec90770eacf9c03cea8da9c10b4273c4cc6789a54101c9af4254e51fcfbccf2653ebeabd6550fcab4e971eaf8681428b6aaa5cc1cae173dbb9397b47a5c03e2f9e205c79cc31c90fc38caa873e30dfd8a0c3be0290754846464e6c0162132f098d73e926309632522a35bcafb26931de619209ae2a92eccaef2ac8ff3", 0xa7}, {&(0x7f0000007e00)="a93b57362169fe5c53cded85ed4ccef41b5e19848d305b7374a4340a8db8d6f0957a059a5205965abc649ea568a9835ecd36e4bfa86f750bb1eefaf72218f92e468c7ac6446d3c872740f677b7377e9a2dd1ebd30c92c7081abe8a78704b4b78b5c81d49c5bd1b578c206b3db2aacae462e0421dd2b6f12a4d98dade157627b7f073e92790de053802eb93cc4769cc5d09c41f877fb760c7c769292055bedef58c32db380da75c4ef7ef725af43b4c8b76e91070732ce479e9f1853aedc858273fd138395c0f1198a17b206706120a30367ea40ac9e85fcf3b6e51ec35e832b9f0abc1e662a22ae67107f67ee09998c1980d1e4903", 0xf5}], 0x8, &(0x7f0000007f80)=[{0x1010, 0x111, 0x8, "f5ac33b7810b800a010a980f3506cae909dc6e79e294291ccb2c14aac984bbcf0733d9819bb2404749a02d6d5199679875b0e33e0e8b0d5f60e39c667f90cfe07a24c196ca8ce4994660118f25326f087dd39f6e1e27795da80a3907fa90b9d03085ff4252409774ca983055b47ff1a0d9694abde0f08376b19c40adc6abe6d114071b47efa025b7d8cb329eda725a4e162f3ddb20286ae90055d3dd7eec89363ec834e6050e439a6b4b81474b08c47b3ddcdfe8db3b268409fbcd66ee83337357441020c706abae85b2a2aebbb99f7cd61813f69e1936783773492ec3b9f93eee8fda65ec2d78160a61a15c257f80694516f67e3d1f0bc059f37aac8bfe0056b8f59e134a19d4a0d3e35167dca36c1bf5125a4bf53d9f18bf7c679cf12fe8cfb1a69f8a09dfcdf4c53f0f22a85491f6af303b2d05ff1626075fc2605ee970a62bd9b94663312e68295b0a2f8366aaf07b5ccdf063797f902939272f85ce6ec63e9e3d9dcb72f567e2955708fc16eed255bdb55bb6c6e5cc7f5850064549faf63a2b6fe0179d55221b1a46c30b94e1ca90bd779152a08e20aefae32ccc21fed4145a9d796348696160b88d5178acbd740a4b5afbef1fccce12db97ccc001d1e1c40399fb40685b92c2bca5984a506476902afb024a159f858c9b29c965ac2c89a466f7182fa105c9457fdc168ccc7e19c56d473a2db397a2365f207f52b1b25ba153bd52cd350e7e1a4d2ec73802e810c72b21828c330a59dbc0aba98e1b75a55551216ce396b9c080c58f71cc28ad8dda7a8ffe5a454e1ee1fb2842dc98ff53dc12d3651376070da5e8f95b22f6f78eef2e591e31931a1a517b0ef7f1fa8ea09caf144ffbe483809bc2495c3550b878a3ac172031f58fc193f73f208db7e5f6062e3e510df60e2f6dadc5a2a0ade270a71d6a7e6c24fcb505b881c554db755cef5154411d373ad481bf8a095f3c297ba8b3c9bca1dca6116c9abf88e1317cedfa0a8eac3c8794966743314b4cb2a1aa4b0ec07aecc3df0d2e02696c443021797eac71eba26fcc7750bf39043bbffb42b8e24217419a8b051f185d5b021503bde1fa544c48714d03edb7a76c87162cf038813b998ef4b91879e8b31c4a6b753f55d74be98837e1900c7d6f67622e984bbd6848c0861a0ff033caf4522bc5669b1db5e07b2cd25b588082574dc25c024569d39110851f36600020958459224daf838d42a3370634edfea3e3eb9a5d1683b2f7fa098d9bfd43fd025e3b8b1e20691e42372000fee95501a31ae8751eae9526415c4351241d168f2f0d238b10530d4a6163cdaf9b8d261110e7052bffcbf0b8bd41b7bb9cc8640ea8ef10d7cd03671ae551942e974388a7c3a3bc9ed004d2abb0654473225313efb749779547a9dcd6baefd81741e5fb2774c6750025fbb236f53dc48c308f7b7234eb05253a940f9d565ca560abfbecbdad69d507c08a0d093bf6436c154060de8483686e59f7f1f3d27c7b01e9867cd41f81fe6daee2056a50d995fe28bc6e2b3646d4148fb83db2b48177628be354700fe0811faade2c0964ef0d2ec47491b8a102aaff74b7a49826265e45939d51ae2ee7cd87413314dba510ced642600faeaa4d720610036bd4d463de9f465b7e088c742a6338acfae4ae4191664e1dca502ae5f68074718ba7f9a770ba5931c3fe888a2f19839f433ca37f9561c9b5dfa22007d9ffba9f67a0cd0d3d9c3e1d6326570525608f45a61431058389be59d780e7e4307483c60a00ea01723b8151c0c0b45aea2477b750f940385cfd13f7ebb3a93a1b507582eb038b375afcc705103bfc3d4b414eb63cc36612fd8206bd67867d354a0783ae841897e832ca00aca7a40fd0d01a0f034300b34c693fe1f7b47e3e8bc52f8f2860b2dc3c7c05ca9f0d2e643a82930fd1701ff4ccc312ed90036ccd6ae3972367c0265eb1387f7cc76249600d8ac02b64ef25d4c0b453ffac163a624b3138fc8188ec268e9905b8d26d8d1d11afa19e5bc0d41d94eaf8af378e48fddea0f0c9d4c9afc42a6d64c1a79e4da877a85283badb5e380a2c90f0ba31e3930de452663223d17e47b69c96b7b382850ba236153d525f9ad69ad999811a668592914480f964e94b52058273135a7a9acf594f2219ed4b5d2e53965998e0f0ced7e6fa788502b15d0ee7f78a3a08fb9bae651a1c663aa84543f2f7c42b13b92b0d151845b5d02215fb4195c58f652b2939d41b0b5559347ddb5c551e139b5fee866517c3ecd9fdf08c64aa25dc1f2944b48ceb2b415e56efa1c8ac94461142196a5fbc281f6fc77b9a2d6f0dd94db0d6a371a3213170fb1ca11d4dbfdda5e7ccc87ce3b81d58c2a250c19ed97b8136bb60b9e01a02ecd9c5bc8cc1c227fea3d3f2263f59db0d755694f676db03a79e297ffe4acff5de2e9fd25931d9535f3f4f52761c0a27530184974fc02d426860cb609426857b0dc8e14d1ef9fca5665dcff711b239811226c37876e034178aa6dbb0f5caf17bdd122addb8549f3d6384609050cec0adc0e7f3cee8acc81d96687bfdf1699abcc1a631f370b1ac69dc280374ad20ba840608b583df311528526abe506da55eebca02289884ffee9d104c0f5aad57e116564336ef17dea6dfd44fb9d8abddcf14e51a364c8978a11090c8635f05026d1645ea8d4a9d8fb2a4810e8065acae7364e2d5da791c342c7560cae620abf551a64907e44f6c1df96781b5b79de28ce6fb1d0c0e0b90a2958ef9bfc1819048087bb5c81542c25760d05563de56863511cafb024219a7e406df7075080d1621b18f1b3cdfd851d5f83b9cc04dd912a281fa4c28c239ea4e6c447ccaabfc9891a80d6734577a53d7cc6a33836f7f98b00dfa5530bbad702517c36088857ba1be9eba2ba13c98427afb3e8a0bfc08e3d4899b0cf8f11f5ed966f9002976604f589bbd8d40ede88f066860ec6133a5abc35e0ce3a1de4f5c79b32f8fd8fd4f95ee9ec2d416552e1bf8134918aa1c69a9d070ce61b4718a86717687cfa2269fd22462d2c543291e4313b2aa0c2b76c9792168a8be8a2d7f4262bac55eac1c967df1644387f8d01b0fe2c491a08904ba3cb64babdbc6e340a48b3194c76f3c1db5a678c0f90d9872b5b57fb4b83e734e6cbb8a67d1a469ddee569d72136fcd3d13ae548091779d6f88b4be549046197ab03852228b38defd2611b39e226988c9bccabfd9bcef7984d7c4caed7a372b65ddb39494e72df1e43b16feca0d077695bff18c1b70abc5b2234c28bf618a0783c571b47ce9cb7495c91bcd5b7dda5d7325edfbdd9d919041e08c1bce59cb890a86d5d3a9866e8d0ce18cabcebdbc584457e5457033a619542f91913dd66a88f21986697cd4fef40d82ba3576cd793b6c386a7e31b654835a364f8e0cef4b9f18096de02378f63699cff07d8ed20fa024e933a56fb0730e0db1578b0d301cfd893bdbdc2e45af91551bfd7fd4deb0e4b2121dcca2ef12b6fb1e4a6a05e48147e7fa84ba5edb2f5921ea57c60f7c1b9d7850d9d1cf525eef066da0fb1e8194d479eb861337556bf1b9a4b52a1e1f7667c47002df9b2a70874b1b20793553da066b55a3c6dde6cbfa09276c53c3ad3cb8bcaee62e495cfc6fb33b9ce6542dec5dfccad0bb871eb2c56c962a2b993469971ea57701d0b9c9a3c66bc257691ccbb37016a6e7480560ca7a8f4cd0979905c8229c2fe23adddee8e0e3adf6df522d3cf1f565e09aa1ee54897a4754f1c65ce629b1b841941e119736887ef9c081ca821f40c1068b2aa774e2339d488e3666abef70a42b6d6466dfc69f375069ef05b44ce8474089108fc36b8764871ae52e6c9278da9eb1449addac4d2e46987ffa198d8283ec2e57619c3d6c94d139a70b211a0c5c5780a1044d9d359d01d23af3e4179ab982905a80de3268276659cb9d2a526b50ca9a2f2686009b6846caa82331a37bbcaeba610eb02bd64cb540a590f7bb12ce64bfea7f3eafbfa6200b02218a2577384effedc5da5e09d90ffac3fb2971ab1f514cffbb224e21547fbbe04ee44856f79a8c0897c6cad71e617ad2a495703ad580a4377ee4a13f5a3a4bcfc56aa6d630c3c968cfc224f7e27704e6c8c3fbe28181504666a178d6a306b57ccde0ac9b66352a5f92a7605255da779adf3da70c3c9ea41cbae8546e4e6ba25abf7132c5434db1dcf273c0534b060e26484a0c322db8733029e3f3fc18a25d856e218619e25673b038a8606683a41411bb6752f801b4a283dabbd28cfaa1c18447232a87ec80cf77d89d1c8db32bd4e1db17ce4b40283204688d8f89f3359776c827662e487e104ac07ba2fe1b3d257b8cd543c1485f9dcc1709cf76405299c1ed77f240cc2c3fee44a0290785b59d279f9adaff4907a05eddcc47ff05f8908e987515f7be56a6b8f075c7034b739e324812554b3593c5fc90e2e1ea5154b554d910eb1401b3676f31880b0e921de8878881188c057920c6d782fec1dd36a5f043c58ecc9e099f030cd237a3013c3a1f13ec85249c36eef403581223a9bff6424e4f534ef485a404e63578a13fe605a823e20d61a87e2b90c5d3566d492a583b6339407112c8596285b35e3a500968b96b98d23e5a767484476f31de604326de93daa713fe8cdf4af8bcee6fd489d727303793ceb25ae436569e3d54de1d1ada962700158cc939c1c7d314f3100e1ac5e25a9f40ccf9c3aa276cc9d044b4bc1f951958c7ad77b6fe69557564487afaa4e307844e974dcd433ce2d6c60957f0900cb7349381d961203c0f356f655fc32eb8ebe165c15986cd3ff0102f4a161bc263eb8e11f9f0f4d3adbcb82e9f91f9454c9422b978c09de6aee147b12f9e200912adf851db0567e6a0358cd8d0d8faa11ab470ad1deb085b265af38c22bd1c88045c427dbe293f86bacd30318423929bd8be8a29cf98bd22e88874d2dc8ab5ca12c9b93d2472e6fa53e9ca38e54e1021ff5e1cc1f3630fbf03fd8a0140068636991733387485d6072ba8c187b9d7de061c3be7e4b2a2a899334c2b3ddb77e3979962fcd71c6436d7a916f2885aec436325a2592ecdfffa62a5bacf2d956d9388e6687482973faafc5387d34c7559c57886e712597c50fa91b93be16f050aff42c80d8f70cf67c4a5e0597089f1dd39cca8da0375bcb3ddcaaecc9829a4fdd58c551e1929e4d1a34649e1ee2c6d6f91a797a7add67097bc0cdc7c32f9813953e6bd3ed5efe5b7afe287d7e9cc67ccc5bfa3edac42587b6344b2e73491d06066931730ac2f04c4a3f8d0ed5d3effc0ef659b59a878108325cf689cb881853a786babc3d28bdc3608eeabf49607f0c4123e4b2b56beb74538be7c51aaa86e8b3f54e68d2bbacb93671b913ba08b3e7b269a221f3ccf6f6279da5f3ecb6b46af192c55708adb6956a78fcfacee6a23e11f077aa6c3a45648f5fbaaff843cb3b328a69c65146cf626617f1603f52037fd27ff20b9a6cef80bc4f16b846633909c3859522efa10e55b9bf34ea8abb6f8dd322f795cdc42cbb39d1a441dad4ea60cb7cff3a9ef8f3ff575a59dc3c0a938bfc2b7e7f55fe623a77ccbb312b233e02a8f26c1ef6e5b4e2795256151e17a737bdd36ed418c6d3cb2faebc45e9df224585dd277d8812e1bba9ba054e8569af0948e1f7ef8966e898a91e2e9e11ca8551b8253502a6aa1680557d38b21ca58137e7fc400ce7c4a4b7a1db6d0f3a6c5a610ce25ec447d31c31e2bd8f3092a7b80692d5a08573a48a5d3ee8d7585c8c2485a042af6659cfbf8aee934a89070508fd84af1ebdf9a5974267990"}, {0xf8, 0x101, 0x7ff, "163d4248e574386a8ac3d42705b92608cf06e6657da0043627bd34c11754f21b54cf13f09a2d0c1f0a6ea254953913acb38ef5ce3f79e6872ddc74cb917634f8a7018a473137a6083aea6fdc724dd7bd8f39581a5f6df05517cb48a91f5b77f625cda3d053875f278da6a2150dd349ebab49b84f6142c1e68472bda6447db25bd40058db4434e78fd05d2406ac7b4d3de1f984496ded12fb97c621e43d98217b402dd1dac3d80e8917e6c21afafe00db3825113350bd1a4b9167653c03d5bd6102fa5da48db9bf0d926cd071129986d5ad2663dec0289bfbdbe6fc448bb5873f0d49ccbf7ad3c4c7"}, {0x60, 0xb4, 0x4, "fbbf9a8f1ca7f6ca17bbb43073f19b362178a01d2c42b24d5756e15323617eceaa722e659952ce249af7c51f157c035a1ec47a2ee40a684ce3ef71551b8a419cfc3547b67359bb62910c4187b9cee4"}, {0x40, 0x3a, 0x5c12, "7002e9bf0f55b9baefc4c5fff54408e42f47473c07f80df8bac4b6a1370220c07d0f721b9df9f1838e9b"}, {0xb0, 0x107, 0x9, "220c2d964aba597d08d99d7e4422bdf885ed760ceeb3a70c840a69594f02ce4b738531388ec76f9e537d9042fa14fde521022bace466f03e484a93c7a28f48c7b7c717c28b8f6a067a3c212310c99e2bb6a0977b19e3068b10caee4047b2d5f108739bb8267509cd44c53108b6f1ad33e6172b74f1815d2d043cdb59b4ba5928efc9c40a9c1023242012ef7919c589c497fd68e0759db7784dbc7d4e1b10"}, {0x70, 0x113, 0x701, "7889a37ceb3608faf8d9e4147fb522553e32c784e5e1a97f20fd1d8f8a96c5688f89d5ca563610238bb5e48700e3bd54e27e4015d9593d61d8c55e661a942f57b597be3c157c81de942697398133ad3619687e9ab94cd4a0f9bd790b649f65"}, {0x18, 0x118, 0xf91, "029d"}, {0x60, 0x107, 0x6, "9e9a9456bc1a5753540598bb1dadb64617bd008415e2d02fec17fb6dd92a56eaba7c418af6eac397d1a99b139234a5d9125a51b14e43125d9c633d9b79ef8fae2193ffa520850ecbca796dc4"}], 0x1340}}], 0x7, 0x8044) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001740)={"3f3979dac6dd6fddd0b714e4dbd97878", 0x0, 0x0, {0x1, 0x7ff}, {0x20, 0x6}, 0xff, [0x2, 0xff, 0x7, 0x0, 0x9, 0x1, 0x0, 0x400, 0x7, 0x80, 0x0, 0x8013, 0x8001, 0x9, 0x0, 0x100000000]}) 17:58:13 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = eventfd2(0x1, 0x0) close(r2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCGPTPEER(r3, 0x5423, 0xbffffffffffff172) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0x5) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000001) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80000001) 17:58:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x7ffffff7) socket$nl_netfilter(0x10, 0x3, 0xc) 17:58:13 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) keyctl$instantiate(0xc, r5, &(0x7f00000005c0)=@encrypted_load={'load ', 'default', 0x20, 'user:', '(^*\'$,!+!-\xcf\x00', 0x20, 0xe5, 0x20, [0x66, 0x0, 0x35, 0x37, 0x36, 0x39, 0x65]}, 0x3c, r4) keyctl$set_timeout(0xf, 0x0, 0x7) 17:58:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x9, "3397cb", 0x8, 0x89}) [ 351.986501] audit: type=1326 audit(1649959093.068:51): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4583 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 [ 352.029776] audit: type=1326 audit(1649959093.069:52): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4583 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 17:58:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x7ffffff7) socket$nl_netfilter(0x10, 0x3, 0xc) 17:58:13 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0xfffffffb}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0xe00db9f79153de8e}, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCGPTPEER(r2, 0x5423, 0xbffffffffffff172) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 17:58:13 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) keyctl$instantiate(0xc, r5, &(0x7f00000005c0)=@encrypted_load={'load ', 'default', 0x20, 'user:', '(^*\'$,!+!-\xcf\x00', 0x20, 0xe5, 0x20, [0x66, 0x0, 0x35, 0x37, 0x36, 0x39, 0x65]}, 0x3c, r4) keyctl$set_timeout(0xf, 0x0, 0x7) 17:58:13 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000200)={'veth0_virt_wifi\x00', {0x2, 0x0, @empty}}) sendmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) recvfrom(r0, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) memfd_create(&(0x7f00000001c0)='%::\x00', 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0xa0481, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000340)=""/76, 0x4c, 0x40000000, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000680)=[{0x20, 0x2, 0x81, "2083cf0ad874aadbd9fabb45acbc"}, {0x98, 0x10e, 0x401, "71b4016fe8dac32eb70e9182059b661f01b26de1a2a04268ee597c85be70781a6390c61a5aab38326380932a55bf9952ea702eb6087d9198ccfcb20a7accff121ecd6bbf705633987ffd93ab4c9dec4fe460e283e9a0fe4170a4703023a2c92e8854981b2dfc17b0a09cd024647c551a71cfb29f95f86272f4c314ef09a175cdf0fd4f031bcc9b8a"}, {0xf8, 0x29, 0x2, "3ec0d01ccff0adcab0402e75d0240e9fd88f297cf9fd48e9488d5a17f8adb2eab27dfb80eaa7d2a9f0e11036a03b5bbf43807f2ef0b71c3b3a1420bd7b53861f25d84ce2397c2d205600c12e740fc522eaaed683b9883f8f136ecccf2673a0b4ec5e5e9ee84935367e726470837b370a6b8c0a82b0d27843ee3810bc253a82b15f1072fd532fbd381e4c0262ceb69242715acf963df3e673cda82b2931751f8cac1db9b0caedab57ecd6cd150e982092cd278a304e775762f7b2bdac96700a4dcc5a62bda76b14c8a96960c13776fc8b2eb3c64795d60bb639f7f9de46b1092445"}, {0x18, 0x118, 0x40, "ee335a"}, {0xb8, 0x112, 0x1c46, "e705d9fab50bd2c4eb6014267ad322346552949e768107c40382976de84a88c854eec35eeeb7d7a06a9c136fbd92fb3d800d6d328e811223370703a5c7b2baebbb5b7be53a01f7dbab63bfa91c5b011d46f8eaf70b2e084a866b6e9c34a8d077dbef0408efcc341a6b450aafd91a67048d30ccb45d68b4d2317f62d520ffc8f530e269f8d2e39d15e29bd7b1bad5484422da6d124246a6817acd7dc9332314c5c7dd7a5e2a"}, {0x10, 0x84, 0x40}], 0x290}}, {{&(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x4}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000440)="4fe10cf783e46e6a4ab9eb0e3508240bbdb53425eb5f79a64baf05c6e038296a6cd15309af8430873cf86771f8a942cf3f9fcacc1d3b7b7007f6fe991ced5f621164b07d208fff4186f84c6546287353c44950e9a351c17f0b60c36623079547d57e3f74c2786973b2ba0fb279111dec09f05b0668783d3bc178ec13ac6c0d33ad032af1f307e64cf60d473d7faae90b5e96b2d68cb1dac3893ad7aa9b22fe85b9ba14da1fb51437ac9c1205ccde16b47f2d84e9c97c04b3d264c7d1c81aef40aec834470f877b2161730bc0", 0xcc}, {&(0x7f0000000540)="7362e926c29bba501caff86e3628cf6447b3baf47bc3d3a1d0ce3ff7a732dae8b18c50e2e42e030231a0b3b7dd85fae11887cf80152469d075f63006362347d549595963bdc9fc285da25b751148b7ba831b30b38855a99898f24d11d37d737a9bc53b6791fc96f7fd30672199e71736eeedf84f95b9c8926747d40b0c323c802c8a9b94fff478f2f6f443a4e3d5507540ae2707f854b81a6be86c22fadd2092c4fa9bc5d54bce2ea26bac9856638235620b9ddb", 0xb4}, {&(0x7f0000000940)="54de7ac142ef02e0c66866988bedf3838363cc5c4151e267b0c30514a2849b7712eeea040df9de00749323303b1c9f2237aba494e69ace21cdda126ee55c8a3418182390f7", 0x45}], 0x3, &(0x7f0000001840)=[{0x38, 0x105, 0x22e, "c5acf68030599dea1e9d471d10c6cb546f536ec84e3fbee9fdc6493f106d03e8c81f0ecaec"}, {0x90, 0x10a, 0x4, "ce1ee2132badcde53735e755e9334a1630cf2b532a3e422c3d00d3ac97000e5d30be556a9228965e765909d0771662257026994451f5faf0e22b041ac7dee5e7797bc61340a6d01ad2842fb04c5efef97c1bd71009cf0d979218e362e23cafe051daebf95c33f5e34df258cd5e651aed320233078aff954da5"}, {0x110, 0x10f, 0x3, "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"}, {0x60, 0x10a, 0x6, "7886d2bc6c05a835943f6d516c24c100e4fe30e0858d9a5d8ece7361150a236ee9b94d01fc96d8f096699c134e52fdf0c8df8a71a84851933742e5d738efccc4ab0197fe0aaae3e14d1a74a6a075932a"}, {0x1010, 0x1, 0x5, "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"}, {0x110, 0x10a, 0x8, "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"}], 0x1358}}, {{&(0x7f00000009c0)=@xdp={0x2c, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000a40)="ccc8895775d47fc682c7a7da5291c967f0ba1929b20dae93d4c9c4a3a28acb2af6a2e17bd04dd5083dd889e22c5c52c52f71e8d59278671d3fdd9132eaf2e550b3cc670a4c35e47575c75b761b50c83f2fe457c4b00b19bbc9320bd4ff992ab1c3041eb8302c401342bd33caf4cf5a5d16d6f33a388cddd7f405e4f32ee271d0051922c64d9c97a4f0ad34476453085ecef485772c1172d0ddb58eeae31c1e5fbfeced096720a2558257cfdc7060a7027b619f4e81a3eab95f5ea843af0c3d0fe74e4cb05d549bb9d3a2cb87cd85d0ff35aee403f32f561631c7e400d5403b9c8101373557", 0xe5}, {&(0x7f0000000b40)="98dd16a69c4efbb11764889d862ad56e82157a7158b99368cb3f64474cea9e43f55524e480c6423a67ef3900d27d35a6c92217e7becbaf9247b907ae48701a92a1006618c1f0893edc33496018fea67f1ed47b5cb3174d91511b8dc875d1bb6355dd341b59aeb4b55c2ea9a792", 0x6d}, {&(0x7f0000000bc0)="e1c2d5bb2807f09c3d7458b2ecea2e81ee77ffaf023f48c9e2c22896f0645d803cc69c000b650f02052d793388e1afb7478ec140d8aa47f5e2f3ad1dfe92a9f346d9ba82c0acd6eba42a89c9bd5d395ea83e8f56887dd83633dac0cbff7f99a330b209ed8199074d139040bc1e9f7d89a03744bc52f38d37090c855abcafad9a32e2cdf910fe39c56feefd46182e11c821c5b4e9686f9aeddf008001799b81afdd9820c6ed3abf699995b19c63ff4ff0ab6edd5e3656814a0ba4e58f32ebc2a6bd55d78c8e95718aaaa99884db47f716ea787a74931e008b1a9ae1927861", 0xde}, {&(0x7f0000000cc0)="56a8e5085a7d865062302728ef52684fb99eee49535b80607fd102f6bd318171860b6603d794817ee6851e7c12aed0a6899d274cf16ee056579e0abf9a7e024bb31ba13acd6a3f6cc33df9e3c66c9b58c5a9c95d5d2b3e74ed020bacf0feee95d9c0ab33befafac24afdf953e2081fbaa24fd5d289ec05d0fcee3ad5d6180390b3128ef0b32f9b3a5192f0f74093db61637cfebcdbf61d2407ca7849fb76728f842b739ec4c393", 0xa7}, {&(0x7f0000000d80)="d2f653549d476629324d195d08baf5652a588affef7eb0af980586ce59dacc09e7211bf10406ad749026943c3bca38e333404eb8af4f53b28c6a74666898575442e4cea4964989dca5125f95a6388fad8bb4315e29ddcf794fb4cebb828c52d03880fece8e74bdfd4434030b95ead8ffb751fe5ed47dc92af7a8ddbc27c0c5c61dec950026d7966a8c2c4611fb71b7e7589cb2b877f2be705cf3fc84b5995d05e67ada2d1f03b1cbdc91c30c4672b62456f789458a6fd3215ce0aaef7c5902b578dc675354ccc9f41a5ae77457286bf190e1", 0xd2}], 0x5, &(0x7f0000002bc0)=[{0x1010, 0x113, 0x1f, "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"}, {0xc8, 0x1, 0x3, "6ab3bd728a4869bc64188aa6cc3ab387743370a99f1e9b18ef197984ae583b1c7aa3b294ae570ad6624bc65ed91d0d50ec7d54eb82df688eea1c5f7466a71f65a6e968c83657b564dafc346df970a7f38e1f75e170217101e75547726572a1f8addb6d9d8ad1022c85ee56e742c416f05f09bb46fa2e970c75c89774803acc54b6f22700646939b7adc90e9527a865b30ab045d07e199eb708982b6f296f159eac3e4500b433a3adc154b6ee2ed515587f9ac2de553d2d78"}], 0x10d8}}, {{&(0x7f0000000f00)=@llc={0x1a, 0x6, 0x6, 0x1, 0x3, 0x9, @local}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f80)="09d57e2c15b45187e3dbb7ed37e3c166ad7871801286ae08b51a82b668a0ddf2763d3a8ab860c1a875f0043c456549eaf17c99505753086317c3816058330919b4ded461b6e7cbd697bd1db36d33af239a22668c43431630675ba758c6ebcf962d06ef9e641345d30990164bb3253d7de177bb08920f3b76e453334dd27924732b75239d6f9a", 0x86}, {&(0x7f0000004280)="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", 0x1000}, {&(0x7f0000001040)="fcf551b06ecc1bf5fcfda1fc73c1531811303c971b6a03ab47649536c9c8ebee6bcfb18e8d894874a37e6bae5a7de6fea37b14056c64474d63dcefc1746ffa09a8b13fe99be43429476a57e07eff5ff5557156c6243e631b7c5a376ca89f8dfff5709b4f4f21c6fd37e5d63f2eb06bf5123505582a09c55720", 0x79}, {&(0x7f00000010c0)="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", 0xff}, {&(0x7f0000000240)='\f', 0x1}], 0x5, &(0x7f0000005280)=[{0x1010, 0x10b, 0x8fa, "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"}, {0x1010, 0x110, 0x8, "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"}, {0xb0, 0xff, 0x2, "1d4c899c646aaf9dcbaab9cdc6dc8a789f69d062f95e88f5ca509f97fe3763aef5e1397384f249eddee90500874ec9656a9834022cdcd7ec4be25b7f09105370c28110576e16b20ecf6fcd73f4b9e402c899b56af1920a924d9dcc45c3630eb8485d6d18ff595d91c564ad519dc6dd9569d5c5b6035c482ca2b3d64a306246c80186ebabe3f757174919bb893773149037eac134da837bf6d4b234c739dfbab5"}, {0xf8, 0x0, 0xffffffff, "2f5e6db09584958e54129c4388f1fc7ec88a67ee80970a55725b1a5462312e8bc7f68dd0e95476b7a05dcc43df481e8172a66f67e7d84dfc64b9ab19f3e93a16616fbabb8837ea1afe027f0d54063833dc38798faced59cfad669679b27b1f22b043fd0d48fdb0ebaddb0c967ecf6e52852d38b24cc171eef1be35a9e54d94c734329c688b6a4e654b0cd702f644e804eb94167ac20b8779ad7c25837e6f52d7b0fd6f87637ea18369f76f0e4c0eba3f80fc89b26ca06bf8de0858e9426a1ee0885348473d595afdac2f58ac77ff24f12c2e4c6b1c24df4b7ad3555ccae8c050e58b37ecf8"}, {0xe0, 0x117, 0x2, "917065a85abd823217a2e73d3d43623f9b5fa2cf0ed8ef151edc19fd62cad1923091279f769cdf89346b7b0d33d388f10a991094f2f862d4db2a12cb1d43a79d0123b849aa59388ef3dbc1a596979b2b655400f8b8515b14c0b01c2532e3f7627cc27f2fded74aafd8c233cb61ff70284213ef0929b7e9b48f4f48806b2dcaf3fbb349aa2ec9aead0eb2d0f6f0646add08342fe846fc8194d179e8ee02b5b822a9479be6682a415eccf597492751836032b97d3536ed39e45627755eda53871d2773e0eb0a2880cb2b1fce621eab"}, {0x50, 0x108, 0xfffffffd, "5ad766e1de0dbabd78868bacf5323a93703121a19955e929f2b37d15d187bd144ea7b02c4815ca1bcfee9b8a5cbacb9160c6ba941cf59b9b04651f"}, {0x110, 0x113, 0x37, "0be12205ddc7204c8336db725af390363f812eed7c0b06b54eea6fd85660753bc854c972dabafae8bf860e0922358dc0588b5b2c5d3a90234f27b544218c6c4d602c8edfb26de503d893132b0a91badd92da2f30c5626dd803ea5f775452fceef0cd7ade89c1c13f27ea699de39d5b56bbf2411993833f654d6c7e13d53982eb4faea496cf1f497df88b2402e1ecefcf841802576fa0145b5cce75a49e2e8ab63d6b320de224470892bdbeef105673aacd6a71ed3307d86c79062c64e1ee1a6b3ea145f925d59dfbfcf990814c2f73d4eef014ef17164498869f483318e5815ad4bd082e402158006a91742a2e9c9bed7b183e76fe09fe3d3589cfd507a3d7"}, {0xf0, 0x114, 0xffffffff, "7cbcb2ee71885f2a6a4336211df9b28f87ea5a1881636ece9909a1eb52302240cba23e20c520538cb66b243b024064681d2f4f031e31be33b5e9e06da8c53764f38883cb08ad02fb9db8a18203dff29175f6dc24ea6eb979a5cca4eba1447ff8934adc44068701626cd6ec969d6939b587e08a3a5d7a743bec72cc1133410e1214ab7064e84050a75ce82b33092e15b057e6d94e6c910448e02fb94fec1e8f9ad6a30e56ccc92d745cc4ccd8d658db3d2a1dda496e5e17159fb7e2b5e71f49fd1dc94bcc229f6d8a8cf5a66a6f74e5e8933704511c1c8ad77c1958"}, {0xc8, 0x10f, 0x3, "1352f33e1c7905af28e0ef4f7eb6b9c3605b04499e7fd42a5d03ebee801f5d4c426270a243983803d9d257bc5ac96dace90eead6607571b58e2ad430214043417317ece46b905effa0d7d26c14b7093c950fee171325f0cc62061ffd3924ea9f2296debf126ffc562b59b1acc31983d7e9d008d964d9ee053abb64ec688613646c9ca6f6b1d2593a8bb4574ef4c0180c5b51733d27d1d455237843d8bd6e4b93e8d5a0992703f0605af75333a118bec414cf2f5a"}, {0xb0, 0x108, 0x7, "b6e047c1340d439c9253d77d07ee29a0fc4699440bfe1e860b00c1c27821c7793105609f30a923f74702549e5dd2564b371bd1440459ab3e2462fa98e7c97f27d4d6351fe2461c2db3d1de03c1889d0f52841f465fd6636482986ce7d000a5f160872ed249375177ec4e308968ccdc9b8a9bee885b9578e09434fd6954a3ebce9e5c9cfdfe02eda40ef755d75eec16a39a18ff7b452c06c391c99115020108b0"}], 0x2670}}, {{&(0x7f0000001240)=@sco={0x1f, @none}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000600)="5532db26a1115a0637b0ae6beddaeef64607d56e5fb28a0c36143a4b0f86f7e8b8c9434f46", 0x25}, {&(0x7f00000012c0)="d33b36b0979c24895ccb7ff98d1485385fe807de6163d314ba8c957227c08c7c521b8b8a7994acb697bfebdbb76d206bc7106de8fb4cd10efe2fb637970e8b249ac16601b12f3dd7d2d01151cb6da68447fcb1e2eab4247539774959ac02d6ab799c8ca375342a891166b30943bb34786c78a0ec84de", 0x76}, {&(0x7f0000001340)="abefcda3ce9465da7d0011ff6b1ad16178da6596f4db1cb193a324a23c3bda73aa12eddbee5fbe9e43720019065e0b972da63118a8bd2a097814503ce24f0819e5fc8ba83debbbe67379175a62b49c153e47e4885c58ae6af3ba62a50b72baa9816480b7c17305e0591c236cf53cc02941205c46fe5d9c", 0x77}, {&(0x7f00000013c0)="f10425dec7c99ec33038cc5e741b21ea9ac1803b86138cfa648f89c27b8dbf1fa241f69bc5612f3894b097511a474eff1a045230361bd98acf971260af1331db9dfa76ebd80f496caef43a440a3bcfe9d2c1ea", 0x53}, {&(0x7f0000001440)}], 0x5, &(0x7f0000003cc0)=[{0x20, 0x29, 0x4, "6ac98b291e0511e47a02d6"}, {0xd8, 0x109, 0x800, "f795be811935b3a666948581649a5421018048489bd269bab3eae694b966d96e59afdb260f8b43ae92bff14f68670406933b7560bd91c1abae3cfc9ceccbda660cf3c05eceec95f76109b3aaf500fd7d50c48e6f0dd2bf8f604449a101af7cb37c1320dac9b996450d34929fd6c6e5f3dbe177f5c9c91dc628a4dfa2798109711748a1d729906e9b58436d4a920dfdf7d19a4c24c43dcbd2985adb301d41affed728fb711924d83fcf78905d7279100829a1c1f6d3ec2565d3bf2cda63304145541ba6eecd3b20"}, {0xd8, 0x1d, 0x2, "77e86d31dfe4b8cc617e477b1e761bf958b9d309d60cb261a0c5214632f8f24fb3f895c7950b22ac1a971ddaeade9a9b3c87d3c4d482ef78c75374e8d90ca4af48531d2c456c4051c1416d4758b584ceb58cc2e9154bf0fee7f97d499d8d103c73ec6a91c161b93271ad188372119f7c76cf237574e64577dc3cb86c5cea7162c921eb1b195dfe43b8b1c830070ffa569ed7b3bcf591ce524a47e2ee9edadbb9025fdf950b7a3c5dd9cff7920b98ed6c5901021789b4665cf8d1d6e7e54929aa74f964db9bf0c326"}, {0x88, 0x115, 0x800, "c02da9e9ecea930f6eeb307e3bf36b8dcfa556016d60d70cb5b1359231d88e68ad3ee3e703b85afcff0bf1a7156928a1c78852452a3e8d823eb3b2a0ee56b036d0a314f198bff2629d0911dc7a943fe695d17141eb6341af06529a34454fbdf6f6cea0d3436bb26528eaf89fed6cbeee9e5f5286"}, {0x40, 0x117, 0x400, "76b11b348c064ca917428746b907998c4c306aaea95af03f8b55a5e348ddb6f5bbe066cb16ebafee3fabea53"}, {0x88, 0x103, 0x5, "fa3986929d18c95ea76c80b3b11f4538fa10ccd979b50a88bd47755b6a3cabf92309fd291e894cc1512efd727e43f01545574f9d5a991a95fe9f03548ecd69ec9135b5d2df210c7dac0ed19bed41766b446bb196f8a4daf26b417570a95c66000a6dd92881768c6f860b64968a49dc4ed8cd"}], 0x320}}, {{&(0x7f0000001500)=@l2={0x1f, 0x7f7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7fff}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001580)="7b7f84384831e054115213c8c1bb647bc1e150acf2259d580fe1796b8d243882f278ff08057c985a270fe5285f11a032630b250765f327e49d8b3377a4bf6348b67d218793650a", 0x47}], 0x1, &(0x7f0000007900)=[{0x110, 0x1, 0x3, "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"}, {0x88, 0x119, 0xbe9, "300fb5753f72a7410a407d6eb57aa676d1b1eaa899d49b19a1b1d0ec1599ee85c579349499fce44be668c7de646b7489efca68199713019df4f49179ad5c97954e976036db59be03fd1404ab2768cf163cf2ae6f2cac0ef4f682bcdb9ff7d76254425452804ffe3674563cdd045bdf80bd40fe"}, {0x100, 0x112, 0x4, "4f6824f362f81f39d525bc3c816deec852ecd3673e2f442899020404e4e4795e2c3181c05c06befc5cf2957416f42cb70be9125b70476b3372060d51397197437e19e5e401cf20111a3262b85a613f08c9ab53d122cb8cca24e48acdf8ed9db2106f59b8b43f808fc850591f920e5ff9b480a024af0b7a64a33b903682fa79fcb76f7996808fb3a9181d47003ae8d8f70ab0e05581bca89adccbb62384ab0b93edfc99eed1b9f025312ec32987da2ffeb6cb5290ea809987c0e182d619df6b9dc7b42a061151fb7fa124301b70a765fa187ccad02e97ed474cf1be950889cf4c4a9f4cbb95ce8c1377aeec81"}, {0x30, 0x107, 0x1, "62986ce3e07329b72038d8a00bc3a4ace592d63dd8809051d85e3f15ba"}, {0xc8, 0x105, 0xfffffff8, "973288e8fa39f9b4e6973b29b9aaf4d4ed121595209a91c544ca6fe33b62e01f1685a62b114703b23f03f9ded6ecf82bb0338ef8c6d37a7d5dcf72ed7624acffaa2db2125f3555f937915caa857e3211c27e96753244e0b2fc6ed0ae99e560b8e4923930cfdb12366fb0d607328b62810de14ca3cc6fc32668709b271b423f3744aa215a5d2072c5d4288e1f79c7725eeea46dd7b41e99a9505e4f086cd23c265c8b0e62ee5db179b0a0427018668b8be4939bdeb08171"}], 0x390}}, {{&(0x7f0000001640)=@isdn={0x22, 0x2, 0x80, 0x7f, 0x1}, 0x80, &(0x7f0000007f00)=[{&(0x7f00000016c0)="fea63d6760af91509e5164fb8990bf892add0fb75e7db7c9483a071b8cac6190d52bbd43f8947432cd1109ff35f5d563522d58801e500f65a01b39deff019f25ece868e093a62f203b66cf74e5e977e963eee44593c8a657919ebd24716527e852460b9ca41c74fbc511d618009cb3ec", 0x70}, {&(0x7f0000004000)="b732f52e2af7929bc7fd1a85799e659a21d19361ae6a63ac6feeb017368f4a9faf59606623afd98c70f07c4c8b3f237d69e2b6e3596cfdf9c58bfb3187ce3ee33883a2fddf75a47e400e55742c80ecff90f90c19ed71b50f11fe14c68f685e193918aea927ffe19b1f110caf879e692cde53dbd2a69a6005889c02157430102531a2e2fb5085380ba4584bfae12e962e3db32aa5b080aa1e0a2c", 0x9a}, {&(0x7f00000040c0)="42b89662998f72bad7788162b155e25074aa7696783fff8de227a5a5e240d767a127263de51cc48fa274770417b1c0a592e91aa0cc100ea46e29ea85299f4e5ababb747c584192b097215771aeaa9a216581507db276a8198148bff6fc1270ea8cfe2b9d72e2f5f48b16ea355816567f0ecd902bc39b8145b9ae29cd50e614bf72534b325dfa4d0ca23e51be8484d1b1c8558e691e3c9cc903cfef12161b8d938ff2638163c08cd05197ae2d5484c2", 0xaf}, {&(0x7f0000004180)="9bb3ab7119228c754facf320b5aa82792391eda392981f82778ea774470a701b5b880ac7488e88b8c62e5941dc8b99d4d8dcb45b0e5e091c6ee7d440ce8438577995cdc9fd3e8fbd7cb6c6", 0x4b}, {&(0x7f0000004200)="54f36b57ccd3a46c22df99c37703fbab49eb09f4b2a2fb45f7fd", 0x1a}, {&(0x7f0000007cc0)="13434002ee5b17d9e85866196d0c3841c1f058d92ab1ebf1356714c24fc2121ea35e9a2c36c0798f5a0c0db7e5683478ea104c00f723d42bea913102fb1ce1026e34c4fe7439aefa693ff05388634ba35ea246154a422332e715c20695151f2b2d7aa8ac674dae7cd3012160f28c29ceef", 0x71}, {&(0x7f0000007d40)="db34dfd88c1a887372b336a8fc6d34a0ac9b2231c4942d67c0f361783d04dfda9a8f089dd7bb52e128b0aec90770eacf9c03cea8da9c10b4273c4cc6789a54101c9af4254e51fcfbccf2653ebeabd6550fcab4e971eaf8681428b6aaa5cc1cae173dbb9397b47a5c03e2f9e205c79cc31c90fc38caa873e30dfd8a0c3be0290754846464e6c0162132f098d73e926309632522a35bcafb26931de619209ae2a92eccaef2ac8ff3", 0xa7}, {&(0x7f0000007e00)="a93b57362169fe5c53cded85ed4ccef41b5e19848d305b7374a4340a8db8d6f0957a059a5205965abc649ea568a9835ecd36e4bfa86f750bb1eefaf72218f92e468c7ac6446d3c872740f677b7377e9a2dd1ebd30c92c7081abe8a78704b4b78b5c81d49c5bd1b578c206b3db2aacae462e0421dd2b6f12a4d98dade157627b7f073e92790de053802eb93cc4769cc5d09c41f877fb760c7c769292055bedef58c32db380da75c4ef7ef725af43b4c8b76e91070732ce479e9f1853aedc858273fd138395c0f1198a17b206706120a30367ea40ac9e85fcf3b6e51ec35e832b9f0abc1e662a22ae67107f67ee09998c1980d1e4903", 0xf5}], 0x8, &(0x7f0000007f80)=[{0x1010, 0x111, 0x8, "f5ac33b7810b800a010a980f3506cae909dc6e79e294291ccb2c14aac984bbcf0733d9819bb2404749a02d6d5199679875b0e33e0e8b0d5f60e39c667f90cfe07a24c196ca8ce4994660118f25326f087dd39f6e1e27795da80a3907fa90b9d03085ff4252409774ca983055b47ff1a0d9694abde0f08376b19c40adc6abe6d114071b47efa025b7d8cb329eda725a4e162f3ddb20286ae90055d3dd7eec89363ec834e6050e439a6b4b81474b08c47b3ddcdfe8db3b268409fbcd66ee83337357441020c706abae85b2a2aebbb99f7cd61813f69e1936783773492ec3b9f93eee8fda65ec2d78160a61a15c257f80694516f67e3d1f0bc059f37aac8bfe0056b8f59e134a19d4a0d3e35167dca36c1bf5125a4bf53d9f18bf7c679cf12fe8cfb1a69f8a09dfcdf4c53f0f22a85491f6af303b2d05ff1626075fc2605ee970a62bd9b94663312e68295b0a2f8366aaf07b5ccdf063797f902939272f85ce6ec63e9e3d9dcb72f567e2955708fc16eed255bdb55bb6c6e5cc7f5850064549faf63a2b6fe0179d55221b1a46c30b94e1ca90bd779152a08e20aefae32ccc21fed4145a9d796348696160b88d5178acbd740a4b5afbef1fccce12db97ccc001d1e1c40399fb40685b92c2bca5984a506476902afb024a159f858c9b29c965ac2c89a466f7182fa105c9457fdc168ccc7e19c56d473a2db397a2365f207f52b1b25ba153bd52cd350e7e1a4d2ec73802e810c72b21828c330a59dbc0aba98e1b75a55551216ce396b9c080c58f71cc28ad8dda7a8ffe5a454e1ee1fb2842dc98ff53dc12d3651376070da5e8f95b22f6f78eef2e591e31931a1a517b0ef7f1fa8ea09caf144ffbe483809bc2495c3550b878a3ac172031f58fc193f73f208db7e5f6062e3e510df60e2f6dadc5a2a0ade270a71d6a7e6c24fcb505b881c554db755cef5154411d373ad481bf8a095f3c297ba8b3c9bca1dca6116c9abf88e1317cedfa0a8eac3c8794966743314b4cb2a1aa4b0ec07aecc3df0d2e02696c443021797eac71eba26fcc7750bf39043bbffb42b8e24217419a8b051f185d5b021503bde1fa544c48714d03edb7a76c87162cf038813b998ef4b91879e8b31c4a6b753f55d74be98837e1900c7d6f67622e984bbd6848c0861a0ff033caf4522bc5669b1db5e07b2cd25b588082574dc25c024569d39110851f36600020958459224daf838d42a3370634edfea3e3eb9a5d1683b2f7fa098d9bfd43fd025e3b8b1e20691e42372000fee95501a31ae8751eae9526415c4351241d168f2f0d238b10530d4a6163cdaf9b8d261110e7052bffcbf0b8bd41b7bb9cc8640ea8ef10d7cd03671ae551942e974388a7c3a3bc9ed004d2abb0654473225313efb749779547a9dcd6baefd81741e5fb2774c6750025fbb236f53dc48c308f7b7234eb05253a940f9d565ca560abfbecbdad69d507c08a0d093bf6436c154060de8483686e59f7f1f3d27c7b01e9867cd41f81fe6daee2056a50d995fe28bc6e2b3646d4148fb83db2b48177628be354700fe0811faade2c0964ef0d2ec47491b8a102aaff74b7a49826265e45939d51ae2ee7cd87413314dba510ced642600faeaa4d720610036bd4d463de9f465b7e088c742a6338acfae4ae4191664e1dca502ae5f68074718ba7f9a770ba5931c3fe888a2f19839f433ca37f9561c9b5dfa22007d9ffba9f67a0cd0d3d9c3e1d6326570525608f45a61431058389be59d780e7e4307483c60a00ea01723b8151c0c0b45aea2477b750f940385cfd13f7ebb3a93a1b507582eb038b375afcc705103bfc3d4b414eb63cc36612fd8206bd67867d354a0783ae841897e832ca00aca7a40fd0d01a0f034300b34c693fe1f7b47e3e8bc52f8f2860b2dc3c7c05ca9f0d2e643a82930fd1701ff4ccc312ed90036ccd6ae3972367c0265eb1387f7cc76249600d8ac02b64ef25d4c0b453ffac163a624b3138fc8188ec268e9905b8d26d8d1d11afa19e5bc0d41d94eaf8af378e48fddea0f0c9d4c9afc42a6d64c1a79e4da877a85283badb5e380a2c90f0ba31e3930de452663223d17e47b69c96b7b382850ba236153d525f9ad69ad999811a668592914480f964e94b52058273135a7a9acf594f2219ed4b5d2e53965998e0f0ced7e6fa788502b15d0ee7f78a3a08fb9bae651a1c663aa84543f2f7c42b13b92b0d151845b5d02215fb4195c58f652b2939d41b0b5559347ddb5c551e139b5fee866517c3ecd9fdf08c64aa25dc1f2944b48ceb2b415e56efa1c8ac94461142196a5fbc281f6fc77b9a2d6f0dd94db0d6a371a3213170fb1ca11d4dbfdda5e7ccc87ce3b81d58c2a250c19ed97b8136bb60b9e01a02ecd9c5bc8cc1c227fea3d3f2263f59db0d755694f676db03a79e297ffe4acff5de2e9fd25931d9535f3f4f52761c0a27530184974fc02d426860cb609426857b0dc8e14d1ef9fca5665dcff711b239811226c37876e034178aa6dbb0f5caf17bdd122addb8549f3d6384609050cec0adc0e7f3cee8acc81d96687bfdf1699abcc1a631f370b1ac69dc280374ad20ba840608b583df311528526abe506da55eebca02289884ffee9d104c0f5aad57e116564336ef17dea6dfd44fb9d8abddcf14e51a364c8978a11090c8635f05026d1645ea8d4a9d8fb2a4810e8065acae7364e2d5da791c342c7560cae620abf551a64907e44f6c1df96781b5b79de28ce6fb1d0c0e0b90a2958ef9bfc1819048087bb5c81542c25760d05563de56863511cafb024219a7e406df7075080d1621b18f1b3cdfd851d5f83b9cc04dd912a281fa4c28c239ea4e6c447ccaabfc9891a80d6734577a53d7cc6a33836f7f98b00dfa5530bbad702517c36088857ba1be9eba2ba13c98427afb3e8a0bfc08e3d4899b0cf8f11f5ed966f9002976604f589bbd8d40ede88f066860ec6133a5abc35e0ce3a1de4f5c79b32f8fd8fd4f95ee9ec2d416552e1bf8134918aa1c69a9d070ce61b4718a86717687cfa2269fd22462d2c543291e4313b2aa0c2b76c9792168a8be8a2d7f4262bac55eac1c967df1644387f8d01b0fe2c491a08904ba3cb64babdbc6e340a48b3194c76f3c1db5a678c0f90d9872b5b57fb4b83e734e6cbb8a67d1a469ddee569d72136fcd3d13ae548091779d6f88b4be549046197ab03852228b38defd2611b39e226988c9bccabfd9bcef7984d7c4caed7a372b65ddb39494e72df1e43b16feca0d077695bff18c1b70abc5b2234c28bf618a0783c571b47ce9cb7495c91bcd5b7dda5d7325edfbdd9d919041e08c1bce59cb890a86d5d3a9866e8d0ce18cabcebdbc584457e5457033a619542f91913dd66a88f21986697cd4fef40d82ba3576cd793b6c386a7e31b654835a364f8e0cef4b9f18096de02378f63699cff07d8ed20fa024e933a56fb0730e0db1578b0d301cfd893bdbdc2e45af91551bfd7fd4deb0e4b2121dcca2ef12b6fb1e4a6a05e48147e7fa84ba5edb2f5921ea57c60f7c1b9d7850d9d1cf525eef066da0fb1e8194d479eb861337556bf1b9a4b52a1e1f7667c47002df9b2a70874b1b20793553da066b55a3c6dde6cbfa09276c53c3ad3cb8bcaee62e495cfc6fb33b9ce6542dec5dfccad0bb871eb2c56c962a2b993469971ea57701d0b9c9a3c66bc257691ccbb37016a6e7480560ca7a8f4cd0979905c8229c2fe23adddee8e0e3adf6df522d3cf1f565e09aa1ee54897a4754f1c65ce629b1b841941e119736887ef9c081ca821f40c1068b2aa774e2339d488e3666abef70a42b6d6466dfc69f375069ef05b44ce8474089108fc36b8764871ae52e6c9278da9eb1449addac4d2e46987ffa198d8283ec2e57619c3d6c94d139a70b211a0c5c5780a1044d9d359d01d23af3e4179ab982905a80de3268276659cb9d2a526b50ca9a2f2686009b6846caa82331a37bbcaeba610eb02bd64cb540a590f7bb12ce64bfea7f3eafbfa6200b02218a2577384effedc5da5e09d90ffac3fb2971ab1f514cffbb224e21547fbbe04ee44856f79a8c0897c6cad71e617ad2a495703ad580a4377ee4a13f5a3a4bcfc56aa6d630c3c968cfc224f7e27704e6c8c3fbe28181504666a178d6a306b57ccde0ac9b66352a5f92a7605255da779adf3da70c3c9ea41cbae8546e4e6ba25abf7132c5434db1dcf273c0534b060e26484a0c322db8733029e3f3fc18a25d856e218619e25673b038a8606683a41411bb6752f801b4a283dabbd28cfaa1c18447232a87ec80cf77d89d1c8db32bd4e1db17ce4b40283204688d8f89f3359776c827662e487e104ac07ba2fe1b3d257b8cd543c1485f9dcc1709cf76405299c1ed77f240cc2c3fee44a0290785b59d279f9adaff4907a05eddcc47ff05f8908e987515f7be56a6b8f075c7034b739e324812554b3593c5fc90e2e1ea5154b554d910eb1401b3676f31880b0e921de8878881188c057920c6d782fec1dd36a5f043c58ecc9e099f030cd237a3013c3a1f13ec85249c36eef403581223a9bff6424e4f534ef485a404e63578a13fe605a823e20d61a87e2b90c5d3566d492a583b6339407112c8596285b35e3a500968b96b98d23e5a767484476f31de604326de93daa713fe8cdf4af8bcee6fd489d727303793ceb25ae436569e3d54de1d1ada962700158cc939c1c7d314f3100e1ac5e25a9f40ccf9c3aa276cc9d044b4bc1f951958c7ad77b6fe69557564487afaa4e307844e974dcd433ce2d6c60957f0900cb7349381d961203c0f356f655fc32eb8ebe165c15986cd3ff0102f4a161bc263eb8e11f9f0f4d3adbcb82e9f91f9454c9422b978c09de6aee147b12f9e200912adf851db0567e6a0358cd8d0d8faa11ab470ad1deb085b265af38c22bd1c88045c427dbe293f86bacd30318423929bd8be8a29cf98bd22e88874d2dc8ab5ca12c9b93d2472e6fa53e9ca38e54e1021ff5e1cc1f3630fbf03fd8a0140068636991733387485d6072ba8c187b9d7de061c3be7e4b2a2a899334c2b3ddb77e3979962fcd71c6436d7a916f2885aec436325a2592ecdfffa62a5bacf2d956d9388e6687482973faafc5387d34c7559c57886e712597c50fa91b93be16f050aff42c80d8f70cf67c4a5e0597089f1dd39cca8da0375bcb3ddcaaecc9829a4fdd58c551e1929e4d1a34649e1ee2c6d6f91a797a7add67097bc0cdc7c32f9813953e6bd3ed5efe5b7afe287d7e9cc67ccc5bfa3edac42587b6344b2e73491d06066931730ac2f04c4a3f8d0ed5d3effc0ef659b59a878108325cf689cb881853a786babc3d28bdc3608eeabf49607f0c4123e4b2b56beb74538be7c51aaa86e8b3f54e68d2bbacb93671b913ba08b3e7b269a221f3ccf6f6279da5f3ecb6b46af192c55708adb6956a78fcfacee6a23e11f077aa6c3a45648f5fbaaff843cb3b328a69c65146cf626617f1603f52037fd27ff20b9a6cef80bc4f16b846633909c3859522efa10e55b9bf34ea8abb6f8dd322f795cdc42cbb39d1a441dad4ea60cb7cff3a9ef8f3ff575a59dc3c0a938bfc2b7e7f55fe623a77ccbb312b233e02a8f26c1ef6e5b4e2795256151e17a737bdd36ed418c6d3cb2faebc45e9df224585dd277d8812e1bba9ba054e8569af0948e1f7ef8966e898a91e2e9e11ca8551b8253502a6aa1680557d38b21ca58137e7fc400ce7c4a4b7a1db6d0f3a6c5a610ce25ec447d31c31e2bd8f3092a7b80692d5a08573a48a5d3ee8d7585c8c2485a042af6659cfbf8aee934a89070508fd84af1ebdf9a5974267990"}, {0xf8, 0x101, 0x7ff, "163d4248e574386a8ac3d42705b92608cf06e6657da0043627bd34c11754f21b54cf13f09a2d0c1f0a6ea254953913acb38ef5ce3f79e6872ddc74cb917634f8a7018a473137a6083aea6fdc724dd7bd8f39581a5f6df05517cb48a91f5b77f625cda3d053875f278da6a2150dd349ebab49b84f6142c1e68472bda6447db25bd40058db4434e78fd05d2406ac7b4d3de1f984496ded12fb97c621e43d98217b402dd1dac3d80e8917e6c21afafe00db3825113350bd1a4b9167653c03d5bd6102fa5da48db9bf0d926cd071129986d5ad2663dec0289bfbdbe6fc448bb5873f0d49ccbf7ad3c4c7"}, {0x60, 0xb4, 0x4, "fbbf9a8f1ca7f6ca17bbb43073f19b362178a01d2c42b24d5756e15323617eceaa722e659952ce249af7c51f157c035a1ec47a2ee40a684ce3ef71551b8a419cfc3547b67359bb62910c4187b9cee4"}, {0x40, 0x3a, 0x5c12, "7002e9bf0f55b9baefc4c5fff54408e42f47473c07f80df8bac4b6a1370220c07d0f721b9df9f1838e9b"}, {0xb0, 0x107, 0x9, "220c2d964aba597d08d99d7e4422bdf885ed760ceeb3a70c840a69594f02ce4b738531388ec76f9e537d9042fa14fde521022bace466f03e484a93c7a28f48c7b7c717c28b8f6a067a3c212310c99e2bb6a0977b19e3068b10caee4047b2d5f108739bb8267509cd44c53108b6f1ad33e6172b74f1815d2d043cdb59b4ba5928efc9c40a9c1023242012ef7919c589c497fd68e0759db7784dbc7d4e1b10"}, {0x70, 0x113, 0x701, "7889a37ceb3608faf8d9e4147fb522553e32c784e5e1a97f20fd1d8f8a96c5688f89d5ca563610238bb5e48700e3bd54e27e4015d9593d61d8c55e661a942f57b597be3c157c81de942697398133ad3619687e9ab94cd4a0f9bd790b649f65"}, {0x18, 0x118, 0xf91, "029d"}, {0x60, 0x107, 0x6, "9e9a9456bc1a5753540598bb1dadb64617bd008415e2d02fec17fb6dd92a56eaba7c418af6eac397d1a99b139234a5d9125a51b14e43125d9c633d9b79ef8fae2193ffa520850ecbca796dc4"}], 0x1340}}], 0x7, 0x8044) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001740)={"3f3979dac6dd6fddd0b714e4dbd97878", 0x0, 0x0, {0x1, 0x7ff}, {0x20, 0x6}, 0xff, [0x2, 0xff, 0x7, 0x0, 0x9, 0x1, 0x0, 0x400, 0x7, 0x80, 0x0, 0x8013, 0x8001, 0x9, 0x0, 0x100000000]}) 17:58:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17:58:13 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) keyctl$instantiate(0xc, r5, &(0x7f00000005c0)=@encrypted_load={'load ', 'default', 0x20, 'user:', '(^*\'$,!+!-\xcf\x00', 0x20, 0xe5, 0x20, [0x66, 0x0, 0x35, 0x37, 0x36, 0x39, 0x65]}, 0x3c, r4) keyctl$set_timeout(0xf, 0x0, 0x7) 17:58:13 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = getpgrp(0x0) setpriority(0x1, r1, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_complete(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80602, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r4, r5}}, './file1\x00'}) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) 17:58:13 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) 17:58:13 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) [ 352.871646] loop5: detected capacity change from 0 to 256 [ 353.319047] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 353.392885] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 354.041604] Bluetooth: hci0: command 0x0401 tx timeout [ 356.094740] Bluetooth: hci0: command 0x0401 tx timeout 17:58:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17:58:28 executing program 6: syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 17:58:28 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = eventfd2(0x1, 0x0) close(r2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCGPTPEER(r3, 0x5423, 0xbffffffffffff172) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f00000000c0)=0x5) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000001) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80000001) 17:58:28 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = getpgrp(0x0) setpriority(0x1, r1, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_io_uring_complete(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80602, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r4, r5}}, './file1\x00'}) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) 17:58:28 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) 17:58:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb", 0x0, 0x89}) 17:58:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x9, "3397cb", 0x8, 0x89}) 17:58:28 executing program 7: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) keyctl$instantiate(0xc, r5, &(0x7f00000005c0)=@encrypted_load={'load ', 'default', 0x20, 'user:', '(^*\'$,!+!-\xcf\x00', 0x20, 0xe5, 0x20, [0x66, 0x0, 0x35, 0x37, 0x36, 0x39, 0x65]}, 0x3c, r4) keyctl$set_timeout(0xf, 0x0, 0x7) [ 367.698961] audit: type=1326 audit(1649959108.780:53): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4647 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 367.744071] audit: type=1326 audit(1649959108.826:54): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4647 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 17:58:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 17:58:28 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb", 0x0, 0x89}) 17:58:28 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) keyctl$set_timeout(0xf, 0x0, 0x7) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) 17:58:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) keyctl$set_timeout(0xf, 0x0, 0x7) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) [ 368.132594] loop5: detected capacity change from 0 to 256 [ 369.688078] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 369.721551] Bluetooth: hci0: command 0x0401 tx timeout [ 371.768528] Bluetooth: hci0: command 0x0401 tx timeout [ 373.816526] Bluetooth: hci0: command 0x0401 tx timeout [ 375.865542] Bluetooth: hci0: command 0x0401 tx timeout 17:58:47 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) keyctl$set_timeout(0xf, 0x0, 0x7) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) 17:58:47 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 17:58:47 executing program 5: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) keyctl$set_timeout(0xf, 0x0, 0x7) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) 17:58:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17:58:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17:58:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x9, "3397cb", 0x8, 0x89}) 17:58:47 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb", 0x0, 0x89}) 17:58:47 executing program 3: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) keyctl$set_timeout(0xf, 0x0, 0x7) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) [ 386.937232] audit: type=1326 audit(1649959128.018:55): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4674 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 17:58:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) [ 386.976796] audit: type=1326 audit(1649959128.058:56): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4674 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 17:58:48 executing program 3: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) keyctl$set_timeout(0xf, 0x0, 0x7) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) 17:58:48 executing program 5: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) keyctl$set_timeout(0xf, 0x0, 0x7) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) 17:58:48 executing program 3: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) keyctl$set_timeout(0xf, 0x0, 0x7) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) 17:58:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) 17:58:48 executing program 5: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) 17:58:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) 17:58:48 executing program 3: syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) [ 387.364180] audit: type=1326 audit(1649959128.446:57): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4704 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b813dcb19 code=0x0 17:58:48 executing program 5: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) [ 387.414444] audit: type=1326 audit(1649959128.496:58): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4704 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f9b8138f72b code=0x0 [ 388.985247] Bluetooth: hci0: command 0x0401 tx timeout 17:58:51 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 17:58:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) 17:58:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17:58:51 executing program 5: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) 17:58:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb", 0x0, 0x89}) 17:58:51 executing program 2: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0x9, "3397cb", 0x8, 0x89}) 17:58:51 executing program 7: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) keyctl$instantiate(0xc, r5, &(0x7f00000005c0)=@encrypted_load={'load ', 'default', 0x20, 'user:', '(^*\'$,!+!-\xcf\x00', 0x20, 0xe5, 0x20, [0x66, 0x0, 0x35, 0x37, 0x36, 0x39, 0x65]}, 0x3c, r4) keyctl$set_timeout(0xf, 0x0, 0x7) 17:58:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 1) socket$nl_netfilter(0x10, 0x3, 0xc) 17:58:51 executing program 2: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0x9, "3397cb", 0x8, 0x89}) 17:58:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 1) 17:58:51 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x541b, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/configfs', 0x56402, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000180)={'ip_vti0\x00'}) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 17:58:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) [ 390.267958] FAULT_INJECTION: forcing a failure. [ 390.267958] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 390.270385] CPU: 1 PID: 4728 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 390.271963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 390.278153] Call Trace: [ 390.278667] [ 390.279109] dump_stack_lvl+0x8b/0xb3 [ 390.279884] should_fail.cold+0x5/0xa [ 390.280647] _copy_from_user+0x2a/0x170 [ 390.281518] __copy_msghdr_from_user+0x91/0x4b0 [ 390.282448] ? __ia32_sys_shutdown+0x70/0x70 [ 390.283342] ? __lock_acquire+0xbac/0x6120 [ 390.284200] sendmsg_copy_msghdr+0xa1/0x160 [ 390.285121] ? __ia32_sys_recvmmsg+0x260/0x260 [ 390.286029] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 390.287032] ? lock_chain_count+0x20/0x20 [ 390.287842] ? lockdep_hardirqs_on+0x79/0x100 [ 390.288733] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 390.289847] ___sys_sendmsg+0xc6/0x170 [ 390.290611] ? sendmsg_copy_msghdr+0x160/0x160 [ 390.291503] ? lock_release+0x3b2/0x750 [ 390.292273] ? __fget_files+0x265/0x470 [ 390.293103] ? lock_downgrade+0x6d0/0x6d0 [ 390.293925] ? __fget_files+0x287/0x470 [ 390.294732] ? __fget_light+0xea/0x270 [ 390.295482] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 390.296548] __sys_sendmmsg+0x195/0x470 [ 390.297395] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 390.298246] ? finish_task_switch.isra.0+0x226/0x870 [ 390.299254] ? lockdep_hardirqs_on+0x79/0x100 [ 390.300137] ? finish_task_switch.isra.0+0x226/0x870 [ 390.301161] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 390.302105] ? xfd_validate_state+0x59/0x180 [ 390.302971] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 390.303994] __x64_sys_sendmmsg+0x99/0x100 [ 390.304823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 390.305856] do_syscall_64+0x3b/0x90 [ 390.306577] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 390.307556] RIP: 0033:0x7f89586d1b19 [ 390.308270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 390.315737] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 390.317189] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 390.318506] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 390.319834] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 390.321206] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 390.322512] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 390.323877] [ 390.389972] audit: type=1326 audit(1649959131.471:59): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4725 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 390.396387] audit: type=1326 audit(1649959131.478:60): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4725 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 [ 390.473251] FAULT_INJECTION: forcing a failure. [ 390.473251] name failslab, interval 1, probability 0, space 0, times 1 [ 390.476521] CPU: 0 PID: 4737 Comm: syz-executor.1 Not tainted 5.18.0-rc2-next-20220414 #1 [ 390.478773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 390.481643] Call Trace: [ 390.482303] [ 390.482886] dump_stack_lvl+0x8b/0xb3 [ 390.483874] should_fail.cold+0x5/0xa [ 390.484825] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 390.486294] ? __alloc_skb+0x211/0x340 [ 390.487311] should_failslab+0x5/0x10 [ 390.488282] kmem_cache_alloc_node+0x55/0x490 [ 390.489478] __alloc_skb+0x211/0x340 [ 390.490451] create_monitor_ctrl_open+0x16c/0x790 [ 390.491685] ? hci_sock_release+0x400/0x400 [ 390.492786] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 390.494231] ? security_capable+0x95/0xc0 [ 390.495318] hci_sock_ioctl+0x394/0x910 [ 390.496350] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 390.497508] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 390.498888] sock_do_ioctl+0xd2/0x230 [ 390.499882] ? put_user_ifreq+0xb0/0xb0 [ 390.500941] ? vfs_fileattr_set+0xb80/0xb80 [ 390.502088] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 390.503566] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 390.505070] ? selinux_inode_getsecctx+0x90/0x90 [ 390.506279] sock_ioctl+0x41c/0x670 [ 390.507213] ? lock_is_held_type+0xd7/0x130 [ 390.508319] ? br_ioctl_call+0xb0/0xb0 [ 390.509360] ? selinux_file_ioctl+0xb1/0x260 [ 390.510461] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 390.511838] ? br_ioctl_call+0xb0/0xb0 [ 390.512830] __x64_sys_ioctl+0x196/0x210 [ 390.513940] do_syscall_64+0x3b/0x90 [ 390.514908] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 390.516223] RIP: 0033:0x7f8c2e52ab19 [ 390.517221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 390.521937] RSP: 002b:00007f8c2baa0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.523866] RAX: ffffffffffffffda RBX: 00007f8c2e63df60 RCX: 00007f8c2e52ab19 [ 390.525685] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 390.527475] RBP: 00007f8c2baa01d0 R08: 0000000000000000 R09: 0000000000000000 17:58:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) [ 390.529295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.531108] R13: 00007ffd8f44acbf R14: 00007f8c2baa0300 R15: 0000000000022000 [ 390.532973] [ 391.037157] Bluetooth: hci0: command 0x0401 tx timeout [ 393.081131] Bluetooth: hci0: command 0x0401 tx timeout [ 395.128546] Bluetooth: hci0: command 0x0401 tx timeout 17:59:10 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 17:59:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17:59:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 2) 17:59:10 executing program 2: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0x9, "3397cb", 0x8, 0x89}) 17:59:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 2) socket$nl_netfilter(0x10, 0x3, 0xc) 17:59:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) 17:59:10 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x541b, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/configfs', 0x56402, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000180)={'ip_vti0\x00'}) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 17:59:10 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) [ 409.011360] FAULT_INJECTION: forcing a failure. [ 409.011360] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 409.013212] CPU: 1 PID: 4757 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 409.014300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 409.015756] Call Trace: [ 409.015862] FAULT_INJECTION: forcing a failure. [ 409.015862] name failslab, interval 1, probability 0, space 0, times 0 [ 409.016079] [ 409.017904] dump_stack_lvl+0x8b/0xb3 [ 409.018402] should_fail.cold+0x5/0xa [ 409.018866] prepare_alloc_pages+0x17b/0x500 [ 409.019427] ? lockdep_hardirqs_on+0x79/0x100 [ 409.019971] ? ip6_confirm_neigh+0x2cd/0x4b0 [ 409.020536] __alloc_pages+0x131/0x4e0 [ 409.020996] ? udpv6_sendmsg+0x3eb/0x28d0 [ 409.021542] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 409.022267] ? mark_lock.part.0+0xef/0x2f60 [ 409.022806] ? __lock_acquire+0x164e/0x6120 [ 409.023369] alloc_pages_vma+0xde/0x500 [ 409.023889] wp_page_copy+0xefb/0x26f0 [ 409.024401] ? lock_release+0x3b2/0x750 [ 409.024883] ? do_page_mkwrite+0x650/0x650 [ 409.025649] ? lock_downgrade+0x6d0/0x6d0 [ 409.026222] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 409.027551] ? vm_normal_page+0x162/0x2e0 [ 409.028638] ? lock_release+0x750/0x750 [ 409.029733] do_wp_page+0x198/0x2b50 [ 409.030753] __handle_mm_fault+0x11fc/0x3600 [ 409.031902] ? lock_is_held_type+0xd7/0x130 [ 409.032872] ? __pmd_alloc+0x680/0x680 [ 409.033908] handle_mm_fault+0x2e6/0xa20 [ 409.034934] do_user_addr_fault+0x54a/0x12a0 [ 409.036075] exc_page_fault+0xa2/0x1a0 [ 409.037091] asm_exc_page_fault+0x1e/0x30 [ 409.038214] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 409.039554] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 409.044446] RSP: 0018:ffff888018be7ce8 EFLAGS: 00050297 [ 409.045728] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 00000000200028b8 [ 409.047341] RDX: 0000000000040000 RSI: ffffffff8330a142 RDI: 0000000000000000 [ 409.048891] RBP: 000000007ffffff7 R08: 0000000000000000 R09: 0000000000000000 [ 409.050761] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 409.052366] R13: 0000000020002880 R14: 0000000000000400 R15: 00000000000003ff [ 409.054070] ? __sys_sendmmsg+0x1c2/0x470 [ 409.055019] __sys_sendmmsg+0x1cf/0x470 [ 409.055930] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 409.056901] ? lock_is_held_type+0xd7/0x130 [ 409.058058] ? bit_wait_io_timeout+0x160/0x160 [ 409.059300] ? lock_is_held_type+0xd7/0x130 [ 409.060278] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 409.061601] ? vfs_write+0x422/0xac0 [ 409.062438] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 409.063653] ? fput+0x2a/0x50 [ 409.064395] __x64_sys_sendmmsg+0x99/0x100 [ 409.065393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 409.066520] do_syscall_64+0x3b/0x90 [ 409.067361] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 409.068521] RIP: 0033:0x7f89586d1b19 [ 409.069424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 409.073416] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 409.074326] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 409.075334] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 409.076219] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 409.077085] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 409.078926] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 409.080849] [ 409.081431] CPU: 0 PID: 4759 Comm: syz-executor.1 Not tainted 5.18.0-rc2-next-20220414 #1 [ 409.082680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 409.084503] Call Trace: [ 409.084862] [ 409.085229] dump_stack_lvl+0x8b/0xb3 [ 409.085831] should_fail.cold+0x5/0xa [ 409.086483] ? __alloc_skb+0x211/0x340 [ 409.087037] ? create_object.isra.0+0x3a/0xa20 [ 409.087939] should_failslab+0x5/0x10 [ 409.088581] kmem_cache_alloc+0x5b/0x480 [ 409.089356] create_object.isra.0+0x3a/0xa20 [ 409.089985] ? kasan_unpoison+0x23/0x50 [ 409.090754] kmem_cache_alloc_node+0x248/0x490 [ 409.091568] __alloc_skb+0x211/0x340 [ 409.092126] create_monitor_ctrl_open+0x16c/0x790 [ 409.092877] ? hci_sock_release+0x400/0x400 [ 409.093546] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 409.094381] ? security_capable+0x95/0xc0 [ 409.094974] hci_sock_ioctl+0x394/0x910 [ 409.095585] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 409.096220] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 409.101173] sock_do_ioctl+0xd2/0x230 [ 409.101843] ? put_user_ifreq+0xb0/0xb0 [ 409.102475] ? vfs_fileattr_set+0xb80/0xb80 [ 409.103115] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 409.104050] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 409.105216] ? selinux_inode_getsecctx+0x90/0x90 [ 409.105954] sock_ioctl+0x41c/0x670 [ 409.106542] ? lock_is_held_type+0xd7/0x130 [ 409.107161] ? br_ioctl_call+0xb0/0xb0 [ 409.107778] ? selinux_file_ioctl+0xb1/0x260 [ 409.108499] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 409.109361] ? br_ioctl_call+0xb0/0xb0 [ 409.109914] __x64_sys_ioctl+0x196/0x210 [ 409.113817] do_syscall_64+0x3b/0x90 [ 409.114636] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 409.115494] RIP: 0033:0x7f8c2e52ab19 [ 409.116013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 409.119001] RSP: 002b:00007f8c2baa0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.120260] RAX: ffffffffffffffda RBX: 00007f8c2e63df60 RCX: 00007f8c2e52ab19 [ 409.121447] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 409.122436] RBP: 00007f8c2baa01d0 R08: 0000000000000000 R09: 0000000000000000 [ 409.123381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.124328] R13: 00007ffd8f44acbf R14: 00007f8c2baa0300 R15: 0000000000022000 [ 409.125342] [ 409.141313] audit: type=1326 audit(1649959150.223:61): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4760 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b813dcb19 code=0x0 [ 409.161965] audit: type=1326 audit(1649959150.244:62): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4748 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7ff2e601b8e1 code=0x0 17:59:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) 17:59:10 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0x9, "3397cb", 0x8, 0x89}) 17:59:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 3) socket$nl_netfilter(0x10, 0x3, 0xc) [ 409.180240] audit: type=1326 audit(1649959150.244:63): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4748 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 17:59:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 3) [ 409.207592] audit: type=1326 audit(1649959150.273:64): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4760 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f9b8138f72b code=0x0 [ 409.238176] FAULT_INJECTION: forcing a failure. [ 409.238176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.239874] CPU: 0 PID: 4767 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 409.240962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 409.242433] Call Trace: [ 409.242773] [ 409.243067] dump_stack_lvl+0x8b/0xb3 [ 409.243575] should_fail.cold+0x5/0xa [ 409.244095] _copy_from_user+0x2a/0x170 [ 409.244651] __copy_msghdr_from_user+0x91/0x4b0 [ 409.245310] ? __ia32_sys_shutdown+0x70/0x70 [ 409.245903] ? do_wp_page+0x1a0/0x2b50 [ 409.246458] sendmsg_copy_msghdr+0xa1/0x160 [ 409.247055] ? __ia32_sys_recvmmsg+0x260/0x260 [ 409.247686] ? lock_is_held_type+0xd7/0x130 [ 409.248276] ? find_held_lock+0x2c/0x110 [ 409.248831] ? lock_release+0x3b2/0x750 [ 409.249400] ___sys_sendmsg+0xc6/0x170 [ 409.249920] ? sendmsg_copy_msghdr+0x160/0x160 [ 409.250550] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 409.251304] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 409.252042] ? do_user_addr_fault+0x59b/0x12a0 [ 409.252658] ? exc_page_fault+0xca/0x1a0 [ 409.253287] ? lockdep_hardirqs_on+0x79/0x100 [ 409.253941] ? exc_page_fault+0xca/0x1a0 [ 409.254548] ? asm_exc_page_fault+0x1e/0x30 [ 409.255203] ? lock_is_held_type+0xd7/0x130 [ 409.255871] __sys_sendmmsg+0x195/0x470 [ 409.256468] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 409.257111] ? lock_is_held_type+0xd7/0x130 [ 409.257744] ? bit_wait_io_timeout+0x160/0x160 [ 409.258357] ? lock_is_held_type+0xd7/0x130 [ 409.258957] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 409.259714] ? vfs_write+0x422/0xac0 [ 409.260226] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 409.260978] ? fput+0x2a/0x50 [ 409.261405] __x64_sys_sendmmsg+0x99/0x100 [ 409.261985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 409.262672] do_syscall_64+0x3b/0x90 [ 409.263190] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 409.263880] RIP: 0033:0x7f89586d1b19 [ 409.264390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 409.266801] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 409.267811] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 409.268766] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 409.269730] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 409.270663] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 409.271616] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 409.272584] [ 409.283293] FAULT_INJECTION: forcing a failure. [ 409.283293] name failslab, interval 1, probability 0, space 0, times 0 [ 409.284889] CPU: 0 PID: 4773 Comm: syz-executor.1 Not tainted 5.18.0-rc2-next-20220414 #1 [ 409.286002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 409.287523] Call Trace: [ 409.287874] [ 409.288178] dump_stack_lvl+0x8b/0xb3 [ 409.288723] should_fail.cold+0x5/0xa [ 409.289257] ? lock_is_held_type+0xd7/0x130 [ 409.289849] should_failslab+0x5/0x10 [ 409.290368] __kmalloc_node_track_caller+0x7e/0x440 [ 409.291039] ? create_monitor_ctrl_open+0x16c/0x790 [ 409.291718] __alloc_skb+0xe3/0x340 [ 409.292224] create_monitor_ctrl_open+0x16c/0x790 [ 409.292878] ? hci_sock_release+0x400/0x400 [ 409.293515] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 409.294392] ? security_capable+0x95/0xc0 [ 409.294952] hci_sock_ioctl+0x394/0x910 [ 409.295499] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 409.296082] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 409.296782] sock_do_ioctl+0xd2/0x230 [ 409.297298] ? put_user_ifreq+0xb0/0xb0 [ 409.297781] ? vfs_fileattr_set+0xb80/0xb80 [ 409.298352] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 409.299099] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 409.299839] ? selinux_inode_getsecctx+0x90/0x90 [ 409.300453] sock_ioctl+0x41c/0x670 [ 409.300934] ? lock_is_held_type+0xd7/0x130 [ 409.301561] ? br_ioctl_call+0xb0/0xb0 [ 409.302038] ? selinux_file_ioctl+0xb1/0x260 [ 409.302571] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 409.303252] ? br_ioctl_call+0xb0/0xb0 [ 409.303734] __x64_sys_ioctl+0x196/0x210 [ 409.304245] do_syscall_64+0x3b/0x90 [ 409.304708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 409.305372] RIP: 0033:0x7f8c2e52ab19 [ 409.305824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 409.308059] RSP: 002b:00007f8c2baa0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.309000] RAX: ffffffffffffffda RBX: 00007f8c2e63df60 RCX: 00007f8c2e52ab19 [ 409.309923] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 409.310806] RBP: 00007f8c2baa01d0 R08: 0000000000000000 R09: 0000000000000000 [ 409.311801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.312706] R13: 00007ffd8f44acbf R14: 00007f8c2baa0300 R15: 0000000000022000 [ 409.313673] 17:59:10 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0x9, "3397cb", 0x8, 0x89}) 17:59:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 4) 17:59:10 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x541b, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/configfs', 0x56402, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000180)={'ip_vti0\x00'}) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 17:59:10 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) [ 409.421426] FAULT_INJECTION: forcing a failure. [ 409.421426] name failslab, interval 1, probability 0, space 0, times 0 [ 409.422964] CPU: 0 PID: 4778 Comm: syz-executor.1 Not tainted 5.18.0-rc2-next-20220414 #1 [ 409.424042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 409.425493] Call Trace: [ 409.425825] [ 409.426107] dump_stack_lvl+0x8b/0xb3 [ 409.426629] should_fail.cold+0x5/0xa [ 409.427161] ? lock_release+0x3b2/0x750 [ 409.427693] ? create_object.isra.0+0x3a/0xa20 [ 409.428295] should_failslab+0x5/0x10 [ 409.428786] kmem_cache_alloc+0x5b/0x480 [ 409.429348] create_object.isra.0+0x3a/0xa20 [ 409.429923] ? kasan_unpoison+0x23/0x50 [ 409.430463] __kmalloc_node_track_caller+0x269/0x440 [ 409.431143] ? create_monitor_ctrl_open+0x16c/0x790 [ 409.431821] __alloc_skb+0xe3/0x340 [ 409.432296] create_monitor_ctrl_open+0x16c/0x790 [ 409.432918] ? hci_sock_release+0x400/0x400 [ 409.433530] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 409.434249] ? security_capable+0x95/0xc0 [ 409.434803] hci_sock_ioctl+0x394/0x910 [ 409.435326] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 409.435924] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 409.436604] sock_do_ioctl+0xd2/0x230 [ 409.437108] ? put_user_ifreq+0xb0/0xb0 [ 409.437644] ? vfs_fileattr_set+0xb80/0xb80 [ 409.438204] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 409.438947] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 409.439688] ? selinux_inode_getsecctx+0x90/0x90 [ 409.440321] sock_ioctl+0x41c/0x670 [ 409.440798] ? lock_is_held_type+0xd7/0x130 [ 409.441376] ? br_ioctl_call+0xb0/0xb0 [ 409.441891] ? selinux_file_ioctl+0xb1/0x260 [ 409.442476] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 409.443194] ? br_ioctl_call+0xb0/0xb0 [ 409.443710] __x64_sys_ioctl+0x196/0x210 [ 409.444259] do_syscall_64+0x3b/0x90 [ 409.444758] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 409.445473] RIP: 0033:0x7f8c2e52ab19 [ 409.445952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 409.448271] RSP: 002b:00007f8c2baa0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.449275] RAX: ffffffffffffffda RBX: 00007f8c2e63df60 RCX: 00007f8c2e52ab19 [ 409.450179] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 409.451102] RBP: 00007f8c2baa01d0 R08: 0000000000000000 R09: 0000000000000000 [ 409.452016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.452931] R13: 00007ffd8f44acbf R14: 00007f8c2baa0300 R15: 0000000000022000 [ 409.453906] [ 411.192500] Bluetooth: hci0: command 0x0401 tx timeout [ 413.240529] Bluetooth: hci0: command 0x0401 tx timeout [ 415.288519] Bluetooth: hci0: command 0x0401 tx timeout 17:59:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 4) socket$nl_netfilter(0x10, 0x3, 0xc) 17:59:28 executing program 3: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) 17:59:28 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 17:59:28 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0x9, "3397cb", 0x8, 0x89}) 17:59:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 5) 17:59:28 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r1 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r1) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) 17:59:28 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x541b, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/configfs', 0x56402, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000180)={'ip_vti0\x00'}) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 427.543145] FAULT_INJECTION: forcing a failure. [ 427.543145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.545638] CPU: 1 PID: 4793 Comm: syz-executor.1 Not tainted 5.18.0-rc2-next-20220414 #1 17:59:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) [ 427.547322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 427.549719] Call Trace: [ 427.550237] [ 427.550697] dump_stack_lvl+0x8b/0xb3 [ 427.551483] should_fail.cold+0x5/0xa [ 427.552267] _copy_from_user+0x2a/0x170 [ 427.553092] hci_inquiry+0x82/0xc30 [ 427.554027] ? hci_sock_ioctl+0x138/0x910 [ 427.555002] ? lock_downgrade+0x6d0/0x6d0 [ 427.556072] ? rwlock_bug.part.0+0x90/0x90 [ 427.557037] ? hci_inquiry_cache_update_resolve+0x370/0x370 [ 427.558224] ? __local_bh_enable_ip+0xa0/0x120 [ 427.559172] hci_sock_ioctl+0x262/0x910 [ 427.560029] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 427.560930] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 427.562047] sock_do_ioctl+0xd2/0x230 [ 427.562818] ? put_user_ifreq+0xb0/0xb0 [ 427.563643] ? vfs_fileattr_set+0xb80/0xb80 [ 427.564534] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 427.565731] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 427.566905] ? selinux_inode_getsecctx+0x90/0x90 [ 427.567882] sock_ioctl+0x41c/0x670 [ 427.568613] ? lock_is_held_type+0xd7/0x130 [ 427.569519] ? br_ioctl_call+0xb0/0xb0 [ 427.570318] ? selinux_file_ioctl+0xb1/0x260 [ 427.571251] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 427.572363] ? br_ioctl_call+0xb0/0xb0 [ 427.573151] __x64_sys_ioctl+0x196/0x210 [ 427.573990] do_syscall_64+0x3b/0x90 [ 427.574738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 427.575804] RIP: 0033:0x7f8c2e52ab19 [ 427.576542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 427.580297] RSP: 002b:00007f8c2baa0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.581862] RAX: ffffffffffffffda RBX: 00007f8c2e63df60 RCX: 00007f8c2e52ab19 [ 427.583291] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 427.584736] RBP: 00007f8c2baa01d0 R08: 0000000000000000 R09: 0000000000000000 [ 427.586147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.587552] R13: 00007ffd8f44acbf R14: 00007f8c2baa0300 R15: 0000000000022000 [ 427.588975] [ 427.589979] audit: type=1326 audit(1649959168.672:65): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4790 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 427.590313] FAULT_INJECTION: forcing a failure. [ 427.590313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.594639] CPU: 1 PID: 4791 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 427.596271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 427.598536] Call Trace: [ 427.599044] [ 427.599488] dump_stack_lvl+0x8b/0xb3 [ 427.600257] should_fail.cold+0x5/0xa [ 427.601027] _copy_from_user+0x2a/0x170 [ 427.601859] __copy_msghdr_from_user+0x91/0x4b0 [ 427.602807] ? __ia32_sys_shutdown+0x70/0x70 [ 427.603694] ? udp_v6_early_demux+0xdf0/0xdf0 [ 427.604596] ? inet6_sendmsg+0x4a/0x140 [ 427.605403] ? inet6_sendmsg+0xbd/0x140 [ 427.606192] ? inet6_compat_ioctl+0x310/0x310 [ 427.607096] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 427.608202] ? sock_sendmsg+0x55/0x190 [ 427.608999] sendmsg_copy_msghdr+0xa1/0x160 [ 427.609890] ? __ia32_sys_recvmmsg+0x260/0x260 [ 427.610815] ? __lock_acquire+0x164e/0x6120 [ 427.611693] ___sys_sendmsg+0xc6/0x170 [ 427.612482] ? sendmsg_copy_msghdr+0x160/0x160 [ 427.613402] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 427.614557] ? lock_is_held_type+0xd7/0x130 17:59:28 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x541b, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/configfs', 0x56402, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000180)={'ip_vti0\x00'}) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 427.615476] ? find_held_lock+0x2c/0x110 [ 427.616526] ? lock_release+0x3b2/0x750 [ 427.617340] ? __might_fault+0xd1/0x170 [ 427.618165] ? lock_downgrade+0x6d0/0x6d0 [ 427.619007] ? lock_is_held_type+0xd7/0x130 [ 427.619908] __sys_sendmmsg+0x195/0x470 [ 427.620724] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 427.621659] ? lock_is_held_type+0xd7/0x130 [ 427.622556] ? bit_wait_io_timeout+0x160/0x160 [ 427.623476] audit: type=1326 audit(1649959168.705:66): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4790 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 [ 427.623475] ? lock_is_held_type+0xd7/0x130 [ 427.626625] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 427.627807] ? vfs_write+0x422/0xac0 [ 427.628644] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 427.629819] ? fput+0x2a/0x50 [ 427.630491] __x64_sys_sendmmsg+0x99/0x100 [ 427.631381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 427.632461] do_syscall_64+0x3b/0x90 [ 427.633264] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 427.634366] RIP: 0033:0x7f89586d1b19 [ 427.635104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 427.638740] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 427.640262] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 427.641663] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 427.643075] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 427.644499] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 427.645938] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 427.647390] 17:59:28 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x541b, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/configfs', 0x56402, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000180)={'ip_vti0\x00'}) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 17:59:47 executing program 3: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) 17:59:47 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r1 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r1) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) 17:59:47 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 17:59:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 17:59:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 5) socket$nl_netfilter(0x10, 0x3, 0xc) 17:59:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 6) 17:59:47 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x541b, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/configfs', 0x56402, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000180)={'ip_vti0\x00'}) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 17:59:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) [ 446.594625] audit: type=1326 audit(1649959187.674:67): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4819 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 17:59:47 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x541b, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/configfs', 0x56402, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000180)={'ip_vti0\x00'}) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) [ 446.640668] FAULT_INJECTION: forcing a failure. [ 446.640668] name failslab, interval 1, probability 0, space 0, times 0 [ 446.642811] CPU: 0 PID: 4832 Comm: syz-executor.1 Not tainted 5.18.0-rc2-next-20220414 #1 [ 446.644128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 446.645954] Call Trace: [ 446.646363] [ 446.646719] dump_stack_lvl+0x8b/0xb3 [ 446.647347] should_fail.cold+0x5/0xa [ 446.647970] ? __alloc_skb+0x211/0x340 [ 446.648608] should_failslab+0x5/0x10 [ 446.649239] kmem_cache_alloc_node+0x55/0x490 [ 446.649992] __alloc_skb+0x211/0x340 [ 446.650598] hci_prepare_cmd+0x2a/0x220 [ 446.651250] hci_req_add+0x99/0x200 [ 446.651844] hci_inq_req+0x158/0x1c0 [ 446.652446] ? hci_auth_req+0xb0/0xb0 [ 446.653057] ? lockdep_init_map_type+0x21a/0x7e0 [ 446.653846] ? hci_auth_req+0xb0/0xb0 [ 446.654458] __hci_req_sync+0x121/0x850 [ 446.655106] ? __mutex_lock+0x231/0x14c0 [ 446.655762] ? hci_req_run_skb+0x20/0x20 [ 446.656416] ? trace_contention_end+0xd8/0x130 [ 446.657154] ? hci_req_sync+0x33/0xd0 [ 446.657789] ? trace_event_raw_event_802154_rdev_set_csma_backoffs+0x280/0x360 [ 446.658974] ? hci_auth_req+0xb0/0xb0 [ 446.659588] hci_req_sync+0x9a/0xd0 [ 446.660184] hci_inquiry+0x8e0/0xc30 [ 446.660792] ? hci_sock_ioctl+0x60/0x910 [ 446.661447] ? lock_downgrade+0x6d0/0x6d0 [ 446.662128] ? rwlock_bug.part.0+0x90/0x90 [ 446.662820] ? hci_inquiry_cache_update_resolve+0x370/0x370 [ 446.663743] ? __local_bh_enable_ip+0xa0/0x120 [ 446.664495] hci_sock_ioctl+0x262/0x910 [ 446.665145] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 446.665899] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 446.666760] sock_do_ioctl+0xd2/0x230 [ 446.667053] FAULT_INJECTION: forcing a failure. [ 446.667053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.667381] ? put_user_ifreq+0xb0/0xb0 [ 446.669382] ? vfs_fileattr_set+0xb80/0xb80 [ 446.670105] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 446.671040] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 446.671978] ? selinux_inode_getsecctx+0x90/0x90 [ 446.672759] sock_ioctl+0x41c/0x670 [ 446.673354] ? lock_is_held_type+0xd7/0x130 [ 446.674079] ? br_ioctl_call+0xb0/0xb0 [ 446.674724] ? selinux_file_ioctl+0xb1/0x260 [ 446.675433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 446.676301] ? br_ioctl_call+0xb0/0xb0 [ 446.676921] __x64_sys_ioctl+0x196/0x210 [ 446.677572] do_syscall_64+0x3b/0x90 [ 446.678181] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 446.678997] RIP: 0033:0x7f8c2e52ab19 [ 446.679578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 446.682422] RSP: 002b:00007f8c2baa0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.683583] RAX: ffffffffffffffda RBX: 00007f8c2e63df60 RCX: 00007f8c2e52ab19 [ 446.684664] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 446.685764] RBP: 00007f8c2baa01d0 R08: 0000000000000000 R09: 0000000000000000 [ 446.686856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.687951] R13: 00007ffd8f44acbf R14: 00007f8c2baa0300 R15: 0000000000022000 [ 446.689054] [ 446.689419] CPU: 1 PID: 4831 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 446.689925] Bluetooth: hci0: no memory for command (opcode 0x0401) [ 446.690429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 446.690444] Call Trace: [ 446.690450] [ 446.690456] dump_stack_lvl+0x8b/0xb3 [ 446.690492] should_fail.cold+0x5/0xa [ 446.690517] _copy_from_user+0x2a/0x170 [ 446.690550] __copy_msghdr_from_user+0x91/0x4b0 [ 446.691752] audit: type=1326 audit(1649959187.724:68): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4819 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 [ 446.692911] ? __ia32_sys_shutdown+0x70/0x70 [ 446.692934] ? udp_v6_early_demux+0xdf0/0xdf0 [ 446.698883] ? inet6_sendmsg+0x4a/0x140 [ 446.699391] ? inet6_sendmsg+0xbd/0x140 [ 446.699885] ? inet6_compat_ioctl+0x310/0x310 [ 446.700461] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 446.701137] ? sock_sendmsg+0x55/0x190 [ 446.701648] sendmsg_copy_msghdr+0xa1/0x160 [ 446.702158] ? __ia32_sys_recvmmsg+0x260/0x260 [ 446.702720] ? __lock_acquire+0x164e/0x6120 [ 446.703242] ___sys_sendmsg+0xc6/0x170 [ 446.703714] ? sendmsg_copy_msghdr+0x160/0x160 [ 446.704294] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 446.704994] ? lock_is_held_type+0xd7/0x130 [ 446.705547] ? find_held_lock+0x2c/0x110 [ 446.706062] ? lock_release+0x3b2/0x750 [ 446.706566] ? __might_fault+0xd1/0x170 [ 446.707012] ? lock_downgrade+0x6d0/0x6d0 [ 446.707540] ? lock_is_held_type+0xd7/0x130 [ 446.708040] __sys_sendmmsg+0x195/0x470 [ 446.708500] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 446.709042] ? lock_is_held_type+0xd7/0x130 [ 446.709597] ? bit_wait_io_timeout+0x160/0x160 [ 446.710173] ? lock_is_held_type+0xd7/0x130 [ 446.710681] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 446.711353] ? vfs_write+0x422/0xac0 [ 446.711833] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 446.712511] ? fput+0x2a/0x50 [ 446.712928] __x64_sys_sendmmsg+0x99/0x100 [ 446.713437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 446.714061] do_syscall_64+0x3b/0x90 [ 446.714524] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 446.715254] RIP: 0033:0x7f89586d1b19 [ 446.715703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 446.717966] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 446.718815] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 446.719603] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 446.720390] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 446.721170] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 446.721961] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 446.722756] 17:59:47 executing program 3: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x541b, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/configfs', 0x56402, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000180)={'ip_vti0\x00'}) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 17:59:47 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) 18:00:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 18:00:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 6) socket$nl_netfilter(0x10, 0x3, 0xc) 18:00:03 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x541b, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/configfs', 0x56402, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000180)={'ip_vti0\x00'}) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:00:03 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:00:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 18:00:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 7) 18:00:03 executing program 3: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r1 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r1) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) 18:00:03 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) [ 462.200727] audit: type=1326 audit(1649959203.283:69): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4857 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 462.219692] FAULT_INJECTION: forcing a failure. [ 462.219692] name failslab, interval 1, probability 0, space 0, times 0 [ 462.220934] CPU: 1 PID: 4863 Comm: syz-executor.1 Not tainted 5.18.0-rc2-next-20220414 #1 [ 462.222056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 462.223505] Call Trace: [ 462.223834] [ 462.224122] dump_stack_lvl+0x8b/0xb3 [ 462.224623] should_fail.cold+0x5/0xa [ 462.225111] ? __alloc_skb+0x211/0x340 [ 462.225622] ? create_object.isra.0+0x3a/0xa20 [ 462.226127] should_failslab+0x5/0x10 [ 462.226623] kmem_cache_alloc+0x5b/0x480 [ 462.227041] create_object.isra.0+0x3a/0xa20 [ 462.227600] ? kasan_unpoison+0x23/0x50 [ 462.228117] kmem_cache_alloc_node+0x248/0x490 [ 462.228715] __alloc_skb+0x211/0x340 [ 462.229203] hci_prepare_cmd+0x2a/0x220 [ 462.229717] hci_req_add+0x99/0x200 [ 462.230101] hci_inq_req+0x158/0x1c0 [ 462.230577] ? hci_auth_req+0xb0/0xb0 [ 462.231064] ? lockdep_init_map_type+0x21a/0x7e0 [ 462.231684] ? hci_auth_req+0xb0/0xb0 [ 462.232173] __hci_req_sync+0x121/0x850 [ 462.232688] ? __mutex_lock+0x231/0x14c0 [ 462.233221] ? hci_req_run_skb+0x20/0x20 [ 462.233739] ? trace_contention_end+0xd8/0x130 [ 462.234204] ? hci_req_sync+0x33/0xd0 [ 462.234702] ? trace_event_raw_event_802154_rdev_set_csma_backoffs+0x280/0x360 [ 462.235424] ? hci_auth_req+0xb0/0xb0 [ 462.235906] hci_req_sync+0x9a/0xd0 [ 462.236280] hci_inquiry+0x8e0/0xc30 [ 462.236753] ? hci_sock_ioctl+0x60/0x910 [ 462.237157] ? lock_downgrade+0x6d0/0x6d0 [ 462.237691] ? rwlock_bug.part.0+0x90/0x90 [ 462.238192] ? hci_inquiry_cache_update_resolve+0x370/0x370 [ 462.238765] ? __local_bh_enable_ip+0xa0/0x120 [ 462.239241] hci_sock_ioctl+0x262/0x910 [ 462.239651] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 462.240106] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 462.240648] sock_do_ioctl+0xd2/0x230 [ 462.241040] ? put_user_ifreq+0xb0/0xb0 [ 462.241442] ? vfs_fileattr_set+0xb80/0xb80 [ 462.241891] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 462.242494] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 462.243078] ? selinux_inode_getsecctx+0x90/0x90 [ 462.243567] sock_ioctl+0x41c/0x670 [ 462.243936] ? lock_is_held_type+0xd7/0x130 [ 462.244386] ? br_ioctl_call+0xb0/0xb0 [ 462.244796] ? selinux_file_ioctl+0xb1/0x260 18:00:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) [ 462.245253] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 462.246064] ? br_ioctl_call+0xb0/0xb0 [ 462.246570] __x64_sys_ioctl+0x196/0x210 [ 462.246984] do_syscall_64+0x3b/0x90 [ 462.247461] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 462.247977] RIP: 0033:0x7f8c2e52ab19 [ 462.248447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 462.250413] RSP: 002b:00007f8c2baa0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.251367] RAX: ffffffffffffffda RBX: 00007f8c2e63df60 RCX: 00007f8c2e52ab19 [ 462.252273] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 462.253176] RBP: 00007f8c2baa01d0 R08: 0000000000000000 R09: 0000000000000000 [ 462.254098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.255005] R13: 00007ffd8f44acbf R14: 00007f8c2baa0300 R15: 0000000000022000 [ 462.255928] [ 462.265352] audit: type=1326 audit(1649959203.344:70): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4857 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 [ 462.274244] FAULT_INJECTION: forcing a failure. [ 462.274244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.275505] CPU: 1 PID: 4864 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 462.276365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 462.277552] Call Trace: [ 462.277819] [ 462.278071] dump_stack_lvl+0x8b/0xb3 [ 462.278481] should_fail.cold+0x5/0xa [ 462.278885] _copy_from_user+0x2a/0x170 [ 462.279315] __copy_msghdr_from_user+0x91/0x4b0 [ 462.279808] ? __ia32_sys_shutdown+0x70/0x70 [ 462.280273] ? udp_v6_early_demux+0xdf0/0xdf0 [ 462.280749] ? inet6_sendmsg+0x4a/0x140 [ 462.281177] ? inet6_sendmsg+0xbd/0x140 [ 462.281568] ? inet6_compat_ioctl+0x310/0x310 [ 462.282078] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 462.282671] ? sock_sendmsg+0x55/0x190 [ 462.283085] sendmsg_copy_msghdr+0xa1/0x160 [ 462.283544] ? __ia32_sys_recvmmsg+0x260/0x260 [ 462.284026] ? __lock_acquire+0x164e/0x6120 [ 462.284490] ___sys_sendmsg+0xc6/0x170 [ 462.284904] ? sendmsg_copy_msghdr+0x160/0x160 [ 462.285388] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 462.285976] ? lock_is_held_type+0xd7/0x130 [ 462.286428] ? find_held_lock+0x2c/0x110 [ 462.286867] ? lock_release+0x3b2/0x750 [ 462.287255] ? __might_fault+0xd1/0x170 [ 462.287678] ? lock_downgrade+0x6d0/0x6d0 [ 462.288118] ? lock_is_held_type+0xd7/0x130 [ 462.288583] __sys_sendmmsg+0x195/0x470 [ 462.289010] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 462.289467] ? lock_is_held_type+0xd7/0x130 [ 462.289935] ? bit_wait_io_timeout+0x160/0x160 [ 462.290403] ? lock_is_held_type+0xd7/0x130 [ 462.290871] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 462.291453] ? vfs_write+0x422/0xac0 [ 462.291845] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 18:00:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 18:00:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 18:00:03 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) [ 462.292425] ? fput+0x2a/0x50 [ 462.292949] __x64_sys_sendmmsg+0x99/0x100 [ 462.293407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 462.293954] do_syscall_64+0x3b/0x90 [ 462.294337] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 462.294882] RIP: 0033:0x7f89586d1b19 [ 462.295267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 462.297192] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 462.297992] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 462.298740] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 462.299484] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 462.300224] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 462.300964] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 462.301721] 18:00:03 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) 18:00:03 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x541b, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/configfs', 0x56402, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000180)={'ip_vti0\x00'}) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) [ 464.314186] Bluetooth: hci0: command 0x0401 tx timeout 18:00:22 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) 18:00:22 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000100)}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:00:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 18:00:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 7) socket$nl_netfilter(0x10, 0x3, 0xc) 18:00:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb", 0x8, 0x89}) 18:00:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 18:00:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 8) 18:00:22 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/configfs', 0x56402, 0x14) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 481.179304] FAULT_INJECTION: forcing a failure. [ 481.179304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.182809] CPU: 0 PID: 4898 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 481.184739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 481.187624] Call Trace: [ 481.188315] [ 481.188875] dump_stack_lvl+0x8b/0xb3 [ 481.189781] should_fail.cold+0x5/0xa [ 481.190692] _copy_from_user+0x2a/0x170 [ 481.191606] __copy_msghdr_from_user+0x91/0x4b0 [ 481.192623] ? __ia32_sys_shutdown+0x70/0x70 [ 481.193207] ? udp_v6_early_demux+0xdf0/0xdf0 [ 481.193796] ? inet6_sendmsg+0x4a/0x140 [ 481.194338] ? inet6_sendmsg+0xbd/0x140 [ 481.194862] ? inet6_compat_ioctl+0x310/0x310 [ 481.195446] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 481.196169] ? sock_sendmsg+0x55/0x190 [ 481.196694] sendmsg_copy_msghdr+0xa1/0x160 [ 481.197273] ? __ia32_sys_recvmmsg+0x260/0x260 [ 481.197891] ? __lock_acquire+0x164e/0x6120 [ 481.198507] ___sys_sendmsg+0xc6/0x170 [ 481.199035] ? sendmsg_copy_msghdr+0x160/0x160 [ 481.199643] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 481.200376] ? lock_is_held_type+0xd7/0x130 [ 481.200954] ? find_held_lock+0x2c/0x110 [ 481.201489] ? lock_release+0x3b2/0x750 [ 481.202026] ? __might_fault+0xd1/0x170 [ 481.202569] ? lock_downgrade+0x6d0/0x6d0 [ 481.203128] ? lock_is_held_type+0xd7/0x130 [ 481.203723] __sys_sendmmsg+0x195/0x470 [ 481.204258] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 481.204834] ? lock_is_held_type+0xd7/0x130 [ 481.205432] ? bit_wait_io_timeout+0x160/0x160 [ 481.206039] ? lock_is_held_type+0xd7/0x130 [ 481.206642] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 481.207353] ? vfs_write+0x422/0xac0 [ 481.207853] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 481.208584] ? fput+0x2a/0x50 [ 481.209017] __x64_sys_sendmmsg+0x99/0x100 [ 481.209574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 481.210247] do_syscall_64+0x3b/0x90 [ 481.214855] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 481.215543] RIP: 0033:0x7f89586d1b19 [ 481.216022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 481.218586] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 481.220301] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 481.221920] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 481.223724] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 481.225340] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 481.227119] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 481.229080] 18:00:22 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) 18:00:22 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) 18:00:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:00:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 8) socket$nl_netfilter(0x10, 0x3, 0xc) 18:00:22 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x541b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/configfs', 0x56402, 0x14) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 481.401348] audit: type=1326 audit(1649959222.483:71): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4889 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 481.402020] FAULT_INJECTION: forcing a failure. [ 481.402020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.410491] CPU: 1 PID: 4915 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 481.412842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 481.416116] Call Trace: [ 481.416921] [ 481.417597] dump_stack_lvl+0x8b/0xb3 [ 481.418778] should_fail.cold+0x5/0xa [ 481.419923] _copy_from_user+0x2a/0x170 [ 481.421133] __copy_msghdr_from_user+0x91/0x4b0 [ 481.421823] ? __ia32_sys_shutdown+0x70/0x70 [ 481.422429] ? udp_v6_early_demux+0xdf0/0xdf0 [ 481.423007] ? inet6_sendmsg+0x4a/0x140 [ 481.423530] ? inet6_sendmsg+0xbd/0x140 [ 481.424055] ? inet6_compat_ioctl+0x310/0x310 [ 481.424638] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 481.425356] ? sock_sendmsg+0x55/0x190 [ 481.425879] sendmsg_copy_msghdr+0xa1/0x160 [ 481.426488] ? __ia32_sys_recvmmsg+0x260/0x260 [ 481.427090] ? __lock_acquire+0x164e/0x6120 [ 481.427682] ___sys_sendmsg+0xc6/0x170 [ 481.428203] ? sendmsg_copy_msghdr+0x160/0x160 [ 481.428817] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 481.429565] ? lock_is_held_type+0xd7/0x130 [ 481.430151] ? find_held_lock+0x2c/0x110 [ 481.430725] ? lock_release+0x3b2/0x750 [ 481.431262] ? __might_fault+0xd1/0x170 [ 481.431788] ? lock_downgrade+0x6d0/0x6d0 [ 481.432338] ? lock_is_held_type+0xd7/0x130 [ 481.432936] __sys_sendmmsg+0x195/0x470 [ 481.433488] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 481.434077] ? lock_is_held_type+0xd7/0x130 [ 481.434742] ? bit_wait_io_timeout+0x160/0x160 [ 481.435351] ? lock_is_held_type+0xd7/0x130 [ 481.435922] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 481.436660] ? vfs_write+0x422/0xac0 [ 481.437163] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 481.437900] ? fput+0x2a/0x50 [ 481.438368] __x64_sys_sendmmsg+0x99/0x100 [ 481.438511] audit: type=1326 audit(1649959222.517:72): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4889 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 [ 481.438937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 481.442361] do_syscall_64+0x3b/0x90 [ 481.442867] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 481.443561] RIP: 0033:0x7f89586d1b19 [ 481.444071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 481.446480] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 481.447442] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 481.448350] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 481.449256] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 481.450177] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 481.451139] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 481.452080] 18:00:22 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) 18:00:22 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) [ 483.256730] Bluetooth: hci0: command 0x0401 tx timeout [ 485.304601] Bluetooth: hci0: command 0x0401 tx timeout 18:00:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 9) socket$nl_netfilter(0x10, 0x3, 0xc) 18:00:39 executing program 0: keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) 18:00:39 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000100)}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:00:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x2, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:00:39 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x541b, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:00:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 18:00:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb", 0x0, 0x89}) 18:00:39 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) [ 498.639694] audit: type=1326 audit(1649959239.721:73): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4929 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:00:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 498.652829] FAULT_INJECTION: forcing a failure. [ 498.652829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.655308] CPU: 1 PID: 4941 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 498.656936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 498.659192] Call Trace: [ 498.659699] [ 498.660142] dump_stack_lvl+0x8b/0xb3 [ 498.660914] should_fail.cold+0x5/0xa [ 498.661684] _copy_from_user+0x2a/0x170 [ 498.662488] __copy_msghdr_from_user+0x91/0x4b0 [ 498.663429] ? __ia32_sys_shutdown+0x70/0x70 [ 498.664313] ? udp_v6_early_demux+0xdf0/0xdf0 [ 498.665205] ? inet6_sendmsg+0x4a/0x140 [ 498.666007] ? inet6_sendmsg+0xbd/0x140 [ 498.666825] ? inet6_compat_ioctl+0x310/0x310 [ 498.667722] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 498.668844] ? sock_sendmsg+0x55/0x190 [ 498.669633] sendmsg_copy_msghdr+0xa1/0x160 [ 498.670510] ? __ia32_sys_recvmmsg+0x260/0x260 [ 498.671472] ? __lock_acquire+0x164e/0x6120 [ 498.672383] ___sys_sendmsg+0xc6/0x170 [ 498.673174] ? sendmsg_copy_msghdr+0x160/0x160 [ 498.673962] audit: type=1326 audit(1649959239.756:74): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4929 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 [ 498.674091] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 498.677732] ? lock_is_held_type+0xd7/0x130 [ 498.678607] ? find_held_lock+0x2c/0x110 [ 498.679423] ? lock_release+0x3b2/0x750 [ 498.680215] ? __might_fault+0xd1/0x170 [ 498.681007] ? lock_downgrade+0x6d0/0x6d0 [ 498.681843] ? lock_is_held_type+0xd7/0x130 [ 498.682739] __sys_sendmmsg+0x195/0x470 [ 498.683546] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 498.684414] ? lock_is_held_type+0xd7/0x130 [ 498.685321] ? bit_wait_io_timeout+0x160/0x160 [ 498.686236] ? lock_is_held_type+0xd7/0x130 [ 498.687139] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 498.688238] ? vfs_write+0x422/0xac0 [ 498.689005] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 498.690104] ? fput+0x2a/0x50 [ 498.690776] __x64_sys_sendmmsg+0x99/0x100 [ 498.691630] ? syscall_enter_from_user_mode+0x1d/0x50 [ 498.692654] do_syscall_64+0x3b/0x90 [ 498.693419] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 498.694452] RIP: 0033:0x7f89586d1b19 [ 498.695222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 498.698981] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 498.700522] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 498.701961] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 498.703419] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 498.704855] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000001 [ 498.706284] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 498.707762] 18:00:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:00:39 executing program 4: r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002880), 0x4000101, 0x0) 18:00:39 executing program 0: keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) 18:00:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4b49, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:00:39 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:00:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000100)}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:00:39 executing program 4: r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002880), 0x4000101, 0x0) 18:00:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 10) socket$nl_netfilter(0x10, 0x3, 0xc) [ 498.936738] audit: type=1326 audit(1649959240.018:75): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4956 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aea92bb19 code=0x0 [ 498.953029] FAULT_INJECTION: forcing a failure. [ 498.953029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.954567] CPU: 0 PID: 4964 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 498.955609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 498.957036] Call Trace: [ 498.957354] [ 498.957638] dump_stack_lvl+0x8b/0xb3 [ 498.958132] should_fail.cold+0x5/0xa [ 498.958642] _copy_from_user+0x2a/0x170 [ 498.959155] __copy_msghdr_from_user+0x91/0x4b0 [ 498.959772] ? __ia32_sys_shutdown+0x70/0x70 [ 498.960343] ? udp_v6_early_demux+0xdf0/0xdf0 [ 498.960936] ? inet6_sendmsg+0x4a/0x140 [ 498.961461] ? inet6_sendmsg+0xbd/0x140 [ 498.961988] ? inet6_compat_ioctl+0x310/0x310 [ 498.962585] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 498.963303] ? sock_sendmsg+0x55/0x190 [ 498.963826] sendmsg_copy_msghdr+0xa1/0x160 [ 498.964391] ? __ia32_sys_recvmmsg+0x260/0x260 [ 498.964993] ? __lock_acquire+0x164e/0x6120 [ 498.965567] ___sys_sendmsg+0xc6/0x170 [ 498.966084] ? sendmsg_copy_msghdr+0x160/0x160 [ 498.966714] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 498.967435] ? lock_is_held_type+0xd7/0x130 [ 498.968009] ? find_held_lock+0x2c/0x110 [ 498.968539] ? lock_release+0x3b2/0x750 [ 498.969072] ? __might_fault+0xd1/0x170 [ 498.969596] ? lock_downgrade+0x6d0/0x6d0 [ 498.970139] ? lock_is_held_type+0xd7/0x130 [ 498.970728] __sys_sendmmsg+0x195/0x470 [ 498.971254] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 498.971832] ? lock_is_held_type+0xd7/0x130 [ 498.972406] ? bit_wait_io_timeout+0x160/0x160 [ 498.973005] ? lock_is_held_type+0xd7/0x130 [ 498.973579] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 498.974290] ? vfs_write+0x422/0xac0 [ 498.974788] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 498.975498] ? fput+0x2a/0x50 [ 498.975921] __x64_sys_sendmmsg+0x99/0x100 [ 498.976468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 498.977132] do_syscall_64+0x3b/0x90 [ 498.977622] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 498.978295] RIP: 0033:0x7f89586d1b19 [ 498.978791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 498.981148] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 498.982127] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 498.983047] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 498.983975] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 498.984874] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 498.985798] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 498.986750] 18:00:40 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) [ 498.991727] audit: type=1326 audit(1649959240.074:76): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4956 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f9aea8de72b code=0x0 [ 500.664490] Bluetooth: hci0: command 0x0401 tx timeout [ 502.712501] Bluetooth: hci0: command 0x0401 tx timeout 18:00:59 executing program 4: r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002880), 0x4000101, 0x0) 18:00:59 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x11, r0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="900cb69feee4eabc36a3d76c576ccd18d75b344695517e815fa4aa4b70cdb038170e4d2843fbd0516b72aef36108e2c1f8fe319cc88d342761baa34daea8b960f611b96bed78faa4e0bd7fa18f7c2b9c61c551141601ae4bb3ac4397dfd423e8e28a7d438089d0ba0fe96d2a0ef86749ba8d59cf8d3e3e813e58c9207c28600f0b35d1a5a18427048b273e386d42372ccec2ba879a873360", 0x98, r0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='&^\\]\'[-.\x00', &(0x7f0000000300)='*!*]!+^{#(\x00', &(0x7f0000000340)='-(\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='(^*\'$,!+!-\xcf\x00', &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000440)='logon\x00'], 0x1000) r2 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x2}, r2) keyctl$search(0xa, r0, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x3}, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$read(0xb, r3, &(0x7f0000000880)=""/247, 0xf7) add_key(&(0x7f0000000600)='blacklist\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, r0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) 18:00:59 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000100)}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:00:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:00:59 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:00:59 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) 18:00:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 11) socket$nl_netfilter(0x10, 0x3, 0xc) 18:00:59 executing program 3: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x541b, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/configfs', 0x56402, 0x14) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000180)={'ip_vti0\x00'}) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) [ 518.387565] FAULT_INJECTION: forcing a failure. [ 518.387565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.389147] CPU: 0 PID: 4980 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 518.390192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 518.391650] Call Trace: [ 518.391973] [ 518.392253] dump_stack_lvl+0x8b/0xb3 [ 518.392737] should_fail.cold+0x5/0xa [ 518.393227] _copy_from_user+0x2a/0x170 [ 518.393751] __copy_msghdr_from_user+0x91/0x4b0 [ 518.394365] ? __ia32_sys_shutdown+0x70/0x70 [ 518.394971] ? udp_v6_early_demux+0xdf0/0xdf0 [ 518.395556] ? inet6_sendmsg+0x4a/0x140 [ 518.396082] ? inet6_sendmsg+0xbd/0x140 [ 518.396603] ? inet6_compat_ioctl+0x310/0x310 [ 518.397191] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 518.397896] ? sock_sendmsg+0x55/0x190 [ 518.398408] sendmsg_copy_msghdr+0xa1/0x160 [ 518.399010] ? __ia32_sys_recvmmsg+0x260/0x260 [ 518.399613] ? __lock_acquire+0x164e/0x6120 [ 518.400175] ___sys_sendmsg+0xc6/0x170 [ 518.400660] ? sendmsg_copy_msghdr+0x160/0x160 [ 518.401219] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 518.401910] ? lock_is_held_type+0xd7/0x130 [ 518.402445] ? find_held_lock+0x2c/0x110 [ 518.402971] ? lock_release+0x3b2/0x750 [ 518.403461] ? __might_fault+0xd1/0x170 [ 518.403954] ? lock_downgrade+0x6d0/0x6d0 [ 518.404458] ? lock_is_held_type+0xd7/0x130 [ 518.405013] __sys_sendmmsg+0x195/0x470 [ 518.405528] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 518.406093] ? lock_is_held_type+0xd7/0x130 [ 518.406679] ? bit_wait_io_timeout+0x160/0x160 [ 518.407322] ? lock_is_held_type+0xd7/0x130 [ 518.407935] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 518.408765] ? vfs_write+0x422/0xac0 [ 518.409329] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 518.410164] ? fput+0x2a/0x50 [ 518.410646] __x64_sys_sendmmsg+0x99/0x100 [ 518.411321] ? syscall_enter_from_user_mode+0x1d/0x50 [ 518.412019] do_syscall_64+0x3b/0x90 [ 518.412587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 518.413364] RIP: 0033:0x7f89586d1b19 [ 518.413900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 518.416527] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 518.417624] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 518.418655] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 518.419687] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 518.420630] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 518.421615] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 518.422636] 18:00:59 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) 18:00:59 executing program 2: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) [ 518.470256] audit: type=1326 audit(1649959259.551:77): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4982 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7ff2e601b8e1 code=0x0 [ 518.473195] audit: type=1326 audit(1649959259.552:78): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4982 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:00:59 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002880), 0x4000101, 0x0) 18:00:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5421, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:00:59 executing program 2: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, &(0x7f0000000680)="d07898648cd9563b07f8033944d04d6b7b858174a248d50c1675c3bdddd24451fadef3167490cdf5d966b26f7ce9af1b281300761d1f48642b0c5a7138f773562449c39dfac8eef7455dccbcbe4da4a18eea6ddac91b37dd8583ec5e267e4d810762a435a0cef137410ca4b1e0348a2e022cbc6cf6209e9e6c6cd5679d7e2a74ecd0e97eb1f2d6e88d51bd305c721c0360010db3fc57a6c170eea55e285c6dadbc2d4146a6bea04b1feb41a4995fbe953d57e4b2c1cae40ee234a17cc483c854a04bf245", 0xc4, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) 18:00:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 1) 18:00:59 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) syz_open_dev$usbmon(&(0x7f0000001e00), 0x0, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:00:59 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002880), 0x4000101, 0x0) [ 518.638363] FAULT_INJECTION: forcing a failure. [ 518.638363] name failslab, interval 1, probability 0, space 0, times 0 [ 518.642005] CPU: 0 PID: 5004 Comm: syz-executor.3 Not tainted 5.18.0-rc2-next-20220414 #1 [ 518.644567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 518.647952] Call Trace: [ 518.648746] [ 518.649374] dump_stack_lvl+0x8b/0xb3 [ 518.650285] should_fail.cold+0x5/0xa [ 518.651408] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 518.652940] ? __alloc_skb+0x211/0x340 [ 518.654275] should_failslab+0x5/0x10 [ 518.655532] kmem_cache_alloc_node+0x55/0x490 [ 518.656933] __alloc_skb+0x211/0x340 [ 518.658094] create_monitor_ctrl_open+0x16c/0x790 [ 518.659663] ? hci_sock_release+0x400/0x400 [ 518.661074] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 518.662839] ? security_capable+0x95/0xc0 [ 518.664142] hci_sock_ioctl+0x394/0x910 [ 518.665408] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 518.666830] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 518.668529] sock_do_ioctl+0xd2/0x230 [ 518.669772] ? put_user_ifreq+0xb0/0xb0 [ 518.671066] ? vfs_fileattr_set+0xb80/0xb80 [ 518.672463] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 518.674156] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 518.676022] ? selinux_inode_getsecctx+0x90/0x90 [ 518.677480] sock_ioctl+0x41c/0x670 [ 518.678690] ? lock_is_held_type+0xd7/0x130 [ 518.680146] ? br_ioctl_call+0xb0/0xb0 [ 518.681422] ? selinux_file_ioctl+0xb1/0x260 [ 518.682814] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 518.684625] ? br_ioctl_call+0xb0/0xb0 [ 518.685896] __x64_sys_ioctl+0x196/0x210 [ 518.687252] do_syscall_64+0x3b/0x90 [ 518.688422] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 518.690084] RIP: 0033:0x7f9b813dcb19 [ 518.691275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 518.697138] RSP: 002b:00007f9b7e952188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.699560] RAX: ffffffffffffffda RBX: 00007f9b814eff60 RCX: 00007f9b813dcb19 [ 518.701701] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 518.704066] RBP: 00007f9b7e9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 518.706363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.708632] R13: 00007ffdde662ccf R14: 00007f9b7e952300 R15: 0000000000022000 [ 518.711003] 18:00:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 12) socket$nl_netfilter(0x10, 0x3, 0xc) 18:00:59 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) [ 518.752583] FAULT_INJECTION: forcing a failure. [ 518.752583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.756658] CPU: 0 PID: 5012 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 518.759095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 518.762791] Call Trace: [ 518.763603] [ 518.764312] dump_stack_lvl+0x8b/0xb3 [ 518.765574] should_fail.cold+0x5/0xa [ 518.766819] _copy_from_user+0x2a/0x170 [ 518.768043] __copy_msghdr_from_user+0x91/0x4b0 [ 518.769475] ? __ia32_sys_shutdown+0x70/0x70 [ 518.770883] ? udp_v6_early_demux+0xdf0/0xdf0 [ 518.772320] ? inet6_sendmsg+0x4a/0x140 [ 518.773609] ? inet6_sendmsg+0xbd/0x140 [ 518.774812] ? inet6_compat_ioctl+0x310/0x310 [ 518.776111] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 518.777961] ? sock_sendmsg+0x55/0x190 [ 518.779278] sendmsg_copy_msghdr+0xa1/0x160 [ 518.780724] ? __ia32_sys_recvmmsg+0x260/0x260 [ 518.782288] ? __lock_acquire+0x164e/0x6120 [ 518.783730] ___sys_sendmsg+0xc6/0x170 [ 518.785036] ? sendmsg_copy_msghdr+0x160/0x160 [ 518.786522] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 518.788247] ? lock_is_held_type+0xd7/0x130 [ 518.789685] ? find_held_lock+0x2c/0x110 [ 518.791026] ? lock_release+0x3b2/0x750 [ 518.792271] ? __might_fault+0xd1/0x170 [ 518.793572] ? lock_downgrade+0x6d0/0x6d0 [ 518.794943] ? lock_is_held_type+0xd7/0x130 [ 518.796280] __sys_sendmmsg+0x195/0x470 [ 518.797446] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 518.798908] ? lock_is_held_type+0xd7/0x130 [ 518.800324] ? bit_wait_io_timeout+0x160/0x160 [ 518.801812] ? lock_is_held_type+0xd7/0x130 [ 518.803246] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 518.805039] ? vfs_write+0x422/0xac0 [ 518.806253] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 518.808098] ? fput+0x2a/0x50 [ 518.809139] __x64_sys_sendmmsg+0x99/0x100 [ 518.810504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 518.812200] do_syscall_64+0x3b/0x90 [ 518.813442] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 518.815034] RIP: 0033:0x7f89586d1b19 [ 518.816090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 518.821692] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 518.824119] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 518.826399] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 518.828596] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 518.830865] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 518.833118] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 518.835273] [ 520.888527] Bluetooth: hci0: command 0x0401 tx timeout 18:01:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 2) 18:01:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00088101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) sendfile(r1, r0, 0x0, 0xfffffdef) 18:01:17 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002880), 0x4000101, 0x0) 18:01:17 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:01:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5450, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:01:17 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) 18:01:17 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:01:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 13) socket$nl_netfilter(0x10, 0x3, 0xc) [ 536.311452] FAULT_INJECTION: forcing a failure. [ 536.311452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.314043] CPU: 1 PID: 5022 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 536.315811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 536.318245] Call Trace: [ 536.318787] [ 536.319267] dump_stack_lvl+0x8b/0xb3 [ 536.320099] should_fail.cold+0x5/0xa [ 536.320924] _copy_from_user+0x2a/0x170 [ 536.321792] __copy_msghdr_from_user+0x91/0x4b0 [ 536.322800] ? __ia32_sys_shutdown+0x70/0x70 [ 536.323770] ? udp_v6_early_demux+0xdf0/0xdf0 [ 536.324739] ? inet6_sendmsg+0x4a/0x140 [ 536.325603] ? inet6_sendmsg+0xbd/0x140 [ 536.326461] ? inet6_compat_ioctl+0x310/0x310 [ 536.327434] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 536.328625] ? sock_sendmsg+0x55/0x190 [ 536.329471] sendmsg_copy_msghdr+0xa1/0x160 [ 536.330409] ? __ia32_sys_recvmmsg+0x260/0x260 [ 536.331432] ? __lock_acquire+0x164e/0x6120 [ 536.332373] ___sys_sendmsg+0xc6/0x170 [ 536.333219] ? sendmsg_copy_msghdr+0x160/0x160 [ 536.334202] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 536.335403] ? lock_is_held_type+0xd7/0x130 [ 536.336344] ? find_held_lock+0x2c/0x110 [ 536.337213] ? lock_release+0x3b2/0x750 [ 536.338062] ? __might_fault+0xd1/0x170 [ 536.338914] ? lock_downgrade+0x6d0/0x6d0 [ 536.339819] ? lock_is_held_type+0xd7/0x130 [ 536.340766] __sys_sendmmsg+0x195/0x470 [ 536.341633] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 536.342561] ? lock_is_held_type+0xd7/0x130 [ 536.343532] ? bit_wait_io_timeout+0x160/0x160 [ 536.344513] ? lock_is_held_type+0xd7/0x130 [ 536.345449] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 536.346629] ? vfs_write+0x422/0xac0 [ 536.347439] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 536.348619] ? fput+0x2a/0x50 [ 536.349306] __x64_sys_sendmmsg+0x99/0x100 [ 536.350216] ? syscall_enter_from_user_mode+0x1d/0x50 [ 536.351328] do_syscall_64+0x3b/0x90 [ 536.352132] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 536.353240] RIP: 0033:0x7f89586d1b19 [ 536.354026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 536.357940] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 536.359581] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 536.361092] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 536.362607] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 536.364120] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 536.365628] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 536.367190] [ 536.370847] loop2: detected capacity change from 0 to 40 18:01:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5451, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:01:17 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 536.413893] FAULT_INJECTION: forcing a failure. [ 536.413893] name failslab, interval 1, probability 0, space 0, times 0 [ 536.416343] CPU: 1 PID: 5039 Comm: syz-executor.3 Not tainted 5.18.0-rc2-next-20220414 #1 18:01:17 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) [ 536.418210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 536.420803] Call Trace: [ 536.421344] [ 536.421819] dump_stack_lvl+0x8b/0xb3 [ 536.422634] should_fail.cold+0x5/0xa [ 536.423457] ? create_object.isra.0+0x3a/0xa20 [ 536.424428] should_failslab+0x5/0x10 [ 536.425258] kmem_cache_alloc+0x5b/0x480 [ 536.426127] create_object.isra.0+0x3a/0xa20 [ 536.427080] ? kasan_unpoison+0x23/0x50 [ 536.427951] kmem_cache_alloc_node+0x248/0x490 [ 536.428952] __alloc_skb+0x211/0x340 [ 536.429753] create_monitor_ctrl_open+0x16c/0x790 [ 536.430801] ? hci_sock_release+0x400/0x400 [ 536.431713] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 536.432950] ? security_capable+0x95/0xc0 [ 536.433861] hci_sock_ioctl+0x394/0x910 [ 536.434694] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 536.435686] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 536.436824] sock_do_ioctl+0xd2/0x230 [ 536.437653] ? put_user_ifreq+0xb0/0xb0 [ 536.438492] ? vfs_fileattr_set+0xb80/0xb80 [ 536.439446] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 536.440688] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 536.442004] ? selinux_inode_getsecctx+0x90/0x90 [ 536.443010] sock_ioctl+0x41c/0x670 [ 536.443817] ? lock_is_held_type+0xd7/0x130 [ 536.444748] ? br_ioctl_call+0xb0/0xb0 [ 536.445605] ? selinux_file_ioctl+0xb1/0x260 [ 536.446541] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 536.447750] ? br_ioctl_call+0xb0/0xb0 [ 536.448580] __x64_sys_ioctl+0x196/0x210 [ 536.449480] do_syscall_64+0x3b/0x90 [ 536.450272] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 536.451411] RIP: 0033:0x7f9b813dcb19 [ 536.452190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 536.456141] RSP: 002b:00007f9b7e952188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.457727] RAX: ffffffffffffffda RBX: 00007f9b814eff60 RCX: 00007f9b813dcb19 [ 536.459220] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 536.460702] RBP: 00007f9b7e9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 536.462193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.463699] R13: 00007ffdde662ccf R14: 00007f9b7e952300 R15: 0000000000022000 [ 536.465220] 18:01:17 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) [ 536.479268] FAT-fs (loop2): bogus sectors per cluster 129 [ 536.480565] FAT-fs (loop2): Can't find a valid FAT filesystem 18:01:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 18:01:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 14) socket$nl_netfilter(0x10, 0x3, 0xc) 18:01:17 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 18:01:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 3) [ 536.586945] audit: type=1326 audit(1649959277.668:79): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5027 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 536.598572] audit: type=1326 audit(1649959277.680:80): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5027 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 [ 536.648665] FAULT_INJECTION: forcing a failure. [ 536.648665] name failslab, interval 1, probability 0, space 0, times 0 [ 536.651058] CPU: 1 PID: 5056 Comm: syz-executor.3 Not tainted 5.18.0-rc2-next-20220414 #1 [ 536.652800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 536.655182] Call Trace: [ 536.655720] [ 536.656186] dump_stack_lvl+0x8b/0xb3 [ 536.656999] should_fail.cold+0x5/0xa [ 536.657800] ? lock_is_held_type+0xd7/0x130 [ 536.658724] should_failslab+0x5/0x10 [ 536.659577] __kmalloc_node_track_caller+0x7e/0x440 [ 536.660875] ? create_monitor_ctrl_open+0x16c/0x790 [ 536.662013] __alloc_skb+0xe3/0x340 [ 536.662862] create_monitor_ctrl_open+0x16c/0x790 [ 536.664056] ? hci_sock_release+0x400/0x400 [ 536.665155] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 536.666458] ? security_capable+0x95/0xc0 [ 536.667522] hci_sock_ioctl+0x394/0x910 [ 536.668499] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 536.669593] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 536.670895] sock_do_ioctl+0xd2/0x230 [ 536.671736] ? put_user_ifreq+0xb0/0xb0 [ 536.672655] ? vfs_fileattr_set+0xb80/0xb80 [ 536.673737] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 536.674950] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 536.676187] ? selinux_inode_getsecctx+0x90/0x90 [ 536.677199] sock_ioctl+0x41c/0x670 [ 536.677968] ? lock_is_held_type+0xd7/0x130 [ 536.678983] ? br_ioctl_call+0xb0/0xb0 [ 536.679830] ? selinux_file_ioctl+0xb1/0x260 [ 536.680765] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 536.682134] ? br_ioctl_call+0xb0/0xb0 [ 536.683032] __x64_sys_ioctl+0x196/0x210 [ 536.683923] do_syscall_64+0x3b/0x90 [ 536.684715] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 536.685805] RIP: 0033:0x7f9b813dcb19 [ 536.686580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 536.690724] RSP: 002b:00007f9b7e952188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.692326] RAX: ffffffffffffffda RBX: 00007f9b814eff60 RCX: 00007f9b813dcb19 [ 536.694016] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 536.695762] RBP: 00007f9b7e9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 536.697318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.699009] R13: 00007ffdde662ccf R14: 00007f9b7e952300 R15: 0000000000022000 [ 536.700681] [ 536.706235] FAULT_INJECTION: forcing a failure. [ 536.706235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.707582] CPU: 0 PID: 5058 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 536.708512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 536.709724] Call Trace: [ 536.710010] [ 536.710257] dump_stack_lvl+0x8b/0xb3 [ 536.710697] should_fail.cold+0x5/0xa [ 536.711148] _copy_from_user+0x2a/0x170 [ 536.711605] __copy_msghdr_from_user+0x91/0x4b0 [ 536.712078] ? __ia32_sys_shutdown+0x70/0x70 [ 536.712520] ? udp_v6_early_demux+0xdf0/0xdf0 [ 536.712976] ? inet6_sendmsg+0x4a/0x140 [ 536.713405] ? inet6_sendmsg+0xbd/0x140 [ 536.713809] ? inet6_compat_ioctl+0x310/0x310 [ 536.714257] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 536.714802] ? sock_sendmsg+0x55/0x190 [ 536.715226] sendmsg_copy_msghdr+0xa1/0x160 [ 536.715655] ? __ia32_sys_recvmmsg+0x260/0x260 [ 536.716165] ? __lock_acquire+0x164e/0x6120 [ 536.716604] ___sys_sendmsg+0xc6/0x170 [ 536.716996] ? sendmsg_copy_msghdr+0x160/0x160 [ 536.717457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 536.718012] ? lock_is_held_type+0xd7/0x130 [ 536.718492] ? find_held_lock+0x2c/0x110 [ 536.718899] ? lock_release+0x3b2/0x750 [ 536.719306] ? __might_fault+0xd1/0x170 [ 536.719704] ? lock_downgrade+0x6d0/0x6d0 [ 536.720115] ? lock_is_held_type+0xd7/0x130 [ 536.720560] __sys_sendmmsg+0x195/0x470 [ 536.721016] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 536.721513] ? lock_is_held_type+0xd7/0x130 [ 536.722016] ? bit_wait_io_timeout+0x160/0x160 [ 536.722531] ? lock_is_held_type+0xd7/0x130 [ 536.723030] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 536.723675] ? vfs_write+0x422/0xac0 [ 536.724096] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 536.724722] ? fput+0x2a/0x50 [ 536.725083] __x64_sys_sendmmsg+0x99/0x100 [ 536.725570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 536.726143] do_syscall_64+0x3b/0x90 [ 536.726566] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 536.727166] RIP: 0033:0x7f89586d1b19 [ 536.727575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 536.729613] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 536.730466] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 536.731241] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 536.731983] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 536.732730] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 536.733471] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 536.734344] 18:01:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) [ 537.155307] loop2: detected capacity change from 0 to 40 [ 537.157014] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value [ 538.552496] Bluetooth: hci0: command 0x0401 tx timeout [ 540.600514] Bluetooth: hci0: command 0x0401 tx timeout 18:01:36 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) 18:01:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 15) socket$nl_netfilter(0x10, 0x3, 0xc) 18:01:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:01:36 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:01:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00088101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) sendfile(r1, r0, 0x0, 0xfffffdef) 18:01:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 4) 18:01:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 18:01:36 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r1, 0x0) [ 555.278192] FAULT_INJECTION: forcing a failure. [ 555.278192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.279773] CPU: 1 PID: 5079 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 555.280830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 555.282357] Call Trace: [ 555.282694] [ 555.282990] dump_stack_lvl+0x8b/0xb3 [ 555.283524] should_fail.cold+0x5/0xa [ 555.284556] _copy_from_user+0x2a/0x170 [ 555.285427] FAULT_INJECTION: forcing a failure. [ 555.285427] name failslab, interval 1, probability 0, space 0, times 0 [ 555.285493] __copy_msghdr_from_user+0x91/0x4b0 [ 555.288498] ? __ia32_sys_shutdown+0x70/0x70 [ 555.289793] ? udp_v6_early_demux+0xdf0/0xdf0 [ 555.291103] ? inet6_sendmsg+0x4a/0x140 [ 555.295827] ? inet6_sendmsg+0xbd/0x140 [ 555.296752] ? inet6_compat_ioctl+0x310/0x310 [ 555.297790] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 555.299072] ? sock_sendmsg+0x55/0x190 [ 555.300125] sendmsg_copy_msghdr+0xa1/0x160 [ 555.301165] ? __ia32_sys_recvmmsg+0x260/0x260 [ 555.302249] ? __lock_acquire+0x164e/0x6120 [ 555.303289] ___sys_sendmsg+0xc6/0x170 [ 555.304391] ? sendmsg_copy_msghdr+0x160/0x160 [ 555.305715] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 555.307295] ? lock_is_held_type+0xd7/0x130 [ 555.308557] ? find_held_lock+0x2c/0x110 [ 555.309746] ? lock_release+0x3b2/0x750 [ 555.310876] ? __might_fault+0xd1/0x170 [ 555.312055] ? lock_downgrade+0x6d0/0x6d0 [ 555.313265] ? lock_is_held_type+0xd7/0x130 [ 555.314513] __sys_sendmmsg+0x195/0x470 [ 555.315680] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 555.316955] ? lock_is_held_type+0xd7/0x130 [ 555.318209] ? bit_wait_io_timeout+0x160/0x160 [ 555.319517] ? lock_is_held_type+0xd7/0x130 [ 555.320737] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 555.322303] ? vfs_write+0x422/0xac0 [ 555.323361] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 555.324916] ? fput+0x2a/0x50 [ 555.325814] __x64_sys_sendmmsg+0x99/0x100 [ 555.327019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 555.328491] do_syscall_64+0x3b/0x90 [ 555.329539] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 555.330989] RIP: 0033:0x7f89586d1b19 [ 555.332025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.337148] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 555.339234] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 555.341225] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 555.343233] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.345245] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 555.347240] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 555.349318] [ 555.349973] CPU: 0 PID: 5080 Comm: syz-executor.3 Not tainted 5.18.0-rc2-next-20220414 #1 [ 555.351216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 555.352885] Call Trace: [ 555.353263] [ 555.353596] dump_stack_lvl+0x8b/0xb3 [ 555.354168] should_fail.cold+0x5/0xa [ 555.354725] ? lock_release+0x3b2/0x750 [ 555.355308] ? create_object.isra.0+0x3a/0xa20 [ 555.356015] should_failslab+0x5/0x10 [ 555.356585] kmem_cache_alloc+0x5b/0x480 [ 555.357216] create_object.isra.0+0x3a/0xa20 [ 555.357884] ? kasan_unpoison+0x23/0x50 [ 555.358483] __kmalloc_node_track_caller+0x269/0x440 [ 555.359248] ? create_monitor_ctrl_open+0x16c/0x790 [ 555.360033] __alloc_skb+0xe3/0x340 [ 555.360578] create_monitor_ctrl_open+0x16c/0x790 [ 555.361291] ? hci_sock_release+0x400/0x400 [ 555.361936] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 555.362763] ? security_capable+0x95/0xc0 [ 555.364159] hci_sock_ioctl+0x394/0x910 [ 555.364770] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 555.365464] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 555.366321] sock_do_ioctl+0xd2/0x230 [ 555.366921] ? put_user_ifreq+0xb0/0xb0 [ 555.367550] ? vfs_fileattr_set+0xb80/0xb80 [ 555.368217] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 555.369089] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 555.369978] ? selinux_inode_getsecctx+0x90/0x90 [ 555.370727] sock_ioctl+0x41c/0x670 [ 555.371333] ? lock_is_held_type+0xd7/0x130 [ 555.371970] ? br_ioctl_call+0xb0/0xb0 [ 555.372509] ? selinux_file_ioctl+0xb1/0x260 [ 555.373110] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 555.373836] ? br_ioctl_call+0xb0/0xb0 [ 555.374737] __x64_sys_ioctl+0x196/0x210 [ 555.375398] do_syscall_64+0x3b/0x90 [ 555.375974] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 555.376760] RIP: 0033:0x7f9b813dcb19 [ 555.377337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.380121] RSP: 002b:00007f9b7e952188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.381130] RAX: ffffffffffffffda RBX: 00007f9b814eff60 RCX: 00007f9b813dcb19 [ 555.382058] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 555.382986] RBP: 00007f9b7e9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.383999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.384922] R13: 00007ffdde662ccf R14: 00007f9b7e952300 R15: 0000000000022000 [ 555.385878] [ 555.395744] loop2: detected capacity change from 0 to 40 [ 555.414524] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value [ 555.418086] audit: type=1326 audit(1649959296.500:81): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5075 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 555.422787] audit: type=1326 audit(1649959296.505:82): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5075 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 555.427216] audit: type=1326 audit(1649959296.509:83): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5075 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:01:36 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) 18:01:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5460, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:01:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 18:01:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 5) 18:01:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8901, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 555.581079] FAULT_INJECTION: forcing a failure. [ 555.581079] name failslab, interval 1, probability 0, space 0, times 0 [ 555.584748] CPU: 0 PID: 5099 Comm: syz-executor.3 Not tainted 5.18.0-rc2-next-20220414 #1 [ 555.587232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 555.590702] Call Trace: [ 555.591628] [ 555.592336] dump_stack_lvl+0x8b/0xb3 [ 555.593533] should_fail.cold+0x5/0xa [ 555.594721] ? lock_release+0x3b2/0x750 [ 555.596036] ? create_object.isra.0+0x3a/0xa20 [ 555.597524] should_failslab+0x5/0x10 [ 555.598737] kmem_cache_alloc+0x5b/0x480 [ 555.600076] create_object.isra.0+0x3a/0xa20 [ 555.601479] ? kasan_unpoison+0x23/0x50 [ 555.602716] __kmalloc_node_track_caller+0x269/0x440 [ 555.604254] ? create_monitor_ctrl_open+0x16c/0x790 [ 555.605773] __alloc_skb+0xe3/0x340 [ 555.606783] create_monitor_ctrl_open+0x16c/0x790 [ 555.608160] ? hci_sock_release+0x400/0x400 [ 555.609389] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 555.611062] ? security_capable+0x95/0xc0 [ 555.612357] hci_sock_ioctl+0x394/0x910 [ 555.613517] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 555.614876] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 555.616471] sock_do_ioctl+0xd2/0x230 18:01:36 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) [ 555.617606] ? put_user_ifreq+0xb0/0xb0 [ 555.624007] ? vfs_fileattr_set+0xb80/0xb80 [ 555.625375] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 555.627177] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 555.628906] ? selinux_inode_getsecctx+0x90/0x90 [ 555.630311] sock_ioctl+0x41c/0x670 [ 555.631389] ? lock_is_held_type+0xd7/0x130 [ 555.632728] ? br_ioctl_call+0xb0/0xb0 [ 555.633904] ? selinux_file_ioctl+0xb1/0x260 [ 555.635251] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 555.636918] ? br_ioctl_call+0xb0/0xb0 [ 555.638132] __x64_sys_ioctl+0x196/0x210 [ 555.639377] do_syscall_64+0x3b/0x90 [ 555.640501] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 555.642064] RIP: 0033:0x7f9b813dcb19 [ 555.643168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.648832] RSP: 002b:00007f9b7e952188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.651152] RAX: ffffffffffffffda RBX: 00007f9b814eff60 RCX: 00007f9b813dcb19 [ 555.653189] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 555.655234] RBP: 00007f9b7e9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.657438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.659643] R13: 00007ffdde662ccf R14: 00007f9b7e952300 R15: 0000000000022000 [ 555.661887] [ 557.496588] Bluetooth: hci0: command 0x0401 tx timeout [ 559.544502] Bluetooth: hci0: command 0x0401 tx timeout 18:01:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 18:01:52 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 18:01:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 6) 18:01:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 16) socket$nl_netfilter(0x10, 0x3, 0xc) 18:01:52 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x7) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) 18:01:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8902, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:01:52 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:01:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)="cb", 0x1, 0x10001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) sendfile(r1, r1, 0x0, 0xffffffff000) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x42}, 0x38}) [ 571.561280] FAULT_INJECTION: forcing a failure. [ 571.561280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.562582] CPU: 0 PID: 5113 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 571.563531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 571.564777] Call Trace: [ 571.565045] [ 571.565308] dump_stack_lvl+0x8b/0xb3 [ 571.565731] should_fail.cold+0x5/0xa [ 571.566154] _copy_from_user+0x2a/0x170 [ 571.566600] __copy_msghdr_from_user+0x91/0x4b0 [ 571.567108] ? __ia32_sys_shutdown+0x70/0x70 [ 571.567595] ? udp_v6_early_demux+0xdf0/0xdf0 [ 571.568081] ? inet6_sendmsg+0x4a/0x140 [ 571.568526] ? inet6_sendmsg+0xbd/0x140 [ 571.568953] ? inet6_compat_ioctl+0x310/0x310 [ 571.569451] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 571.570030] ? sock_sendmsg+0x55/0x190 [ 571.570454] sendmsg_copy_msghdr+0xa1/0x160 [ 571.570932] ? __ia32_sys_recvmmsg+0x260/0x260 [ 571.571527] ? __lock_acquire+0x164e/0x6120 [ 571.572068] ___sys_sendmsg+0xc6/0x170 [ 571.572531] ? sendmsg_copy_msghdr+0x160/0x160 [ 571.573023] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 571.573649] ? lock_is_held_type+0xd7/0x130 [ 571.574106] ? find_held_lock+0x2c/0x110 [ 571.574573] ? lock_release+0x3b2/0x750 [ 571.574999] ? __might_fault+0xd1/0x170 [ 571.575432] ? lock_downgrade+0x6d0/0x6d0 [ 571.575907] ? lock_is_held_type+0xd7/0x130 [ 571.576396] __sys_sendmmsg+0x195/0x470 [ 571.576843] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 571.577328] ? lock_is_held_type+0xd7/0x130 [ 571.577815] ? bit_wait_io_timeout+0x160/0x160 [ 571.578328] ? lock_is_held_type+0xd7/0x130 [ 571.578804] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 571.579408] ? vfs_write+0x422/0xac0 [ 571.579819] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 571.580429] ? fput+0x2a/0x50 [ 571.580781] __x64_sys_sendmmsg+0x99/0x100 [ 571.581256] ? syscall_enter_from_user_mode+0x1d/0x50 [ 571.581805] do_syscall_64+0x3b/0x90 [ 571.582229] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 571.582785] RIP: 0033:0x7f89586d1b19 [ 571.583184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 571.585312] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 571.586123] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 571.586884] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 571.587629] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 571.588412] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 571.589171] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 571.589938] [ 571.596946] FAULT_INJECTION: forcing a failure. [ 571.596946] name failslab, interval 1, probability 0, space 0, times 0 [ 571.598322] CPU: 0 PID: 5119 Comm: syz-executor.3 Not tainted 5.18.0-rc2-next-20220414 #1 [ 571.599460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 571.601008] Call Trace: [ 571.601322] [ 571.601556] dump_stack_lvl+0x8b/0xb3 [ 571.601960] should_fail.cold+0x5/0xa [ 571.602389] ? __alloc_skb+0x211/0x340 [ 571.602804] should_failslab+0x5/0x10 [ 571.603235] kmem_cache_alloc_node+0x55/0x490 [ 571.603776] __alloc_skb+0x211/0x340 [ 571.604188] hci_prepare_cmd+0x2a/0x220 [ 571.604617] hci_req_add+0x99/0x200 [ 571.605005] hci_inq_req+0x158/0x1c0 [ 571.605393] ? hci_auth_req+0xb0/0xb0 [ 571.605794] ? lockdep_init_map_type+0x21a/0x7e0 [ 571.606303] ? hci_auth_req+0xb0/0xb0 [ 571.606707] __hci_req_sync+0x121/0x850 [ 571.607128] ? __mutex_lock+0x231/0x14c0 [ 571.607583] ? hci_req_run_skb+0x20/0x20 [ 571.608030] ? trace_contention_end+0xd8/0x130 [ 571.608531] ? hci_req_sync+0x33/0xd0 [ 571.608952] ? trace_event_raw_event_802154_rdev_set_csma_backoffs+0x280/0x360 [ 571.609700] ? hci_auth_req+0xb0/0xb0 [ 571.610106] hci_req_sync+0x9a/0xd0 [ 571.610490] hci_inquiry+0x8e0/0xc30 [ 571.610885] ? hci_sock_ioctl+0x60/0x910 [ 571.611300] ? lock_downgrade+0x6d0/0x6d0 [ 571.611752] ? rwlock_bug.part.0+0x90/0x90 [ 571.612210] ? hci_inquiry_cache_update_resolve+0x370/0x370 [ 571.612782] ? __local_bh_enable_ip+0xa0/0x120 [ 571.613284] hci_sock_ioctl+0x262/0x910 [ 571.613692] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 571.614174] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 571.614720] sock_do_ioctl+0xd2/0x230 [ 571.615126] ? put_user_ifreq+0xb0/0xb0 [ 571.615544] ? vfs_fileattr_set+0xb80/0xb80 [ 571.616019] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 571.616608] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 571.617232] ? selinux_inode_getsecctx+0x90/0x90 [ 571.617719] sock_ioctl+0x41c/0x670 [ 571.618105] ? lock_is_held_type+0xd7/0x130 [ 571.618564] ? br_ioctl_call+0xb0/0xb0 [ 571.618993] ? selinux_file_ioctl+0xb1/0x260 [ 571.619462] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 571.620082] ? br_ioctl_call+0xb0/0xb0 [ 571.620497] __x64_sys_ioctl+0x196/0x210 [ 571.620946] do_syscall_64+0x3b/0x90 [ 571.621332] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 571.621881] RIP: 0033:0x7f9b813dcb19 [ 571.622264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 571.624245] RSP: 002b:00007f9b7e952188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.625026] RAX: ffffffffffffffda RBX: 00007f9b814eff60 RCX: 00007f9b813dcb19 [ 571.625790] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 571.626537] RBP: 00007f9b7e9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 571.627269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.628020] R13: 00007ffdde662ccf R14: 00007f9b7e952300 R15: 0000000000022000 [ 571.628790] [ 571.629071] Bluetooth: hci0: no memory for command (opcode 0x0401) [ 571.649850] audit: type=1326 audit(1649959312.731:84): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5120 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:01:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 17) socket$nl_netfilter(0x10, 0x3, 0xc) [ 571.691873] audit: type=1326 audit(1649959312.774:85): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5120 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 18:01:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 18:01:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 7) 18:01:52 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x7) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) 18:01:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8903, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 571.757360] FAULT_INJECTION: forcing a failure. [ 571.757360] name failslab, interval 1, probability 0, space 0, times 0 [ 571.758656] CPU: 0 PID: 5133 Comm: syz-executor.3 Not tainted 5.18.0-rc2-next-20220414 #1 [ 571.759691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 571.760876] Call Trace: [ 571.761152] [ 571.761215] FAULT_INJECTION: forcing a failure. [ 571.761215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.761397] dump_stack_lvl+0x8b/0xb3 [ 571.761425] should_fail.cold+0x5/0xa [ 571.764895] ? create_object.isra.0+0x3a/0xa20 [ 571.765400] should_failslab+0x5/0x10 [ 571.765807] kmem_cache_alloc+0x5b/0x480 [ 571.766269] create_object.isra.0+0x3a/0xa20 [ 571.766733] ? kasan_unpoison+0x23/0x50 [ 571.767158] kmem_cache_alloc_node+0x248/0x490 [ 571.767684] __alloc_skb+0x211/0x340 [ 571.768085] hci_prepare_cmd+0x2a/0x220 [ 571.768518] hci_req_add+0x99/0x200 [ 571.768908] hci_inq_req+0x158/0x1c0 [ 571.769304] ? hci_auth_req+0xb0/0xb0 [ 571.769696] ? lockdep_init_map_type+0x21a/0x7e0 [ 571.770216] ? hci_auth_req+0xb0/0xb0 [ 571.770610] __hci_req_sync+0x121/0x850 [ 571.771021] ? __mutex_lock+0x231/0x14c0 [ 571.771458] ? hci_req_run_skb+0x20/0x20 [ 571.771908] ? trace_contention_end+0xd8/0x130 [ 571.772402] ? hci_req_sync+0x33/0xd0 [ 571.772809] ? trace_event_raw_event_802154_rdev_set_csma_backoffs+0x280/0x360 [ 571.773595] ? hci_auth_req+0xb0/0xb0 [ 571.773996] hci_req_sync+0x9a/0xd0 [ 571.774393] hci_inquiry+0x8e0/0xc30 [ 571.774791] ? hci_sock_ioctl+0x60/0x910 [ 571.775228] ? lock_downgrade+0x6d0/0x6d0 [ 571.775666] ? rwlock_bug.part.0+0x90/0x90 [ 571.776113] ? hci_inquiry_cache_update_resolve+0x370/0x370 [ 571.776735] ? __local_bh_enable_ip+0xa0/0x120 [ 571.777233] hci_sock_ioctl+0x262/0x910 [ 571.777646] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 571.778133] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 571.778686] sock_do_ioctl+0xd2/0x230 [ 571.779087] ? put_user_ifreq+0xb0/0xb0 [ 571.779509] ? vfs_fileattr_set+0xb80/0xb80 [ 571.779988] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 571.780606] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 571.781223] ? selinux_inode_getsecctx+0x90/0x90 [ 571.781719] sock_ioctl+0x41c/0x670 [ 571.782102] ? lock_is_held_type+0xd7/0x130 [ 571.782568] ? br_ioctl_call+0xb0/0xb0 [ 571.782987] ? selinux_file_ioctl+0xb1/0x260 [ 571.783466] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 571.784061] ? br_ioctl_call+0xb0/0xb0 [ 571.784492] __x64_sys_ioctl+0x196/0x210 [ 571.784924] do_syscall_64+0x3b/0x90 [ 571.785331] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 571.785873] RIP: 0033:0x7f9b813dcb19 [ 571.786264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 571.788176] RSP: 002b:00007f9b7e952188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.788980] RAX: ffffffffffffffda RBX: 00007f9b814eff60 RCX: 00007f9b813dcb19 [ 571.789729] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 571.790463] RBP: 00007f9b7e9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 571.791210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.791955] R13: 00007ffdde662ccf R14: 00007f9b7e952300 R15: 0000000000022000 [ 571.792713] [ 571.792952] CPU: 1 PID: 5131 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 571.794608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 571.796871] Call Trace: [ 571.797378] [ 571.797823] dump_stack_lvl+0x8b/0xb3 [ 571.798594] should_fail.cold+0x5/0xa [ 571.799355] _copy_from_user+0x2a/0x170 [ 571.800170] __copy_msghdr_from_user+0x91/0x4b0 [ 571.801114] ? __ia32_sys_shutdown+0x70/0x70 [ 571.801995] ? udp_v6_early_demux+0xdf0/0xdf0 [ 571.802883] ? inet6_sendmsg+0x4a/0x140 [ 571.803703] ? inet6_sendmsg+0xbd/0x140 [ 571.804496] ? inet6_compat_ioctl+0x310/0x310 [ 571.805388] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 571.806493] ? sock_sendmsg+0x55/0x190 [ 571.807282] sendmsg_copy_msghdr+0xa1/0x160 [ 571.808175] ? __ia32_sys_recvmmsg+0x260/0x260 [ 571.809098] ? __lock_acquire+0x164e/0x6120 [ 571.809977] ___sys_sendmsg+0xc6/0x170 [ 571.810765] ? sendmsg_copy_msghdr+0x160/0x160 [ 571.811695] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 571.812820] ? lock_is_held_type+0xd7/0x130 [ 571.813695] ? find_held_lock+0x2c/0x110 [ 571.814509] ? lock_release+0x3b2/0x750 [ 571.815301] ? __might_fault+0xd1/0x170 [ 571.816110] ? lock_downgrade+0x6d0/0x6d0 [ 571.816949] ? lock_is_held_type+0xd7/0x130 [ 571.817830] __sys_sendmmsg+0x195/0x470 [ 571.818636] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 571.819501] ? lock_is_held_type+0xd7/0x130 [ 571.820408] ? bit_wait_io_timeout+0x160/0x160 [ 571.821320] ? lock_is_held_type+0xd7/0x130 [ 571.822191] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 571.823293] ? vfs_write+0x422/0xac0 [ 571.824049] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 571.825144] ? fput+0x2a/0x50 [ 571.825794] __x64_sys_sendmmsg+0x99/0x100 [ 571.826639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 571.827667] do_syscall_64+0x3b/0x90 [ 571.828422] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 571.829452] RIP: 0033:0x7f89586d1b19 [ 571.830182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 571.833844] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 571.835349] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 571.836768] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 571.838176] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 571.839583] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 571.841010] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 571.842439] [ 573.816508] Bluetooth: hci0: command 0x0401 tx timeout 18:02:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8904, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:02:12 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:02:12 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 18:02:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 18:02:12 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 18:02:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 8) 18:02:12 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x7) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) 18:02:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 18) socket$nl_netfilter(0x10, 0x3, 0xc) [ 591.073197] FAULT_INJECTION: forcing a failure. [ 591.073197] name failslab, interval 1, probability 0, space 0, times 0 [ 591.074817] CPU: 1 PID: 5152 Comm: syz-executor.3 Not tainted 5.18.0-rc2-next-20220414 #1 [ 591.076049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 591.077667] Call Trace: [ 591.078047] [ 591.078373] dump_stack_lvl+0x8b/0xb3 [ 591.078941] should_fail.cold+0x5/0xa [ 591.079492] ? lock_is_held_type+0xd7/0x130 [ 591.080141] should_failslab+0x5/0x10 [ 591.081312] __kmalloc_node_track_caller+0x7e/0x440 [ 591.081980] ? hci_prepare_cmd+0x2a/0x220 [ 591.082545] __alloc_skb+0xe3/0x340 [ 591.083038] hci_prepare_cmd+0x2a/0x220 [ 591.083584] hci_req_add+0x99/0x200 [ 591.084102] hci_inq_req+0x158/0x1c0 [ 591.085152] ? hci_auth_req+0xb0/0xb0 [ 591.086277] ? lockdep_init_map_type+0x21a/0x7e0 [ 591.086897] ? hci_auth_req+0xb0/0xb0 [ 591.087426] __hci_req_sync+0x121/0x850 [ 591.088886] ? __mutex_lock+0x231/0x14c0 [ 591.089950] ? hci_req_run_skb+0x20/0x20 [ 591.091162] ? trace_contention_end+0xd8/0x130 [ 591.092359] ? hci_req_sync+0x33/0xd0 [ 591.093374] ? trace_event_raw_event_802154_rdev_set_csma_backoffs+0x280/0x360 [ 591.095081] ? hci_auth_req+0xb0/0xb0 [ 591.095607] hci_req_sync+0x9a/0xd0 [ 591.096399] hci_inquiry+0x8e0/0xc30 [ 591.097621] ? hci_sock_ioctl+0x60/0x910 [ 591.098225] ? lock_downgrade+0x6d0/0x6d0 [ 591.098794] ? rwlock_bug.part.0+0x90/0x90 [ 591.099710] ? hci_inquiry_cache_update_resolve+0x370/0x370 [ 591.101513] ? __local_bh_enable_ip+0xa0/0x120 [ 591.102243] hci_sock_ioctl+0x262/0x910 [ 591.103596] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 591.104449] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 591.106186] sock_do_ioctl+0xd2/0x230 [ 591.107470] ? put_user_ifreq+0xb0/0xb0 [ 591.108844] ? vfs_fileattr_set+0xb80/0xb80 [ 591.110244] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 591.112191] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 591.114289] ? selinux_inode_getsecctx+0x90/0x90 [ 591.115768] sock_ioctl+0x41c/0x670 [ 591.116907] ? lock_is_held_type+0xd7/0x130 [ 591.118278] ? br_ioctl_call+0xb0/0xb0 [ 591.119528] ? selinux_file_ioctl+0xb1/0x260 [ 591.120960] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 591.122725] ? br_ioctl_call+0xb0/0xb0 [ 591.123999] __x64_sys_ioctl+0x196/0x210 [ 591.125242] do_syscall_64+0x3b/0x90 [ 591.126295] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 591.127889] RIP: 0033:0x7f9b813dcb19 [ 591.129071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 591.134511] RSP: 002b:00007f9b7e952188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.136717] RAX: ffffffffffffffda RBX: 00007f9b814eff60 RCX: 00007f9b813dcb19 [ 591.138746] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 591.141011] RBP: 00007f9b7e9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 591.143201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.145205] R13: 00007ffdde662ccf R14: 00007f9b7e952300 R15: 0000000000022000 [ 591.147134] [ 591.147991] Bluetooth: hci0: no memory for command (opcode 0x0401) [ 591.170028] FAULT_INJECTION: forcing a failure. [ 591.170028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.174235] CPU: 1 PID: 5159 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 591.177107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 591.180894] Call Trace: [ 591.181680] [ 591.182438] dump_stack_lvl+0x8b/0xb3 [ 591.183655] should_fail.cold+0x5/0xa [ 591.184816] _copy_from_user+0x2a/0x170 [ 591.185982] __copy_msghdr_from_user+0x91/0x4b0 [ 591.187571] ? __ia32_sys_shutdown+0x70/0x70 [ 591.188986] ? udp_v6_early_demux+0xdf0/0xdf0 [ 591.190420] ? inet6_sendmsg+0x4a/0x140 [ 591.191762] ? inet6_sendmsg+0xbd/0x140 [ 591.192999] ? inet6_compat_ioctl+0x310/0x310 [ 591.194396] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 591.196143] ? sock_sendmsg+0x55/0x190 [ 591.197412] sendmsg_copy_msghdr+0xa1/0x160 [ 591.198771] ? __ia32_sys_recvmmsg+0x260/0x260 [ 591.200235] ? __lock_acquire+0x164e/0x6120 [ 591.201630] ___sys_sendmsg+0xc6/0x170 [ 591.202891] ? sendmsg_copy_msghdr+0x160/0x160 [ 591.204348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 591.205664] ? lock_is_held_type+0xd7/0x130 [ 591.207044] ? find_held_lock+0x2c/0x110 [ 591.207708] ? lock_release+0x3b2/0x750 [ 591.209060] ? __might_fault+0xd1/0x170 [ 591.209753] ? lock_downgrade+0x6d0/0x6d0 [ 591.211078] ? lock_is_held_type+0xd7/0x130 [ 591.212329] __sys_sendmmsg+0x195/0x470 [ 591.213492] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 591.214875] ? lock_is_held_type+0xd7/0x130 [ 591.215608] ? bit_wait_io_timeout+0x160/0x160 [ 591.217116] ? lock_is_held_type+0xd7/0x130 [ 591.217826] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 591.218677] ? vfs_write+0x422/0xac0 [ 591.219253] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 591.220121] ? fput+0x2a/0x50 [ 591.220623] __x64_sys_sendmmsg+0x99/0x100 [ 591.221281] ? syscall_enter_from_user_mode+0x1d/0x50 [ 591.222058] do_syscall_64+0x3b/0x90 [ 591.222649] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 591.223477] RIP: 0033:0x7f89586d1b19 [ 591.224053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 591.226799] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 591.227965] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 591.229004] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 591.230058] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 591.231259] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 591.232295] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 591.233338] 18:02:12 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) 18:02:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8906, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:02:12 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 18:02:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 18:02:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 9) 18:02:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8907, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:02:12 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) [ 591.363361] FAULT_INJECTION: forcing a failure. [ 591.363361] name failslab, interval 1, probability 0, space 0, times 0 [ 591.365078] CPU: 0 PID: 5171 Comm: syz-executor.3 Not tainted 5.18.0-rc2-next-20220414 #1 [ 591.366202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 591.367621] Call Trace: [ 591.367983] [ 591.368273] dump_stack_lvl+0x8b/0xb3 [ 591.368770] should_fail.cold+0x5/0xa [ 591.369259] ? lock_release+0x3b2/0x750 [ 591.369836] ? create_object.isra.0+0x3a/0xa20 [ 591.370510] should_failslab+0x5/0x10 [ 591.376401] kmem_cache_alloc+0x5b/0x480 [ 591.376971] create_object.isra.0+0x3a/0xa20 [ 591.377563] ? kasan_unpoison+0x23/0x50 [ 591.378099] __kmalloc_node_track_caller+0x269/0x440 [ 591.378765] ? hci_prepare_cmd+0x2a/0x220 [ 591.379323] __alloc_skb+0xe3/0x340 [ 591.379823] hci_prepare_cmd+0x2a/0x220 [ 591.380399] hci_req_add+0x99/0x200 [ 591.380893] hci_inq_req+0x158/0x1c0 [ 591.381385] ? hci_auth_req+0xb0/0xb0 [ 591.381893] ? lockdep_init_map_type+0x21a/0x7e0 [ 591.382543] ? hci_auth_req+0xb0/0xb0 [ 591.388203] __hci_req_sync+0x121/0x850 [ 591.388798] ? __mutex_lock+0x231/0x14c0 [ 591.389424] ? hci_req_run_skb+0x20/0x20 [ 591.390047] ? trace_contention_end+0xd8/0x130 [ 591.390749] ? hci_req_sync+0x33/0xd0 [ 591.391332] ? trace_event_raw_event_802154_rdev_set_csma_backoffs+0x280/0x360 [ 591.392452] ? hci_auth_req+0xb0/0xb0 [ 591.393045] hci_req_sync+0x9a/0xd0 [ 591.393615] hci_inquiry+0x8e0/0xc30 [ 591.394197] ? hci_sock_ioctl+0x60/0x910 [ 591.394810] ? lock_downgrade+0x6d0/0x6d0 [ 591.395445] ? rwlock_bug.part.0+0x90/0x90 [ 591.396109] ? hci_inquiry_cache_update_resolve+0x370/0x370 [ 591.396862] ? __local_bh_enable_ip+0xa0/0x120 [ 591.397492] hci_sock_ioctl+0x262/0x910 [ 591.398063] ? hci_sock_sendmsg+0x22e0/0x22e0 [ 591.398663] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 591.399365] sock_do_ioctl+0xd2/0x230 [ 591.399903] ? put_user_ifreq+0xb0/0xb0 [ 591.400493] ? vfs_fileattr_set+0xb80/0xb80 [ 591.401088] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 591.401842] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 591.402600] ? selinux_inode_getsecctx+0x90/0x90 [ 591.403237] sock_ioctl+0x41c/0x670 [ 591.403729] ? lock_is_held_type+0xd7/0x130 [ 591.404338] ? br_ioctl_call+0xb0/0xb0 [ 591.404865] ? selinux_file_ioctl+0xb1/0x260 [ 591.405454] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 591.406190] ? br_ioctl_call+0xb0/0xb0 [ 591.406708] __x64_sys_ioctl+0x196/0x210 [ 591.407268] do_syscall_64+0x3b/0x90 [ 591.407768] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 591.408506] RIP: 0033:0x7f9b813dcb19 [ 591.408974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 591.411382] RSP: 002b:00007f9b7e952188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 591.412421] RAX: ffffffffffffffda RBX: 00007f9b814eff60 RCX: 00007f9b813dcb19 [ 591.413359] RDX: 0000000020000040 RSI: 00000000800448f0 RDI: 0000000000000004 [ 591.414287] RBP: 00007f9b7e9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 591.415220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.416189] R13: 00007ffdde662ccf R14: 00007f9b7e952300 R15: 0000000000022000 [ 591.417184] [ 591.431248] audit: type=1326 audit(1649959332.513:86): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5153 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:02:12 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) 18:02:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) [ 593.464723] Bluetooth: hci0: command 0x0401 tx timeout 18:02:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) (fail_nth: 10) 18:02:28 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) 18:02:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8912, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:02:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 19) socket$nl_netfilter(0x10, 0x3, 0xc) 18:02:28 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 18:02:28 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:02:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) 18:02:28 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) [ 607.026641] audit: type=1326 audit(1649959348.108:87): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5189 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aea92bb19 code=0x0 [ 607.035832] audit: type=1326 audit(1649959348.118:88): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5190 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 607.052106] FAULT_INJECTION: forcing a failure. [ 607.052106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.054547] CPU: 1 PID: 5194 Comm: syz-executor.3 Not tainted 5.18.0-rc2-next-20220414 #1 [ 607.056010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 607.057926] Call Trace: [ 607.058361] [ 607.058737] dump_stack_lvl+0x8b/0xb3 [ 607.059423] should_fail.cold+0x5/0xa [ 607.059958] FAULT_INJECTION: forcing a failure. [ 607.059958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.060062] _copy_to_user+0x2a/0x140 [ 607.063244] simple_read_from_buffer+0xcc/0x160 [ 607.064055] proc_fail_nth_read+0x194/0x220 [ 607.064815] ? proc_exe_link+0x1d0/0x1d0 [ 607.065517] ? security_file_permission+0xb1/0xd0 [ 607.066350] ? proc_exe_link+0x1d0/0x1d0 [ 607.067053] vfs_read+0x1ea/0x5d0 [ 607.067649] ksys_read+0x127/0x250 [ 607.068280] ? __ia32_sys_pwrite64+0x220/0x220 [ 607.069070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 607.069961] do_syscall_64+0x3b/0x90 [ 607.070603] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 607.071484] RIP: 0033:0x7f9b8138f69c [ 607.072117] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 607.075275] RSP: 002b:00007f9b7e952170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 607.076593] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f9b8138f69c [ 607.077809] RDX: 000000000000000f RSI: 00007f9b7e9521e0 RDI: 0000000000000003 [ 607.079010] RBP: 00007f9b7e9521d0 R08: 0000000000000000 R09: 0000000000000000 [ 607.080238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.081454] R13: 00007ffdde662ccf R14: 00007f9b7e952300 R15: 0000000000022000 [ 607.082691] [ 607.083086] CPU: 0 PID: 5202 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 607.084885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 607.087318] Call Trace: [ 607.087877] [ 607.088378] dump_stack_lvl+0x8b/0xb3 [ 607.089220] should_fail.cold+0x5/0xa [ 607.090064] _copy_from_user+0x2a/0x170 [ 607.090951] __copy_msghdr_from_user+0x91/0x4b0 [ 607.091975] ? __ia32_sys_shutdown+0x70/0x70 [ 607.092950] ? udp_v6_early_demux+0xdf0/0xdf0 [ 607.093929] ? inet6_sendmsg+0x4a/0x140 [ 607.094812] ? inet6_sendmsg+0xbd/0x140 [ 607.095682] ? inet6_compat_ioctl+0x310/0x310 [ 607.096679] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 607.097892] ? sock_sendmsg+0x55/0x190 [ 607.098750] sendmsg_copy_msghdr+0xa1/0x160 [ 607.099700] ? __ia32_sys_recvmmsg+0x260/0x260 [ 607.100724] ? __lock_acquire+0x164e/0x6120 [ 607.101687] ___sys_sendmsg+0xc6/0x170 [ 607.102556] ? sendmsg_copy_msghdr+0x160/0x160 [ 607.103548] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 607.104779] ? lock_is_held_type+0xd7/0x130 [ 607.105732] ? find_held_lock+0x2c/0x110 [ 607.106634] ? lock_release+0x3b2/0x750 [ 607.107491] ? __might_fault+0xd1/0x170 [ 607.108378] ? lock_downgrade+0x6d0/0x6d0 [ 607.109281] ? lock_is_held_type+0xd7/0x130 [ 607.110238] __sys_sendmmsg+0x195/0x470 [ 607.111108] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 607.112057] ? lock_is_held_type+0xd7/0x130 [ 607.113019] ? bit_wait_io_timeout+0x160/0x160 [ 607.113995] ? lock_is_held_type+0xd7/0x130 [ 607.114934] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 607.116109] ? vfs_write+0x422/0xac0 [ 607.116931] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 607.118111] ? fput+0x2a/0x50 [ 607.118799] __x64_sys_sendmmsg+0x99/0x100 [ 607.119710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 607.120813] do_syscall_64+0x3b/0x90 [ 607.121616] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 607.122721] RIP: 0033:0x7f89586d1b19 [ 607.123501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.127365] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 607.128970] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 18:02:28 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r0, 0x0) [ 607.130463] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 607.132133] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 607.133690] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 607.135225] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 607.136786] [ 607.141858] audit: type=1326 audit(1649959348.171:89): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5189 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f9aea8de72b code=0x0 18:02:28 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) 18:02:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) [ 607.193055] audit: type=1326 audit(1649959348.275:90): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5190 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:02:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8940, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 607.244474] audit: type=1326 audit(1649959348.324:91): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5190 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7ff2e601b8e1 code=0x0 18:02:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:02:28 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) 18:02:28 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 18:02:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 20) socket$nl_netfilter(0x10, 0x3, 0xc) 18:02:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) 18:02:28 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:02:28 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x7) [ 607.392160] FAULT_INJECTION: forcing a failure. [ 607.392160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.393881] CPU: 1 PID: 5226 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 607.394931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 607.396382] Call Trace: [ 607.396711] [ 607.396998] dump_stack_lvl+0x8b/0xb3 [ 607.397501] should_fail.cold+0x5/0xa [ 607.397998] _copy_from_user+0x2a/0x170 [ 607.398522] __copy_msghdr_from_user+0x91/0x4b0 [ 607.399136] ? __ia32_sys_shutdown+0x70/0x70 [ 607.399703] ? udp_v6_early_demux+0xdf0/0xdf0 [ 607.400286] ? inet6_sendmsg+0x4a/0x140 [ 607.400806] ? inet6_sendmsg+0xbd/0x140 [ 607.401322] ? inet6_compat_ioctl+0x310/0x310 [ 607.401893] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 607.402606] ? sock_sendmsg+0x55/0x190 [ 607.403132] sendmsg_copy_msghdr+0xa1/0x160 [ 607.403713] ? __ia32_sys_recvmmsg+0x260/0x260 [ 607.404351] ? __lock_acquire+0x164e/0x6120 [ 607.404946] ___sys_sendmsg+0xc6/0x170 [ 607.405475] ? sendmsg_copy_msghdr+0x160/0x160 [ 607.406088] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 607.406841] ? lock_is_held_type+0xd7/0x130 [ 607.407432] ? find_held_lock+0x2c/0x110 [ 607.407981] ? lock_release+0x3b2/0x750 [ 607.408509] ? __might_fault+0xd1/0x170 [ 607.409048] ? lock_downgrade+0x6d0/0x6d0 [ 607.409612] ? lock_is_held_type+0xd7/0x130 [ 607.410204] __sys_sendmmsg+0x195/0x470 [ 607.410755] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 607.411343] ? lock_is_held_type+0xd7/0x130 [ 607.411939] ? bit_wait_io_timeout+0x160/0x160 [ 607.412559] ? lock_is_held_type+0xd7/0x130 [ 607.413143] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 607.413848] ? vfs_write+0x422/0xac0 [ 607.414344] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 607.415079] ? fput+0x2a/0x50 [ 607.415496] __x64_sys_sendmmsg+0x99/0x100 [ 607.416073] ? syscall_enter_from_user_mode+0x1d/0x50 [ 607.416736] do_syscall_64+0x3b/0x90 [ 607.417237] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 607.417923] RIP: 0033:0x7f89586d1b19 [ 607.418408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.420811] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 607.421809] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 607.422743] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 607.423672] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 607.424619] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 607.425552] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 607.426481] [ 607.427699] audit: type=1326 audit(1649959348.510:92): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5225 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:02:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8941, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:02:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x2, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 607.492641] audit: type=1326 audit(1649959348.574:93): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5225 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 607.542190] audit: type=1326 audit(1649959348.624:94): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5225 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7ff2e601b8e1 code=0x0 [ 609.080587] Bluetooth: hci0: command 0x0401 tx timeout [ 611.128488] Bluetooth: hci0: command 0x0401 tx timeout 18:02:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) 18:02:45 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:02:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:02:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 21) socket$nl_netfilter(0x10, 0x3, 0xc) 18:02:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 18:02:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x894c, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:02:45 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:02:45 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) [ 624.946237] FAULT_INJECTION: forcing a failure. [ 624.946237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.948116] CPU: 0 PID: 5256 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 624.949325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 624.950838] Call Trace: [ 624.951291] [ 624.951593] dump_stack_lvl+0x8b/0xb3 [ 624.952167] should_fail.cold+0x5/0xa [ 624.952710] _copy_from_user+0x2a/0x170 [ 624.953312] __copy_msghdr_from_user+0x91/0x4b0 [ 624.953942] ? __ia32_sys_shutdown+0x70/0x70 [ 624.954638] ? udp_v6_early_demux+0xdf0/0xdf0 [ 624.955348] ? inet6_sendmsg+0x4a/0x140 [ 624.955894] ? inet6_sendmsg+0xbd/0x140 [ 624.956517] ? inet6_compat_ioctl+0x310/0x310 [ 624.957188] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 624.957926] ? sock_sendmsg+0x55/0x190 [ 624.958534] sendmsg_copy_msghdr+0xa1/0x160 [ 624.959237] ? __ia32_sys_recvmmsg+0x260/0x260 [ 624.959869] ? __lock_acquire+0x164e/0x6120 [ 624.960560] ___sys_sendmsg+0xc6/0x170 [ 624.961134] ? sendmsg_copy_msghdr+0x160/0x160 [ 624.961759] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 624.962567] ? lock_is_held_type+0xd7/0x130 [ 624.963234] ? find_held_lock+0x2c/0x110 [ 624.963797] ? lock_release+0x3b2/0x750 [ 624.964463] ? __might_fault+0xd1/0x170 [ 624.965108] ? lock_downgrade+0x6d0/0x6d0 [ 624.965676] ? lock_is_held_type+0xd7/0x130 [ 624.966339] __sys_sendmmsg+0x195/0x470 [ 624.966903] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 624.967580] ? lock_is_held_type+0xd7/0x130 [ 624.968299] ? bit_wait_io_timeout+0x160/0x160 [ 624.968936] ? lock_is_held_type+0xd7/0x130 [ 624.969595] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 624.974808] ? vfs_write+0x422/0xac0 [ 624.975407] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 624.976283] ? fput+0x2a/0x50 [ 624.976751] __x64_sys_sendmmsg+0x99/0x100 [ 624.977399] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.978171] do_syscall_64+0x3b/0x90 [ 624.978672] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 624.979432] RIP: 0033:0x7f89586d1b19 [ 624.979941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 624.982607] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 624.983690] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 624.984732] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 624.985754] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 624.986791] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 624.987814] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 624.988869] 18:02:46 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:02:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8982, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 625.081592] audit: type=1326 audit(1649959366.163:95): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5250 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:02:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 18:02:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000008000322", @ANYRES32=r1, @ANYBLOB="2c00508008000700000008"], 0x48}}, 0x0) 18:02:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4b49, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 625.136546] audit: type=1326 audit(1649959366.218:96): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5250 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7ff2e601b8e1 code=0x0 [ 625.143571] audit: type=1326 audit(1649959366.219:97): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5250 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:02:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 22) socket$nl_netfilter(0x10, 0x3, 0xc) 18:02:46 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:02:46 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) [ 625.255367] FAULT_INJECTION: forcing a failure. [ 625.255367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.257030] CPU: 1 PID: 5278 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 625.258076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 625.259523] Call Trace: [ 625.259860] [ 625.260157] dump_stack_lvl+0x8b/0xb3 [ 625.260702] should_fail.cold+0x5/0xa [ 625.261206] _copy_from_user+0x2a/0x170 [ 625.261732] __copy_msghdr_from_user+0x91/0x4b0 [ 625.262374] ? __ia32_sys_shutdown+0x70/0x70 [ 625.262978] ? udp_v6_early_demux+0xdf0/0xdf0 [ 625.263612] ? inet6_sendmsg+0x4a/0x140 [ 625.264169] ? inet6_sendmsg+0xbd/0x140 [ 625.264783] ? inet6_compat_ioctl+0x310/0x310 [ 625.265403] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 625.266144] ? sock_sendmsg+0x55/0x190 [ 625.266684] sendmsg_copy_msghdr+0xa1/0x160 [ 625.267283] ? __ia32_sys_recvmmsg+0x260/0x260 [ 625.267913] ? __lock_acquire+0x164e/0x6120 [ 625.268557] ___sys_sendmsg+0xc6/0x170 [ 625.269134] ? sendmsg_copy_msghdr+0x160/0x160 [ 625.269796] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 625.270549] ? lock_is_held_type+0xd7/0x130 [ 625.271272] ? find_held_lock+0x2c/0x110 [ 625.271831] ? lock_release+0x3b2/0x750 [ 625.272366] ? __might_fault+0xd1/0x170 [ 625.272937] ? lock_downgrade+0x6d0/0x6d0 [ 625.273494] ? lock_is_held_type+0xd7/0x130 [ 625.274091] __sys_sendmmsg+0x195/0x470 [ 625.274639] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 625.275201] ? lock_is_held_type+0xd7/0x130 [ 625.275788] ? bit_wait_io_timeout+0x160/0x160 [ 625.276382] ? lock_is_held_type+0xd7/0x130 [ 625.276991] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 625.277713] ? vfs_write+0x422/0xac0 [ 625.278209] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 625.278933] ? fput+0x2a/0x50 [ 625.279362] __x64_sys_sendmmsg+0x99/0x100 [ 625.279931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 625.280616] do_syscall_64+0x3b/0x90 [ 625.281110] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 625.281778] RIP: 0033:0x7f89586d1b19 [ 625.282243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 625.284621] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 625.285599] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 625.286457] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 625.287334] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 625.288211] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 625.289129] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 625.290055] 18:02:46 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:02:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:02:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 18:02:46 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) (fail_nth: 1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 625.337409] FAULT_INJECTION: forcing a failure. [ 625.337409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.339105] CPU: 0 PID: 5282 Comm: syz-executor.0 Not tainted 5.18.0-rc2-next-20220414 #1 [ 625.340196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 625.341690] Call Trace: [ 625.342036] [ 625.342352] dump_stack_lvl+0x8b/0xb3 [ 625.342892] should_fail.cold+0x5/0xa [ 625.343429] _copy_to_user+0x2a/0x140 [ 625.343959] simple_read_from_buffer+0xcc/0x160 [ 625.344628] proc_fail_nth_read+0x194/0x220 [ 625.345189] ? proc_exe_link+0x1d0/0x1d0 [ 625.345728] ? security_file_permission+0xb1/0xd0 [ 625.346364] ? proc_exe_link+0x1d0/0x1d0 [ 625.346903] vfs_read+0x1ea/0x5d0 [ 625.347371] ksys_read+0x127/0x250 [ 625.347855] ? __ia32_sys_pwrite64+0x220/0x220 [ 625.348460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 625.349206] do_syscall_64+0x3b/0x90 [ 625.349693] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 625.350384] RIP: 0033:0x7ff21149669c [ 625.350903] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 625.353283] RSP: 002b:00007ff20ea59170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 625.354288] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff21149669c [ 625.355280] RDX: 000000000000000f RSI: 00007ff20ea591e0 RDI: 0000000000000003 [ 625.356211] RBP: 00007ff20ea591d0 R08: 0000000000000000 R09: 0000000000000000 [ 625.357177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.358106] R13: 00007ffe91a6bc7f R14: 00007ff20ea59300 R15: 0000000000022000 [ 625.359051] [ 625.419854] audit: type=1326 audit(1649959366.502:98): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5284 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aea92bb19 code=0x0 [ 625.472534] audit: type=1326 audit(1649959366.552:99): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5284 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f9aea8de72b code=0x0 18:02:59 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:02:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 23) socket$nl_netfilter(0x10, 0x3, 0xc) 18:02:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5421, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:02:59 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:02:59 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 638.347624] audit: type=1326 audit(1649959379.429:100): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5303 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:02:59 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:02:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8983, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:02:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 1) 18:02:59 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x2, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 638.382985] FAULT_INJECTION: forcing a failure. [ 638.382985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.385618] CPU: 0 PID: 5313 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 638.387382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 638.389825] Call Trace: [ 638.390375] [ 638.390855] dump_stack_lvl+0x8b/0xb3 [ 638.391687] should_fail.cold+0x5/0xa [ 638.392519] _copy_from_user+0x2a/0x170 [ 638.393401] __copy_msghdr_from_user+0x91/0x4b0 [ 638.394417] ? __ia32_sys_shutdown+0x70/0x70 [ 638.395347] ? udp_v6_early_demux+0xdf0/0xdf0 [ 638.396319] ? inet6_sendmsg+0x4a/0x140 [ 638.397182] ? inet6_sendmsg+0xbd/0x140 [ 638.398064] ? inet6_compat_ioctl+0x310/0x310 [ 638.399027] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 638.400221] ? sock_sendmsg+0x55/0x190 [ 638.401097] sendmsg_copy_msghdr+0xa1/0x160 [ 638.402029] ? __ia32_sys_recvmmsg+0x260/0x260 [ 638.403019] ? __lock_acquire+0x164e/0x6120 [ 638.403968] ___sys_sendmsg+0xc6/0x170 [ 638.404830] ? sendmsg_copy_msghdr+0x160/0x160 [ 638.405821] ? finish_task_switch.isra.0+0x226/0x870 [ 638.406929] ? lock_is_held_type+0xd7/0x130 [ 638.407867] ? find_held_lock+0x2c/0x110 [ 638.408757] ? lock_release+0x3b2/0x750 [ 638.409613] ? __might_fault+0xd1/0x170 [ 638.410479] ? lock_downgrade+0x6d0/0x6d0 [ 638.411386] ? lock_is_held_type+0xd7/0x130 [ 638.412334] __sys_sendmmsg+0x195/0x470 [ 638.413228] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 638.414155] ? lock_is_held_type+0xd7/0x130 [ 638.415112] ? bit_wait_io_timeout+0x160/0x160 [ 638.416089] ? lock_is_held_type+0xd7/0x130 [ 638.417047] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 638.418223] ? vfs_write+0x422/0xac0 [ 638.419021] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 638.420194] ? fput+0x2a/0x50 [ 638.420888] __x64_sys_sendmmsg+0x99/0x100 [ 638.421799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 638.422901] do_syscall_64+0x3b/0x90 [ 638.423702] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 638.424824] RIP: 0033:0x7f89586d1b19 [ 638.425611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 638.429475] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 638.431098] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 638.432609] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 638.434148] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 638.435652] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 638.437170] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 638.438715] [ 638.439752] audit: type=1326 audit(1649959379.479:101): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5303 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 [ 638.468168] FAULT_INJECTION: forcing a failure. [ 638.468168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.469522] CPU: 1 PID: 5315 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 638.470428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 638.471616] Call Trace: [ 638.471889] [ 638.472134] dump_stack_lvl+0x8b/0xb3 [ 638.472562] should_fail.cold+0x5/0xa [ 638.472979] _copy_from_user+0x2a/0x170 [ 638.473417] __copy_msghdr_from_user+0x91/0x4b0 [ 638.473917] ? __ia32_sys_shutdown+0x70/0x70 [ 638.474401] ? __lock_acquire+0xbac/0x6120 [ 638.474866] sendmsg_copy_msghdr+0xa1/0x160 [ 638.475342] ? __ia32_sys_recvmmsg+0x260/0x260 [ 638.475825] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 638.476392] ___sys_sendmsg+0xc6/0x170 [ 638.476839] ? sendmsg_copy_msghdr+0x160/0x160 [ 638.477328] ? lock_release+0x3b2/0x750 [ 638.477746] ? __fget_files+0x265/0x470 [ 638.478191] ? lock_downgrade+0x6d0/0x6d0 [ 638.478650] ? __fget_files+0x287/0x470 [ 638.479090] ? __fget_light+0xea/0x270 [ 638.479526] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 638.480132] __sys_sendmmsg+0x195/0x470 [ 638.480576] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 638.481058] ? lock_is_held_type+0xd7/0x130 [ 638.481553] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 638.482084] ? bit_wait_io_timeout+0x160/0x160 [ 638.482585] ? lock_is_held_type+0xd7/0x130 [ 638.483051] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 638.483663] ? vfs_write+0x422/0xac0 [ 638.484063] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 638.484661] ? fput+0x2a/0x50 [ 638.485017] __x64_sys_sendmmsg+0x99/0x100 [ 638.485487] ? syscall_enter_from_user_mode+0x1d/0x50 [ 638.486038] do_syscall_64+0x3b/0x90 [ 638.486455] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 638.487016] RIP: 0033:0x7f8f47a3fb19 [ 638.487417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 638.489373] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 638.490195] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 638.490955] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 638.491714] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 638.492481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.493244] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 638.494009] [ 638.508493] audit: type=1326 audit(1649959379.591:102): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5308 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aea92bb19 code=0x0 [ 638.519548] audit: type=1326 audit(1649959379.600:103): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5308 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f9aea8de72b code=0x0 18:03:16 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:03:16 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:03:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 2) 18:03:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 24) socket$nl_netfilter(0x10, 0x3, 0xc) [ 654.980212] audit: type=1326 audit(1649959396.062:104): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5327 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:03:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5450, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:03:16 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x3, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:03:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:03:16 executing program 7: r0 = syz_io_uring_setup(0x46ac, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 655.016780] FAULT_INJECTION: forcing a failure. [ 655.016780] name failslab, interval 1, probability 0, space 0, times 0 [ 655.019278] CPU: 1 PID: 5338 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 655.020371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 655.023157] Call Trace: [ 655.023980] [ 655.024291] dump_stack_lvl+0x8b/0xb3 [ 655.024810] should_fail.cold+0x5/0xa [ 655.025343] ? __alloc_skb+0x211/0x340 [ 655.025877] should_failslab+0x5/0x10 [ 655.026393] kmem_cache_alloc_node+0x55/0x490 [ 655.027009] ? lock_chain_count+0x20/0x20 [ 655.027575] __alloc_skb+0x211/0x340 [ 655.028088] ? __is_insn_slot_addr+0x122/0x250 [ 655.028634] alloc_skb_with_frags+0x92/0x6a0 [ 655.029226] ? mark_lock.part.0+0xef/0x2f60 [ 655.029778] sock_alloc_send_pskb+0x7ab/0x930 [ 655.030362] ? __lock_acquire+0xbac/0x6120 [ 655.030929] ? sock_wmalloc+0x120/0x120 [ 655.031456] ? mark_lock.part.0+0xef/0x2f60 [ 655.032033] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 655.032729] ? lock_chain_count+0x20/0x20 [ 655.033336] ? lock_chain_count+0x20/0x20 [ 655.033919] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 655.034597] ? ip6_mtu+0x189/0x340 [ 655.035080] ? ip_frag_init+0x350/0x350 [ 655.035626] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 655.036282] ? ip6_mtu+0x1b0/0x340 [ 655.036794] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 655.037560] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 655.038317] ? ip6_setup_cork+0xd03/0x1550 [ 655.038903] ip6_make_skb+0x29a/0x4a0 [ 655.039415] ? ip_frag_init+0x350/0x350 [ 655.039956] ? ip6_push_pending_frames+0xe0/0xe0 [ 655.040603] ? lock_downgrade+0x6d0/0x6d0 [ 655.041196] ? ip6_default_advmss+0x4d0/0x4d0 [ 655.041823] udpv6_sendmsg+0x1d03/0x28d0 [ 655.042378] ? ip_frag_init+0x350/0x350 [ 655.042926] ? udp_v6_early_demux+0xdf0/0xdf0 [ 655.043530] ? exc_page_fault+0xca/0x1a0 [ 655.044082] ? lockdep_hardirqs_on+0x79/0x100 [ 655.044702] ? exc_page_fault+0xca/0x1a0 [ 655.045295] ? asm_exc_page_fault+0x1e/0x30 [ 655.045914] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 655.046651] ? udp_v6_early_demux+0xdf0/0xdf0 [ 655.047237] ? inet6_sendmsg+0x4a/0x140 [ 655.047778] inet6_sendmsg+0xfd/0x140 [ 655.048297] ? inet6_compat_ioctl+0x310/0x310 [ 655.048965] sock_sendmsg+0xee/0x190 [ 655.049561] ____sys_sendmsg+0x32e/0x870 [ 655.050907] ? kernel_sendmsg+0x50/0x50 [ 655.051455] ? __ia32_sys_recvmmsg+0x260/0x260 [ 655.052067] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 655.052901] ___sys_sendmsg+0xf3/0x170 [ 655.053520] ? sendmsg_copy_msghdr+0x160/0x160 [ 655.054124] ? lock_release+0x3b2/0x750 [ 655.054667] ? __fget_files+0x265/0x470 [ 655.055215] ? lock_downgrade+0x6d0/0x6d0 [ 655.055764] ? __fget_files+0x287/0x470 [ 655.056294] ? __fget_light+0xea/0x270 [ 655.056806] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 655.058278] __sys_sendmmsg+0x195/0x470 [ 655.059449] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 655.060660] ? lock_is_held_type+0xd7/0x130 [ 655.062004] ? bit_wait_io_timeout+0x160/0x160 [ 655.063306] ? lock_is_held_type+0xd7/0x130 [ 655.064703] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 655.066437] ? vfs_write+0x422/0xac0 [ 655.067606] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 655.069350] ? fput+0x2a/0x50 [ 655.070359] __x64_sys_sendmmsg+0x99/0x100 [ 655.071674] ? syscall_enter_from_user_mode+0x1d/0x50 [ 655.073321] do_syscall_64+0x3b/0x90 [ 655.074463] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 655.076069] RIP: 0033:0x7f8f47a3fb19 [ 655.077213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 655.082884] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 655.085301] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 655.087516] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 655.089780] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 655.092103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.094456] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 655.096789] [ 655.099559] audit: type=1326 audit(1649959396.180:105): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5327 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 [ 655.115595] FAULT_INJECTION: forcing a failure. [ 655.115595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.119311] CPU: 0 PID: 5337 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 655.121963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 655.125597] Call Trace: [ 655.126415] [ 655.127124] dump_stack_lvl+0x8b/0xb3 [ 655.128342] should_fail.cold+0x5/0xa [ 655.129608] _copy_from_user+0x2a/0x170 18:03:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5451, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 655.130893] __copy_msghdr_from_user+0x91/0x4b0 [ 655.133275] ? __ia32_sys_shutdown+0x70/0x70 [ 655.133877] ? udp_v6_early_demux+0xdf0/0xdf0 [ 655.134480] ? inet6_sendmsg+0x4a/0x140 [ 655.135013] ? inet6_sendmsg+0xbd/0x140 [ 655.135541] ? inet6_compat_ioctl+0x310/0x310 [ 655.136138] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 655.136880] ? sock_sendmsg+0x55/0x190 [ 655.137477] sendmsg_copy_msghdr+0xa1/0x160 [ 655.138078] ? __ia32_sys_recvmmsg+0x260/0x260 [ 655.138702] ? __lock_acquire+0x164e/0x6120 [ 655.139295] ___sys_sendmsg+0xc6/0x170 [ 655.139318] audit: type=1326 audit(1649959396.212:106): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5325 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aea92bb19 code=0x0 [ 655.139831] ? sendmsg_copy_msghdr+0x160/0x160 [ 655.139866] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 655.144208] ? lock_is_held_type+0xd7/0x130 [ 655.144879] ? find_held_lock+0x2c/0x110 [ 655.145520] ? lock_release+0x3b2/0x750 [ 655.146052] ? __might_fault+0xd1/0x170 [ 655.146582] ? lock_downgrade+0x6d0/0x6d0 [ 655.147146] ? lock_is_held_type+0xd7/0x130 [ 655.147737] __sys_sendmmsg+0x195/0x470 [ 655.148268] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 655.148847] ? lock_is_held_type+0xd7/0x130 [ 655.149520] ? bit_wait_io_timeout+0x160/0x160 [ 655.150154] ? lock_is_held_type+0xd7/0x130 [ 655.150749] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 655.151478] ? vfs_write+0x422/0xac0 [ 655.152033] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 655.152755] ? fput+0x2a/0x50 [ 655.153244] __x64_sys_sendmmsg+0x99/0x100 [ 655.153827] ? syscall_enter_from_user_mode+0x1d/0x50 [ 655.154511] do_syscall_64+0x3b/0x90 [ 655.155004] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 655.155683] RIP: 0033:0x7f89586d1b19 [ 655.156171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 655.158600] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 655.159579] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 655.160501] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 655.161487] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 655.162398] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 655.163320] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 655.169551] [ 655.183552] audit: type=1326 audit(1649959396.265:107): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5325 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7f9aea9508e1 code=0x0 [ 655.189153] audit: type=1326 audit(1649959396.271:108): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5325 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aea92bb19 code=0x0 18:03:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:03:16 executing program 7: r0 = syz_io_uring_setup(0x46ac, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:03:16 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:03:16 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x4, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:03:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 655.336800] audit: type=1326 audit(1649959396.419:109): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5358 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 655.387661] audit: type=1326 audit(1649959396.468:110): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5358 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 18:03:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 3) 18:03:31 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x5, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:03:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 25) socket$nl_netfilter(0x10, 0x3, 0xc) 18:03:31 executing program 7: r0 = syz_io_uring_setup(0x46ac, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 670.818812] FAULT_INJECTION: forcing a failure. [ 670.818812] name failslab, interval 1, probability 0, space 0, times 0 [ 670.820083] CPU: 0 PID: 5375 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 670.820970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 670.822202] Call Trace: [ 670.822475] [ 670.822717] dump_stack_lvl+0x8b/0xb3 [ 670.823139] should_fail.cold+0x5/0xa [ 670.823563] ? create_object.isra.0+0x3a/0xa20 [ 670.824062] should_failslab+0x5/0x10 [ 670.824480] kmem_cache_alloc+0x5b/0x480 [ 670.824928] create_object.isra.0+0x3a/0xa20 [ 670.825423] ? kasan_unpoison+0x23/0x50 [ 670.825857] kmem_cache_alloc_node+0x248/0x490 [ 670.826358] __alloc_skb+0x211/0x340 [ 670.826762] ? __is_insn_slot_addr+0x122/0x250 [ 670.827277] alloc_skb_with_frags+0x92/0x6a0 [ 670.827756] ? mark_lock.part.0+0xef/0x2f60 [ 670.828226] sock_alloc_send_pskb+0x7ab/0x930 18:03:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5460, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:03:31 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x0, &(0x7f0000000280)={0x0, 0xfcfc, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:03:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:03:31 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) [ 670.828717] ? __lock_acquire+0xbac/0x6120 [ 670.829369] ? sock_wmalloc+0x120/0x120 [ 670.829808] ? mark_lock.part.0+0xef/0x2f60 [ 670.830278] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 670.830854] ? lock_chain_count+0x20/0x20 [ 670.831312] ? lock_chain_count+0x20/0x20 [ 670.831761] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 670.832317] ? ip6_mtu+0x189/0x340 [ 670.832701] ? ip_frag_init+0x350/0x350 [ 670.833140] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 670.833649] ? ip6_mtu+0x1b0/0x340 [ 670.834035] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 670.834617] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 670.835214] ? ip6_setup_cork+0xd03/0x1550 [ 670.835670] ip6_make_skb+0x29a/0x4a0 [ 670.836072] ? ip_frag_init+0x350/0x350 [ 670.836511] ? ip6_push_pending_frames+0xe0/0xe0 [ 670.837015] ? lock_downgrade+0x6d0/0x6d0 [ 670.837483] ? ip6_default_advmss+0x4d0/0x4d0 [ 670.837979] udpv6_sendmsg+0x1d03/0x28d0 [ 670.838424] ? ip_frag_init+0x350/0x350 [ 670.838851] ? udp_v6_early_demux+0xdf0/0xdf0 [ 670.839344] ? exc_page_fault+0xca/0x1a0 [ 670.839790] ? lockdep_hardirqs_on+0x79/0x100 [ 670.840280] ? exc_page_fault+0xca/0x1a0 [ 670.840708] ? asm_exc_page_fault+0x1e/0x30 [ 670.841208] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 670.841787] ? udp_v6_early_demux+0xdf0/0xdf0 [ 670.842274] ? inet6_sendmsg+0x4a/0x140 [ 670.842704] inet6_sendmsg+0xfd/0x140 [ 670.843119] ? inet6_compat_ioctl+0x310/0x310 [ 670.843588] sock_sendmsg+0xee/0x190 [ 670.843997] ____sys_sendmsg+0x32e/0x870 [ 670.844429] ? kernel_sendmsg+0x50/0x50 [ 670.844870] ? __ia32_sys_recvmmsg+0x260/0x260 [ 670.845354] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 670.845907] ___sys_sendmsg+0xf3/0x170 [ 670.846323] ? sendmsg_copy_msghdr+0x160/0x160 [ 670.846801] ? lock_release+0x3b2/0x750 [ 670.847214] ? __fget_files+0x265/0x470 [ 670.847632] ? lock_downgrade+0x6d0/0x6d0 [ 670.848077] ? __fget_files+0x287/0x470 [ 670.848524] ? __fget_light+0xea/0x270 [ 670.848935] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 670.849566] __sys_sendmmsg+0x195/0x470 [ 670.849996] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 670.850469] ? lock_is_held_type+0xd7/0x130 [ 670.850929] ? bit_wait_io_timeout+0x160/0x160 [ 670.851434] ? lock_is_held_type+0xd7/0x130 [ 670.851909] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 670.852518] ? vfs_write+0x422/0xac0 [ 670.852920] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 670.853529] ? fput+0x2a/0x50 [ 670.853873] __x64_sys_sendmmsg+0x99/0x100 [ 670.854326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 670.854870] do_syscall_64+0x3b/0x90 [ 670.855266] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 670.855804] RIP: 0033:0x7f8f47a3fb19 [ 670.856201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 670.858133] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 670.858947] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 670.859707] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 670.860474] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 670.861251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.862016] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 670.862799] [ 670.869786] audit: type=1326 audit(1649959411.952:111): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5371 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aea92bb19 code=0x0 [ 670.884285] FAULT_INJECTION: forcing a failure. [ 670.884285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.886660] CPU: 1 PID: 5382 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 670.888300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 670.890582] Call Trace: [ 670.891094] [ 670.891554] dump_stack_lvl+0x8b/0xb3 [ 670.892339] should_fail.cold+0x5/0xa [ 670.893117] _copy_from_user+0x2a/0x170 [ 670.893950] __copy_msghdr_from_user+0x91/0x4b0 [ 670.894893] ? __ia32_sys_shutdown+0x70/0x70 [ 670.895801] ? udp_v6_early_demux+0xdf0/0xdf0 [ 670.896707] ? inet6_sendmsg+0x4a/0x140 [ 670.897538] ? inet6_sendmsg+0xbd/0x140 [ 670.898334] ? inet6_compat_ioctl+0x310/0x310 [ 670.899238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 670.900335] ? sock_sendmsg+0x55/0x190 [ 670.901134] sendmsg_copy_msghdr+0xa1/0x160 [ 670.902043] ? __ia32_sys_recvmmsg+0x260/0x260 [ 670.902978] ? __lock_acquire+0x164e/0x6120 [ 670.903873] ___sys_sendmsg+0xc6/0x170 [ 670.904661] ? sendmsg_copy_msghdr+0x160/0x160 [ 670.905594] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 670.906709] ? lock_is_held_type+0xd7/0x130 [ 670.907588] ? find_held_lock+0x2c/0x110 [ 670.908402] ? lock_release+0x3b2/0x750 [ 670.909217] ? __might_fault+0xd1/0x170 [ 670.910018] ? lock_downgrade+0x6d0/0x6d0 [ 670.910858] ? lock_is_held_type+0xd7/0x130 [ 670.911744] __sys_sendmmsg+0x195/0x470 [ 670.912555] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 670.913444] ? lock_is_held_type+0xd7/0x130 [ 670.914325] ? bit_wait_io_timeout+0x160/0x160 [ 670.915239] ? lock_is_held_type+0xd7/0x130 [ 670.916111] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 670.917214] ? vfs_write+0x422/0xac0 [ 670.917969] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 670.919057] ? fput+0x2a/0x50 [ 670.919689] __x64_sys_sendmmsg+0x99/0x100 [ 670.920532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 670.921568] do_syscall_64+0x3b/0x90 [ 670.922313] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 670.923342] RIP: 0033:0x7f89586d1b19 [ 670.924084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 670.927717] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 670.929257] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 670.930681] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 670.932102] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 670.933538] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 670.934945] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 670.936385] [ 670.945189] audit: type=1326 audit(1649959412.001:112): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5371 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f9aea8de72b code=0x0 18:03:31 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x6, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:03:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:03:32 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x7, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 670.997576] audit: type=1326 audit(1649959412.079:113): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5376 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:03:32 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:03:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8901, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:03:32 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x8, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 671.046872] audit: type=1326 audit(1649959412.129:114): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5376 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 18:03:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:03:32 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x9, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 686.953490] FAULT_INJECTION: forcing a failure. [ 686.953490] name failslab, interval 1, probability 0, space 0, times 0 [ 686.954997] CPU: 1 PID: 5424 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 686.956042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 686.957400] Call Trace: [ 686.957789] [ 686.958090] dump_stack_lvl+0x8b/0xb3 [ 686.958605] should_fail.cold+0x5/0xa [ 686.959129] should_failslab+0x5/0x10 [ 686.959653] __kmalloc_node_track_caller+0x7e/0x440 [ 686.960333] ? alloc_skb_with_frags+0x92/0x6a0 [ 686.960960] __alloc_skb+0xe3/0x340 [ 686.961493] alloc_skb_with_frags+0x92/0x6a0 [ 686.962106] ? mark_lock.part.0+0xef/0x2f60 [ 686.962692] sock_alloc_send_pskb+0x7ab/0x930 [ 686.963302] ? __lock_acquire+0xbac/0x6120 [ 686.963845] ? sock_wmalloc+0x120/0x120 [ 686.964337] ? mark_lock.part.0+0xef/0x2f60 [ 686.964872] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 686.965547] ? lock_chain_count+0x20/0x20 [ 686.966114] ? lock_chain_count+0x20/0x20 [ 686.966680] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 686.967357] ? ip6_mtu+0x189/0x340 [ 686.967849] ? ip_frag_init+0x350/0x350 [ 686.968385] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 686.969006] ? ip6_mtu+0x1b0/0x340 [ 686.969561] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 686.970617] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 686.971402] ? ip6_setup_cork+0xd03/0x1550 [ 686.971990] ip6_make_skb+0x29a/0x4a0 [ 686.972507] ? ip_frag_init+0x350/0x350 [ 686.973178] ? ip6_push_pending_frames+0xe0/0xe0 [ 686.973863] ? lock_downgrade+0x6d0/0x6d0 [ 686.974419] ? ip6_default_advmss+0x4d0/0x4d0 [ 686.975062] udpv6_sendmsg+0x1d03/0x28d0 [ 686.975601] ? ip_frag_init+0x350/0x350 [ 686.976134] ? udp_v6_early_demux+0xdf0/0xdf0 [ 686.976722] ? exc_page_fault+0xca/0x1a0 [ 686.977268] ? lockdep_hardirqs_on+0x79/0x100 [ 686.977884] ? exc_page_fault+0xca/0x1a0 [ 686.978423] ? asm_exc_page_fault+0x1e/0x30 [ 686.979016] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 686.979724] ? udp_v6_early_demux+0xdf0/0xdf0 [ 686.980293] ? inet6_sendmsg+0x4a/0x140 [ 686.980819] inet6_sendmsg+0xfd/0x140 [ 686.981304] ? inet6_compat_ioctl+0x310/0x310 [ 686.981929] sock_sendmsg+0xee/0x190 [ 686.982422] ____sys_sendmsg+0x32e/0x870 [ 686.982965] ? kernel_sendmsg+0x50/0x50 [ 686.983491] ? __ia32_sys_recvmmsg+0x260/0x260 [ 686.984097] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 686.984780] ___sys_sendmsg+0xf3/0x170 [ 686.985282] ? sendmsg_copy_msghdr+0x160/0x160 [ 686.985908] ? lock_release+0x3b2/0x750 [ 686.986413] ? __fget_files+0x265/0x470 [ 686.986943] ? lock_downgrade+0x6d0/0x6d0 [ 686.987504] ? __fget_files+0x287/0x470 [ 686.988046] ? __fget_light+0xea/0x270 [ 686.988568] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 686.989287] __sys_sendmmsg+0x195/0x470 [ 686.989842] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 686.990392] ? lock_is_held_type+0xd7/0x130 [ 686.990974] ? bit_wait_io_timeout+0x160/0x160 [ 686.991551] ? lock_is_held_type+0xd7/0x130 [ 686.992127] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 686.992844] ? vfs_write+0x422/0xac0 [ 686.993340] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 686.994085] ? fput+0x2a/0x50 [ 686.994512] __x64_sys_sendmmsg+0x99/0x100 [ 686.995048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 686.995814] do_syscall_64+0x3b/0x90 [ 686.996299] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 686.996982] RIP: 0033:0x7f8f47a3fb19 [ 687.001553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 687.003919] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 687.004945] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 687.005908] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 687.006868] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 687.008281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.009541] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 687.010509] [ 687.013321] audit: type=1326 audit(1649959428.095:115): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5417 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 687.036517] audit: type=1326 audit(1649959428.118:116): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5417 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 18:03:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:03:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 4) 18:03:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 26) socket$nl_netfilter(0x10, 0x3, 0xc) 18:03:48 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:03:48 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:03:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8902, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:03:48 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xa, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:03:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="ea", 0x1}], 0x1, 0x8000004, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x8) r2 = getpgrp(0xffffffffffffffff) r3 = signalfd(r0, &(0x7f0000000300)={[0xbd8]}, 0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) kcmp(0x0, r2, 0x0, r3, r4) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)={0x0, 0x101}) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)={r6, 0x101}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x5, "af2f1a9317bc6f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051500)={0x7cbb, [{}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0xff, "dda46f09132a67"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004bac0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "1b7287ad0136fc"}) pwrite64(r1, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4442, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x24004840}, 0x4000050) ioctl$EVIOCSKEYCODE_V2(r11, 0x40284504, &(0x7f00000002c0)={0x7, 0xc, 0x20, 0x2447, "f79c9a19d36565404fa2d5feffdaf04f518987a4d1f9aaf8258e48e9d6e6da13"}) fallocate(r11, 0x8, 0x0, 0x8000000) 18:03:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:03:48 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xb, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 687.097303] FAULT_INJECTION: forcing a failure. [ 687.097303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.098931] CPU: 1 PID: 5432 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 687.100011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 687.101854] Call Trace: [ 687.102268] [ 687.102632] dump_stack_lvl+0x8b/0xb3 [ 687.103275] should_fail.cold+0x5/0xa [ 687.103870] _copy_from_user+0x2a/0x170 [ 687.104516] __copy_msghdr_from_user+0x91/0x4b0 [ 687.105174] ? __ia32_sys_shutdown+0x70/0x70 [ 687.105831] ? udp_v6_early_demux+0xdf0/0xdf0 [ 687.106436] ? inet6_sendmsg+0x4a/0x140 [ 687.106996] ? inet6_sendmsg+0xbd/0x140 [ 687.107540] ? inet6_compat_ioctl+0x310/0x310 [ 687.108156] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 687.108912] ? sock_sendmsg+0x55/0x190 [ 687.109511] sendmsg_copy_msghdr+0xa1/0x160 [ 687.110133] ? __ia32_sys_recvmmsg+0x260/0x260 [ 687.110766] ? __lock_acquire+0x164e/0x6120 [ 687.111365] ___sys_sendmsg+0xc6/0x170 [ 687.111903] ? sendmsg_copy_msghdr+0x160/0x160 [ 687.112529] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 687.113330] ? lock_is_held_type+0xd7/0x130 [ 687.113963] ? find_held_lock+0x2c/0x110 [ 687.114510] ? lock_release+0x3b2/0x750 [ 687.115083] ? __might_fault+0xd1/0x170 [ 687.115623] ? lock_downgrade+0x6d0/0x6d0 [ 687.116190] ? lock_is_held_type+0xd7/0x130 [ 687.116795] __sys_sendmmsg+0x195/0x470 [ 687.117336] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 687.117961] ? lock_is_held_type+0xd7/0x130 [ 687.118573] ? bit_wait_io_timeout+0x160/0x160 [ 687.119198] ? lock_is_held_type+0xd7/0x130 [ 687.119790] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 687.120550] ? vfs_write+0x422/0xac0 18:03:48 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xc, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 687.121073] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 687.121855] ? fput+0x2a/0x50 [ 687.122495] __x64_sys_sendmmsg+0x99/0x100 [ 687.123073] ? syscall_enter_from_user_mode+0x1d/0x50 [ 687.123778] do_syscall_64+0x3b/0x90 [ 687.124321] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 687.125137] RIP: 0033:0x7f89586d1b19 [ 687.125800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 687.128684] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 687.129823] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 687.131007] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 687.132174] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 687.133331] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 687.134420] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 687.135430] 18:03:48 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:03:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8903, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:03:48 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xd, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:03:48 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xe, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:03:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8904, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:03:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 5) 18:03:48 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) [ 687.410942] FAULT_INJECTION: forcing a failure. [ 687.410942] name failslab, interval 1, probability 0, space 0, times 0 [ 687.412467] CPU: 0 PID: 5461 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 687.413679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 687.415170] Call Trace: [ 687.415523] [ 687.415836] dump_stack_lvl+0x8b/0xb3 [ 687.416382] should_fail.cold+0x5/0xa [ 687.416922] ? create_object.isra.0+0x3a/0xa20 [ 687.417665] should_failslab+0x5/0x10 [ 687.418199] kmem_cache_alloc+0x5b/0x480 [ 687.418788] create_object.isra.0+0x3a/0xa20 [ 687.419408] ? kasan_unpoison+0x23/0x50 [ 687.419967] __kmalloc_node_track_caller+0x269/0x440 [ 687.420661] ? alloc_skb_with_frags+0x92/0x6a0 [ 687.421310] __alloc_skb+0xe3/0x340 [ 687.422451] alloc_skb_with_frags+0x92/0x6a0 [ 687.423647] ? mark_lock.part.0+0xef/0x2f60 [ 687.424779] sock_alloc_send_pskb+0x7ab/0x930 [ 687.429831] ? __lock_acquire+0xbac/0x6120 [ 687.430438] ? sock_wmalloc+0x120/0x120 [ 687.431120] ? mark_lock.part.0+0xef/0x2f60 [ 687.431732] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 687.432467] ? lock_chain_count+0x20/0x20 [ 687.433065] ? lock_chain_count+0x20/0x20 [ 687.433747] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 687.434440] ? ip6_mtu+0x189/0x340 [ 687.434938] ? ip_frag_init+0x350/0x350 [ 687.435487] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 687.436128] ? ip6_mtu+0x1b0/0x340 [ 687.436620] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 687.437365] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 687.439068] ? ip6_setup_cork+0xd03/0x1550 [ 687.440203] ip6_make_skb+0x29a/0x4a0 [ 687.441169] ? ip_frag_init+0x350/0x350 [ 687.441756] ? ip6_push_pending_frames+0xe0/0xe0 [ 687.442432] ? lock_downgrade+0x6d0/0x6d0 [ 687.443000] ? ip6_default_advmss+0x4d0/0x4d0 [ 687.443613] udpv6_sendmsg+0x1d03/0x28d0 [ 687.444172] ? ip_frag_init+0x350/0x350 [ 687.444720] ? udp_v6_early_demux+0xdf0/0xdf0 [ 687.445338] ? exc_page_fault+0xca/0x1a0 [ 687.445967] ? lockdep_hardirqs_on+0x79/0x100 [ 687.446626] ? exc_page_fault+0xca/0x1a0 [ 687.447179] ? asm_exc_page_fault+0x1e/0x30 [ 687.447794] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 687.448529] ? udp_v6_early_demux+0xdf0/0xdf0 [ 687.449128] ? inet6_sendmsg+0x4a/0x140 [ 687.449722] inet6_sendmsg+0xfd/0x140 [ 687.450235] ? inet6_compat_ioctl+0x310/0x310 [ 687.450846] sock_sendmsg+0xee/0x190 [ 687.451362] ____sys_sendmsg+0x32e/0x870 [ 687.451916] ? kernel_sendmsg+0x50/0x50 [ 687.452451] ? __ia32_sys_recvmmsg+0x260/0x260 [ 687.453075] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 687.454256] ___sys_sendmsg+0xf3/0x170 [ 687.455332] ? sendmsg_copy_msghdr+0x160/0x160 [ 687.456492] ? lock_release+0x3b2/0x750 [ 687.457510] ? __fget_files+0x265/0x470 [ 687.458853] ? lock_downgrade+0x6d0/0x6d0 [ 687.460265] ? __fget_files+0x287/0x470 [ 687.461502] ? __fget_light+0xea/0x270 [ 687.462050] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 687.462815] __sys_sendmmsg+0x195/0x470 [ 687.463383] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 687.464027] ? lock_is_held_type+0xd7/0x130 [ 687.464651] ? bit_wait_io_timeout+0x160/0x160 [ 687.465291] ? lock_is_held_type+0xd7/0x130 [ 687.466003] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 687.466755] ? vfs_write+0x422/0xac0 [ 687.467275] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 687.468039] ? fput+0x2a/0x50 [ 687.468493] __x64_sys_sendmmsg+0x99/0x100 [ 687.469080] ? syscall_enter_from_user_mode+0x1d/0x50 [ 687.469816] do_syscall_64+0x3b/0x90 [ 687.470337] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 687.471062] RIP: 0033:0x7f8f47a3fb19 [ 687.471579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 687.474112] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 687.475125] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 687.476084] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 687.477055] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 687.478115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.479086] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 687.480089] [ 689.208383] Bluetooth: hci0: command 0x0c1a tx timeout 18:04:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8906, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:04:13 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x10, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:04:13 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:04:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e4, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:04:13 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:04:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 6) 18:04:13 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) [ 712.881924] FAULT_INJECTION: forcing a failure. [ 712.881924] name failslab, interval 1, probability 0, space 0, times 0 [ 712.883712] CPU: 1 PID: 5475 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 712.884833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 712.886370] Call Trace: [ 712.886722] [ 712.887030] dump_stack_lvl+0x8b/0xb3 [ 712.887561] should_fail.cold+0x5/0xa [ 712.888086] ? skb_clone+0x170/0x3c0 [ 712.888607] should_failslab+0x5/0x10 [ 712.889187] kmem_cache_alloc+0x5b/0x480 [ 712.889773] skb_clone+0x170/0x3c0 [ 712.890302] neigh_probe+0x54/0x110 [ 712.890826] __neigh_event_send+0xa90/0x1530 [ 712.891444] neigh_resolve_output+0x54a/0x7f0 [ 712.892204] ? lock_release+0x3b2/0x750 [ 712.892761] ip6_finish_output2+0xb24/0x1ad0 [ 712.893374] __ip6_finish_output.part.0+0x4e0/0xa70 [ 712.894089] ip6_output+0x3bc/0x9d0 [ 712.894595] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 712.895319] ip6_local_out+0xd2/0x4b0 [ 712.895832] ip6_send_skb+0xb7/0x340 [ 712.896332] udp_v6_send_skb+0x7aa/0x15b0 [ 712.896891] udpv6_sendmsg+0x1d4e/0x28d0 [ 712.897432] ? ip_frag_init+0x350/0x350 [ 712.898263] ? udp_v6_early_demux+0xdf0/0xdf0 [ 712.899634] ? lock_is_held_type+0xd7/0x130 [ 712.901058] ? irqentry_enter+0x26/0x50 [ 712.902081] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 712.902789] ? lockdep_hardirqs_on+0x79/0x100 [ 712.903403] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 712.904163] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 712.904955] ? udp_v6_early_demux+0xdf0/0xdf0 [ 712.905564] ? inet6_sendmsg+0x4a/0x140 [ 712.906187] inet6_sendmsg+0xfd/0x140 [ 712.906743] ? inet6_compat_ioctl+0x310/0x310 [ 712.907397] sock_sendmsg+0xee/0x190 [ 712.907920] ____sys_sendmsg+0x32e/0x870 [ 712.908467] ? kernel_sendmsg+0x50/0x50 [ 712.908999] ? __ia32_sys_recvmmsg+0x260/0x260 [ 712.909627] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 712.910291] FAULT_INJECTION: forcing a failure. [ 712.910291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.910434] ___sys_sendmsg+0xf3/0x170 [ 712.912514] ? sendmsg_copy_msghdr+0x160/0x160 [ 712.913134] ? lock_release+0x3b2/0x750 [ 712.913675] ? __fget_files+0x265/0x470 [ 712.914237] ? lock_downgrade+0x6d0/0x6d0 [ 712.914826] ? __fget_files+0x287/0x470 [ 712.915371] ? __fget_light+0xea/0x270 [ 712.915890] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 712.916627] __sys_sendmmsg+0x195/0x470 [ 712.917221] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 712.917848] ? lock_is_held_type+0xd7/0x130 [ 712.918467] ? bit_wait_io_timeout+0x160/0x160 [ 712.919087] ? lock_is_held_type+0xd7/0x130 [ 712.919683] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 712.920472] ? vfs_write+0x422/0xac0 [ 712.920984] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 712.921722] ? fput+0x2a/0x50 [ 712.922288] __x64_sys_sendmmsg+0x99/0x100 [ 712.922855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 712.923531] do_syscall_64+0x3b/0x90 [ 712.924076] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 712.924779] RIP: 0033:0x7f8f47a3fb19 [ 712.925273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 712.927758] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 712.928780] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 712.929715] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 712.930658] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 712.931571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.932490] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 712.933431] [ 712.933735] CPU: 0 PID: 5480 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 712.939014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 712.940488] Call Trace: [ 712.940844] [ 712.941148] dump_stack_lvl+0x8b/0xb3 [ 712.941685] should_fail.cold+0x5/0xa [ 712.942247] _copy_from_user+0x2a/0x170 [ 712.942776] __copy_msghdr_from_user+0x91/0x4b0 [ 712.943404] ? __ia32_sys_shutdown+0x70/0x70 [ 712.943991] ? udp_v6_early_demux+0xdf0/0xdf0 [ 712.944597] ? inet6_sendmsg+0x4a/0x140 [ 712.945133] ? inet6_sendmsg+0xbd/0x140 [ 712.945672] ? inet6_compat_ioctl+0x310/0x310 [ 712.946295] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 712.947035] ? sock_sendmsg+0x55/0x190 [ 712.947583] sendmsg_copy_msghdr+0xa1/0x160 [ 712.948180] ? __ia32_sys_recvmmsg+0x260/0x260 [ 712.948803] ? __lock_acquire+0x164e/0x6120 [ 712.949407] ___sys_sendmsg+0xc6/0x170 [ 712.950000] ? sendmsg_copy_msghdr+0x160/0x160 [ 712.950613] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 712.951383] ? lock_is_held_type+0xd7/0x130 [ 712.951982] ? find_held_lock+0x2c/0x110 [ 712.952512] ? lock_release+0x3b2/0x750 [ 712.953051] ? __might_fault+0xd1/0x170 [ 712.953588] ? lock_downgrade+0x6d0/0x6d0 [ 712.958257] ? lock_is_held_type+0xd7/0x130 [ 712.958832] __sys_sendmmsg+0x195/0x470 [ 712.959384] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 712.959961] ? lock_is_held_type+0xd7/0x130 [ 712.960564] ? bit_wait_io_timeout+0x160/0x160 [ 712.961229] ? lock_is_held_type+0xd7/0x130 [ 712.961861] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 712.962611] ? vfs_write+0x422/0xac0 [ 712.963153] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 712.963889] ? fput+0x2a/0x50 [ 712.964325] __x64_sys_sendmmsg+0x99/0x100 [ 712.964924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 712.965635] do_syscall_64+0x3b/0x90 [ 712.966208] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 712.966887] RIP: 0033:0x7f89586d1b19 [ 712.967364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 712.969720] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 712.974794] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 712.975718] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 712.976638] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 712.977566] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 712.978529] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 712.979484] 18:04:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 27) socket$nl_netfilter(0x10, 0x3, 0xc) 18:04:14 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x11, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:04:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8907, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:04:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40049409, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:04:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 713.092189] audit: type=1326 audit(1649959454.174:117): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5478 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 713.142095] audit: type=1326 audit(1649959454.224:118): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5478 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 18:04:14 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x12, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:04:14 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:04:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 28) socket$nl_netfilter(0x10, 0x3, 0xc) 18:04:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8912, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 713.221180] FAULT_INJECTION: forcing a failure. [ 713.221180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.223042] CPU: 1 PID: 5505 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 713.224692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 713.227120] Call Trace: [ 713.227501] [ 713.227828] dump_stack_lvl+0x8b/0xb3 [ 713.228401] should_fail.cold+0x5/0xa [ 713.229347] _copy_from_user+0x2a/0x170 [ 713.229940] __copy_msghdr_from_user+0x91/0x4b0 [ 713.230611] ? __ia32_sys_shutdown+0x70/0x70 [ 713.231248] ? udp_v6_early_demux+0xdf0/0xdf0 [ 713.231900] ? inet6_sendmsg+0x4a/0x140 [ 713.232744] ? inet6_sendmsg+0xbd/0x140 [ 713.234070] ? inet6_compat_ioctl+0x310/0x310 [ 713.235576] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 713.237389] ? sock_sendmsg+0x55/0x190 [ 713.238730] sendmsg_copy_msghdr+0xa1/0x160 [ 713.240190] ? __ia32_sys_recvmmsg+0x260/0x260 [ 713.241704] ? __lock_acquire+0x164e/0x6120 [ 713.242798] ___sys_sendmsg+0xc6/0x170 [ 713.243421] ? sendmsg_copy_msghdr+0x160/0x160 [ 713.244144] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 713.244892] ? lock_is_held_type+0xd7/0x130 [ 713.245484] ? find_held_lock+0x2c/0x110 [ 713.246391] ? lock_release+0x3b2/0x750 [ 713.247436] ? __might_fault+0xd1/0x170 [ 713.248489] ? lock_downgrade+0x6d0/0x6d0 [ 713.249595] ? lock_is_held_type+0xd7/0x130 [ 713.250306] __sys_sendmmsg+0x195/0x470 [ 713.250883] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 713.251453] ? lock_is_held_type+0xd7/0x130 [ 713.252052] ? bit_wait_io_timeout+0x160/0x160 [ 713.252660] ? lock_is_held_type+0xd7/0x130 [ 713.253255] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 713.254112] ? vfs_write+0x422/0xac0 [ 713.254624] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 713.255381] ? fput+0x2a/0x50 [ 713.255832] __x64_sys_sendmmsg+0x99/0x100 [ 713.256409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 713.257098] do_syscall_64+0x3b/0x90 [ 713.257628] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 713.258973] RIP: 0033:0x7f89586d1b19 [ 713.259555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 713.265870] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 713.268473] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 713.270894] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 713.273178] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 713.275216] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 713.277174] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 713.279206] 18:04:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40086602, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 715.193993] Bluetooth: hci0: command 0x0c1a tx timeout 18:04:32 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:04:32 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x13, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:04:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8940, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:04:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40087602, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:04:32 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 18:04:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 29) socket$nl_netfilter(0x10, 0x3, 0xc) 18:04:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 7) 18:04:32 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) [ 731.405603] FAULT_INJECTION: forcing a failure. [ 731.405603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.406969] CPU: 1 PID: 5519 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 731.407874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 731.409013] Call Trace: [ 731.409294] [ 731.409540] dump_stack_lvl+0x8b/0xb3 [ 731.409983] should_fail.cold+0x5/0xa [ 731.410420] _copy_from_user+0x2a/0x170 [ 731.410879] __copy_msghdr_from_user+0x91/0x4b0 [ 731.411416] ? __ia32_sys_shutdown+0x70/0x70 [ 731.411899] ? udp_v6_early_demux+0xdf0/0xdf0 [ 731.412396] ? inet6_sendmsg+0x4a/0x140 [ 731.412843] ? inet6_sendmsg+0xbd/0x140 [ 731.413297] ? inet6_compat_ioctl+0x310/0x310 [ 731.413792] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 731.414363] ? sock_sendmsg+0x55/0x190 [ 731.414806] sendmsg_copy_msghdr+0xa1/0x160 [ 731.415295] ? __ia32_sys_recvmmsg+0x260/0x260 [ 731.415821] ? __lock_acquire+0x164e/0x6120 [ 731.416318] ___sys_sendmsg+0xc6/0x170 [ 731.416759] ? sendmsg_copy_msghdr+0x160/0x160 [ 731.417281] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 731.417902] ? lock_is_held_type+0xd7/0x130 [ 731.418405] ? find_held_lock+0x2c/0x110 [ 731.418859] ? lock_release+0x3b2/0x750 [ 731.419308] ? __might_fault+0xd1/0x170 [ 731.419757] ? lock_downgrade+0x6d0/0x6d0 [ 731.420226] ? lock_is_held_type+0xd7/0x130 [ 731.420720] __sys_sendmmsg+0x195/0x470 [ 731.421171] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 731.421662] ? lock_is_held_type+0xd7/0x130 [ 731.422178] ? bit_wait_io_timeout+0x160/0x160 [ 731.422688] ? lock_is_held_type+0xd7/0x130 [ 731.423194] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 731.423826] ? vfs_write+0x422/0xac0 [ 731.424257] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 731.424887] ? fput+0x2a/0x50 [ 731.425255] __x64_sys_sendmmsg+0x99/0x100 [ 731.425742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 731.426336] do_syscall_64+0x3b/0x90 [ 731.426762] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 731.427354] RIP: 0033:0x7f89586d1b19 [ 731.427776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 731.429871] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 731.430755] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 731.431567] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 731.432387] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 731.433169] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 731.433955] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 731.434759] [ 731.443095] FAULT_INJECTION: forcing a failure. [ 731.443095] name failslab, interval 1, probability 0, space 0, times 0 [ 731.444288] CPU: 1 PID: 5521 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 731.445171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 731.446383] Call Trace: [ 731.446663] [ 731.446889] dump_stack_lvl+0x8b/0xb3 [ 731.447305] should_fail.cold+0x5/0xa [ 731.447726] ? lockdep_hardirqs_on+0x79/0x100 [ 731.448210] ? create_object.isra.0+0x3a/0xa20 [ 731.448714] should_failslab+0x5/0x10 [ 731.449135] kmem_cache_alloc+0x5b/0x480 [ 731.449550] create_object.isra.0+0x3a/0xa20 [ 731.450026] ? kasan_unpoison+0x23/0x50 [ 731.450440] kmem_cache_alloc+0x239/0x480 [ 731.450911] skb_clone+0x170/0x3c0 [ 731.451318] neigh_probe+0x54/0x110 [ 731.451734] __neigh_event_send+0xa90/0x1530 [ 731.452226] neigh_resolve_output+0x54a/0x7f0 [ 731.452724] ? lock_release+0x3b2/0x750 [ 731.453177] ip6_finish_output2+0xb24/0x1ad0 [ 731.453680] __ip6_finish_output.part.0+0x4e0/0xa70 [ 731.454258] ip6_output+0x3bc/0x9d0 [ 731.454674] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 731.455256] ip6_local_out+0xd2/0x4b0 [ 731.455691] ip6_send_skb+0xb7/0x340 [ 731.456073] udp_v6_send_skb+0x7aa/0x15b0 [ 731.456547] udpv6_sendmsg+0x1d4e/0x28d0 [ 731.457013] ? ip_frag_init+0x350/0x350 [ 731.457474] ? udp_v6_early_demux+0xdf0/0xdf0 [ 731.457980] ? exc_page_fault+0xca/0x1a0 [ 731.458398] ? lockdep_hardirqs_on+0x79/0x100 [ 731.458901] ? exc_page_fault+0xca/0x1a0 [ 731.459365] ? asm_exc_page_fault+0x1e/0x30 [ 731.459880] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 731.460494] ? udp_v6_early_demux+0xdf0/0xdf0 [ 731.460988] ? inet6_sendmsg+0x4a/0x140 [ 731.461437] inet6_sendmsg+0xfd/0x140 [ 731.461856] ? inet6_compat_ioctl+0x310/0x310 [ 731.462305] sock_sendmsg+0xee/0x190 [ 731.462721] ____sys_sendmsg+0x32e/0x870 [ 731.463131] ? kernel_sendmsg+0x50/0x50 [ 731.463574] ? __ia32_sys_recvmmsg+0x260/0x260 [ 731.464089] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 731.464620] ___sys_sendmsg+0xf3/0x170 [ 731.465067] ? sendmsg_copy_msghdr+0x160/0x160 [ 731.465525] ? lock_release+0x3b2/0x750 [ 731.465974] ? __fget_files+0x265/0x470 [ 731.466384] ? lock_downgrade+0x6d0/0x6d0 [ 731.466862] ? __fget_files+0x287/0x470 [ 731.467264] ? __fget_light+0xea/0x270 [ 731.467704] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 731.468254] __sys_sendmmsg+0x195/0x470 [ 731.468702] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 731.469180] ? lock_is_held_type+0xd7/0x130 [ 731.469676] ? bit_wait_io_timeout+0x160/0x160 [ 731.470188] ? lock_is_held_type+0xd7/0x130 [ 731.470675] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 731.471290] ? vfs_write+0x422/0xac0 [ 731.471708] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 731.472320] ? fput+0x2a/0x50 [ 731.472685] __x64_sys_sendmmsg+0x99/0x100 [ 731.473162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 731.473726] do_syscall_64+0x3b/0x90 [ 731.474154] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 731.474732] RIP: 0033:0x7f8f47a3fb19 [ 731.475140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 731.477167] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 731.478004] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 731.478800] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 731.479578] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 731.480367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.481158] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 731.481957] 18:04:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:04:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8941, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:04:32 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 18:04:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 30) socket$nl_netfilter(0x10, 0x3, 0xc) 18:04:32 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x14, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:04:32 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) [ 731.613791] audit: type=1326 audit(1649959472.697:119): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5523 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 731.629909] FAULT_INJECTION: forcing a failure. [ 731.629909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.631208] CPU: 1 PID: 5540 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 731.632018] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 731.633128] Call Trace: [ 731.633383] [ 731.633604] dump_stack_lvl+0x8b/0xb3 [ 731.633998] should_fail.cold+0x5/0xa [ 731.634400] _copy_from_user+0x2a/0x170 [ 731.634805] __copy_msghdr_from_user+0x91/0x4b0 [ 731.635276] ? __ia32_sys_shutdown+0x70/0x70 [ 731.635712] ? udp_v6_early_demux+0xdf0/0xdf0 [ 731.636214] ? inet6_sendmsg+0x4a/0x140 [ 731.636617] ? inet6_sendmsg+0xbd/0x140 [ 731.637044] ? inet6_compat_ioctl+0x310/0x310 [ 731.637491] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 731.638097] ? sock_sendmsg+0x55/0x190 [ 731.638500] sendmsg_copy_msghdr+0xa1/0x160 [ 731.638973] ? __ia32_sys_recvmmsg+0x260/0x260 [ 731.639433] ? __lock_acquire+0x164e/0x6120 [ 731.639914] ___sys_sendmsg+0xc6/0x170 [ 731.640312] ? sendmsg_copy_msghdr+0x160/0x160 [ 731.640825] ? finish_task_switch.isra.0+0x226/0x870 [ 731.641349] ? lock_is_held_type+0xd7/0x130 [ 731.641826] ? find_held_lock+0x2c/0x110 [ 731.642255] ? lock_release+0x3b2/0x750 [ 731.642692] ? __might_fault+0xd1/0x170 [ 731.643097] ? lock_downgrade+0x6d0/0x6d0 [ 731.643513] ? lock_is_held_type+0xd7/0x130 [ 731.643965] __sys_sendmmsg+0x195/0x470 [ 731.644377] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 731.644820] ? lock_is_held_type+0xd7/0x130 [ 731.645264] ? bit_wait_io_timeout+0x160/0x160 [ 731.645730] ? lock_is_held_type+0xd7/0x130 [ 731.646193] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 731.646754] ? vfs_write+0x422/0xac0 [ 731.647132] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 731.647689] ? fput+0x2a/0x50 [ 731.648015] __x64_sys_sendmmsg+0x99/0x100 [ 731.648451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 731.648973] do_syscall_64+0x3b/0x90 [ 731.649356] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 731.649878] RIP: 0033:0x7f89586d1b19 [ 731.650246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 731.652032] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 731.652779] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 731.653477] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 731.654190] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 731.654898] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 731.655611] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 731.656342] [ 731.663801] audit: type=1326 audit(1649959472.745:120): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5523 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 18:04:32 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x15, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:04:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4020940d, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:04:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 31) socket$nl_netfilter(0x10, 0x3, 0xc) 18:04:52 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:04:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:04:52 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 18:04:52 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x18, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:04:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 8) 18:04:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x894c, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:04:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 751.397279] FAULT_INJECTION: forcing a failure. [ 751.397279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.399493] CPU: 1 PID: 5569 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 751.400777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 751.403936] Call Trace: [ 751.404542] [ 751.405093] dump_stack_lvl+0x8b/0xb3 [ 751.406006] should_fail.cold+0x5/0xa [ 751.407201] _copy_from_user+0x2a/0x170 [ 751.408334] __copy_msghdr_from_user+0x91/0x4b0 [ 751.409669] ? __ia32_sys_shutdown+0x70/0x70 [ 751.410784] ? udp_v6_early_demux+0xdf0/0xdf0 [ 751.411852] ? inet6_sendmsg+0x4a/0x140 [ 751.413014] ? inet6_sendmsg+0xbd/0x140 [ 751.413980] ? inet6_compat_ioctl+0x310/0x310 [ 751.415080] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 751.416392] ? sock_sendmsg+0x55/0x190 [ 751.417350] sendmsg_copy_msghdr+0xa1/0x160 [ 751.418413] ? __ia32_sys_recvmmsg+0x260/0x260 [ 751.419767] ? __lock_acquire+0x164e/0x6120 [ 751.420881] ___sys_sendmsg+0xc6/0x170 [ 751.421834] ? sendmsg_copy_msghdr+0x160/0x160 [ 751.423051] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 751.424038] ? lock_is_held_type+0xd7/0x130 [ 751.424635] ? find_held_lock+0x2c/0x110 [ 751.425171] ? lock_release+0x3b2/0x750 [ 751.425968] ? __might_fault+0xd1/0x170 [ 751.426963] ? lock_downgrade+0x6d0/0x6d0 [ 751.427955] ? lock_is_held_type+0xd7/0x130 [ 751.429226] __sys_sendmmsg+0x195/0x470 [ 751.430172] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 751.431174] ? lock_is_held_type+0xd7/0x130 [ 751.432092] ? bit_wait_io_timeout+0x160/0x160 [ 751.432761] ? lock_is_held_type+0xd7/0x130 [ 751.433350] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 751.434093] ? vfs_write+0x422/0xac0 [ 751.434628] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 751.435370] ? fput+0x2a/0x50 [ 751.435799] __x64_sys_sendmmsg+0x99/0x100 [ 751.436406] ? syscall_enter_from_user_mode+0x1d/0x50 [ 751.437138] do_syscall_64+0x3b/0x90 [ 751.437612] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 751.438330] RIP: 0033:0x7f89586d1b19 [ 751.438824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 751.441167] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 751.442140] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 751.443079] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 751.443992] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.444900] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 751.445814] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 751.446773] [ 751.461847] FAULT_INJECTION: forcing a failure. [ 751.461847] name failslab, interval 1, probability 0, space 0, times 0 [ 751.463525] CPU: 1 PID: 5577 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 751.464565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 751.466015] Call Trace: [ 751.466351] [ 751.466658] dump_stack_lvl+0x8b/0xb3 [ 751.467164] should_fail.cold+0x5/0xa [ 751.467668] ? __alloc_skb+0x211/0x340 [ 751.468180] should_failslab+0x5/0x10 [ 751.468688] kmem_cache_alloc_node+0x55/0x490 [ 751.469285] __alloc_skb+0x211/0x340 [ 751.469803] ndisc_alloc_skb+0x134/0x320 [ 751.470441] ndisc_ns_create+0x162/0x7e0 [ 751.470980] ? lock_release+0x3b2/0x750 [ 751.471498] ? __ipv6_chk_addr_and_flags+0x4c8/0x600 [ 751.472154] ? ndisc_error_report+0x1c0/0x1c0 [ 751.472729] ? lock_is_held_type+0xd7/0x130 [ 751.473294] ? find_held_lock+0x2c/0x110 [ 751.473830] ndisc_send_ns+0x8b/0x120 [ 751.474326] ? pndisc_redo+0x20/0x20 [ 751.474830] ? lock_is_held_type+0x91/0x130 [ 751.475390] ndisc_solicit+0x2cd/0x470 [ 751.475892] ? ndisc_send_ns+0x120/0x120 [ 751.476406] ? __skb_clone+0x597/0x780 [ 751.476929] ? ndisc_send_ns+0x120/0x120 [ 751.477455] neigh_probe+0xc4/0x110 [ 751.477932] __neigh_event_send+0xa90/0x1530 [ 751.478550] neigh_resolve_output+0x54a/0x7f0 [ 751.479122] ? lock_release+0x3b2/0x750 [ 751.479659] ip6_finish_output2+0xb24/0x1ad0 [ 751.480251] __ip6_finish_output.part.0+0x4e0/0xa70 [ 751.480914] ip6_output+0x3bc/0x9d0 [ 751.481404] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 751.482073] ip6_local_out+0xd2/0x4b0 [ 751.482611] ip6_send_skb+0xb7/0x340 [ 751.483098] udp_v6_send_skb+0x7aa/0x15b0 [ 751.483641] udpv6_sendmsg+0x1d4e/0x28d0 [ 751.484157] ? ip_frag_init+0x350/0x350 [ 751.484682] ? udp_v6_early_demux+0xdf0/0xdf0 [ 751.485281] ? exc_page_fault+0xca/0x1a0 [ 751.485872] ? lockdep_hardirqs_on+0x79/0x100 [ 751.486526] ? exc_page_fault+0xca/0x1a0 [ 751.487071] ? asm_exc_page_fault+0x1e/0x30 [ 751.487675] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 751.488387] ? udp_v6_early_demux+0xdf0/0xdf0 [ 751.488965] ? inet6_sendmsg+0x4a/0x140 [ 751.489503] inet6_sendmsg+0xfd/0x140 [ 751.490003] ? inet6_compat_ioctl+0x310/0x310 [ 751.490621] sock_sendmsg+0xee/0x190 [ 751.491126] ____sys_sendmsg+0x32e/0x870 [ 751.491661] ? kernel_sendmsg+0x50/0x50 [ 751.492181] ? __ia32_sys_recvmmsg+0x260/0x260 [ 751.492777] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 751.493486] ___sys_sendmsg+0xf3/0x170 [ 751.494019] ? sendmsg_copy_msghdr+0x160/0x160 [ 751.494641] ? lock_release+0x3b2/0x750 [ 751.495180] ? __fget_files+0x265/0x470 [ 751.495704] ? lock_downgrade+0x6d0/0x6d0 [ 751.496268] ? __fget_files+0x287/0x470 [ 751.496802] ? __fget_light+0xea/0x270 [ 751.497323] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 751.498052] __sys_sendmmsg+0x195/0x470 [ 751.498640] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 751.499202] ? lock_is_held_type+0xd7/0x130 [ 751.499801] ? bit_wait_io_timeout+0x160/0x160 [ 751.500397] ? lock_is_held_type+0xd7/0x130 [ 751.500979] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 751.501693] ? vfs_write+0x422/0xac0 [ 751.502198] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 751.502953] ? fput+0x2a/0x50 [ 751.503387] __x64_sys_sendmmsg+0x99/0x100 [ 751.503938] ? syscall_enter_from_user_mode+0x1d/0x50 [ 751.504614] do_syscall_64+0x3b/0x90 [ 751.505105] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 751.505790] RIP: 0033:0x7f8f47a3fb19 [ 751.506264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 751.508633] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 751.509607] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 751.510486] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 751.511188] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.511921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.512673] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 751.513447] [ 751.513920] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb 18:04:52 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x19, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:04:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d3, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:04:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8982, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:04:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 32) socket$nl_netfilter(0x10, 0x3, 0xc) 18:04:52 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:04:52 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x1b, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 751.614443] FAULT_INJECTION: forcing a failure. [ 751.614443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.616081] CPU: 0 PID: 5592 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 751.617166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 751.620645] Call Trace: [ 751.621599] [ 751.622255] dump_stack_lvl+0x8b/0xb3 [ 751.623351] should_fail.cold+0x5/0xa [ 751.624443] _copy_from_user+0x2a/0x170 [ 751.625561] __copy_msghdr_from_user+0x91/0x4b0 [ 751.626879] ? __ia32_sys_shutdown+0x70/0x70 [ 751.628120] ? udp_v6_early_demux+0xdf0/0xdf0 [ 751.629479] ? inet6_sendmsg+0x4a/0x140 [ 751.630627] ? inet6_sendmsg+0xbd/0x140 [ 751.631786] ? inet6_compat_ioctl+0x310/0x310 [ 751.633031] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 751.633764] ? sock_sendmsg+0x55/0x190 [ 751.634287] sendmsg_copy_msghdr+0xa1/0x160 [ 751.634864] ? __ia32_sys_recvmmsg+0x260/0x260 [ 751.635441] ? __lock_acquire+0x164e/0x6120 [ 751.635995] ___sys_sendmsg+0xc6/0x170 [ 751.636521] ? sendmsg_copy_msghdr+0x160/0x160 [ 751.637140] ? finish_task_switch.isra.0+0x226/0x870 [ 751.637834] ? lock_is_held_type+0xd7/0x130 [ 751.638419] ? find_held_lock+0x2c/0x110 [ 751.638952] ? lock_release+0x3b2/0x750 [ 751.639480] ? __might_fault+0xd1/0x170 [ 751.640024] ? lock_downgrade+0x6d0/0x6d0 [ 751.640595] ? lock_is_held_type+0xd7/0x130 [ 751.641194] __sys_sendmmsg+0x195/0x470 [ 751.641784] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 751.642351] ? lock_is_held_type+0xd7/0x130 [ 751.642977] ? bit_wait_io_timeout+0x160/0x160 [ 751.643595] ? lock_is_held_type+0xd7/0x130 [ 751.644176] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 751.644912] ? vfs_write+0x422/0xac0 [ 751.645399] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 751.646135] ? fput+0x2a/0x50 [ 751.646571] __x64_sys_sendmmsg+0x99/0x100 [ 751.647149] ? syscall_enter_from_user_mode+0x1d/0x50 [ 751.647798] do_syscall_64+0x3b/0x90 [ 751.648300] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 751.648987] RIP: 0033:0x7f89586d1b19 [ 751.649458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 751.651807] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 751.652756] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 751.653748] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 751.654695] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.655623] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 751.656544] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 751.657480] 18:04:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 751.677287] audit: type=1326 audit(1649959492.759:121): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5564 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:04:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8983, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 751.690099] audit: type=1326 audit(1649959492.769:122): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5564 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:04:52 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x1c, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 751.727971] audit: type=1326 audit(1649959492.807:123): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5564 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 18:04:52 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) [ 751.842072] audit: type=1326 audit(1649959492.924:124): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5608 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 751.888166] audit: type=1326 audit(1649959492.970:125): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5608 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 [ 753.402587] Bluetooth: hci0: command 0x0c1a tx timeout 18:05:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 33) socket$nl_netfilter(0x10, 0x3, 0xc) 18:05:08 executing program 2: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x1c, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:05:08 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:05:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80086601, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:08 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x1d, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:05:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:08 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:05:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 9) [ 767.738829] FAULT_INJECTION: forcing a failure. [ 767.738829] name failslab, interval 1, probability 0, space 0, times 0 [ 767.741322] CPU: 1 PID: 5626 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 767.743556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 767.745511] Call Trace: [ 767.745850] [ 767.746143] dump_stack_lvl+0x8b/0xb3 [ 767.746663] should_fail.cold+0x5/0xa [ 767.747167] ? create_object.isra.0+0x3a/0xa20 [ 767.747765] should_failslab+0x5/0x10 [ 767.748268] kmem_cache_alloc+0x5b/0x480 [ 767.748825] create_object.isra.0+0x3a/0xa20 [ 767.749404] ? kasan_unpoison+0x23/0x50 [ 767.749914] FAULT_INJECTION: forcing a failure. [ 767.749914] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 767.749931] kmem_cache_alloc_node+0x248/0x490 [ 767.752265] __alloc_skb+0x211/0x340 [ 767.752765] ndisc_alloc_skb+0x134/0x320 [ 767.753358] ndisc_ns_create+0x162/0x7e0 [ 767.753888] ? lock_release+0x3b2/0x750 [ 767.754434] ? __ipv6_chk_addr_and_flags+0x4c8/0x600 [ 767.755187] ? ndisc_error_report+0x1c0/0x1c0 [ 767.755797] ? lock_is_held_type+0xd7/0x130 [ 767.756368] ? find_held_lock+0x2c/0x110 [ 767.756909] ndisc_send_ns+0x8b/0x120 [ 767.757416] ? pndisc_redo+0x20/0x20 [ 767.757901] ? lock_is_held_type+0x91/0x130 [ 767.758538] ndisc_solicit+0x2cd/0x470 [ 767.759066] ? ndisc_send_ns+0x120/0x120 [ 767.759587] ? __skb_clone+0x597/0x780 [ 767.760104] ? ndisc_send_ns+0x120/0x120 [ 767.760652] neigh_probe+0xc4/0x110 [ 767.761155] __neigh_event_send+0xa90/0x1530 [ 767.761743] neigh_resolve_output+0x54a/0x7f0 [ 767.762333] ? lock_release+0x3b2/0x750 [ 767.762901] ip6_finish_output2+0xb24/0x1ad0 [ 767.763510] __ip6_finish_output.part.0+0x4e0/0xa70 [ 767.764194] ip6_output+0x3bc/0x9d0 [ 767.764676] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 767.765359] ip6_local_out+0xd2/0x4b0 [ 767.765883] ip6_send_skb+0xb7/0x340 [ 767.766402] udp_v6_send_skb+0x7aa/0x15b0 [ 767.767014] udpv6_sendmsg+0x1d4e/0x28d0 [ 767.767565] ? ip_frag_init+0x350/0x350 [ 767.768112] ? udp_v6_early_demux+0xdf0/0xdf0 [ 767.768731] ? exc_page_fault+0xca/0x1a0 [ 767.769270] ? lockdep_hardirqs_on+0x79/0x100 [ 767.770334] ? exc_page_fault+0xca/0x1a0 [ 767.771709] ? asm_exc_page_fault+0x1e/0x30 [ 767.773067] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 767.774716] ? udp_v6_early_demux+0xdf0/0xdf0 [ 767.775964] ? inet6_sendmsg+0x4a/0x140 [ 767.777082] inet6_sendmsg+0xfd/0x140 [ 767.778262] ? inet6_compat_ioctl+0x310/0x310 [ 767.779560] sock_sendmsg+0xee/0x190 [ 767.780578] ____sys_sendmsg+0x32e/0x870 [ 767.781691] ? kernel_sendmsg+0x50/0x50 [ 767.782797] ? __ia32_sys_recvmmsg+0x260/0x260 [ 767.784055] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 767.785673] ___sys_sendmsg+0xf3/0x170 [ 767.786841] ? sendmsg_copy_msghdr+0x160/0x160 [ 767.788096] ? lock_release+0x3b2/0x750 [ 767.789238] ? __fget_files+0x265/0x470 [ 767.790367] ? lock_downgrade+0x6d0/0x6d0 [ 767.791199] ? __fget_files+0x287/0x470 [ 767.791758] ? __fget_light+0xea/0x270 [ 767.792309] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 767.793111] __sys_sendmmsg+0x195/0x470 [ 767.793819] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 767.794448] ? lock_is_held_type+0xd7/0x130 [ 767.795078] ? bit_wait_io_timeout+0x160/0x160 [ 767.795741] ? lock_is_held_type+0xd7/0x130 [ 767.796321] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 767.797042] ? vfs_write+0x422/0xac0 [ 767.797534] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 767.798239] ? fput+0x2a/0x50 [ 767.798684] __x64_sys_sendmmsg+0x99/0x100 [ 767.799258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 767.799958] do_syscall_64+0x3b/0x90 [ 767.800459] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 767.801126] RIP: 0033:0x7f8f47a3fb19 [ 767.801611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.804038] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 767.805068] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 767.805978] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 767.806943] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.807880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.808896] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 767.809976] [ 767.810349] CPU: 0 PID: 5628 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 767.811769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 767.813411] Call Trace: [ 767.813812] [ 767.814153] dump_stack_lvl+0x8b/0xb3 [ 767.814750] should_fail.cold+0x5/0xa [ 767.815266] prepare_alloc_pages+0x17b/0x500 [ 767.815851] ? lockdep_hardirqs_on+0x79/0x100 [ 767.816440] ? ip6_confirm_neigh+0x2cd/0x4b0 [ 767.817033] __alloc_pages+0x131/0x4e0 [ 767.817536] ? udpv6_sendmsg+0x3eb/0x28d0 [ 767.818092] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 767.818937] ? mark_lock.part.0+0xef/0x2f60 [ 767.819516] ? __lock_acquire+0x164e/0x6120 [ 767.820127] alloc_pages_vma+0xde/0x500 [ 767.820656] wp_page_copy+0xefb/0x26f0 [ 767.821178] ? lock_release+0x3b2/0x750 [ 767.822239] ? do_page_mkwrite+0x650/0x650 [ 767.823339] ? lock_downgrade+0x6d0/0x6d0 [ 767.824306] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 767.825640] ? vm_normal_page+0x162/0x2e0 [ 767.826628] ? lock_release+0x750/0x750 [ 767.827590] do_wp_page+0x198/0x2b50 [ 767.828499] __handle_mm_fault+0x11fc/0x3600 [ 767.829601] ? lock_is_held_type+0xd7/0x130 [ 767.830715] ? __pmd_alloc+0x680/0x680 [ 767.831891] handle_mm_fault+0x2e6/0xa20 [ 767.832871] do_user_addr_fault+0x54a/0x12a0 [ 767.833928] exc_page_fault+0xa2/0x1a0 [ 767.834984] asm_exc_page_fault+0x1e/0x30 [ 767.836021] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 767.837249] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 767.842631] RSP: 0018:ffff88802182fce8 EFLAGS: 00050293 [ 767.843520] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020003038 [ 767.844645] RDX: 0000000000040000 RSI: ffffffff8330a142 RDI: 0000000000000000 [ 767.845694] RBP: 000000007ffffff7 R08: 0000000000000000 R09: 0000000000000000 [ 767.846815] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001e [ 767.847747] R13: 0000000020003000 R14: 0000000000000400 R15: 00000000000003ff [ 767.848700] ? __sys_sendmmsg+0x1c2/0x470 [ 767.849293] __sys_sendmmsg+0x1cf/0x470 [ 767.849842] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 767.850409] ? lock_is_held_type+0xd7/0x130 [ 767.851018] ? bit_wait_io_timeout+0x160/0x160 [ 767.851636] ? lock_is_held_type+0xd7/0x130 [ 767.852236] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 767.852984] ? vfs_write+0x422/0xac0 [ 767.853499] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 767.854236] ? fput+0x2a/0x50 [ 767.854689] __x64_sys_sendmmsg+0x99/0x100 [ 767.855964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 767.856690] do_syscall_64+0x3b/0x90 [ 767.857258] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 767.858032] RIP: 0033:0x7f89586d1b19 [ 767.858576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.862132] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 767.864329] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 767.866572] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 767.868638] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.869987] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 767.871792] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 767.873823] 18:05:08 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:05:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80087601, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:09 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:05:09 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x1e, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:05:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a1, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:09 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:05:22 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:05:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108906, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 34) socket$nl_netfilter(0x10, 0x3, 0xc) 18:05:22 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:05:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0x83}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:05:22 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:05:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 10) [ 781.912542] FAULT_INJECTION: forcing a failure. [ 781.912542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.915422] CPU: 0 PID: 5661 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 781.917532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 781.920453] Call Trace: [ 781.921009] [ 781.921495] dump_stack_lvl+0x8b/0xb3 [ 781.922331] should_fail.cold+0x5/0xa [ 781.923189] _copy_from_user+0x2a/0x170 [ 781.924063] __copy_msghdr_from_user+0x91/0x4b0 [ 781.925078] ? __ia32_sys_shutdown+0x70/0x70 [ 781.926039] ? do_wp_page+0x1a0/0x2b50 [ 781.926921] sendmsg_copy_msghdr+0xa1/0x160 [ 781.927856] ? __ia32_sys_recvmmsg+0x260/0x260 [ 781.928850] ? lock_is_held_type+0xd7/0x130 [ 781.929786] ? find_held_lock+0x2c/0x110 [ 781.930664] ? lock_release+0x3b2/0x750 [ 781.931547] ___sys_sendmsg+0xc6/0x170 [ 781.932399] ? sendmsg_copy_msghdr+0x160/0x160 [ 781.933386] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 781.934591] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 781.935783] ? do_user_addr_fault+0x59b/0x12a0 [ 781.936773] ? exc_page_fault+0xca/0x1a0 [ 781.937647] ? lockdep_hardirqs_on+0x79/0x100 [ 781.938615] ? exc_page_fault+0xca/0x1a0 [ 781.939510] ? asm_exc_page_fault+0x1e/0x30 [ 781.940451] ? lock_is_held_type+0xd7/0x130 [ 781.941394] __sys_sendmmsg+0x195/0x470 [ 781.942261] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 781.943225] ? lock_is_held_type+0xd7/0x130 [ 781.944177] ? bit_wait_io_timeout+0x160/0x160 [ 781.945145] ? lock_is_held_type+0xd7/0x130 [ 781.946086] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 781.947263] ? vfs_write+0x422/0xac0 [ 781.948063] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 781.949238] ? fput+0x2a/0x50 [ 781.949928] __x64_sys_sendmmsg+0x99/0x100 [ 781.950835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 781.951954] do_syscall_64+0x3b/0x90 [ 781.952762] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 781.953865] RIP: 0033:0x7f89586d1b19 [ 781.954652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 781.958518] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 781.960127] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 781.961633] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 781.963152] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 781.964650] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 781.966148] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 781.967692] 18:05:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 781.998768] FAULT_INJECTION: forcing a failure. [ 781.998768] name failslab, interval 1, probability 0, space 0, times 0 [ 782.001259] CPU: 0 PID: 5675 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 18:05:23 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) [ 782.003011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 782.006001] Call Trace: [ 782.006560] [ 782.007162] dump_stack_lvl+0x8b/0xb3 [ 782.008004] should_fail.cold+0x5/0xa [ 782.008826] ? lock_is_held_type+0xd7/0x130 [ 782.009774] should_failslab+0x5/0x10 [ 782.010600] __kmalloc_node_track_caller+0x7e/0x440 [ 782.011690] ? ndisc_alloc_skb+0x134/0x320 [ 782.012614] __alloc_skb+0xe3/0x340 [ 782.013418] ndisc_alloc_skb+0x134/0x320 [ 782.014294] ndisc_ns_create+0x162/0x7e0 [ 782.015174] ? lock_release+0x3b2/0x750 [ 782.016035] ? __ipv6_chk_addr_and_flags+0x4c8/0x600 [ 782.017125] ? ndisc_error_report+0x1c0/0x1c0 [ 782.018106] ? lock_is_held_type+0xd7/0x130 [ 782.019063] ? find_held_lock+0x2c/0x110 [ 782.019948] ndisc_send_ns+0x8b/0x120 [ 782.020773] ? pndisc_redo+0x20/0x20 [ 782.021575] ? lock_is_held_type+0x91/0x130 [ 782.022537] ndisc_solicit+0x2cd/0x470 [ 782.023387] ? ndisc_send_ns+0x120/0x120 [ 782.024263] ? __skb_clone+0x597/0x780 [ 782.025130] ? ndisc_send_ns+0x120/0x120 [ 782.026009] neigh_probe+0xc4/0x110 [ 782.026812] __neigh_event_send+0xa90/0x1530 [ 782.027781] neigh_resolve_output+0x54a/0x7f0 [ 782.028743] ? lock_release+0x3b2/0x750 [ 782.029623] ip6_finish_output2+0xb24/0x1ad0 [ 782.030603] __ip6_finish_output.part.0+0x4e0/0xa70 [ 782.031721] ip6_output+0x3bc/0x9d0 [ 782.032531] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 782.033645] ip6_local_out+0xd2/0x4b0 [ 782.034486] ip6_send_skb+0xb7/0x340 [ 782.035323] udp_v6_send_skb+0x7aa/0x15b0 [ 782.036236] udpv6_sendmsg+0x1d4e/0x28d0 [ 782.037109] ? ip_frag_init+0x350/0x350 [ 782.037983] ? udp_v6_early_demux+0xdf0/0xdf0 [ 782.038972] ? exc_page_fault+0xca/0x1a0 [ 782.039857] ? lockdep_hardirqs_on+0x79/0x100 [ 782.040829] ? exc_page_fault+0xca/0x1a0 [ 782.041718] ? asm_exc_page_fault+0x1e/0x30 [ 782.042702] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 782.043905] ? udp_v6_early_demux+0xdf0/0xdf0 [ 782.044870] ? inet6_sendmsg+0x4a/0x140 [ 782.045736] inet6_sendmsg+0xfd/0x140 [ 782.046561] ? inet6_compat_ioctl+0x310/0x310 [ 782.047538] sock_sendmsg+0xee/0x190 [ 782.048357] ____sys_sendmsg+0x32e/0x870 [ 782.049245] ? kernel_sendmsg+0x50/0x50 [ 782.050100] ? __ia32_sys_recvmmsg+0x260/0x260 [ 782.051106] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 782.052255] ___sys_sendmsg+0xf3/0x170 [ 782.053105] ? sendmsg_copy_msghdr+0x160/0x160 [ 782.054099] ? lock_release+0x3b2/0x750 [ 782.054972] ? __fget_files+0x265/0x470 [ 782.055843] ? lock_downgrade+0x6d0/0x6d0 [ 782.056762] ? __fget_files+0x287/0x470 [ 782.057640] ? __fget_light+0xea/0x270 [ 782.058486] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 782.059692] __sys_sendmmsg+0x195/0x470 [ 782.060567] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 782.061496] ? lock_is_held_type+0xd7/0x130 [ 782.062459] ? bit_wait_io_timeout+0x160/0x160 [ 782.063453] ? lock_is_held_type+0xd7/0x130 [ 782.064397] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 782.065573] ? vfs_write+0x422/0xac0 [ 782.066375] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 782.067567] ? fput+0x2a/0x50 [ 782.068265] __x64_sys_sendmmsg+0x99/0x100 [ 782.069177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 782.070268] do_syscall_64+0x3b/0x90 [ 782.071083] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 782.072192] RIP: 0033:0x7f8f47a3fb19 [ 782.072981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 782.076877] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 782.078483] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 782.080002] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 782.081511] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 782.083033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 782.084542] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 782.086084] [ 782.086808] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb 18:05:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 35) socket$nl_netfilter(0x10, 0x3, 0xc) 18:05:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 782.106913] audit: type=1326 audit(1649959523.189:126): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5664 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aea92bb19 code=0x0 [ 782.115046] audit: type=1326 audit(1649959523.197:127): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5663 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:05:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108907, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 782.150839] audit: type=1326 audit(1649959523.233:128): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5663 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 18:05:23 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "e2deadc319c668591ee94d6ad1cfe0310ff7e4a7f66137e856e1693b7c463332e7738e088c60a6856368ed21b7261fba393f26bede00b62191aa2f72ece4827c", 0x3d}, 0x48, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)=@secondary) keyctl$set_timeout(0xf, r1, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 782.157615] audit: type=1326 audit(1649959523.239:129): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5664 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f9aea8de72b code=0x0 18:05:23 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 782.180773] FAULT_INJECTION: forcing a failure. [ 782.180773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.183495] CPU: 0 PID: 5688 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 782.185240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 782.187652] Call Trace: [ 782.188202] [ 782.188681] dump_stack_lvl+0x8b/0xb3 [ 782.189513] should_fail.cold+0x5/0xa [ 782.190340] _copy_from_user+0x2a/0x170 [ 782.191224] __copy_msghdr_from_user+0x91/0x4b0 [ 782.192232] ? __ia32_sys_shutdown+0x70/0x70 [ 782.193185] ? udp_v6_early_demux+0xdf0/0xdf0 [ 782.194145] ? inet6_sendmsg+0x4a/0x140 [ 782.195033] ? inet6_sendmsg+0xbd/0x140 [ 782.195894] ? inet6_compat_ioctl+0x310/0x310 [ 782.196861] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 782.198034] ? sock_sendmsg+0x55/0x190 [ 782.199068] sendmsg_copy_msghdr+0xa1/0x160 [ 782.200012] ? __ia32_sys_recvmmsg+0x260/0x260 [ 782.201201] ? __lock_acquire+0x164e/0x6120 [ 782.202145] ___sys_sendmsg+0xc6/0x170 [ 782.203180] ? sendmsg_copy_msghdr+0x160/0x160 [ 782.204165] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 782.205610] ? lock_is_held_type+0xd7/0x130 [ 782.206541] ? find_held_lock+0x2c/0x110 [ 782.207602] ? lock_release+0x3b2/0x750 [ 782.208448] ? __might_fault+0xd1/0x170 [ 782.209300] ? lock_downgrade+0x6d0/0x6d0 [ 782.210203] ? lock_is_held_type+0xd7/0x130 [ 782.211172] __sys_sendmmsg+0x195/0x470 [ 782.212048] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 782.212975] ? lock_is_held_type+0xd7/0x130 [ 782.213935] ? bit_wait_io_timeout+0x160/0x160 [ 782.214923] ? lock_is_held_type+0xd7/0x130 [ 782.215869] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 782.217048] ? vfs_write+0x422/0xac0 [ 782.217851] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 782.219037] ? fput+0x2a/0x50 [ 782.219734] __x64_sys_sendmmsg+0x99/0x100 [ 782.220648] ? syscall_enter_from_user_mode+0x1d/0x50 [ 782.221744] do_syscall_64+0x3b/0x90 [ 782.222552] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 782.223677] RIP: 0033:0x7f89586d1b19 [ 782.224466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 782.228335] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 782.229945] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 782.231457] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 782.232961] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 782.234462] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 782.235988] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 782.237531] 18:05:23 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$set_timeout(0xf, r0, 0x9) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x3, 0x0, @auto=[0x3d, 0x2c, 0x16, 0x12, 0x10, 0x21, 0x2b, 0x17]}, 0x10, r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r3, 0x0) keyctl$instantiate(0xc, r2, &(0x7f0000000180)=ANY=[@ANYRES32=r3], 0x19, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) keyctl$assume_authority(0x10, r0) keyctl$get_security(0x11, r1, &(0x7f0000000100)=""/110, 0x6e) 18:05:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x801c581f, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 784.376520] Bluetooth: hci0: command 0x0c1a tx timeout 18:05:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108907, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:41 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:05:41 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:05:41 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) keyctl$revoke(0x3, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:05:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 11) 18:05:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e4, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 36) socket$nl_netfilter(0x10, 0x3, 0xc) [ 800.669053] FAULT_INJECTION: forcing a failure. [ 800.669053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.670655] CPU: 1 PID: 5725 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 800.670978] FAULT_INJECTION: forcing a failure. [ 800.670978] name failslab, interval 1, probability 0, space 0, times 0 [ 800.671761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 800.671777] Call Trace: [ 800.671783] [ 800.671790] dump_stack_lvl+0x8b/0xb3 [ 800.675696] should_fail.cold+0x5/0xa [ 800.676214] _copy_from_user+0x2a/0x170 [ 800.676746] __copy_msghdr_from_user+0x91/0x4b0 [ 800.677371] ? __ia32_sys_shutdown+0x70/0x70 [ 800.677953] ? udp_v6_early_demux+0xdf0/0xdf0 [ 800.678542] ? inet6_sendmsg+0x4a/0x140 [ 800.679084] ? inet6_sendmsg+0xbd/0x140 [ 800.679632] ? inet6_compat_ioctl+0x310/0x310 [ 800.680216] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 800.680938] ? sock_sendmsg+0x55/0x190 [ 800.681485] sendmsg_copy_msghdr+0xa1/0x160 [ 800.682054] ? __ia32_sys_recvmmsg+0x260/0x260 [ 800.682661] ? __lock_acquire+0x164e/0x6120 [ 800.683260] ___sys_sendmsg+0xc6/0x170 [ 800.683776] ? sendmsg_copy_msghdr+0x160/0x160 [ 800.684369] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 800.685102] ? lock_is_held_type+0xd7/0x130 [ 800.685674] ? find_held_lock+0x2c/0x110 [ 800.686220] ? lock_release+0x3b2/0x750 [ 800.686741] ? __might_fault+0xd1/0x170 [ 800.687296] ? lock_downgrade+0x6d0/0x6d0 [ 800.687832] ? lock_is_held_type+0xd7/0x130 [ 800.688424] __sys_sendmmsg+0x195/0x470 [ 800.688954] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 800.689530] ? lock_is_held_type+0xd7/0x130 [ 800.690115] ? bit_wait_io_timeout+0x160/0x160 [ 800.690737] ? lock_is_held_type+0xd7/0x130 [ 800.691328] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 800.692063] ? vfs_write+0x422/0xac0 [ 800.692556] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 800.693269] ? fput+0x2a/0x50 [ 800.693712] __x64_sys_sendmmsg+0x99/0x100 [ 800.694267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 800.694958] do_syscall_64+0x3b/0x90 [ 800.695483] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 800.696177] RIP: 0033:0x7f89586d1b19 [ 800.696666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 800.699026] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 800.700048] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 800.700992] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 800.701931] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 800.702846] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 800.703819] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 800.704762] [ 800.705072] CPU: 0 PID: 5728 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 800.706207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 800.707717] Call Trace: [ 800.708048] [ 800.708358] dump_stack_lvl+0x8b/0xb3 [ 800.708880] should_fail.cold+0x5/0xa [ 800.709376] ? lock_release+0x3b2/0x750 [ 800.709918] ? create_object.isra.0+0x3a/0xa20 [ 800.710542] should_failslab+0x5/0x10 [ 800.711060] kmem_cache_alloc+0x5b/0x480 [ 800.711658] create_object.isra.0+0x3a/0xa20 [ 800.712250] ? kasan_unpoison+0x23/0x50 [ 800.712815] __kmalloc_node_track_caller+0x269/0x440 [ 800.713520] ? ndisc_alloc_skb+0x134/0x320 [ 800.714070] __alloc_skb+0xe3/0x340 [ 800.714550] ndisc_alloc_skb+0x134/0x320 [ 800.715088] ndisc_ns_create+0x162/0x7e0 [ 800.715640] ? lock_release+0x3b2/0x750 [ 800.716161] ? __ipv6_chk_addr_and_flags+0x4c8/0x600 [ 800.716823] ? ndisc_error_report+0x1c0/0x1c0 [ 800.717395] ? lock_is_held_type+0xd7/0x130 [ 800.717970] ? find_held_lock+0x2c/0x110 [ 800.718499] ndisc_send_ns+0x8b/0x120 [ 800.718992] ? pndisc_redo+0x20/0x20 [ 800.719492] ? lock_is_held_type+0x91/0x130 [ 800.720074] ndisc_solicit+0x2cd/0x470 [ 800.720592] ? ndisc_send_ns+0x120/0x120 [ 800.721115] ? __skb_clone+0x597/0x780 [ 800.721624] ? ndisc_send_ns+0x120/0x120 [ 800.722158] neigh_probe+0xc4/0x110 [ 800.722638] __neigh_event_send+0xa90/0x1530 [ 800.723256] neigh_resolve_output+0x54a/0x7f0 [ 800.723823] ? lock_release+0x3b2/0x750 [ 800.724324] ip6_finish_output2+0xb24/0x1ad0 [ 800.724894] __ip6_finish_output.part.0+0x4e0/0xa70 [ 800.725621] ip6_output+0x3bc/0x9d0 [ 800.726088] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 800.726745] ip6_local_out+0xd2/0x4b0 [ 800.727273] ip6_send_skb+0xb7/0x340 [ 800.727762] udp_v6_send_skb+0x7aa/0x15b0 [ 800.728311] udpv6_sendmsg+0x1d4e/0x28d0 [ 800.728851] ? ip_frag_init+0x350/0x350 [ 800.729381] ? udp_v6_early_demux+0xdf0/0xdf0 [ 800.729961] ? exc_page_fault+0xca/0x1a0 [ 800.730504] ? lockdep_hardirqs_on+0x79/0x100 [ 800.731107] ? exc_page_fault+0xca/0x1a0 [ 800.731664] ? asm_exc_page_fault+0x1e/0x30 [ 800.732274] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 800.732998] ? udp_v6_early_demux+0xdf0/0xdf0 [ 800.733603] ? inet6_sendmsg+0x4a/0x140 [ 800.734125] inet6_sendmsg+0xfd/0x140 [ 800.734686] ? inet6_compat_ioctl+0x310/0x310 [ 800.735317] sock_sendmsg+0xee/0x190 [ 800.735833] ____sys_sendmsg+0x32e/0x870 [ 800.736374] ? kernel_sendmsg+0x50/0x50 [ 800.736915] ? __ia32_sys_recvmmsg+0x260/0x260 [ 800.737530] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 800.738234] ___sys_sendmsg+0xf3/0x170 [ 800.738813] ? sendmsg_copy_msghdr+0x160/0x160 [ 800.739478] ? lock_release+0x3b2/0x750 [ 800.740011] ? __fget_files+0x265/0x470 [ 800.740538] ? lock_downgrade+0x6d0/0x6d0 [ 800.741104] ? __fget_files+0x287/0x470 [ 800.741646] ? __fget_light+0xea/0x270 [ 800.742174] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 800.742910] __sys_sendmmsg+0x195/0x470 [ 800.743495] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 800.744065] ? lock_is_held_type+0xd7/0x130 [ 800.744659] ? bit_wait_io_timeout+0x160/0x160 [ 800.745268] ? lock_is_held_type+0xd7/0x130 [ 800.745853] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 800.746589] ? vfs_write+0x422/0xac0 [ 800.747078] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 800.747826] ? fput+0x2a/0x50 [ 800.748277] __x64_sys_sendmmsg+0x99/0x100 [ 800.748843] ? syscall_enter_from_user_mode+0x1d/0x50 [ 800.749518] do_syscall_64+0x3b/0x90 [ 800.750018] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 800.750701] RIP: 0033:0x7f8f47a3fb19 [ 800.751209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 800.753570] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 800.754542] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 800.755491] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 800.756412] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 800.757318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 800.758233] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 800.759222] 18:05:41 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) keyctl$revoke(0x3, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) keyctl$revoke(0x3, r1) r2 = add_key(0x0, 0x0, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:05:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40049409, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 800.821043] audit: type=1326 audit(1649959541.903:130): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5719 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 800.827899] audit: type=1326 audit(1649959541.910:131): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5719 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 18:05:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 37) socket$nl_netfilter(0x10, 0x3, 0xc) 18:05:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:41 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) [ 800.961393] FAULT_INJECTION: forcing a failure. [ 800.961393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.964645] CPU: 1 PID: 5745 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 800.967278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 800.970890] Call Trace: [ 800.971705] [ 800.972408] dump_stack_lvl+0x8b/0xb3 [ 800.973666] should_fail.cold+0x5/0xa [ 800.974882] _copy_from_user+0x2a/0x170 [ 800.976154] __copy_msghdr_from_user+0x91/0x4b0 [ 800.977680] ? __ia32_sys_shutdown+0x70/0x70 [ 800.979122] ? udp_v6_early_demux+0xdf0/0xdf0 [ 800.980560] ? inet6_sendmsg+0x4a/0x140 [ 800.981810] ? inet6_sendmsg+0xbd/0x140 [ 800.983209] ? inet6_compat_ioctl+0x310/0x310 [ 800.984566] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 800.986334] ? sock_sendmsg+0x55/0x190 [ 800.987627] sendmsg_copy_msghdr+0xa1/0x160 [ 800.988992] ? __ia32_sys_recvmmsg+0x260/0x260 [ 800.990397] ? __lock_acquire+0x164e/0x6120 [ 800.991639] ___sys_sendmsg+0xc6/0x170 [ 800.992474] ? sendmsg_copy_msghdr+0x160/0x160 [ 800.994032] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 800.995908] ? lock_is_held_type+0xd7/0x130 [ 800.997303] ? find_held_lock+0x2c/0x110 [ 800.998644] ? lock_release+0x3b2/0x750 [ 800.999859] ? __might_fault+0xd1/0x170 [ 801.001115] ? lock_downgrade+0x6d0/0x6d0 [ 801.002117] ? lock_is_held_type+0xd7/0x130 [ 801.003324] __sys_sendmmsg+0x195/0x470 [ 801.004602] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 801.005994] ? lock_is_held_type+0xd7/0x130 [ 801.007383] ? bit_wait_io_timeout+0x160/0x160 [ 801.008613] ? lock_is_held_type+0xd7/0x130 [ 801.009779] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 801.011283] ? vfs_write+0x422/0xac0 [ 801.012176] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 801.013602] ? fput+0x2a/0x50 [ 801.014447] __x64_sys_sendmmsg+0x99/0x100 [ 801.015464] ? syscall_enter_from_user_mode+0x1d/0x50 [ 801.017154] do_syscall_64+0x3b/0x90 [ 801.017671] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 801.018733] RIP: 0033:0x7f89586d1b19 [ 801.019824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 801.025685] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 801.028012] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 801.030351] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 801.032643] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 801.034884] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 801.037263] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 801.039734] 18:05:58 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) keyctl$revoke(0x3, r0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "f6393e021680b4fdb26c1df9a8308d3e4d332d6e2150315724aa41241d3fd446bf61c76058fd416b7ef3ce375bf88903ca0826aca6e824264e8a6e88163e1abf", 0x3f}, 0x48, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x8, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "c8a02b2fe3ddceafae6edf2cd36388d91b4f972fa75b0d6ce54eeca12222d18e559e48b05d7b0c9cff1b8b319d8207e5417c38808100b9b9a640bf578152032f", 0x1c}, 0x48, 0xffffffffffffffff) 18:05:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:58 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:05:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 38) socket$nl_netfilter(0x10, 0x3, 0xc) 18:05:58 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:05:58 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:05:58 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 12) 18:05:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40086602, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 817.856921] audit: type=1326 audit(1649959558.939:132): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5760 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 817.876527] FAULT_INJECTION: forcing a failure. [ 817.876527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.878834] CPU: 0 PID: 5770 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 817.880457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 817.882689] Call Trace: [ 817.883195] [ 817.883649] dump_stack_lvl+0x8b/0xb3 [ 817.884422] should_fail.cold+0x5/0xa [ 817.885196] _copy_from_user+0x2a/0x170 18:05:58 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$revoke(0x3, r3) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x65, 0x64, 0x36, 0x39, 0x63, 0x65, 0x62, 0x38, 0x62, 0x64, 0x30, 0x61, 0x35, 0x64, 0x66, 0x39]}, &(0x7f0000000100)={0x0, "3da319b9039ad8f4c1db6e30ba5bac824614567fab696669eb5853b42af586309917caeef804ea8f03d96b42a77b224e0a4ec51b30c505d8f431342d6c14a363", 0x11}, 0x48, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) keyctl$revoke(0x3, r4) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) keyctl$revoke(0x3, r5) r6 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f00000002c0)="03d13930f5470c49e017bdae8fa46032c9f885a33dc7c6429499f143b2e85b3d5f7421f21b00f8a5b8ef8d3a870ff0afce10c944d90653f5e64888f0b596c1ed53226021972e5f0525bb5f41bedb40809cb80717cf3e9aea1c996aabda0470b2d4a755beb7fbd0928b0e9680ed86f37bf37e5bd1ce", 0x75, r3) request_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='\x00', r5) keyctl$unlink(0x9, r6, r2) [ 817.886132] __copy_msghdr_from_user+0x91/0x4b0 [ 817.887099] ? __ia32_sys_shutdown+0x70/0x70 [ 817.887993] ? udp_v6_early_demux+0xdf0/0xdf0 [ 817.888885] ? inet6_sendmsg+0x4a/0x140 [ 817.889684] ? inet6_sendmsg+0xbd/0x140 [ 817.890473] ? inet6_compat_ioctl+0x310/0x310 [ 817.891368] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 817.892477] ? sock_sendmsg+0x55/0x190 [ 817.893270] sendmsg_copy_msghdr+0xa1/0x160 [ 817.894153] ? __ia32_sys_recvmmsg+0x260/0x260 [ 817.895073] ? __lock_acquire+0x164e/0x6120 [ 817.895997] ___sys_sendmsg+0xc6/0x170 [ 817.896778] ? sendmsg_copy_msghdr+0x160/0x160 [ 817.897701] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 817.898812] ? lock_is_held_type+0xd7/0x130 [ 817.899713] ? find_held_lock+0x2c/0x110 [ 817.900537] ? lock_release+0x3b2/0x750 [ 817.901358] ? __might_fault+0xd1/0x170 [ 817.902153] ? lock_downgrade+0x6d0/0x6d0 [ 817.902996] ? lock_is_held_type+0xd7/0x130 [ 817.903902] __sys_sendmmsg+0x195/0x470 [ 817.904719] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 817.905585] ? lock_is_held_type+0xd7/0x130 [ 817.906471] ? bit_wait_io_timeout+0x160/0x160 [ 817.907382] ? lock_is_held_type+0xd7/0x130 [ 817.908271] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 817.909375] ? vfs_write+0x422/0xac0 [ 817.910119] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 817.911212] ? fput+0x2a/0x50 [ 817.911859] __x64_sys_sendmmsg+0x99/0x100 [ 817.912713] ? syscall_enter_from_user_mode+0x1d/0x50 [ 817.913734] do_syscall_64+0x3b/0x90 [ 817.914482] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 817.915535] RIP: 0033:0x7f89586d1b19 [ 817.916266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.919907] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 817.921424] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 817.922797] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 817.924260] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.925687] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 817.927126] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 817.928585] [ 817.929789] audit: type=1326 audit(1649959558.989:133): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5760 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 18:05:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:05:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 817.947688] FAULT_INJECTION: forcing a failure. [ 817.947688] name failslab, interval 1, probability 0, space 0, times 0 [ 817.948999] CPU: 1 PID: 5769 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 817.949880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 817.951151] Call Trace: [ 817.951437] [ 817.951690] dump_stack_lvl+0x8b/0xb3 [ 817.952106] should_fail.cold+0x5/0xa [ 817.952520] ? dst_alloc+0x9e/0x610 [ 817.952943] should_failslab+0x5/0x10 [ 817.953355] kmem_cache_alloc+0x5b/0x480 [ 817.953816] ? ipv6_sysctl_rtcache_flush+0x110/0x110 [ 817.954362] dst_alloc+0x9e/0x610 [ 817.954740] ip6_dst_alloc+0x2e/0x90 [ 817.955132] icmp6_dst_alloc+0x6d/0x610 [ 817.955570] ndisc_send_skb+0x1131/0x1b00 [ 817.956006] ? rcu_read_lock_sched_held+0x3a/0x70 [ 817.956521] ? __build_skb_around+0x241/0x300 [ 817.956993] ? dst_output+0x470/0x470 [ 817.957398] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 817.957993] ? __alloc_skb+0x182/0x340 [ 817.958433] ? memcpy+0x39/0x60 [ 817.958783] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 817.959378] ? __ndisc_fill_addr_option+0xca/0x110 [ 817.959923] ? lock_is_held_type+0xd7/0x130 [ 817.960398] ? find_held_lock+0x2c/0x110 [ 817.960824] ? ndisc_ns_create+0x2fa/0x7e0 [ 817.961290] ndisc_send_ns+0xa6/0x120 [ 817.961692] ? pndisc_redo+0x20/0x20 [ 817.962089] ? lock_is_held_type+0x91/0x130 [ 817.962554] ndisc_solicit+0x2cd/0x470 [ 817.962983] ? ndisc_send_ns+0x120/0x120 [ 817.963422] ? __skb_clone+0x597/0x780 [ 817.963844] ? ndisc_send_ns+0x120/0x120 [ 817.964269] neigh_probe+0xc4/0x110 [ 817.964667] __neigh_event_send+0xa90/0x1530 [ 817.965158] neigh_resolve_output+0x54a/0x7f0 [ 817.965632] ? lock_release+0x3b2/0x750 [ 817.966065] ip6_finish_output2+0xb24/0x1ad0 [ 817.966614] __ip6_finish_output.part.0+0x4e0/0xa70 [ 817.967310] ip6_output+0x3bc/0x9d0 [ 817.967779] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 817.968384] ip6_local_out+0xd2/0x4b0 [ 817.968844] ip6_send_skb+0xb7/0x340 [ 817.969282] udp_v6_send_skb+0x7aa/0x15b0 [ 817.969770] udpv6_sendmsg+0x1d4e/0x28d0 [ 817.970235] ? ip_frag_init+0x350/0x350 [ 817.970701] ? udp_v6_early_demux+0xdf0/0xdf0 [ 817.971225] ? exc_page_fault+0xca/0x1a0 [ 817.971712] ? lockdep_hardirqs_on+0x79/0x100 [ 817.972236] ? exc_page_fault+0xca/0x1a0 [ 817.972709] ? asm_exc_page_fault+0x1e/0x30 [ 817.973240] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 817.973882] ? udp_v6_early_demux+0xdf0/0xdf0 [ 817.974397] ? inet6_sendmsg+0x4a/0x140 [ 817.974860] inet6_sendmsg+0xfd/0x140 [ 817.975303] ? inet6_compat_ioctl+0x310/0x310 [ 817.975855] sock_sendmsg+0xee/0x190 [ 817.976285] ____sys_sendmsg+0x32e/0x870 [ 817.976753] ? kernel_sendmsg+0x50/0x50 [ 817.977216] ? __ia32_sys_recvmmsg+0x260/0x260 [ 817.977741] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 817.978353] ___sys_sendmsg+0xf3/0x170 [ 817.978805] ? sendmsg_copy_msghdr+0x160/0x160 [ 817.979322] ? lock_release+0x3b2/0x750 [ 817.979784] ? __fget_files+0x265/0x470 [ 817.980239] ? lock_downgrade+0x6d0/0x6d0 [ 817.980717] ? __fget_files+0x287/0x470 [ 817.981183] ? __fget_light+0xea/0x270 [ 817.981633] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 817.982283] __sys_sendmmsg+0x195/0x470 [ 817.982745] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 817.983233] ? lock_is_held_type+0xd7/0x130 [ 817.983761] ? bit_wait_io_timeout+0x160/0x160 [ 817.984278] ? lock_is_held_type+0xd7/0x130 [ 817.984792] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 817.985413] ? vfs_write+0x422/0xac0 [ 817.985838] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 817.986476] ? fput+0x2a/0x50 [ 817.986850] __x64_sys_sendmmsg+0x99/0x100 [ 817.987347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 817.987970] do_syscall_64+0x3b/0x90 [ 817.988404] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 817.989011] RIP: 0033:0x7f8f47a3fb19 [ 817.989430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.991565] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 817.992449] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 817.993290] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 817.994132] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.994957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 817.995792] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 817.996620] 18:05:59 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:05:59 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:05:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 39) socket$nl_netfilter(0x10, 0x3, 0xc) 18:05:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40087602, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 818.062950] audit: type=1326 audit(1649959559.145:134): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5782 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aea92bb19 code=0x0 18:05:59 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "261a5c24219b38479d0d69d82968b04486071d74b8575c844039b960f31e71b1b255625e85d6d2edb5ab1ae9fe1db14bb2a7c173df96defc0249f1c8c52fa2a5", 0x2c}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "5ed570f855bf55622dd7c083fa18e467f63ba65953089d6597753dcafb11777c8ae5d591d9a3078db68e00cbc3201979788a16a7b393576d10071c2af749b87a", 0x25}, 0x48, r1) keyctl$set_timeout(0xf, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x8000000000) [ 818.115857] audit: type=1326 audit(1649959559.196:135): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5782 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f9aea8de72b code=0x0 [ 818.144616] FAULT_INJECTION: forcing a failure. [ 818.144616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.147209] CPU: 1 PID: 5791 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 818.149014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 818.151493] Call Trace: [ 818.152059] [ 818.152560] dump_stack_lvl+0x8b/0xb3 [ 818.153427] should_fail.cold+0x5/0xa [ 818.154277] _copy_from_user+0x2a/0x170 [ 818.155174] __copy_msghdr_from_user+0x91/0x4b0 [ 818.156259] ? __ia32_sys_shutdown+0x70/0x70 [ 818.157353] ? udp_v6_early_demux+0xdf0/0xdf0 [ 818.158456] ? inet6_sendmsg+0x4a/0x140 [ 818.159470] ? inet6_sendmsg+0xbd/0x140 [ 818.160461] ? inet6_compat_ioctl+0x310/0x310 [ 818.161583] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 818.162960] ? sock_sendmsg+0x55/0x190 [ 818.163958] sendmsg_copy_msghdr+0xa1/0x160 [ 818.165038] ? __ia32_sys_recvmmsg+0x260/0x260 [ 818.166288] ? __lock_acquire+0x164e/0x6120 [ 818.167436] ___sys_sendmsg+0xc6/0x170 [ 818.168498] ? sendmsg_copy_msghdr+0x160/0x160 [ 818.169648] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 818.171144] ? lock_is_held_type+0xd7/0x130 [ 818.172268] ? find_held_lock+0x2c/0x110 [ 818.173366] ? lock_release+0x3b2/0x750 [ 818.174367] ? __might_fault+0xd1/0x170 [ 818.175441] ? lock_downgrade+0x6d0/0x6d0 [ 818.176516] ? lock_is_held_type+0xd7/0x130 [ 818.177650] __sys_sendmmsg+0x195/0x470 [ 818.178620] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 818.179746] ? lock_is_held_type+0xd7/0x130 [ 818.180903] ? bit_wait_io_timeout+0x160/0x160 [ 818.182079] ? lock_is_held_type+0xd7/0x130 [ 818.183210] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 818.184572] ? vfs_write+0x422/0xac0 [ 818.185485] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 818.186797] ? fput+0x2a/0x50 [ 818.187591] __x64_sys_sendmmsg+0x99/0x100 [ 818.188612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 818.189837] do_syscall_64+0x3b/0x90 [ 818.190738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 818.192003] RIP: 0033:0x7f89586d1b19 [ 818.192880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 818.197332] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 818.199225] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 818.200998] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 818.202751] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 818.204514] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 818.206298] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 818.208113] [ 820.024497] Bluetooth: hci0: command 0x0401 tx timeout 18:06:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x2, 0x0, "3397cb"}) 18:06:17 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:06:17 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) [ 836.671786] FAULT_INJECTION: forcing a failure. [ 836.671786] name failslab, interval 1, probability 0, space 0, times 0 [ 836.673355] CPU: 1 PID: 5802 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 836.674436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 836.678213] Call Trace: [ 836.678577] [ 836.678882] dump_stack_lvl+0x8b/0xb3 18:06:17 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "f87a356cd46b18fbdac293eeecc8b5ca7c775d1037b9b6c2679e8588228c38a2d623373656755282b08272e1b8b45130842972988d42e3f13e94d77edb354ab9", 0x21}, 0x48, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$set_timeout(0xf, 0x0, 0x0) keyctl$join(0x1, 0x0) 18:06:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x401c5820, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:06:17 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:06:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 40) socket$nl_netfilter(0x10, 0x3, 0xc) 18:06:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 13) [ 836.679440] should_fail.cold+0x5/0xa [ 836.680041] ? dst_alloc+0x9e/0x610 [ 836.680545] ? create_object.isra.0+0x3a/0xa20 [ 836.681169] should_failslab+0x5/0x10 [ 836.681695] kmem_cache_alloc+0x5b/0x480 [ 836.682265] create_object.isra.0+0x3a/0xa20 [ 836.682856] ? kasan_unpoison+0x23/0x50 [ 836.683392] kmem_cache_alloc+0x239/0x480 [ 836.683985] ? ipv6_sysctl_rtcache_flush+0x110/0x110 [ 836.684660] dst_alloc+0x9e/0x610 [ 836.685138] ip6_dst_alloc+0x2e/0x90 [ 836.685650] icmp6_dst_alloc+0x6d/0x610 [ 836.686198] ndisc_send_skb+0x1131/0x1b00 [ 836.686759] ? rcu_read_lock_sched_held+0x3a/0x70 [ 836.687420] ? __build_skb_around+0x241/0x300 [ 836.688071] ? dst_output+0x470/0x470 [ 836.688577] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.689345] ? __alloc_skb+0x182/0x340 [ 836.689871] ? memcpy+0x39/0x60 [ 836.690328] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.691066] ? __ndisc_fill_addr_option+0xca/0x110 [ 836.691830] ? lock_is_held_type+0xd7/0x130 [ 836.692449] ? find_held_lock+0x2c/0x110 [ 836.693003] ? ndisc_ns_create+0x2fa/0x7e0 [ 836.693580] ndisc_send_ns+0xa6/0x120 [ 836.694105] ? pndisc_redo+0x20/0x20 [ 836.694624] ? lock_is_held_type+0x91/0x130 [ 836.695231] ndisc_solicit+0x2cd/0x470 [ 836.695787] ? ndisc_send_ns+0x120/0x120 [ 836.696346] ? __skb_clone+0x597/0x780 [ 836.696889] ? ndisc_send_ns+0x120/0x120 [ 836.697444] neigh_probe+0xc4/0x110 [ 836.697957] __neigh_event_send+0xa90/0x1530 [ 836.698570] neigh_resolve_output+0x54a/0x7f0 [ 836.699134] ? lock_release+0x3b2/0x750 [ 836.699649] ip6_finish_output2+0xb24/0x1ad0 [ 836.700309] __ip6_finish_output.part.0+0x4e0/0xa70 [ 836.700972] ip6_output+0x3bc/0x9d0 [ 836.701485] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 836.702223] ip6_local_out+0xd2/0x4b0 [ 836.702764] ip6_send_skb+0xb7/0x340 [ 836.703285] udp_v6_send_skb+0x7aa/0x15b0 [ 836.703901] udpv6_sendmsg+0x1d4e/0x28d0 [ 836.704456] ? ip_frag_init+0x350/0x350 [ 836.705007] ? udp_v6_early_demux+0xdf0/0xdf0 [ 836.705613] ? exc_page_fault+0xca/0x1a0 [ 836.706179] ? lockdep_hardirqs_on+0x79/0x100 [ 836.706798] ? exc_page_fault+0xca/0x1a0 [ 836.707368] ? asm_exc_page_fault+0x1e/0x30 [ 836.708043] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.708783] ? udp_v6_early_demux+0xdf0/0xdf0 [ 836.709389] ? inet6_sendmsg+0x4a/0x140 [ 836.709931] inet6_sendmsg+0xfd/0x140 [ 836.710444] ? inet6_compat_ioctl+0x310/0x310 [ 836.711059] sock_sendmsg+0xee/0x190 [ 836.711553] ____sys_sendmsg+0x32e/0x870 [ 836.712138] ? kernel_sendmsg+0x50/0x50 [ 836.712719] ? __ia32_sys_recvmmsg+0x260/0x260 [ 836.713370] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 836.714099] ___sys_sendmsg+0xf3/0x170 [ 836.714652] ? sendmsg_copy_msghdr+0x160/0x160 [ 836.715285] ? lock_release+0x3b2/0x750 [ 836.715874] ? __fget_files+0x265/0x470 [ 836.716421] ? lock_downgrade+0x6d0/0x6d0 [ 836.717002] ? __fget_files+0x287/0x470 [ 836.717574] ? __fget_light+0xea/0x270 [ 836.718111] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 836.718891] __sys_sendmmsg+0x195/0x470 18:06:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x0, "3397cb"}) [ 836.719492] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 836.720116] ? lock_is_held_type+0xd7/0x130 [ 836.720762] ? bit_wait_io_timeout+0x160/0x160 [ 836.721384] ? lock_is_held_type+0xd7/0x130 [ 836.724024] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.724755] ? vfs_write+0x422/0xac0 [ 836.725231] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 836.725923] ? fput+0x2a/0x50 [ 836.726328] __x64_sys_sendmmsg+0x99/0x100 [ 836.726861] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.727504] do_syscall_64+0x3b/0x90 [ 836.728041] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 836.728730] RIP: 0033:0x7f8f47a3fb19 [ 836.729211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.731827] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 836.732823] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 836.733740] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 836.734659] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.735568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.736519] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 836.737466] [ 836.776661] audit: type=1326 audit(1649959577.857:136): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5803 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 836.776888] FAULT_INJECTION: forcing a failure. [ 836.776888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.781136] CPU: 1 PID: 5818 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 836.782303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 836.784456] Call Trace: [ 836.784796] [ 836.785088] dump_stack_lvl+0x8b/0xb3 [ 836.785598] should_fail.cold+0x5/0xa [ 836.786107] _copy_from_user+0x2a/0x170 [ 836.786643] __copy_msghdr_from_user+0x91/0x4b0 [ 836.787265] ? __ia32_sys_shutdown+0x70/0x70 [ 836.787981] ? udp_v6_early_demux+0xdf0/0xdf0 [ 836.788573] ? inet6_sendmsg+0x4a/0x140 [ 836.789106] ? inet6_sendmsg+0xbd/0x140 [ 836.789639] ? inet6_compat_ioctl+0x310/0x310 [ 836.790234] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.790965] ? sock_sendmsg+0x55/0x190 [ 836.791490] sendmsg_copy_msghdr+0xa1/0x160 [ 836.792254] ? __ia32_sys_recvmmsg+0x260/0x260 [ 836.792869] ? __lock_acquire+0x164e/0x6120 [ 836.793459] ___sys_sendmsg+0xc6/0x170 [ 836.793986] ? sendmsg_copy_msghdr+0x160/0x160 [ 836.794598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.795332] ? lock_is_held_type+0xd7/0x130 [ 836.796071] ? find_held_lock+0x2c/0x110 [ 836.796609] ? lock_release+0x3b2/0x750 [ 836.797127] ? __might_fault+0xd1/0x170 [ 836.797643] ? lock_downgrade+0x6d0/0x6d0 [ 836.798192] ? lock_is_held_type+0xd7/0x130 [ 836.798783] __sys_sendmmsg+0x195/0x470 [ 836.799331] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 836.800080] ? lock_is_held_type+0xd7/0x130 [ 836.800763] ? bit_wait_io_timeout+0x160/0x160 [ 836.801371] ? lock_is_held_type+0xd7/0x130 [ 836.801941] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.802703] ? vfs_write+0x422/0xac0 [ 836.803193] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 836.804116] ? fput+0x2a/0x50 [ 836.804557] __x64_sys_sendmmsg+0x99/0x100 [ 836.805118] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.805783] do_syscall_64+0x3b/0x90 [ 836.806278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 836.807005] RIP: 0033:0x7f89586d1b19 [ 836.807496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.813290] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 836.814305] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 836.815230] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 836.816176] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.817104] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 836.818040] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 836.818977] [ 836.825175] audit: type=1326 audit(1649959577.907:137): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5803 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 18:06:17 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:06:17 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x2b, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:06:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4020940d, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:06:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 41) socket$nl_netfilter(0x10, 0x3, 0xc) 18:06:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "3397cb"}) 18:06:18 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(r0, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) [ 836.934566] FAULT_INJECTION: forcing a failure. [ 836.934566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.936410] CPU: 1 PID: 5826 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 836.937511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 836.939012] Call Trace: [ 836.939362] [ 836.939655] dump_stack_lvl+0x8b/0xb3 [ 836.940185] should_fail.cold+0x5/0xa [ 836.940844] _copy_from_user+0x2a/0x170 [ 836.941390] __copy_msghdr_from_user+0x91/0x4b0 [ 836.942049] ? __ia32_sys_shutdown+0x70/0x70 [ 836.942641] ? udp_v6_early_demux+0xdf0/0xdf0 [ 836.943239] ? inet6_sendmsg+0x4a/0x140 [ 836.943790] ? inet6_sendmsg+0xbd/0x140 [ 836.944323] ? inet6_compat_ioctl+0x310/0x310 [ 836.944907] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.945609] ? sock_sendmsg+0x55/0x190 [ 836.946117] sendmsg_copy_msghdr+0xa1/0x160 [ 836.946692] ? __ia32_sys_recvmmsg+0x260/0x260 [ 836.947286] ? __lock_acquire+0x164e/0x6120 [ 836.947900] ___sys_sendmsg+0xc6/0x170 [ 836.948403] ? sendmsg_copy_msghdr+0x160/0x160 [ 836.948999] ? finish_task_switch.isra.0+0x226/0x870 [ 836.949675] ? lock_is_held_type+0xd7/0x130 [ 836.950357] ? find_held_lock+0x2c/0x110 [ 836.950892] ? lock_release+0x3b2/0x750 [ 836.951420] ? __might_fault+0xd1/0x170 [ 836.951972] ? lock_downgrade+0x6d0/0x6d0 [ 836.952528] ? lock_is_held_type+0xd7/0x130 [ 836.953121] __sys_sendmmsg+0x195/0x470 [ 836.953704] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 836.954279] ? lock_is_held_type+0xd7/0x130 [ 836.954877] ? bit_wait_io_timeout+0x160/0x160 [ 836.955507] ? lock_is_held_type+0xd7/0x130 [ 836.956157] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 836.956892] ? vfs_write+0x422/0xac0 [ 836.957391] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 836.958154] ? fput+0x2a/0x50 [ 836.958605] __x64_sys_sendmmsg+0x99/0x100 [ 836.959201] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.959932] do_syscall_64+0x3b/0x90 [ 836.960454] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 836.961175] RIP: 0033:0x7f89586d1b19 [ 836.961688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.964198] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 836.965224] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 836.966192] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 836.967137] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.968115] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 836.969070] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 836.970054] [ 838.712388] Bluetooth: hci2: command 0x0401 tx timeout [ 838.842356] Bluetooth: hci3: command 0x0401 tx timeout [ 839.032381] Bluetooth: hci4: command 0x0401 tx timeout 18:06:34 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:06:34 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) keyctl$set_timeout(0xf, r2, 0x7) keyctl$revoke(0x3, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) keyctl$revoke(0x3, r0) 18:06:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 14) 18:06:34 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:06:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x5, 0x0, "3397cb"}) 18:06:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:06:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 42) socket$nl_netfilter(0x10, 0x3, 0xc) 18:06:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="28010000170001000000000000000000fe8000000000000000000000000000aa0000000000000000fe8000000000000000000000000000aa00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0001000000000000000000000000ac1e000100"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/128], 0x128}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffeff}}, './file0\x00'}) r2 = openat(r1, &(0x7f0000004fc0)='./file0\x00', 0xa4000, 0x110) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000005000)) [ 853.659841] FAULT_INJECTION: forcing a failure. [ 853.659841] name failslab, interval 1, probability 0, space 0, times 0 [ 853.662128] CPU: 1 PID: 5847 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 853.663760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 853.666183] Call Trace: [ 853.666843] [ 853.667419] dump_stack_lvl+0x8b/0xb3 [ 853.668266] should_fail.cold+0x5/0xa [ 853.669034] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 853.670146] ? dst_cow_metrics_generic+0x48/0x1e0 [ 853.671112] should_failslab+0x5/0x10 [ 853.671886] kmem_cache_alloc_trace+0x55/0x3c0 [ 853.672828] dst_cow_metrics_generic+0x48/0x1e0 [ 853.673769] icmp6_dst_alloc+0x45a/0x610 [ 853.674601] ndisc_send_skb+0x1131/0x1b00 [ 853.675472] ? rcu_read_lock_sched_held+0x3a/0x70 [ 853.676496] ? __build_skb_around+0x241/0x300 [ 853.677396] ? dst_output+0x470/0x470 [ 853.678150] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 853.679247] ? __alloc_skb+0x182/0x340 [ 853.680068] ? memcpy+0x39/0x60 [ 853.680766] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 853.681890] ? __ndisc_fill_addr_option+0xca/0x110 [ 853.683054] ? lock_is_held_type+0xd7/0x130 [ 853.684016] ? find_held_lock+0x2c/0x110 [ 853.684922] ? ndisc_ns_create+0x2fa/0x7e0 [ 853.685866] ndisc_send_ns+0xa6/0x120 [ 853.686648] ? pndisc_redo+0x20/0x20 [ 853.687497] ? lock_is_held_type+0x91/0x130 [ 853.688479] ndisc_solicit+0x2cd/0x470 [ 853.689300] ? ndisc_send_ns+0x120/0x120 [ 853.690244] ? __skb_clone+0x597/0x780 [ 853.691083] ? ndisc_send_ns+0x120/0x120 [ 853.692021] neigh_probe+0xc4/0x110 [ 853.692832] __neigh_event_send+0xa90/0x1530 [ 853.693854] neigh_resolve_output+0x54a/0x7f0 [ 853.694938] ? lock_release+0x3b2/0x750 [ 853.695771] ip6_finish_output2+0xb24/0x1ad0 [ 853.696703] __ip6_finish_output.part.0+0x4e0/0xa70 [ 853.697764] ip6_output+0x3bc/0x9d0 [ 853.698541] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 853.699600] ip6_local_out+0xd2/0x4b0 [ 853.700424] ip6_send_skb+0xb7/0x340 [ 853.701212] udp_v6_send_skb+0x7aa/0x15b0 [ 853.702062] udpv6_sendmsg+0x1d4e/0x28d0 [ 853.702917] ? ip_frag_init+0x350/0x350 [ 853.704534] ? udp_v6_early_demux+0xdf0/0xdf0 [ 853.705564] ? exc_page_fault+0xca/0x1a0 [ 853.706662] ? lockdep_hardirqs_on+0x79/0x100 [ 853.707792] ? exc_page_fault+0xca/0x1a0 [ 853.708863] ? asm_exc_page_fault+0x1e/0x30 sendmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="1ef24247593344b1f695c0de7f7752a91330e0002f56408ab5279b8cd06dc329938224851350a9d3889dded59c76cb7dc6931750966372ef79d1b053c7eed39fa0892067f186bb984d5c1781e962150eac", 0x51}, {&(0x7f0000000140)="5dc0d42a3da5fcde89f3f6bdffb26bf19f4893d8b3ab8350b77b4f768b5b4b21688e59e5b7e340c52f7ff5086bc45001ddc0e03bb7ff9e97f1bb6d1cdf9f35ef3b0894e62f9d38d2319b0053a88a3b094bf18c8c20a9b1d72a2894ce10457f564a81921e58c91303408404d5da8488144d694420c4ffc96ee22c8aeda54f9f581d4642", 0x83}, {&(0x7f0000000200)="be82758f66dd70141c1ecbb426207826fc324f4f997fdd477d8c3b9c527924630cf68616e4af53a98b221da7e49ae0e1ba6623b28198bfb1a425234e9ed970dcabbbb04fa322ed9a896a0ab00308959a89c1ae2601370eaac6a4c5fb7407998b51e8708318fa14876a686f23d83f0512c341ea09faa3941cd859414575bcafd2b70d5df706af1eae34f1390a3da9ceec7d31cbe74e8a498985766f71760573b154ca3f01c748af8e0ab050c813f4857493f79cfd2a5a0c3d1fc89d9349fd01a2dd4761cbb5214e9d3a779b7ffea2b44377c92df2861a64ad99dfb747d58d09b5cc3ef93b8088b93e134dd4f35dc42e45", 0xf0}, {&(0x7f0000000300)="42ab029cfda1e5ea72941c09448eedef63010628a28596c1ae", 0x19}], 0x4, &(0x7f00000005c0)=[{0xf0, 0x1, 0x5, "136e490be799af2a6fbcc3936e27da7c0f29dedd92284a911eb93d2a1ecb5f2d039289a011f03a5ea87943b6cbf64f4b7e8dc5dbca406f7275d722d6502324972dddd29f21f2362adc153a78ab4d7b1cc4b64e9324520f6d402aaecfe2fa4c69aa64e45ea368b6058ed1135a1896d664328d85f76c5170b03785b0a019dfffae64477995f3d16a794d9f8f10e20c6d0e98c61845ffa35187f1400a7e8edcc7dfa013c2b78dc636c85be5709ccae42ca4114f582c965a1923c7a977d96283ae2197386faa3b48b02200bc24af85ccd09e38284a1f88388d0584b949"}, {0x20, 0x11, 0x9, "477a0f4a17c7ecff7ea5"}, {0x90, 0x10a, 0x4, "e0a65d92c19e56948ae4b2a3f6452f4b309f45c22704fad52b904a8654975192a4b4a731c790bcfd365b3c4dd1a3be1204a353747b6cd6aa6510baa840d404305c1b95a869c4d0e3d1bafef1e8053e0046653f4263e103f21747ee687a2bafba56f2ca07586008c7b7875f06f3560f5d228c856f8651497f3e84231d294053"}, {0x78, 0x29, 0x3, "48fd2b608728d28eb4696ab8144b812b8d5b2b2774a1c61e8dd212d3943a20df8bf439f8745904931646304fc3eb02bc9f8a77b264df1330e7bc86e657c514db69122681beb026f710b8a05aa276197828c5e2ede80baef90e52460eaa9e50923a8c574485819262"}, {0x1010, 0x115, 0xffff, "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"}, {0x68, 0x88, 0xa0, "194caef749f34b0f8bee0945458db2a5470cd726d8b474a1b147a62b8ce2ca8e58744e167b6fb65a8b32a15033403eedf6df4a011f30a828632c78743c12b37b374e37e6ed40df694e97ea878385201769da932e99ae"}, {0x88, 0x1, 0x8, "d1dcef1c3f2dd45dc4ba8fbc049792ad705e5585b8613361e317bdb68ab5289cf3239cd95e7043c2d09b408d2ffc0fdea4b522c138dbd315ee4b2e1e69b756387f91cca4165a8172aaf5d3cb502d37df549c6167f563d080856decf113f47c33c533d542b68335bd2a445ed998e58e3549ae3347ed"}, {0x28, 0x29, 0x2, "82e96344e4cdcef8e25b659bf9db7a675100"}], 0x1340}}, {{&(0x7f0000000380)=@in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9cf}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001900)="f4f5d804e4a640d01c15572d43e50012d510e76c0db0f9e7d5636ff174575a89a75bd66ccd4717a4eb7b8978b75dea9d7c3ff847462e9531ea0cb9699bdd8633192a7999b19d3665c87112b74e04d8f3e15b4190d6c7c827bb91bc965a24e5ef279c7fbd9135cfa24b4d8ebc3c51c3c5db8d495583579ab1ad2956cb1dd9d794640349ea15101b5e1b98ce74bb7cc8c49aea44c62c001edf352053da35255e268c7556b3611869f6c38f2f2da53ccaec937cffa37d32abfc3a5c24652f4048e834a082b358f050d0c8e6d29c699aa7c219e4a6de4c2fa19709ca940281466e80d0e5dacb9e4b543dc4c398a0c519e5da24c3945a6ef4", 0xf6}, {&(0x7f0000001a00)="eba28c5110f6012bef8914c0127bb88fccbc19351fa753121c5bd860fc77b4bd140f111f87f018f0e243470b7f2ac5c27336d59110e3d91dca934f03c4026b1d1479c91da021f9e84b04e874cf8f2a8804596761e4d1d142a51882def72be90b107eeade26b94c9593a3e7bc62a993b514050badd5949b49b2cf200dc5760e8f412dd8bd5c826bee3ebac1cabf694d2de4788eb20b1ab7feb39b337299953b75", 0xa0}, {&(0x7f0000000400)="a3552bd8388ccccf7450e1044029ecc8ab11147b65ba49b3771ba825fb5a22dd9d039250a5f4af608794ef6286ef84c15952dc2147a4e44483f431dd00c4f6b1401ebc69fbf5b7bccd975dc001c120cd82131313972a664d75931f1f8df1fb77f561", 0x62}, {&(0x7f0000001ac0)="889314e0dbe16bfd9467d65184e539b8ae25463e05705451745af162e453ef40cfed304751100cd8a32692fa83ccd4e6bfdb25a3701a23a13ddb87d5cc5cd1941ccf654db65a5022a394393f4539bff97189db706807ac2b284834e0a1dac6c71baafd291ec847fe623dc1cfde398e5d7d00b098b54a7ff625057a63075f3bf6201f9c68256a618919bae436a8f9ffabe78600f05ff1535ae64e136b383e33e2784c4dd1a8ff5ead883dc1667b490d33791ca2973d779d95fdbf47ec90003c18e477dbe947bef37389175e2e61c96d", 0xcf}, {&(0x7f0000001bc0)="33b721459d8cddbaa29a31e74124908ef9559e524c75ce39b22d08e256533fbce3bcec7792e1549c55f2e1399f88eeddc766de8ae2afbd1fa0b4c04e0ec9ce2b10478cd71bc721fa9616", 0x4a}, {&(0x7f0000001c40)="d93a627d378ed5393b2310c48b0aa66cd4e7ae3960e9e81ad66d", 0x1a}, {&(0x7f0000001c80)="69049cbac08a7971f7aedfe73adda0a1bba6819529773d5ac7a0fb3bc530e649364765af82854aedeb219778e8427d5388f5ece222f30af9a0d3855c0e735d49bff72971a0c40b30c27b0cf32dfa978a46e17c068a7022616b90887603e3d78557a2e14bb0cffad07f8a7958b34daff83d0981d8fafb2a44fc910a6e2b721be820c8dea0d760d90541d02db29b086d1c812c4aeee70584a160564d35a062d4bab0ccb7ac97b014f2216f7382046b6daeb4e8e6f4c0c40093eadac8d2e831dc0759e11ae31f0f30349ef1b7bcce1d4766065d9f5ad2a155e30e04853dd19abda34610f403792fb3a436ee5e0b4ce254e9f3bbb3bebd7fe572686cd5fd31d451e24873a1628ba37cd1bdaae9dcf73a28bbeb7c9bc7210dff0d90173cd0e2b2d3021c087509283e57183c339e90a29b826a2f6fff13d4c9c34f5e40720cd3d9a462a67736bcd0523a5b0aadac2882a06ee11594dde84cc6677b4be61d4aceb5d063e7187599d5f0bdd8bcbbb32c0a3d221dbe179b53d48b4063d72cb6a2a0e72d51d303d09c82f824490c44906caced41fa21ae265ba087f88f4fc0c753b7156b757cbd236b0e846da90cc1df67ef85987db4af789e3298a074e475c959d018d7a5ede8ca5e410d95a9924988500faa98585166159300c2a66eac3c86b57c150ad867437584d1ae8b9da102780e5430c81e6db4eee24dace7d5ead47a3cc6ee7d86d135e0434db7d484c5b5e2a437e3025ac49ec6e11e6f5f6848508b3e784c2d09f58b0589a5e973de9772c6f9f0826693512bd244353885e3f058fac08b39b21cd749493a7652005225977b951d9765ae08134b1d6a09b22444258419ce2a79d7e5b24f9e73c5375f2a2acd57286e568b0a68ad9f10124b8579b7f6785cf087596423c61dd81e782c846fa49ee41e3bb646bfe6f38f8df2c51c92a09ee00a3601f14a1fc620acb7bb0a5cb3f44e4ea0b256f8c3aedb30e6d83a9437e34bc70af01f96fa286e2d6820ff5dcd7da7801014ae6ec0c5596c52923a9cb8b3c32b92b8212f07ecf4d9c7e83ed9ee22bde9328b04b2325d895650ebf3ef38197129eb79eb24618692629f08445d567fa7339d326fb72aa0074e4bbf5f8e87cbd614eb5b3bdf82e5f04fa3fe59000c5a5bc0b3346694e6d82bfbcc82e31cb09893ad26ada3452e4c73e8dcbcd24f6346a3df23a6d78a0806ba5cc568bffb94ac6a6e79ad22aa76d7c0e6da70ce2d017b54f7e56554817970ac72d2c77766fbb009fb7173947f71d5dd682b87b818479913de5bb6c863379be79c6dd66cf67b77778980e12d7d7bb645cae8fc73c9bb233f4eeb4b96cf336b8c872803a128a682aa1eb287cbcc91999e9909a293edc042206ee4c807bae9cfb3ae90404cb5ff6d65d5d1e3177f0b43be7eb55fd7cb0964a00425b466478ba873ed6816a8062da637295eae48271d40e2f6005cadd356279e09a69f2963c3941e32d6837d0eb727977ed88a1a3a156bae9df7de09e7de97756e6d3cc2507382a897bd4f3be0b5887065991b77dc18b887b7986d855b2a04c95ccb936292277cf85abdc6904c8b29352065f5dbb8ce55be8ee18a1da2a0cc8f6cc83e4ce88c9546204f23c15a6c7ac88200daf15a0b1e592051693a3d5feb33708ec29e67c3a60d624b1cdfb3d8d2d3c6fb32ff129eadeee7ef936de78c980edd3889f5799ae6bff8ee2c21f7e38a4db826d1fee56ea631c4e7522d6f80cef000aabcef786ba2ace91e83598a661d33a7c748ecced8c2ee2bda14b0f053e48ba08b18a3fd729bd0b043d2f2786ae96fd70517ff860eab542ba873725cfb7bf4d8dcb5a70cd6f870c8cf3bf1e5b6a2eea9fac536248b31c18753d5e14a8c5ea7a89387f9dbff6fd7002f327bc19ba2c208268e6cca3c675b6f7ffc2929027372a2f19dcda93aa20fd7a38b5cbd759c2eb4d5b6b8c318bade98630124e6cc325dd252d5ac0658d6a40a4e4018a56e76e17bc8031dcece7ce4ea1ea824ceb5c73a7bb6676fd732361a25a23586ead6f2985a1e3207cdb3378fea1f1e6b43f97bb2f76cd3bc08195809b34faf8e0294f606888b5a346b515acc9a69bd5a23733781331e7a5277551a19048b5eb829208ac962743f3c614e490ad870d79ba1237afc8e5e90ac2469bf5e5b02470b2b68cb6e0c82b9961fb4b866b9adb69bad9ba9385a239ce732f19a337c2e4a9b19dea59aa760a78139a574917a6a6329b127d710d37201801ff33ee052c89f8ae1b8f133798caa07041ebeed8d6007fe84263ca6e8bc8dd6f772b054c485280256cf3a9dd05139c5eae91c990f34505eb3e414a6d453fe1a7b5837edb41ce110db0d64b1355c6c0fc27107739ce85728f73ce3e54eb78a5490517614a2395a89da57252dd4972d44888fbaeeb2932790b1ef9f4e64ed81c42f49ac924cb1af6bf66d2e9b18ec488b8b5dd7e7eb3d6d522ecf2462cfc6d742c000977b1bbe2a18c69d3bb9820e0fd55d96af3a6b6ec69c171453fa582412a600085bac56f4508a7473f740f7c15ea24ad158a64eef702e97c377a8a6957832300574b154e6ceae7e37e9625e2c218155d9235e1bce5cba1be7cfa645644f1feddb525eb0fdc4ed8fcf5a7fd71b5ecf59e1e16abb677890dec54492bf922fa87aa0ef6e315f527f686e9514acffbc13e4a3c6dcfc37f885fed1c4127985f9459be35ae4684b25351556d3bda09a8a23a5ad19be408afd2c9c3ab40d44bd55480f314908a3ce6318c499ffec0bdd245490f8ace5949f62838b4ec9c81e7164d77e2a9e91913df0e5064d1d54241ba644dcea2744f64ed5953729ca01eeed984ee46102e1352b5612c0a4b09f2ad3e3a6113de5819ac4e3f9cd8ed8b770ea7de60894b0d4dda0f4b0730aadad198a2ce05a379746cb745f9384ef26eeadca7e66bba3db0bf6fd7d73c28ecaff3300cae3838bd20f1b1240f222b6b91d80d87f99d770f327ea798685daa5b1321a84a0b16e36e62ace879965110acbe9dd68c8823918403d6d0273a4f8a934501478284f5d3206a81be7fb001b11a6ef3748e6ef057fd7420a47d31164a36c6c72210732eb1074d44fcb75d75dec66a72fa11aa916e48e6c87df14dee48d6e2e99efc45a66cd1fd668aacce83e0140e7a999b31bc7414c706bbca2b953c6eb9a1a57374fc09bc3aec5e29ba4ca1af3f2a82335229c13d7dc60d75eb1a39cdb005e5bfc5bc0ebd59eca8c544d4fa489ff57b52774f8875188bbf44dbd50f2bbac4e9e2e0576c28262680531a5a01259129b9a4f5c2a06cae3f77adf5600b38b3edaf55609c4938ac649634fab42e6f19ac50b438ae41b06eecd462a07905d703b2b90aedd2f86ab5e96b0169e9a2ea00a562d2ba0b9cae23d1e1f120dd9084ac2aa3c0a135491bf8f2cdd300b676f52dae68dab5855d1e45b8fea967a370474041c58ca3cc828def2106701eff93349b1d0c241f40e3d6e25d213b904a6b86c3dc28e71738bf84e49d3ff70f3a4281f2dc0c9983efa563c5036ba2a3556d315ece665ad98bf8d1d49a86341a08b18d96520139dd3321b802cf9eb18b0fa9ed7938c3246dbcfb6d218665d03faeb58a91fbdb4a30b8c0af3796d2da519e74e9095dc7b0ab86ca46ce5271d78d90b1abad91eb375ad30145414a058ea37f2bd667d2d41df2b46524ac032cc101780cbb47a2b73443a6bc674bff29f761050f3861b6da9b254c7c99da0b2b13ff8956915e025a976b671e05b88ff8a6189a947dbba95830d85d85110adb17eb396fdfff7f78d28a2c6b6309db68daa51f399326f86dbb0712fe427e0ff6dcfddb830f121f5dd9bf1a1acbc50c96b97eddc95ab6664357174af2af4683dac6c79ca0e71a149a58b11ab8ccc36bc4b47a3689cd87934a5e818f57101ff573831bb4546fcc34c35cd54b21896cf28907b74a643f7844c86274689e4a7f0cff86ec2759d60450635a7db5dbf5e2359f87b3ce7885986420f820e0ad9ace15b233a15e41a27363a2e9097d1f9b915d7a2cad7cb9ff7b5d43156023548f4c31af63cfcb451e6af0ea063647c3f1d2eab97907db4b35bcb12d528ce042540643e4c47edc5b4d9f2ddd1941eaadb19525895006e90eb5016647f54afec78f443c38d3030019c02597754e4df378ca335072891d5b449893ed1ede332665940f7e71adc5593da8acc34911e3b554aeb16ae4598d76d16a12c4d858b782127581be6798236870a36b6bc9161122e790d32865cbf7a52d359344c85b09e663d4c5b639a7c520bd8efb360c251416ec7565c8e42ceacf24abb01e0a5ff0a1ddbf688e08f926a6eda8da8550fc71c54c752ccc2e3b173682d099e0895a61b67550ea7f759686fe110a886470ca8c1096015fc17164e6f6cb72f131c9fdc28565f1702bd3be46a62e3795cd5e8cf2a3550c921bd050eedf75229793c40e73e3433113695099b8b690c5c7b89c679345b0e19bad26cf161d414456fce58dc4d8a4f48ff7a760dda7aaaa5293517f402df01cc08e31c776723bf038087b93410268ad76367d438a9557ffe036a45311e9d2cce00ea8690eda58760a63ade4473021fe88cc95f84906cd72c8252f6fb41ea0283e01a71db0bdfcfe6f04b409fe6ea7f89bae30510557852ca51c17528765496db02e80deb70eb3e47758e1133802596a855c95e1f87dce46cb0de7b97a1b7d92bbff4787d6fff1a40f1ddc6837647492f8f792f5c7c82dacf534493a652a7338ccaf33efdd10bb98add2c2f259e320a606c3449d293b6697b7c49eaf48e40ed2f3f9339b08aae5968c5e3fd2e580edc4098192cc7838a579730aee31c44fe92566b2e11458213c2939f8b0bd5830d07ef75dd0c82d57bfb4a7f9e5eefad47446520a1444dd87a725f7a5b8b1a294bd4c4e6ff20182cb9096f1221eb1db04f43b882fbf852ed5db04a11d993143643de910d4c327456a17f793d77cffcef4f1b714021c9ce157cbded9001a7a5e8badf45466d4aa1dda7e2295e452f20d7728eb591e375dac49f01909c3ea5a78ecf958ec21cc5627e4a760b7c07ad4c88cb10ac569b62368d9d7e11b9356af4b9c90ff4123976ae047a35d0fc833ed8b2ef547bb6ec38a9af4fdc0e1bd9f5310c8ff48eef64709009a9fb6deb9f7d7193658866efaf03f5c4dd716a5b2149f41269377510cf26a31e643c01bdd4aa1a832060a9037ccb9f30b194f69fc555ff839a0c3a4dc496802693bc48daab33ccdfe42204078b2c7bef8dab0f671f7a87460c5e46225b86afafbcf3ce35632ab6507a14f581ec0e0d107ee283ab53082a51e361794e8b9683bbf9b92bd3d852c770445d9863793e93486ae6ee4896531c873e971becb62ea449bf21e722a8f5a985ea86e82962e5b2c59caa62b017794046614af11c651c1f2f439d05fbe170c344bb9e967949adb20805ab1c455a4b204fa7b39c75b620f3a365ca0063b031acdebb4cef0f8315828ed460261b3d2225c331790f5fbbfc8d2101192dcf91016b86a36bf777fd4fe07c48f170fbfcd2fe97290dde304dcf8ad2a9492149d7b8eaabeb95f76a884c95a338a42edf83582061cd4ff02232d847220a80e83a336ca8a7b726d72d8cc2678ce01e997509d0d1ffea458f38515dbf3158092759511408c7333c9eda5b0b115e0925b8b1329182c42cbbad0fadb49298671612328f6f4c28e43acca860d019977d8c59b7dfadd6d57734d27670fc130f44b4668ca6850163cba3b8bc3004071ebb1f9c42aec31ff559af6de7497b116cce0bbc839b35298f8a1accec14b8097ce08eaede8ef5a607", 0x1000}, {&(0x7f0000002c80)="e2abbd0354877fe99414563b6f6b19f3be3f84356f60525a010b551966be00925d5a25f22a70fdbe6b4b5dfa9851e70af2d596c12c2392b66c7538903b1c322d143c60ce2bf2536d77a9495ac9a8d5647993835d2850ba0356b4cb71b3bbe0a731e137510fd908a1b21e5c0a10b64806dd5adc8897fe189cc1306578389b46163c9e1ccb11874e0938f37b64378851343f3c46229da2c36548a2462672ffa84c6d00ff2a759b0ae38d5c4c", 0xab}, {&(0x7f0000002d40)="d5bf29da4de4432d5eb6d8888ef3e7351e88913ee0f7ac53c66605eaac8dbaf77c3c5ea2eb", 0x25}, {&(0x7f0000002d80)="531c85072ecb0ec211c61343e0b4c4118a54006c641399094f3059f5578b8f4f52b70f8bc5870df104695783987302360c6286315565eb64bbb124213f056d3a76c77fe731dd79078605aaece3cdf491487503f7b4db04eca62af5420cea8ed4d2add6e48ba35be24203700ef4c504ca288e97dc397d4cd9b2ab76c1ee68d4d70e99c8c3c999027d454b1a998627c2f3511db38760aa2dffaaef2b4663c52570ff24dfd4431f3c8ac5a8c1dae8fe8ab12ce82dc39beb1ca392bd", 0xba}], 0xa, &(0x7f0000002f00)=[{0xa0, 0x10f, 0x8, "456782820ec719cce7c30c3c018cf21107f613d4ba96a3631ac9ea67e57daee2f216f8f2022270efc41599e9443035ab0d0c4c1454a56dd8cbed3c70d6bcac780087b48dbc621d43aae1ac6d9a0ff6fe4a60ec221f543fbdeaca3b8692ef293f55b65ede0d87eff3a66284467fd8ee6b47beacc9289c2ff18f8fc34134072add2036322121344e4922a1036e04"}, {0x18, 0x10d, 0x5, "89"}, {0xa0, 0x101, 0xfffffffd, "74715479b99a9156490b0d1a2d75ae2f18281870a69378071c8d8340a09984955733c442f054c0a2ad1ffe39041c70038a9fcef587154d532909a1c6682e92084950388d35222f6a6f3ccedc702395b87d579b14211d67985d6654d7084fd0a6f9745aaa8b67706ff24f66bbba63a9e015066cef6986ea1ac008733fadf2af27f40b0ba67c6bbc7b08c3ef8d64"}], 0x158}}, {{&(0x7f0000003080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x4, 0x0, 0x4}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003100)="5797d3a7924e1515e0392cf2cb1c525c3a0dd573bf2389cf4feaaa204983b7f694adedc1c222595c95d40d0cd6089d3e270a9cd0f757bae4d4861762b91313682ef788d9b0b384e4b383cbfce4c80b51a1e10f921b0c31df06b2b09c1ba6b2f5fe3872f36fa55c4ba9b69638327d661b3f8adffd78418b221bf06e6dc387cf8a514adee4a5b20f58874b563bc76208d0054ffadf2abfb22606c7721da0df49abff7596e3a0b1bafa4668e8dd2f8299013832bce96838ffafc47a9b2d2ee2baa49da121b3a03f58e2da6d57d131", 0xcd}, {&(0x7f0000003200)="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", 0x1000}, {&(0x7f0000004200)="5cf26ec710cd4bb4425a7f85ab01a7b1976b816d4e99d0ff7f694bac81fc87dfcb819e122f62f76fe12c02d3eabf2149", 0x30}, {&(0x7f0000004240)="f4ef1cdf842a3013785be6611e", 0xd}], 0x4, &(0x7f00000042c0)=[{0xa0, 0xff, 0xc148, "8cb2cb1b57c31ced97bf2cf5b7c8ea44680745d2b3616122c15e71ec5387c1bdbd80b3cce43de1bcc2f8a23c7c74fb7d50fc0288f21740323a28aea27c8cc8b713ef8271ab9cf67a536ad74c4124cbfba04f288b9c5a3a9afca21c3040c39864255bf97fe0ac1c32230d34ac4d7ae6ebe192a721daefa156a415549440f3d02e6da307a3ca9b5674cb5865a78d0f"}, {0xf0, 0x0, 0xffffffff, "583a239f1a0c581574295f08420087989f2a8713c5207f9555d05bf606e12c3cdd307de1c227054eb3d21372f19394317677db169395c78e476a17ce2ea395860af0e66239fed5659f5690f24ce877659b85eab335f88660a818fbcc1f45506e1946ce2df6cfa9bc44cc8ed32d7e08b51ac3d7bb5189b313d82e69b8c46ca99a9ca6a0714643e81bf149ace533d7444f8c44ab2c72468247f9e7f16b7b64c1556261494a187504feb143a7ac98bac6e2bea25866190be94014ccfd0cd3c2809291103caa5b7b0b570d2829de6540e80b33854e42fe47da32866874"}, {0x58, 0x112, 0x8000, "0c7a6dbc89b592d8618af772c3f83680c13a1eccb5fdd837bcf30e32009fd0aedaa9f4ad0d850191f954b53388adb2088a4bc295b9728ff198f41dc6257cb802dd02d478a5"}, {0xd8, 0x88, 0x0, "9ebf0a06b36b5f60f68248851e8828894e037132e99dd7549f6e5270882734363e9b2fb2daa7c3211df728eaf83f2fb064ffb6d42e972e79187cddd0f1272b9b2b0bdd5c1fe2c162359f6ed96203201f94467c0288c3eb13e549279df8260f69b903780edca3b87051602e6b4dbcca3655edd60e4aff8ef269dabc30ac36f2c30dccaa4faf8dcc9c217b5e742c949a76f2e0e855cfefb01852be05f37345bf735f53fadd40c663aa69a471a1c9c00598b23a3558846b42803bcc7684e21d7595087df6"}, {0x100, 0x3a, 0xffff, "94b1bc907751f3528a27ca5a73256bcc4f2ad27f4968c09b8e9c71e5734c45172de5454276658fc214a628c9139f63a3e370a9f5529575f0f61616e47bc8622bc766a662d5a20ae02ab95c29d69535a28a92c734632e34792f8fc20e6d7ce03ca9609da372b36140624ba50bed0a77d58580bff5bcb55bd30ba9965ea0f8f775df6d3f7dceefb41337da11b5016f2a926889ac14aba61d49f604ccac619bcd8baebf4af6c5f7530954f63b136463d41d724e51baf5539b6ea7383708b3ff55f3368f9ca0d8ceb842e660f837b0fedfa772a55b98acc1798a4dbef22f4c375b61b0bd0b392eb48515efee14d1e4"}, {0xb8, 0x110, 0x81, "e185178efae61c26d8af2a8f6967d882b6e2a0b3fa39010260aec8643ad285e39b6375b6ee30c2da7754b1e58a50cbcf14eab3e4ba27779d96598cccfc23d2ec4ead97ec0ce56f1e512d33abe56dd67bee88d9dcb2482466e6335b5fadd9c7d339eb5dc9a644104c7f3fd5ba65c02dcde5c24bbb1f846a886bf6561602a4fa347f12ca88a50d55d759f865c956075c955be56bf09d52ba139e784631394f140aba2296d3"}, {0x90, 0x108, 0x7, "71e964563c3489d004c94aeffcd16dba74264b1e260ba4928481710525e88d811586241608fada2bf11f416cf9bfba8f1a7886ced29ab31eff3cb8225e2070ad8d7097e690287247c41bb4351a15d26df6664f1d7f1ea0b2815dec56b1f0b04b372b7f9eb5c3c5eca92af382ffda1c3604f9fe1457cd4794aff3e24903"}, {0x38, 0xe5ee35430dc00cb, 0x6f98, "2d7231f1abedfb3474858c7da4c0bf2ad8cbb210383ea40eb8c5327909817a779c47"}, {0x38, 0x1, 0x9, "9d9fdcd62277aaad53ff64ee9e945e823473933b1eff893d7a014eca3fca35970136b250cdae6cbc"}], 0x578}}, {{&(0x7f0000004840)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x80, &(0x7f0000004bc0)=[{&(0x7f00000048c0)="c5814f4bfa3f46fd72ab3f613353c81a21b9014de83b197ace67e4f82c092d2245a8a05f0d32c1ad01ab73c4b815c67a6466ed61b033ad1cc0cc570c30837918044066c2da44608dbf1c82b600f1500b5e5fbf3ae973cec7f5893bd041c4458788e8cdcd043ebaa3913c43482cf5fef68465aafa1168dbc1eca26382e3f3bd24d0aea64b058b1ef370638751b519b92339c7945bcd925f1d64f135c455adef07554f7af5c511de39a9cbd1ec8e435d5f612e66a1e676c1ddea49456a74c8adbe3fcd7d7c6f56f9e38693d0542c6026a85327c6d6463c792b3643553c72619ea23d85ebdbe57fd9e20052144a4db3f74d", 0xf0}, {&(0x7f00000049c0)="e4138e46d062b5f3aff0be78d448aa5a7a68e078b0074df434324e5b6841f3b4fa316816c2ebfb841c137c782e00541561fbc203edb3b9c4ae9f701a79a1857d5bc4ce608f92c3f62ee33d804ee55bbd0464542de29cd296e0b23dd85171fda53018e2a0f5e9a488735353ab64aad7a5f0743888d98217200f5bd97726f484c7cb1581b0a308e77978d1fcfac74073627b68cbdd020d0bc86e2676773f95d5d38fd987a0a518876b812ce10ad965a6c053155dadd7a333c4cf7774ac2bc077ae9b66729f4fd08f5bf95fd60878139648", 0xd0}, {&(0x7f0000004ac0)="6d282d07c9640b274a0aaa957f6e2cbb8e256224499319190a509cd627a0f27c40722a4b9b2383071192848688832fd169b184a0a9fc46fc571a7b7dc1c19001897a45e8417054b07ea3ac145c6ab2a7848669", 0x53}, {&(0x7f0000004b40)="3eb4c9d30589cf899bdae977777473adbab3594e5178ffc3b4fa27f18c471847e313045598a00ebad5c61d2ace5cf98e301aefd01c93c77aaa280dcd3fe5f800ccfc2e9ed2c049a0705fdf13a02906bcc71b6dcd1eab248e2c8eb2564066104c1888fbbcce95e3d5fed62eb14e7b", 0x6e}], 0x4, &(0x7f0000004c00)=[{0xf8, 0x110, 0x0, "9dce6418f9f1a08e7c80fc97aed4391460c29b3d6c727cec693824e1a9c6e424a260df040594bdfc35138d44b2d92015308b14d887ef5dcc8cddbe9159e54f1559cb908aac57c94b1ab851e185f94baffe88ea75ffadd33c43173031f533519aa5635f0ff0d0730e66e2ff7c4e950e0a137c558d3840a45cb948e21fa73851de73c48a53b639016fbd712a90ccc0ac8a0b1a3921acce645c1dfbcc5f16c514061fbbcdb0e50f595596d33c53e4428edd2743a09266fada600fe5688421491c967fdfc20bea4da9ef387b760e305a23d9151b341a2a4f2765709187bb7a088621cb0f254519383f4a"}, {0xd0, 0x10b, 0x1ba00000, "32019d414bf0a8a35e65c17445aa8f6f0ee55cbaec323966dcf8846f6545ca37caf2ff7a252db090742ffe044a0e90bf1ee19740de1555e14fbda6ba81ee5fde0be3f0badb5959348ac31d18058ca984e9250c003f3af924c252226593feb122cf08e1f08ce1ba0c9af1c785f46ca1e0b7aca2e9d7844752e0293ed8272f87647d9ecfdd909ae2c0345ddaa2d74eed0e481c704f905e92fba57a0b7b8def5edd840b1a53f098bd884fd2ed2f64cd3bc5d8b5f9f3226d52930686306b56"}, {0xc0, 0x101, 0x7fff, "3f61c8ed9dd96352f4dc8da62a1522d296dc682133609bcb4c9c4dd7e1c1d7dfaa42e29ba258de18fb6afa61115755f1fd993f82d200cd918d9be620f7c11a782108ae294cf8c3c2889a3d5006c66ec088341d6ed4daaa5fdf02f08266dd6274a93869676511c76669c4c0c4c69d107088d0270b07d5ac2debff42656c42e394a5fd0dcacd06e7dac8b1859eb05730633b1299c4371b41fb49533ad651e90f0c5f20877d8cf052b04b88de88"}, {0x38, 0x88, 0x9, "e4c6ca804a2b76828a1ddc2dc34561b2b25d22437403d665e9ef7b5f3d4adbd5fa"}], 0x2c0}}], 0x4, 0x840) [ 853.710139] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 853.712171] ? udp_v6_early_demux+0xdf0/0xdf0 [ 853.713172] ? inet6_sendmsg+0x4a/0x140 [ 853.714272] inet6_sendmsg+0xfd/0x140 [ 853.715226] ? inet6_compat_ioctl+0x310/0x310 [ 853.716160] sock_sendmsg+0xee/0x190 [ 853.716954] ____sys_sendmsg+0x32e/0x870 [ 853.717771] ? kernel_sendmsg+0x50/0x50 [ 853.718518] ? __ia32_sys_recvmmsg+0x260/0x260 [ 853.719354] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 853.720445] ___sys_sendmsg+0xf3/0x170 [ 853.721229] ? sendmsg_copy_msghdr+0x160/0x160 [ 853.722144] ? lock_release+0x3b2/0x750 [ 853.722959] ? __fget_files+0x265/0x470 [ 853.723757] ? lock_downgrade+0x6d0/0x6d0 [ 853.724614] ? __fget_files+0x287/0x470 [ 853.725432] ? __fget_light+0xea/0x270 [ 853.726227] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 853.727660] __sys_sendmmsg+0x195/0x470 [ 853.728744] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 853.729892] ? lock_is_held_type+0xd7/0x130 [ 853.731091] ? bit_wait_io_timeout+0x160/0x160 [ 853.732371] ? lock_is_held_type+0xd7/0x130 [ 853.733552] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 853.735019] ? vfs_write+0x422/0xac0 [ 853.736055] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 853.737570] ? fput+0x2a/0x50 [ 853.738479] __x64_sys_sendmmsg+0x99/0x100 [ 853.739645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 853.741049] do_syscall_64+0x3b/0x90 [ 853.742082] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 853.743665] RIP: 0033:0x7f8f47a3fb19 [ 853.744736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 853.749695] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 853.751779] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 853.753765] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 853.755477] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 853.757417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 853.759268] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 853.761261] [ 853.765913] audit: type=1326 audit(1649959594.847:138): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5844 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 [ 853.812761] FAULT_INJECTION: forcing a failure. [ 853.812761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.820114] CPU: 0 PID: 5860 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 853.822169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 853.829065] Call Trace: [ 853.829712] [ 853.830307] dump_stack_lvl+0x8b/0xb3 [ 853.831283] should_fail.cold+0x5/0xa [ 853.832249] _copy_from_user+0x2a/0x170 [ 853.833230] __copy_msghdr_from_user+0x91/0x4b0 [ 853.834360] ? __ia32_sys_shutdown+0x70/0x70 [ 853.835427] ? udp_v6_early_demux+0xdf0/0xdf0 [ 853.836588] ? inet6_sendmsg+0x4a/0x140 [ 853.837625] ? inet6_sendmsg+0xbd/0x140 [ 853.838655] ? inet6_compat_ioctl+0x310/0x310 [ 853.839811] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 853.841190] ? sock_sendmsg+0x55/0x190 [ 853.842214] sendmsg_copy_msghdr+0xa1/0x160 [ 853.843319] ? __ia32_sys_recvmmsg+0x260/0x260 [ 853.844560] ? __lock_acquire+0x164e/0x6120 [ 853.845691] ___sys_sendmsg+0xc6/0x170 [ 853.846700] ? sendmsg_copy_msghdr+0x160/0x160 [ 853.847879] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 853.849321] ? lock_is_held_type+0xd7/0x130 [ 853.850455] ? find_held_lock+0x2c/0x110 [ 853.851450] ? lock_release+0x3b2/0x750 [ 853.852552] ? __might_fault+0xd1/0x170 [ 853.853534] ? lock_downgrade+0x6d0/0x6d0 [ 853.854381] ? lock_is_held_type+0xd7/0x130 [ 853.855304] __sys_sendmmsg+0x195/0x470 [ 853.856291] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 853.857398] ? lock_is_held_type+0xd7/0x130 [ 853.858551] ? bit_wait_io_timeout+0x160/0x160 [ 853.859704] ? lock_is_held_type+0xd7/0x130 [ 853.860895] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 853.862290] ? vfs_write+0x422/0xac0 [ 853.863239] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 853.865395] ? fput+0x2a/0x50 [ 853.867112] __x64_sys_sendmmsg+0x99/0x100 [ 853.869106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 853.870528] do_syscall_64+0x3b/0x90 [ 853.871798] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 853.873128] RIP: 0033:0x7f89586d1b19 [ 853.874052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 853.878534] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 853.880430] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 853.882142] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 853.883848] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 853.885591] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 853.887309] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 853.889080] [ 853.894049] audit: type=1326 audit(1649959594.943:139): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5844 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7ff2e5fa972b code=0x0 18:06:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d3, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:06:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:06:35 executing program 7: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0xcda, 0x8000, 0x0, 0x0, 0x0) recvfrom(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 18:06:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x6, 0x0, "3397cb"}) 18:06:35 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "5a738ae39b089a6f122a8210792cf1454178d6149856cf8306970a48b95e826f7de02e00c1dc51b2fc9abb1c4e2e4d7cf49702a7c80c29d796e953f691c76b4f", 0x31}, 0x48, r0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) keyctl$revoke(0x3, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x1) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) keyctl$revoke(0x3, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000100)='trusted\x00', &(0x7f0000000140)=@chain={'key_or_keyring:', r4}) keyctl$set_timeout(0xf, 0x0, 0x0) 18:06:35 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 854.147200] audit: type=1326 audit(1649959595.229:140): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5867 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aea92bb19 code=0x0 18:06:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 43) socket$nl_netfilter(0x10, 0x3, 0xc) [ 854.184402] audit: type=1326 audit(1649959595.266:141): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5867 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f9aea8de72b code=0x0 [ 854.317647] FAULT_INJECTION: forcing a failure. [ 854.317647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.321010] CPU: 1 PID: 5881 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 854.323270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 854.326414] Call Trace: [ 854.327129] [ 854.327745] dump_stack_lvl+0x8b/0xb3 [ 854.328845] should_fail.cold+0x5/0xa [ 854.329914] _copy_from_user+0x2a/0x170 [ 854.331041] __copy_msghdr_from_user+0x91/0x4b0 [ 854.332608] ? __ia32_sys_shutdown+0x70/0x70 [ 854.335002] ? udp_v6_early_demux+0xdf0/0xdf0 [ 854.337739] ? inet6_sendmsg+0x4a/0x140 [ 854.340383] ? inet6_sendmsg+0xbd/0x140 [ 854.342471] ? inet6_compat_ioctl+0x310/0x310 [ 854.344173] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 854.345713] ? sock_sendmsg+0x55/0x190 [ 854.346824] sendmsg_copy_msghdr+0xa1/0x160 [ 854.348072] ? __ia32_sys_recvmmsg+0x260/0x260 [ 854.349351] ? __lock_acquire+0x164e/0x6120 [ 854.350588] ___sys_sendmsg+0xc6/0x170 [ 854.351705] ? sendmsg_copy_msghdr+0x160/0x160 [ 854.353025] ? finish_task_switch.isra.0+0x226/0x870 [ 854.356251] ? lock_is_held_type+0xd7/0x130 [ 854.358481] ? find_held_lock+0x2c/0x110 [ 854.360838] ? lock_release+0x3b2/0x750 [ 854.362984] ? __might_fault+0xd1/0x170 [ 854.365106] ? lock_downgrade+0x6d0/0x6d0 [ 854.367416] ? lock_is_held_type+0xd7/0x130 [ 854.369707] __sys_sendmmsg+0x195/0x470 [ 854.372262] ? __ia32_sys_sendmsg+0xb0/0xb0 18:06:35 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80086601, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 854.374954] ? lock_is_held_type+0xd7/0x130 [ 854.380793] ? bit_wait_io_timeout+0x160/0x160 [ 854.383198] ? lock_is_held_type+0xd7/0x130 [ 854.385668] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 854.388892] ? vfs_write+0x422/0xac0 [ 854.390404] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 854.391897] ? fput+0x2a/0x50 [ 854.393917] __x64_sys_sendmmsg+0x99/0x100 [ 854.396223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 854.398894] do_syscall_64+0x3b/0x90 [ 854.401071] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 854.404063] RIP: 0033:0x7f89586d1b19 [ 854.406021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 854.417046] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 854.421126] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 854.424910] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 854.428842] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 854.432802] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 854.436925] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 854.441193] [ 855.680167] Bluetooth: hci5: command 0x0401 tx timeout [ 856.187773] Bluetooth: hci6: command 0x0401 tx timeout 18:06:53 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:06:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x7, 0x0, "3397cb"}) 18:06:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 15) 18:06:53 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x0, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:06:53 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x31, 0x66, 0x66, 0x39, 0x68, 0x35, 0x33, 0x33, 0x65, 0x32, 0x36, 0x35, 0x30, 0x35, 0x31, 0x32]}, &(0x7f0000000080)={0x0, "a2e6521fe91e8bec2aafa4147d7d6a574336993c296a99a212b1e2d24fa036bb649a6aada8401fadd81a03e24aa67296559bdd9c390aba856dcc9a2be680bdef", 0x19}, 0x48, r0) keyctl$set_timeout(0xf, 0x0, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r1) 18:06:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 44) socket$nl_netfilter(0x10, 0x3, 0xc) 18:06:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80087601, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:06:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x7, &(0x7f0000000640)=[{&(0x7f0000000080)="71bd3b36f6375977d76b5b11b966ef67e259222860d83a053a4ff7a065a8409047d324d16e02c2714fe2054068f62958218399985a78ffb2c0003b8ac56c8392b4382cd6fa4c7b", 0x47, 0xfffffffffffff0e0}, {&(0x7f0000000140)="f69b0d334f85be715ffab602227b8b39e9770afd", 0x14, 0x5}, {&(0x7f0000000340)="584354a729265704406d10b8c50791cf85cc47c3bb44b0c5ae0b38cb2a231ffffe715320feff6461c2dc20629ae81d3d0b0b3b0ccf28516d8db77c77ffc6f47dee7c24e3276fe7d63a69db0e06343364d99ab75c162f0b8f504cf0812df9ffd44e44474432baa406a4ae6b6a80cd6b8412bf02ac3e45cb655e747d6a8bef9b6294064234269a2f5bcd1d3f4909e10cc1e9561ab5f16c24ddae5f9b2cf0404e1a29493f0c4a73352919a4ab0addf28b7c", 0xb0, 0xffffffff}, {&(0x7f00000004c0)="99bdbbe68f596853461af399c8015f142dd8942279e1a9892a89f3edcf36e53259c089a0aa7e6d600fdc70cd3497d15c5dd294bf22ca7a19c86cf2d1a292822d2b11a0379367a9df4e1a3f4dc283b55a033bb5143ecb421e2c1eff0709294886a64a722d6f40fa37ebdd0e2a2409708a74a9483cb2f3460a0546004de9ffa7c72f1e03f73fe52a07d91223e697dad60b3d0eacdb3ad98d42269765de71c321ad8c52eb1b6655bae2658b090d61b8e9178b01e4a228ad6197af236612", 0xbc, 0x6}, {&(0x7f0000000580)="e1035789604083480df1f82887a1e98041f0d88addf3448d0ffc945e3db76122590827a8c7239d41df9130901223f2a3633e9a26c08cc44d0f663f5f4e31444f3889dd1bf75718ca508a13d6e167ef4f7ca64b11be782397b2a405c00c63903f9568d448656197ebfe768dfcc3d6fb2fea8b6ffa71a7809aac032ace2ad3343eefd1db316981aac615fa026bbc33656198d7f810e96f", 0x96, 0x5}, {&(0x7f0000000180)="cb531ebb54a6c26c774ea198a064a14738674aaeb735ac7dc99f163b011f55ecc942cd7a7749e9b330455bf7e8f633f74dee9063f2f6e84c83644b0c5ea1d74c5291c44300ea31d196cec18c3675048fbd4418f3ac35db872a29474dbd2766f550572b07c227abd2ebcf216677b56247f088937ffe406394", 0x78, 0xb33}, {&(0x7f0000000240)="e847356ec70702d76cfdf7d2cfc718c668578c6d00437e80b3", 0x19, 0x81}], 0x0, &(0x7f0000000280)={[{'+}%\xc5^]'}, {'9p\x00'}, {'^#'}, {}, {'%}\\(%'}], [{@dont_measure}, {@obj_role={'obj_role', 0x3d, '9p\x00'}}]}) r1 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f1a", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 872.768179] FAULT_INJECTION: forcing a failure. [ 872.768179] name failslab, interval 1, probability 0, space 0, times 0 [ 872.769867] CPU: 1 PID: 5892 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 872.771109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 872.772682] Call Trace: [ 872.773023] [ 872.773341] dump_stack_lvl+0x8b/0xb3 [ 872.773872] should_fail.cold+0x5/0xa [ 872.774428] ? create_object.isra.0+0x3a/0xa20 [ 872.775098] should_failslab+0x5/0x10 [ 872.775649] kmem_cache_alloc+0x5b/0x480 [ 872.776242] ? lock_is_held_type+0xd7/0x130 [ 872.776867] create_object.isra.0+0x3a/0xa20 [ 872.777532] ? kasan_unpoison+0x23/0x50 [ 872.778221] kmem_cache_alloc_trace+0x22e/0x3c0 [ 872.778900] dst_cow_metrics_generic+0x48/0x1e0 [ 872.779663] icmp6_dst_alloc+0x45a/0x610 [ 872.780424] ndisc_send_skb+0x1131/0x1b00 [ 872.781184] ? rcu_read_lock_sched_held+0x3a/0x70 [ 872.782072] ? __build_skb_around+0x241/0x300 [ 872.782893] ? dst_output+0x470/0x470 [ 872.783579] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 872.784589] ? __alloc_skb+0x182/0x340 [ 872.785299] ? memcpy+0x39/0x60 [ 872.785901] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 872.786893] ? __ndisc_fill_addr_option+0xca/0x110 [ 872.787799] ? lock_is_held_type+0xd7/0x130 [ 872.788604] ? find_held_lock+0x2c/0x110 [ 872.789292] ? ndisc_ns_create+0x2fa/0x7e0 [ 872.789908] ndisc_send_ns+0xa6/0x120 [ 872.790458] ? pndisc_redo+0x20/0x20 [ 872.790994] ? lock_is_held_type+0x91/0x130 [ 872.791627] ndisc_solicit+0x2cd/0x470 [ 872.792266] ? ndisc_send_ns+0x120/0x120 [ 872.793001] ? __skb_clone+0x597/0x780 [ 872.793726] ? ndisc_send_ns+0x120/0x120 [ 872.794467] neigh_probe+0xc4/0x110 [ 872.795139] __neigh_event_send+0xa90/0x1530 [ 872.795921] neigh_resolve_output+0x54a/0x7f0 [ 872.796739] ? lock_release+0x3b2/0x750 [ 872.797476] ip6_finish_output2+0xb24/0x1ad0 [ 872.798303] __ip6_finish_output.part.0+0x4e0/0xa70 [ 872.799231] ip6_output+0x3bc/0x9d0 [ 872.799899] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 872.800857] ip6_local_out+0xd2/0x4b0 [ 872.801521] ip6_send_skb+0xb7/0x340 [ 872.802120] udp_v6_send_skb+0x7aa/0x15b0 [ 872.802787] udpv6_sendmsg+0x1d4e/0x28d0 [ 872.803432] ? ip_frag_init+0x350/0x350 [ 872.804066] ? udp_v6_early_demux+0xdf0/0xdf0 [ 872.804806] ? exc_page_fault+0xca/0x1a0 [ 872.805456] ? lockdep_hardirqs_on+0x79/0x100 [ 872.806158] ? exc_page_fault+0xca/0x1a0 [ 872.806771] ? asm_exc_page_fault+0x1e/0x30 [ 872.807490] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 872.808366] ? udp_v6_early_demux+0xdf0/0xdf0 [ 872.809068] ? inet6_sendmsg+0x4a/0x140 [ 872.809700] inet6_sendmsg+0xfd/0x140 [ 872.810212] ? inet6_compat_ioctl+0x310/0x310 [ 872.810740] sock_sendmsg+0xee/0x190 [ 872.810933] loop2: detected capacity change from 0 to 264192 [ 872.811178] ____sys_sendmsg+0x32e/0x870 [ 872.812057] nfs4: Unknown parameter '+}%Å^]' [ 872.812306] ? kernel_sendmsg+0x50/0x50 [ 872.812327] ? __ia32_sys_recvmmsg+0x260/0x260 [ 872.813772] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 872.814490] ___sys_sendmsg+0xf3/0x170 [ 872.815103] ? sendmsg_copy_msghdr+0x160/0x160 [ 872.815836] ? lock_release+0x3b2/0x750 [ 872.816468] ? __fget_files+0x265/0x470 [ 872.817101] ? lock_downgrade+0x6d0/0x6d0 [ 872.817775] ? __fget_files+0x287/0x470 [ 872.818425] ? __fget_light+0xea/0x270 [ 872.819046] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 872.819924] __sys_sendmmsg+0x195/0x470 [ 872.820579] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 872.821268] ? lock_is_held_type+0xd7/0x130 [ 872.821974] ? bit_wait_io_timeout+0x160/0x160 [ 872.822713] ? lock_is_held_type+0xd7/0x130 [ 872.823401] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 872.824280] ? vfs_write+0x422/0xac0 [ 872.824868] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 872.825744] ? fput+0x2a/0x50 [ 872.826252] __x64_sys_sendmmsg+0x99/0x100 [ 872.826920] ? syscall_enter_from_user_mode+0x1d/0x50 [ 872.827731] do_syscall_64+0x3b/0x90 [ 872.828347] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 872.829174] RIP: 0033:0x7f8f47a3fb19 [ 872.829751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.832631] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 872.833837] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 872.834955] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 872.836075] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 872.836956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 872.837789] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 872.838631] 18:06:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108906, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:06:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3c, 0x0, "3397cb"}) [ 872.860484] FAULT_INJECTION: forcing a failure. [ 872.860484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.862142] CPU: 1 PID: 5906 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 872.862178] 9pnet_fd: Insufficient options for proto=fd [ 872.863248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 872.863262] Call Trace: [ 872.863268] [ 872.863274] dump_stack_lvl+0x8b/0xb3 [ 872.865261] loop2: detected capacity change from 0 to 264192 [ 872.865526] should_fail.cold+0x5/0xa [ 872.865923] nfs4: Unknown parameter '+}%Å^]' [ 872.866280] _copy_from_user+0x2a/0x170 [ 872.868500] __copy_msghdr_from_user+0x91/0x4b0 [ 872.869205] ? __ia32_sys_shutdown+0x70/0x70 [ 872.869858] ? udp_v6_early_demux+0xdf0/0xdf0 [ 872.870543] ? inet6_sendmsg+0x4a/0x140 [ 872.871142] ? inet6_sendmsg+0xbd/0x140 [ 872.871733] ? inet6_compat_ioctl+0x310/0x310 [ 872.872433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 872.873278] ? sock_sendmsg+0x55/0x190 [ 872.873898] sendmsg_copy_msghdr+0xa1/0x160 [ 872.874546] ? __ia32_sys_recvmmsg+0x260/0x260 [ 872.875256] ? __lock_acquire+0x164e/0x6120 [ 872.875933] ___sys_sendmsg+0xc6/0x170 [ 872.876514] ? sendmsg_copy_msghdr+0x160/0x160 [ 872.877187] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 872.878000] ? lock_is_held_type+0xd7/0x130 [ 872.878631] ? find_held_lock+0x2c/0x110 [ 872.879226] ? lock_release+0x3b2/0x750 [ 872.879801] ? __might_fault+0xd1/0x170 [ 872.880426] ? lock_downgrade+0x6d0/0x6d0 [ 872.881050] ? lock_is_held_type+0xd7/0x130 [ 872.881735] __sys_sendmmsg+0x195/0x470 [ 872.882329] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 872.883014] ? lock_is_held_type+0xd7/0x130 [ 872.883654] ? bit_wait_io_timeout+0x160/0x160 [ 872.884397] ? lock_is_held_type+0xd7/0x130 [ 872.885089] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 872.885902] ? vfs_write+0x422/0xac0 [ 872.886442] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 872.887258] ? fput+0x2a/0x50 [ 872.887723] __x64_sys_sendmmsg+0x99/0x100 [ 872.888355] ? syscall_enter_from_user_mode+0x1d/0x50 [ 872.889093] do_syscall_64+0x3b/0x90 [ 872.889639] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 872.890376] RIP: 0033:0x7f89586d1b19 [ 872.890907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.893563] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 872.894659] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 872.895675] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 872.896703] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 872.897724] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 872.898744] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 872.899778] 18:06:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108907, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 872.911581] 9pnet_fd: Insufficient options for proto=fd 18:06:54 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) keyctl$set_timeout(0xf, 0x0, 0x0) 18:06:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x300, 0x0, "3397cb"}) [ 872.952356] audit: type=1326 audit(1649959614.034:142): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5891 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:06:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x6, 0x0, "3397cb"}) [ 874.808386] Bluetooth: hci7: command 0x0401 tx timeout [ 875.064388] Bluetooth: hci6: command 0x0401 tx timeout 18:07:09 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0x0) 18:07:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 16) 18:07:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 45) socket$nl_netfilter(0x10, 0x3, 0xc) [ 888.244457] FAULT_INJECTION: forcing a failure. [ 888.244457] name failslab, interval 1, probability 0, space 0, times 0 [ 888.246207] CPU: 1 PID: 5937 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 888.247242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 888.248694] Call Trace: [ 888.249027] [ 888.249312] dump_stack_lvl+0x8b/0xb3 [ 888.249820] should_fail.cold+0x5/0xa [ 888.250312] ? __alloc_skb+0x211/0x340 18:07:09 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:07:09 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x0, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:07:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x801c581f, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:07:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x500, 0x0, "3397cb"}) [ 888.250830] should_failslab+0x5/0x10 [ 888.252726] kmem_cache_alloc_node+0x55/0x490 [ 888.253317] __alloc_skb+0x211/0x340 [ 888.253855] skb_copy+0x139/0x3c0 [ 888.254347] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb82/0x1450 [ 888.255185] ? lock_chain_count+0x20/0x20 [ 888.255801] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 888.260797] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 888.261560] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 888.262286] mac80211_hwsim_tx+0x7a9/0x1500 [ 888.262915] ieee80211_tx_frags+0x598/0x9f0 [ 888.263513] ? ieee80211_txq_airtime_check+0x3b0/0x3b0 [ 888.264233] __ieee80211_tx+0x145/0x490 [ 888.264815] ieee80211_tx+0x31b/0x400 [ 888.265351] ? ieee80211_queue_skb+0x1dc0/0x1dc0 [ 888.266041] ? ieee80211_skb_resize+0x630/0x630 [ 888.266664] ? __is_insn_slot_addr+0x144/0x250 [ 888.267270] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 888.268005] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 888.268317] FAULT_INJECTION: forcing a failure. [ 888.268317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.268770] ? ieee80211_skb_resize+0x116/0x630 [ 888.270850] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 888.271609] ? ieee80211_set_qos_hdr+0x87/0x310 [ 888.272246] ieee80211_xmit+0x220/0x2a0 [ 888.272820] __ieee80211_subif_start_xmit+0x784/0xd60 [ 888.273537] ? ieee80211_unschedule_txq+0xc0/0xc0 [ 888.274211] ieee80211_subif_start_xmit+0xef/0xf30 [ 888.274892] ? __ieee80211_subif_start_xmit+0xd60/0xd60 [ 888.275624] ? lock_acquire+0x1b2/0x530 [ 888.276181] ? lock_is_held_type+0xd7/0x130 [ 888.276826] dev_hard_start_xmit+0x1cf/0x890 [ 888.277429] sch_direct_xmit+0x25b/0x7b0 [ 888.278005] ? dev_watchdog+0x880/0x880 [ 888.278548] ? do_raw_spin_trylock+0xb0/0x180 [ 888.279158] ? do_raw_spin_lock+0x1b0/0x260 [ 888.279768] __dev_queue_xmit+0x1523/0x3800 [ 888.280370] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 888.281015] ? find_held_lock+0x2c/0x110 [ 888.281576] ? lock_release+0x3b2/0x750 [ 888.282116] ? __ip6_finish_output.part.0+0x4e0/0xa70 [ 888.282836] ? lock_downgrade+0x6d0/0x6d0 [ 888.283407] ? find_held_lock+0x2c/0x110 [ 888.283976] ? ip6_finish_output2+0x15b1/0x1ad0 [ 888.284658] ip6_finish_output2+0x147b/0x1ad0 [ 888.285284] __ip6_finish_output.part.0+0x4e0/0xa70 [ 888.285977] ip6_output+0x3bc/0x9d0 [ 888.286496] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 888.287180] ndisc_send_skb+0xa85/0x1b00 [ 888.287753] ? dst_output+0x470/0x470 [ 888.288279] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 888.289062] ? __alloc_skb+0x182/0x340 [ 888.289615] ? ndisc_ifinfo_sysctl_change+0x5f0/0x5f0 [ 888.290327] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 888.291077] ? __ndisc_fill_addr_option+0xca/0x110 [ 888.291755] ? lock_is_held_type+0xd7/0x130 [ 888.292351] ? find_held_lock+0x2c/0x110 [ 888.292942] ? ndisc_ns_create+0x2fa/0x7e0 [ 888.293528] ndisc_send_ns+0xa6/0x120 [ 888.294050] ? pndisc_redo+0x20/0x20 [ 888.294555] ? lock_is_held_type+0x91/0x130 [ 888.295164] ndisc_solicit+0x2cd/0x470 [ 888.295712] ? ndisc_send_ns+0x120/0x120 [ 888.296260] ? __skb_clone+0x597/0x780 [ 888.296847] ? ndisc_send_ns+0x120/0x120 [ 888.297398] neigh_probe+0xc4/0x110 [ 888.297914] __neigh_event_send+0xa90/0x1530 [ 888.298556] neigh_resolve_output+0x54a/0x7f0 [ 888.299161] ? lock_release+0x3b2/0x750 [ 888.299725] ip6_finish_output2+0xb24/0x1ad0 [ 888.300342] __ip6_finish_output.part.0+0x4e0/0xa70 [ 888.301053] ip6_output+0x3bc/0x9d0 [ 888.301563] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 888.302266] ip6_local_out+0xd2/0x4b0 [ 888.302794] ip6_send_skb+0xb7/0x340 [ 888.303330] udp_v6_send_skb+0x7aa/0x15b0 [ 888.303910] udpv6_sendmsg+0x1d4e/0x28d0 [ 888.304502] ? ip_frag_init+0x350/0x350 [ 888.305074] ? udp_v6_early_demux+0xdf0/0xdf0 [ 888.305841] ? exc_page_fault+0xca/0x1a0 [ 888.306397] ? lockdep_hardirqs_on+0x79/0x100 [ 888.307001] ? exc_page_fault+0xca/0x1a0 [ 888.307553] ? asm_exc_page_fault+0x1e/0x30 [ 888.308254] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 888.309005] ? udp_v6_early_demux+0xdf0/0xdf0 [ 888.309610] ? inet6_sendmsg+0x4a/0x140 [ 888.310151] inet6_sendmsg+0xfd/0x140 [ 888.310672] ? inet6_compat_ioctl+0x310/0x310 [ 888.311266] sock_sendmsg+0xee/0x190 [ 888.311770] ____sys_sendmsg+0x32e/0x870 [ 888.312297] ? kernel_sendmsg+0x50/0x50 [ 888.312869] ? __ia32_sys_recvmmsg+0x260/0x260 [ 888.313479] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 888.314189] ___sys_sendmsg+0xf3/0x170 [ 888.314723] ? sendmsg_copy_msghdr+0x160/0x160 [ 888.315340] ? lock_release+0x3b2/0x750 [ 888.315881] ? __fget_files+0x265/0x470 [ 888.316434] ? lock_downgrade+0x6d0/0x6d0 [ 888.317023] ? __fget_files+0x287/0x470 [ 888.317578] ? __fget_light+0xea/0x270 [ 888.318113] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 888.318875] __sys_sendmmsg+0x195/0x470 [ 888.319439] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 888.320039] ? lock_is_held_type+0xd7/0x130 [ 888.320698] ? bit_wait_io_timeout+0x160/0x160 [ 888.321345] ? lock_is_held_type+0xd7/0x130 [ 888.321932] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 888.322655] ? vfs_write+0x422/0xac0 [ 888.323164] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 888.323899] ? fput+0x2a/0x50 [ 888.324323] __x64_sys_sendmmsg+0x99/0x100 [ 888.324919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 888.325603] do_syscall_64+0x3b/0x90 [ 888.326108] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 888.326804] RIP: 0033:0x7f8f47a3fb19 [ 888.327304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.329779] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 888.330789] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 888.331730] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 888.332699] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 888.333632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 888.334568] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 888.335563] [ 888.336204] CPU: 0 PID: 5934 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 888.337509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 888.338822] Call Trace: [ 888.339090] [ 888.339341] dump_stack_lvl+0x8b/0xb3 [ 888.339729] should_fail.cold+0x5/0xa [ 888.340136] _copy_from_user+0x2a/0x170 [ 888.340603] __copy_msghdr_from_user+0x91/0x4b0 [ 888.341093] ? __ia32_sys_shutdown+0x70/0x70 [ 888.341590] ? udp_v6_early_demux+0xdf0/0xdf0 [ 888.342030] ? inet6_sendmsg+0x4a/0x140 [ 888.342518] ? inet6_sendmsg+0xbd/0x140 [ 888.342921] ? inet6_compat_ioctl+0x310/0x310 [ 888.343445] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 888.344007] ? sock_sendmsg+0x55/0x190 [ 888.344510] sendmsg_copy_msghdr+0xa1/0x160 [ 888.345008] ? __ia32_sys_recvmmsg+0x260/0x260 [ 888.345589] ? __lock_acquire+0x164e/0x6120 [ 888.346116] ___sys_sendmsg+0xc6/0x170 [ 888.346619] ? sendmsg_copy_msghdr+0x160/0x160 [ 888.347180] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 888.347901] ? lock_is_held_type+0xd7/0x130 [ 888.348434] ? find_held_lock+0x2c/0x110 [ 888.348977] ? lock_release+0x3b2/0x750 [ 888.349498] ? __might_fault+0xd1/0x170 [ 888.350018] ? lock_downgrade+0x6d0/0x6d0 [ 888.350571] ? lock_is_held_type+0xd7/0x130 [ 888.351124] __sys_sendmmsg+0x195/0x470 [ 888.351638] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 888.352174] ? lock_is_held_type+0xd7/0x130 [ 888.352763] ? bit_wait_io_timeout+0x160/0x160 [ 888.353344] ? lock_is_held_type+0xd7/0x130 [ 888.353868] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 888.354536] ? vfs_write+0x422/0xac0 [ 888.354982] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 888.355684] ? fput+0x2a/0x50 [ 888.356009] __x64_sys_sendmmsg+0x99/0x100 [ 888.356594] ? syscall_enter_from_user_mode+0x1d/0x50 [ 888.357274] do_syscall_64+0x3b/0x90 [ 888.357773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 888.358437] RIP: 0033:0x7f89586d1b19 [ 888.358920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.361254] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 888.362190] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 888.363092] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 888.364001] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 888.364941] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 18:07:09 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) ioctl$BLKRRPART(r0, 0x1263, 0x0) pipe(&(0x7f0000000040)) [ 888.365815] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 888.366710] [ 888.375746] audit: type=1326 audit(1649959629.457:143): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5936 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:07:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:07:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x600, 0x0, "3397cb"}) 18:07:09 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r3, r2, 0x1) keyctl$read(0xb, r0, &(0x7f0000000000)=""/241, 0xf1) keyctl$set_timeout(0xf, 0x0, 0x0) 18:07:09 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0x0, 0x8000, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:07:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:07:09 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:07:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000006140), r1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x100}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:restorecond_var_run_t:s0\x00'}]}, 0x9c}}, 0x24068001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:07:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 46) socket$nl_netfilter(0x10, 0x3, 0xc) [ 888.588973] audit: type=1326 audit(1649959629.671:144): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5963 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5ff6b19 code=0x0 18:07:09 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 888.620216] FAULT_INJECTION: forcing a failure. [ 888.620216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.621876] CPU: 1 PID: 5969 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 888.622962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 888.624465] Call Trace: [ 888.624877] [ 888.625176] dump_stack_lvl+0x8b/0xb3 [ 888.625697] should_fail.cold+0x5/0xa [ 888.626210] _copy_from_user+0x2a/0x170 [ 888.626741] __copy_msghdr_from_user+0x91/0x4b0 [ 888.627386] ? __ia32_sys_shutdown+0x70/0x70 [ 888.627983] ? udp_v6_early_demux+0xdf0/0xdf0 [ 888.628609] ? inet6_sendmsg+0x4a/0x140 [ 888.629146] ? inet6_sendmsg+0xbd/0x140 [ 888.629678] ? inet6_compat_ioctl+0x310/0x310 [ 888.630262] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 888.630975] ? sock_sendmsg+0x55/0x190 [ 888.631489] sendmsg_copy_msghdr+0xa1/0x160 [ 888.632057] ? __ia32_sys_recvmmsg+0x260/0x260 [ 888.632725] ? __lock_acquire+0x164e/0x6120 [ 888.633305] ___sys_sendmsg+0xc6/0x170 [ 888.633823] ? sendmsg_copy_msghdr+0x160/0x160 [ 888.634418] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 888.635148] ? lock_is_held_type+0xd7/0x130 [ 888.635728] ? find_held_lock+0x2c/0x110 [ 888.636264] ? lock_release+0x3b2/0x750 [ 888.636837] ? __might_fault+0xd1/0x170 [ 888.637360] ? lock_downgrade+0x6d0/0x6d0 [ 888.637902] ? lock_is_held_type+0xd7/0x130 [ 888.638467] __sys_sendmmsg+0x195/0x470 [ 888.639004] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 888.639584] ? lock_is_held_type+0xd7/0x130 [ 888.640199] ? bit_wait_io_timeout+0x160/0x160 [ 888.640818] ? lock_is_held_type+0xd7/0x130 [ 888.641385] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 888.642093] ? vfs_write+0x422/0xac0 [ 888.642589] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 888.643307] ? fput+0x2a/0x50 [ 888.643735] __x64_sys_sendmmsg+0x99/0x100 [ 888.644295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 888.645008] do_syscall_64+0x3b/0x90 [ 888.645499] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 888.646183] RIP: 0033:0x7f89586d1b19 [ 888.646665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.649030] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 888.650028] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 888.650973] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 888.651887] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 888.652976] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 888.653871] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 888.654941] [ 888.850828] syz-executor.4 (5937) used greatest stack depth: 21944 bytes left 18:07:24 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x60000500) r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x1, 0x800}, {0x4, 0xffff, 0x1000}, {0x0, 0x8001, 0x800}, {0x1, 0x1000}], 0x4, 0x0) r1 = semget$private(0x0, 0x1, 0x200) semctl$GETPID(r1, 0x2, 0xb, &(0x7f00000001c0)=""/92) unshare(0x40000200) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f00000000c0)=""/223) semctl$IPC_RMID(0x0, 0x0, 0x0) 18:07:24 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:07:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:07:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 17) 18:07:24 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) 18:07:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x700, 0x0, "3397cb"}) 18:07:24 executing program 0: init_module(&(0x7f0000000000)='keyring\x00', 0x8, &(0x7f0000000040)='keyring\x00') keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="40aaee931871dd31a03e933fa46ffb349d8409173a0182f92df98915fdfc84e0c1a243810941c4ca9cc15cdd8aa9c48d182aba2bcb2531bf290d570d900491eb29e26fc2bc989663a33dc35bb232bb4306611191bddd53de2211b12d259d1a9435ee40287753d2ef40d98db364121c5b14db20a80d886d", 0x77, r0) request_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='/](^\xc0^\xab\\*{\\})+^\x17<\x00', r0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x0) 18:07:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 47) socket$nl_netfilter(0x10, 0x3, 0xc) [ 903.300247] FAULT_INJECTION: forcing a failure. [ 903.300247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.301623] CPU: 1 PID: 5995 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 903.302494] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 903.303696] Call Trace: [ 903.303969] [ 903.304209] dump_stack_lvl+0x8b/0xb3 [ 903.304626] should_fail.cold+0x5/0xa [ 903.305046] _copy_from_user+0x2a/0x170 [ 903.305491] __copy_msghdr_from_user+0x91/0x4b0 [ 903.306008] ? __ia32_sys_shutdown+0x70/0x70 [ 903.306494] ? udp_v6_early_demux+0xdf0/0xdf0 [ 903.306988] ? inet6_sendmsg+0x4a/0x140 [ 903.307430] ? inet6_sendmsg+0xbd/0x140 [ 903.307868] ? inet6_compat_ioctl+0x310/0x310 [ 903.308366] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.308993] ? sock_sendmsg+0x55/0x190 [ 903.309421] sendmsg_copy_msghdr+0xa1/0x160 [ 903.309902] ? __ia32_sys_recvmmsg+0x260/0x260 [ 903.310414] ? __lock_acquire+0x164e/0x6120 [ 903.310902] ___sys_sendmsg+0xc6/0x170 [ 903.311333] ? sendmsg_copy_msghdr+0x160/0x160 [ 903.311828] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.312443] ? lock_is_held_type+0xd7/0x130 [ 903.312943] ? find_held_lock+0x2c/0x110 [ 903.313391] ? lock_release+0x3b2/0x750 [ 903.313828] ? __might_fault+0xd1/0x170 [ 903.314268] ? lock_downgrade+0x6d0/0x6d0 [ 903.314737] ? lock_is_held_type+0xd7/0x130 [ 903.315220] __sys_sendmmsg+0x195/0x470 [ 903.315672] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 903.316150] ? lock_is_held_type+0xd7/0x130 [ 903.316640] ? bit_wait_io_timeout+0x160/0x160 [ 903.317170] ? lock_is_held_type+0xd7/0x130 [ 903.317653] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.318261] ? vfs_write+0x422/0xac0 [ 903.318670] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 903.319270] ? fput+0x2a/0x50 [ 903.319623] __x64_sys_sendmmsg+0x99/0x100 [ 903.320089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.320649] do_syscall_64+0x3b/0x90 [ 903.321064] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 903.321634] RIP: 0033:0x7f89586d1b19 [ 903.322039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.324035] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 903.324873] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 903.325645] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 903.326418] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 903.327192] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 903.327965] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 903.328761] [ 903.330214] FAULT_INJECTION: forcing a failure. [ 903.330214] name failslab, interval 1, probability 0, space 0, times 0 [ 903.331465] CPU: 1 PID: 5992 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 903.332371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 903.333611] Call Trace: [ 903.333889] [ 903.334135] dump_stack_lvl+0x8b/0xb3 [ 903.334561] should_fail.cold+0x5/0xa [ 903.334978] ? __alloc_skb+0x211/0x340 [ 903.335417] ? create_object.isra.0+0x3a/0xa20 [ 903.335924] should_failslab+0x5/0x10 [ 903.336347] kmem_cache_alloc+0x5b/0x480 [ 903.336812] create_object.isra.0+0x3a/0xa20 [ 903.337298] ? kasan_unpoison+0x23/0x50 [ 903.337743] kmem_cache_alloc_node+0x248/0x490 [ 903.338259] __alloc_skb+0x211/0x340 [ 903.338685] skb_copy+0x139/0x3c0 [ 903.339075] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb82/0x1450 [ 903.339755] ? lock_chain_count+0x20/0x20 [ 903.340213] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 903.340895] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 903.341507] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 903.342078] mac80211_hwsim_tx+0x7a9/0x1500 [ 903.342572] ieee80211_tx_frags+0x598/0x9f0 [ 903.343064] ? ieee80211_txq_airtime_check+0x3b0/0x3b0 [ 903.343649] __ieee80211_tx+0x145/0x490 [ 903.344095] ieee80211_tx+0x31b/0x400 [ 903.344521] ? ieee80211_queue_skb+0x1dc0/0x1dc0 [ 903.345081] ? ieee80211_skb_resize+0x630/0x630 [ 903.345595] ? __is_insn_slot_addr+0x144/0x250 [ 903.346098] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 903.346707] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.347317] ? ieee80211_skb_resize+0x116/0x630 [ 903.347822] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 903.348426] ? ieee80211_set_qos_hdr+0x87/0x310 [ 903.348968] ieee80211_xmit+0x220/0x2a0 [ 903.349416] __ieee80211_subif_start_xmit+0x784/0xd60 [ 903.349987] ? ieee80211_unschedule_txq+0xc0/0xc0 [ 903.350536] ieee80211_subif_start_xmit+0xef/0xf30 [ 903.351086] ? __ieee80211_subif_start_xmit+0xd60/0xd60 [ 903.351680] ? lock_acquire+0x1b2/0x530 [ 903.352124] ? lock_is_held_type+0xd7/0x130 [ 903.352612] dev_hard_start_xmit+0x1cf/0x890 [ 903.353111] sch_direct_xmit+0x25b/0x7b0 [ 903.353568] ? dev_watchdog+0x880/0x880 [ 903.354003] ? do_raw_spin_trylock+0xb0/0x180 [ 903.354498] ? do_raw_spin_lock+0x1b0/0x260 [ 903.354988] __dev_queue_xmit+0x1523/0x3800 [ 903.355474] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 903.355982] ? find_held_lock+0x2c/0x110 [ 903.356434] ? lock_release+0x3b2/0x750 [ 903.356888] ? __ip6_finish_output.part.0+0x4e0/0xa70 [ 903.357467] ? lock_downgrade+0x6d0/0x6d0 [ 903.357921] ? find_held_lock+0x2c/0x110 [ 903.358368] ? ip6_finish_output2+0x15b1/0x1ad0 [ 903.358887] ip6_finish_output2+0x147b/0x1ad0 [ 903.359378] __ip6_finish_output.part.0+0x4e0/0xa70 [ 903.359913] ip6_output+0x3bc/0x9d0 [ 903.360312] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 903.360879] ndisc_send_skb+0xa85/0x1b00 [ 903.361322] ? dst_output+0x470/0x470 [ 903.361724] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.362336] ? __alloc_skb+0x182/0x340 [ 903.362755] ? ndisc_ifinfo_sysctl_change+0x5f0/0x5f0 [ 903.363304] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.363882] ? __ndisc_fill_addr_option+0xca/0x110 [ 903.364411] ? lock_is_held_type+0xd7/0x130 [ 903.364888] ? find_held_lock+0x2c/0x110 [ 903.365317] ? ndisc_ns_create+0x2fa/0x7e0 [ 903.365765] ndisc_send_ns+0xa6/0x120 [ 903.366170] ? pndisc_redo+0x20/0x20 [ 903.366571] ? lock_is_held_type+0x91/0x130 [ 903.367047] ndisc_solicit+0x2cd/0x470 [ 903.367467] ? ndisc_send_ns+0x120/0x120 [ 903.367907] ? __skb_clone+0x597/0x780 [ 903.368341] ? ndisc_send_ns+0x120/0x120 [ 903.368784] neigh_probe+0xc4/0x110 [ 903.369174] __neigh_event_send+0xa90/0x1530 [ 903.369652] neigh_resolve_output+0x54a/0x7f0 [ 903.370139] ? lock_release+0x3b2/0x750 [ 903.370580] ip6_finish_output2+0xb24/0x1ad0 [ 903.371068] __ip6_finish_output.part.0+0x4e0/0xa70 [ 903.371629] ip6_output+0x3bc/0x9d0 [ 903.372038] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 903.372604] ip6_local_out+0xd2/0x4b0 [ 903.373055] ip6_send_skb+0xb7/0x340 [ 903.373464] udp_v6_send_skb+0x7aa/0x15b0 [ 903.373920] udpv6_sendmsg+0x1d4e/0x28d0 [ 903.374370] ? ip_frag_init+0x350/0x350 [ 903.374808] ? udp_v6_early_demux+0xdf0/0xdf0 [ 903.375309] ? exc_page_fault+0xca/0x1a0 [ 903.375771] ? lockdep_hardirqs_on+0x79/0x100 [ 903.376270] ? exc_page_fault+0xca/0x1a0 [ 903.376729] ? asm_exc_page_fault+0x1e/0x30 [ 903.377227] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.377828] ? udp_v6_early_demux+0xdf0/0xdf0 [ 903.378317] ? inet6_sendmsg+0x4a/0x140 [ 903.378757] inet6_sendmsg+0xfd/0x140 [ 903.379175] ? inet6_compat_ioctl+0x310/0x310 [ 903.379664] sock_sendmsg+0xee/0x190 [ 903.380069] ____sys_sendmsg+0x32e/0x870 [ 903.380523] ? kernel_sendmsg+0x50/0x50 [ 903.380968] ? __ia32_sys_recvmmsg+0x260/0x260 [ 903.381470] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 903.382059] ___sys_sendmsg+0xf3/0x170 [ 903.382488] ? sendmsg_copy_msghdr+0x160/0x160 [ 903.382996] ? lock_release+0x3b2/0x750 [ 903.383435] ? __fget_files+0x265/0x470 [ 903.383872] ? lock_downgrade+0x6d0/0x6d0 [ 903.384343] ? __fget_files+0x287/0x470 [ 903.384808] ? __fget_light+0xea/0x270 [ 903.385236] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 903.385842] __sys_sendmmsg+0x195/0x470 [ 903.386285] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 903.386755] ? lock_is_held_type+0xd7/0x130 [ 903.387244] ? bit_wait_io_timeout+0x160/0x160 [ 903.387740] ? lock_is_held_type+0xd7/0x130 [ 903.388227] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.388835] ? vfs_write+0x422/0xac0 [ 903.389240] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 903.389842] ? fput+0x2a/0x50 [ 903.390199] __x64_sys_sendmmsg+0x99/0x100 [ 903.390672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.391231] do_syscall_64+0x3b/0x90 [ 903.391646] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 903.392214] RIP: 0033:0x7f8f47a3fb19 [ 903.392614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.394600] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 903.395428] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 903.396199] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 903.396979] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 903.397749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 903.398520] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 903.399300] 18:07:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:07:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 48) socket$nl_netfilter(0x10, 0x3, 0xc) 18:07:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3c00, 0x0, "3397cb"}) 18:07:24 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) [ 903.502258] FAULT_INJECTION: forcing a failure. [ 903.502258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.503619] CPU: 1 PID: 6007 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 903.504501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 903.505716] Call Trace: [ 903.505983] [ 903.506216] dump_stack_lvl+0x8b/0xb3 [ 903.506632] should_fail.cold+0x5/0xa [ 903.507039] _copy_from_user+0x2a/0x170 [ 903.507472] __copy_msghdr_from_user+0x91/0x4b0 [ 903.507983] ? __ia32_sys_shutdown+0x70/0x70 [ 903.508456] ? udp_v6_early_demux+0xdf0/0xdf0 [ 903.508947] ? inet6_sendmsg+0x4a/0x140 [ 903.509380] ? inet6_sendmsg+0xbd/0x140 [ 903.509822] ? inet6_compat_ioctl+0x310/0x310 [ 903.510295] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.510882] ? sock_sendmsg+0x55/0x190 [ 903.511309] sendmsg_copy_msghdr+0xa1/0x160 [ 903.511788] ? __ia32_sys_recvmmsg+0x260/0x260 [ 903.512295] ? __lock_acquire+0x164e/0x6120 [ 903.512806] ___sys_sendmsg+0xc6/0x170 [ 903.513239] ? sendmsg_copy_msghdr+0x160/0x160 [ 903.513742] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.514352] ? lock_is_held_type+0xd7/0x130 [ 903.514831] ? find_held_lock+0x2c/0x110 [ 903.515285] ? lock_release+0x3b2/0x750 [ 903.515728] ? __might_fault+0xd1/0x170 [ 903.516167] ? lock_downgrade+0x6d0/0x6d0 [ 903.516627] ? lock_is_held_type+0xd7/0x130 [ 903.517125] __sys_sendmmsg+0x195/0x470 [ 903.517565] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 903.518043] ? lock_is_held_type+0xd7/0x130 [ 903.518539] ? bit_wait_io_timeout+0x160/0x160 [ 903.519046] ? lock_is_held_type+0xd7/0x130 [ 903.519528] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.520131] ? vfs_write+0x422/0xac0 [ 903.520539] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 903.521154] ? fput+0x2a/0x50 [ 903.521503] __x64_sys_sendmmsg+0x99/0x100 [ 903.521968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.522518] do_syscall_64+0x3b/0x90 [ 903.522936] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 903.523506] RIP: 0033:0x7f89586d1b19 [ 903.523917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.525940] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 903.526770] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 903.527533] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 903.528303] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 903.529084] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 903.529867] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 903.530655] 18:07:24 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) keyctl$chown(0x4, r0, r2, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r3}) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r4, 0x7) keyctl$revoke(0x3, r4) keyctl$get_security(0x11, r4, &(0x7f0000000180)=""/127, 0x7f) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) keyctl$revoke(0x3, r5) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$set_timeout(0xf, r1, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:07:24 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:07:24 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:07:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) [ 903.666827] syz-executor.4 (5992) used greatest stack depth: 21800 bytes left 18:07:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:07:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 18) 18:07:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000) 18:07:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 49) socket$nl_netfilter(0x10, 0x3, 0xc) [ 903.739601] FAULT_INJECTION: forcing a failure. [ 903.739601] name failslab, interval 1, probability 0, space 0, times 0 [ 903.740980] CPU: 1 PID: 6031 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 903.741846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 903.743019] Call Trace: [ 903.743293] [ 903.743529] dump_stack_lvl+0x8b/0xb3 [ 903.743957] should_fail.cold+0x5/0xa [ 903.744359] ? __alloc_skb+0x211/0x340 [ 903.744805] should_failslab+0x5/0x10 [ 903.745220] kmem_cache_alloc_node+0x55/0x490 [ 903.745703] ? lock_chain_count+0x20/0x20 [ 903.746144] __alloc_skb+0x211/0x340 [ 903.746548] ? find_held_lock+0x2c/0x110 [ 903.746981] alloc_skb_with_frags+0x92/0x6a0 [ 903.747466] sock_alloc_send_pskb+0x7ab/0x930 [ 903.747938] ? __lock_acquire+0xbac/0x6120 [ 903.748406] ? sock_wmalloc+0x120/0x120 [ 903.748842] ? mark_lock.part.0+0xef/0x2f60 [ 903.749298] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 903.749851] ? lock_chain_count+0x20/0x20 [ 903.750295] ? lock_chain_count+0x20/0x20 [ 903.750730] ? lock_is_held_type+0xd7/0x130 [ 903.751196] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 903.751743] ? ip6_mtu+0x189/0x340 [ 903.752122] ? ip_frag_init+0x350/0x350 [ 903.752554] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 903.753058] ? ip6_mtu+0x1b0/0x340 [ 903.753450] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 903.754057] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.754647] ? ip6_setup_cork+0xd03/0x1550 [ 903.755107] ip6_make_skb+0x29a/0x4a0 [ 903.755513] ? ip_frag_init+0x350/0x350 [ 903.755940] ? ip6_push_pending_frames+0xe0/0xe0 [ 903.756454] ? lock_downgrade+0x6d0/0x6d0 [ 903.756916] ? ip6_default_advmss+0x4d0/0x4d0 [ 903.757401] udpv6_sendmsg+0x1d03/0x28d0 [ 903.757855] ? ip_frag_init+0x350/0x350 [ 903.758295] ? udp_v6_early_demux+0xdf0/0xdf0 [ 903.758796] ? lock_is_held_type+0xd7/0x130 [ 903.759277] ? find_held_lock+0x2c/0x110 [ 903.759726] ? lock_release+0x3b2/0x750 [ 903.760169] ? __might_fault+0xd1/0x170 [ 903.760608] ? lock_downgrade+0x6d0/0x6d0 [ 903.761087] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.761694] ? udp_v6_early_demux+0xdf0/0xdf0 [ 903.762184] ? inet6_sendmsg+0x4a/0x140 [ 903.762632] inet6_sendmsg+0xfd/0x140 [ 903.763055] ? inet6_compat_ioctl+0x310/0x310 [ 903.763552] sock_sendmsg+0xee/0x190 [ 903.763965] ____sys_sendmsg+0x32e/0x870 [ 903.764417] ? kernel_sendmsg+0x50/0x50 [ 903.764871] ? __ia32_sys_recvmmsg+0x260/0x260 [ 903.765375] ? lock_is_held_type+0xd7/0x130 [ 903.765861] ? find_held_lock+0x2c/0x110 [ 903.766296] ? lock_release+0x3b2/0x750 [ 903.766714] ? finish_task_switch.isra.0+0x221/0x870 [ 903.767276] ___sys_sendmsg+0xf3/0x170 [ 903.767697] ? sendmsg_copy_msghdr+0x160/0x160 [ 903.768187] ? finish_task_switch.isra.0+0x226/0x870 [ 903.768744] ? lockdep_hardirqs_on+0x79/0x100 [ 903.769229] ? finish_task_switch.isra.0+0x226/0x870 [ 903.769776] ? __schedule+0x895/0x2450 [ 903.770197] ? io_schedule_timeout+0x140/0x140 [ 903.770681] ? lock_is_held_type+0xd7/0x130 [ 903.771155] ? __cond_resched+0x13/0x20 [ 903.771576] __sys_sendmmsg+0x195/0x470 [ 903.772004] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 903.772467] ? lock_is_held_type+0xd7/0x130 [ 903.772972] ? bit_wait_io_timeout+0x160/0x160 [ 903.773462] ? lock_is_held_type+0xd7/0x130 [ 903.773942] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.774548] ? vfs_write+0x422/0xac0 [ 903.774967] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 903.775570] ? fput+0x2a/0x50 [ 903.775918] __x64_sys_sendmmsg+0x99/0x100 [ 903.776388] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.776950] do_syscall_64+0x3b/0x90 [ 903.777363] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 903.777930] RIP: 0033:0x7f8f47a3fb19 [ 903.778332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.780310] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 903.781141] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 903.781913] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 903.782684] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 903.783446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 903.784202] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 903.785008] [ 903.816797] FAULT_INJECTION: forcing a failure. [ 903.816797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.819125] CPU: 0 PID: 6035 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 903.820770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 903.822990] Call Trace: [ 903.823497] [ 903.823943] dump_stack_lvl+0x8b/0xb3 [ 903.824723] should_fail.cold+0x5/0xa [ 903.825488] _copy_from_user+0x2a/0x170 [ 903.826295] __copy_msghdr_from_user+0x91/0x4b0 [ 903.827239] ? __ia32_sys_shutdown+0x70/0x70 [ 903.828122] ? udp_v6_early_demux+0xdf0/0xdf0 [ 903.829044] ? inet6_sendmsg+0x4a/0x140 [ 903.829854] ? inet6_sendmsg+0xbd/0x140 [ 903.830653] ? inet6_compat_ioctl+0x310/0x310 [ 903.831549] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.832651] ? sock_sendmsg+0x55/0x190 [ 903.833452] sendmsg_copy_msghdr+0xa1/0x160 [ 903.834320] ? __ia32_sys_recvmmsg+0x260/0x260 [ 903.835243] ? __lock_acquire+0x164e/0x6120 [ 903.836119] ___sys_sendmsg+0xc6/0x170 [ 903.836913] ? sendmsg_copy_msghdr+0x160/0x160 [ 903.837831] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.838947] ? lock_is_held_type+0xd7/0x130 [ 903.839824] ? find_held_lock+0x2c/0x110 [ 903.840629] ? lock_release+0x3b2/0x750 [ 903.841437] ? __might_fault+0xd1/0x170 [ 903.842229] ? lock_downgrade+0x6d0/0x6d0 [ 903.843062] ? lock_is_held_type+0xd7/0x130 [ 903.843941] __sys_sendmmsg+0x195/0x470 [ 903.844760] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 903.845625] ? lock_is_held_type+0xd7/0x130 [ 903.846513] ? bit_wait_io_timeout+0x160/0x160 [ 903.847427] ? lock_is_held_type+0xd7/0x130 [ 903.848302] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.849412] ? vfs_write+0x422/0xac0 [ 903.850156] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 903.851258] ? fput+0x2a/0x50 [ 903.851897] __x64_sys_sendmmsg+0x99/0x100 [ 903.852764] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.853785] do_syscall_64+0x3b/0x90 [ 903.854532] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 903.855564] RIP: 0033:0x7f89586d1b19 [ 903.856299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.859939] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 903.861448] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 903.862853] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 903.864256] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 903.865661] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 903.867055] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 903.868479] [ 905.784361] Bluetooth: hci0: command 0x0401 tx timeout [ 907.832345] Bluetooth: hci0: command 0x0401 tx timeout 18:07:41 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) keyctl$revoke(0x3, 0x0) r1 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)) keyctl$set_timeout(0xf, r2, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:07:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 50) socket$nl_netfilter(0x10, 0x3, 0xc) 18:07:41 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) recvfrom(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000, 0x101, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80) clone3(&(0x7f00000013c0)={0xc0100500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xb9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001300), 0x341003, 0x0) fgetxattr(r0, &(0x7f00000000c0)=@random={'system.', '\x00'}, &(0x7f00000001c0)=""/125, 0x7d) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCGPTPEER(r2, 0x5423, 0xbffffffffffff172) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x9, @remote, 0x1000}, 0x1c) 18:07:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 19) 18:07:41 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) 18:07:41 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:07:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x2, "3397cb"}) 18:07:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x2, 0x0, "3397cb"}) [ 920.273506] FAULT_INJECTION: forcing a failure. [ 920.273506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.275120] CPU: 1 PID: 6057 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 18:07:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x0, "3397cb"}) [ 920.276228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 920.277792] Call Trace: [ 920.278334] [ 920.278635] dump_stack_lvl+0x8b/0xb3 [ 920.279161] should_fail.cold+0x5/0xa [ 920.279689] _copy_from_user+0x2a/0x170 [ 920.280247] __copy_msghdr_from_user+0x91/0x4b0 [ 920.280891] ? __ia32_sys_shutdown+0x70/0x70 [ 920.281627] ? udp_v6_early_demux+0xdf0/0xdf0 [ 920.282243] ? inet6_sendmsg+0x4a/0x140 [ 920.282795] ? inet6_sendmsg+0xbd/0x140 [ 920.283348] ? inet6_compat_ioctl+0x310/0x310 [ 920.283958] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 920.284704] ? sock_sendmsg+0x55/0x190 [ 920.285265] sendmsg_copy_msghdr+0xa1/0x160 [ 920.285849] ? __ia32_sys_recvmmsg+0x260/0x260 [ 920.286490] ? __lock_acquire+0x164e/0x6120 [ 920.287103] ___sys_sendmsg+0xc6/0x170 [ 920.287653] ? sendmsg_copy_msghdr+0x160/0x160 [ 920.288292] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 920.289089] ? lock_is_held_type+0xd7/0x130 [ 920.289688] ? find_held_lock+0x2c/0x110 [ 920.290248] ? lock_release+0x3b2/0x750 [ 920.290800] ? __might_fault+0xd1/0x170 [ 920.291355] ? lock_downgrade+0x6d0/0x6d0 [ 920.291977] ? lock_is_held_type+0xd7/0x130 [ 920.292585] __sys_sendmmsg+0x195/0x470 [ 920.293406] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 920.294633] ? finish_task_switch.isra.0+0x227/0x870 [ 920.296112] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 920.297575] ? xfd_validate_state+0x59/0x180 [ 920.298855] ? restore_fpregs_from_fpstate+0xcc/0x1e0 [ 920.300345] __x64_sys_sendmmsg+0x99/0x100 [ 920.301628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 920.303019] do_syscall_64+0x3b/0x90 [ 920.304094] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 920.305608] RIP: 0033:0x7f89586d1b19 [ 920.306550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 920.311845] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 920.313416] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 920.314347] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 920.315311] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 920.316259] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 920.317614] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 920.319542] 18:07:41 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x0, 0x0}) 18:07:41 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8cb1d1607520a0bb08cf40f72f509b5cc87e7357a985efa803c9d043f8f6bfe872d2b645d6d89c3481aaee105bbf2211e352372621d4f492f9006968882bc2c8831d681815d21f671d83bc1ad68dc337f06b10ef4a7e5e06ecd0d514f1c6a96c7fe130a28386d80847c31d576d56da41ded4830e668fd640c1732a1a04d8914d9711470367d40e57173f7b5443ebf78afb4b8db14181fc473dc4fcc1ba9f56d2187583e460443a9727586cdff159052034e0c74b79294599f82749592836768e2b62df2cb99d00736aad9ece8a2dd547791e8a3b3d9", 0xd6, r0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$revoke(0x3, r3) keyctl$instantiate(0xc, r3, &(0x7f0000000200)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xfffffffffffffffb}, 0x2d, r1) add_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)=@secondary) keyctl$set_timeout(0xf, r1, 0x7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000002c0)='rxrpc\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r2}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 920.356919] FAULT_INJECTION: forcing a failure. [ 920.356919] name failslab, interval 1, probability 0, space 0, times 0 [ 920.358679] CPU: 0 PID: 6061 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 920.359951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 920.361691] Call Trace: [ 920.362116] [ 920.362467] dump_stack_lvl+0x8b/0xb3 [ 920.363067] should_fail.cold+0x5/0xa [ 920.363656] ? lock_is_held_type+0xd7/0x130 [ 920.364351] should_failslab+0x5/0x10 [ 920.364951] __kmalloc_node_track_caller+0x7e/0x440 [ 920.365719] ? skb_copy+0x139/0x3c0 [ 920.366297] __alloc_skb+0xe3/0x340 [ 920.366887] skb_copy+0x139/0x3c0 [ 920.367416] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb82/0x1450 [ 920.368310] ? lock_chain_count+0x20/0x20 [ 920.368983] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 920.369854] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 920.370735] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 920.371594] mac80211_hwsim_tx+0x7a9/0x1500 [ 920.372332] ieee80211_tx_frags+0x598/0x9f0 [ 920.373040] ? ieee80211_txq_airtime_check+0x3b0/0x3b0 [ 920.373868] __ieee80211_tx+0x145/0x490 [ 920.374417] ieee80211_tx+0x31b/0x400 [ 920.374957] ? ieee80211_queue_skb+0x1dc0/0x1dc0 [ 920.375649] ? ieee80211_skb_resize+0x630/0x630 [ 920.376268] ? __is_insn_slot_addr+0x144/0x250 [ 920.376880] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 920.377759] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 920.378622] ? ieee80211_skb_resize+0x116/0x630 [ 920.379356] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 920.380108] ? ieee80211_set_qos_hdr+0x87/0x310 [ 920.380717] ieee80211_xmit+0x220/0x2a0 [ 920.381795] __ieee80211_subif_start_xmit+0x784/0xd60 [ 920.383173] ? ieee80211_unschedule_txq+0xc0/0xc0 [ 920.384390] ieee80211_subif_start_xmit+0xef/0xf30 [ 920.385413] ? __ieee80211_subif_start_xmit+0xd60/0xd60 [ 920.386235] ? lock_acquire+0x1b2/0x530 [ 920.386780] ? lock_is_held_type+0xd7/0x130 [ 920.388134] dev_hard_start_xmit+0x1cf/0x890 [ 920.388838] sch_direct_xmit+0x25b/0x7b0 [ 920.389508] ? dev_watchdog+0x880/0x880 [ 920.390144] ? do_raw_spin_trylock+0xb0/0x180 [ 920.391600] ? do_raw_spin_lock+0x1b0/0x260 [ 920.392901] __dev_queue_xmit+0x1523/0x3800 [ 920.394033] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 920.395241] ? find_held_lock+0x2c/0x110 [ 920.396246] ? lock_release+0x3b2/0x750 [ 920.397321] ? __ip6_finish_output.part.0+0x4e0/0xa70 [ 920.398902] ? lock_downgrade+0x6d0/0x6d0 [ 920.400169] ? find_held_lock+0x2c/0x110 [ 920.400866] ? ip6_finish_output2+0x15b1/0x1ad0 [ 920.402327] ip6_finish_output2+0x147b/0x1ad0 [ 920.403603] __ip6_finish_output.part.0+0x4e0/0xa70 [ 920.404951] ip6_output+0x3bc/0x9d0 [ 920.406133] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 920.407437] ndisc_send_skb+0xa85/0x1b00 [ 920.408509] ? dst_output+0x470/0x470 [ 920.409583] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 920.411195] ? __alloc_skb+0x182/0x340 [ 920.412207] ? ndisc_ifinfo_sysctl_change+0x5f0/0x5f0 [ 920.413632] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 920.415351] ? __ndisc_fill_addr_option+0xca/0x110 [ 920.416892] ? lock_is_held_type+0xd7/0x130 [ 920.418210] ? find_held_lock+0x2c/0x110 [ 920.419431] ? ndisc_ns_create+0x2fa/0x7e0 [ 920.420694] ndisc_send_ns+0xa6/0x120 [ 920.421898] ? pndisc_redo+0x20/0x20 [ 920.423018] ? lock_is_held_type+0x91/0x130 [ 920.424142] ndisc_solicit+0x2cd/0x470 [ 920.425181] ? ndisc_send_ns+0x120/0x120 [ 920.426123] ? __skb_clone+0x597/0x780 [ 920.427298] ? ndisc_send_ns+0x120/0x120 [ 920.428331] neigh_probe+0xc4/0x110 [ 920.429190] __neigh_event_send+0xa90/0x1530 [ 920.430594] neigh_resolve_output+0x54a/0x7f0 [ 920.431983] ? lock_release+0x3b2/0x750 [ 920.433214] ip6_finish_output2+0xb24/0x1ad0 [ 920.434329] __ip6_finish_output.part.0+0x4e0/0xa70 [ 920.435597] ip6_output+0x3bc/0x9d0 [ 920.436559] ? __ip6_finish_output.part.0+0xa70/0xa70 [ 920.438126] ip6_local_out+0xd2/0x4b0 [ 920.439184] ip6_send_skb+0xb7/0x340 [ 920.440204] udp_v6_send_skb+0x7aa/0x15b0 [ 920.441353] udpv6_sendmsg+0x1d4e/0x28d0 [ 920.442523] ? ip_frag_init+0x350/0x350 [ 920.443651] ? udp_v6_early_demux+0xdf0/0xdf0 [ 920.444988] ? exc_page_fault+0xca/0x1a0 [ 920.445998] ? lockdep_hardirqs_on+0x79/0x100 [ 920.447136] ? exc_page_fault+0xca/0x1a0 [ 920.448174] ? asm_exc_page_fault+0x1e/0x30 [ 920.449470] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 920.450529] ? udp_v6_early_demux+0xdf0/0xdf0 [ 920.451207] ? inet6_sendmsg+0x4a/0x140 [ 920.451728] inet6_sendmsg+0xfd/0x140 [ 920.452359] ? inet6_compat_ioctl+0x310/0x310 [ 920.452944] sock_sendmsg+0xee/0x190 [ 920.453580] ____sys_sendmsg+0x32e/0x870 [ 920.454091] ? kernel_sendmsg+0x50/0x50 [ 920.454588] ? __ia32_sys_recvmmsg+0x260/0x260 [ 920.455157] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 920.455838] ___sys_sendmsg+0xf3/0x170 [ 920.456328] ? sendmsg_copy_msghdr+0x160/0x160 [ 920.456908] ? lock_release+0x3b2/0x750 [ 920.458023] ? __fget_files+0x265/0x470 [ 920.458539] ? lock_downgrade+0x6d0/0x6d0 [ 920.459252] ? __fget_files+0x287/0x470 [ 920.460139] ? __fget_light+0xea/0x270 [ 920.460655] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 920.461934] __sys_sendmmsg+0x195/0x470 [ 920.462894] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 920.463908] ? lock_is_held_type+0xd7/0x130 [ 920.464943] ? bit_wait_io_timeout+0x160/0x160 [ 920.466240] ? lock_is_held_type+0xd7/0x130 [ 920.467309] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 920.468730] ? vfs_write+0x422/0xac0 [ 920.469645] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 920.470926] ? fput+0x2a/0x50 [ 920.471685] __x64_sys_sendmmsg+0x99/0x100 [ 920.472669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 920.474055] do_syscall_64+0x3b/0x90 [ 920.475079] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 920.476257] RIP: 0033:0x7f8f47a3fb19 [ 920.477351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 920.480161] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 920.482453] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 920.484637] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 920.486842] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 920.489080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.491191] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 920.493389] 18:07:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 51) socket$nl_netfilter(0x10, 0x3, 0xc) 18:07:41 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x0, 0x0}) 18:07:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x3, "3397cb"}) [ 920.800661] FAULT_INJECTION: forcing a failure. [ 920.800661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.809524] CPU: 1 PID: 6075 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 920.810607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 920.812102] Call Trace: [ 920.812445] [ 920.812743] dump_stack_lvl+0x8b/0xb3 [ 920.813292] should_fail.cold+0x5/0xa [ 920.813809] _copy_from_user+0x2a/0x170 [ 920.814347] __copy_msghdr_from_user+0x91/0x4b0 [ 920.815095] ? __ia32_sys_shutdown+0x70/0x70 [ 920.815682] ? udp_v6_early_demux+0xdf0/0xdf0 [ 920.816270] ? inet6_sendmsg+0x4a/0x140 [ 920.816832] ? inet6_sendmsg+0xbd/0x140 [ 920.817405] ? inet6_compat_ioctl+0x310/0x310 [ 920.818015] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 920.818719] ? sock_sendmsg+0x55/0x190 [ 920.819223] sendmsg_copy_msghdr+0xa1/0x160 [ 920.819782] ? __ia32_sys_recvmmsg+0x260/0x260 [ 920.820371] ? __lock_acquire+0x164e/0x6120 [ 920.820939] ___sys_sendmsg+0xc6/0x170 [ 920.821471] ? sendmsg_copy_msghdr+0x160/0x160 [ 920.822174] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 920.822889] ? lock_is_held_type+0xd7/0x130 [ 920.823449] ? find_held_lock+0x2c/0x110 [ 920.824001] ? lock_release+0x3b2/0x750 [ 920.824497] ? __might_fault+0xd1/0x170 [ 920.824991] ? lock_downgrade+0x6d0/0x6d0 [ 920.825539] ? lock_is_held_type+0xd7/0x130 [ 920.826108] __sys_sendmmsg+0x195/0x470 [ 920.826630] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 920.827192] ? lock_is_held_type+0xd7/0x130 [ 920.827880] ? bit_wait_io_timeout+0x160/0x160 [ 920.828487] ? lock_is_held_type+0xd7/0x130 [ 920.829085] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 920.829779] ? vfs_write+0x422/0xac0 [ 920.830299] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 920.831016] ? fput+0x2a/0x50 [ 920.831432] __x64_sys_sendmmsg+0x99/0x100 [ 920.832008] ? syscall_enter_from_user_mode+0x1d/0x50 [ 920.832677] do_syscall_64+0x3b/0x90 [ 920.833206] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 920.833961] RIP: 0033:0x7f89586d1b19 [ 920.834528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 920.837328] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 920.838502] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 920.839558] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 920.840649] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 920.841730] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 920.842764] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 920.843858] [ 922.243425] Bluetooth: hci2: command 0x0401 tx timeout [ 922.296454] Bluetooth: hci0: command 0x0401 tx timeout [ 922.552355] Bluetooth: hci3: command 0x0401 tx timeout [ 924.344334] Bluetooth: hci0: command 0x0401 tx timeout 18:07:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "3397cb"}) 18:07:55 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="341ea769c30baaa275cc2e194bf17b12c71fbf390bcd3e75aac505319352ceb63bbd29c6638029816280c1c6d254138350c25c8be042195b87edf025460b2317bbb098c3350870", 0x47, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x65, 0x30, 0x39, 0x31, 0x0, 0x39, 0x34, 0x3b, 0x31, 0x39, 0x63, 0x31, 0x37, 0x30, 0x64, 0x35]}, &(0x7f0000000080)={0x0, "92665ba30499ad40e2638ed333fb69eced0d25c83198827b1291bbd689fb41222c75992753a948abe5e1cd6c832eb7b178cef4c0ba5aeacb3b28017195466e9a", 0x10}, 0x48, r0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) keyctl$revoke(0x3, r2) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$revoke(0x3, r3) r4 = add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)={0x1, 0x0, @d}, 0x18, r0) keyctl$revoke(0x3, r4) request_key(&(0x7f0000000200)='logon\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='$.^\x00', r1) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:07:55 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) recvfrom(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000, 0x101, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80) clone3(&(0x7f00000013c0)={0xc0100500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xb9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001300), 0x341003, 0x0) fgetxattr(r0, &(0x7f00000000c0)=@random={'system.', '\x00'}, &(0x7f00000001c0)=""/125, 0x7d) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCGPTPEER(r2, 0x5423, 0xbffffffffffff172) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x9, @remote, 0x1000}, 0x1c) 18:07:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 20) 18:07:55 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x0, 0x0}) 18:07:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x4, "3397cb"}) 18:07:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 52) socket$nl_netfilter(0x10, 0x3, 0xc) 18:07:55 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) [ 934.401860] FAULT_INJECTION: forcing a failure. [ 934.401860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.403204] CPU: 0 PID: 6098 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 934.404063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 934.405274] Call Trace: [ 934.405548] [ 934.405778] dump_stack_lvl+0x8b/0xb3 [ 934.406192] should_fail.cold+0x5/0xa [ 934.406599] _copy_from_user+0x2a/0x170 [ 934.407022] __copy_msghdr_from_user+0x91/0x4b0 [ 934.407537] ? __ia32_sys_shutdown+0x70/0x70 [ 934.407996] ? udp_v6_early_demux+0xdf0/0xdf0 [ 934.408467] ? inet6_sendmsg+0x4a/0x140 [ 934.408890] ? inet6_sendmsg+0xbd/0x140 [ 934.409339] ? inet6_compat_ioctl+0x310/0x310 [ 934.409817] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 934.410398] ? sock_sendmsg+0x55/0x190 [ 934.410821] sendmsg_copy_msghdr+0xa1/0x160 [ 934.411282] ? __ia32_sys_recvmmsg+0x260/0x260 [ 934.411770] ? __lock_acquire+0x164e/0x6120 [ 934.412238] ___sys_sendmsg+0xc6/0x170 [ 934.412661] ? sendmsg_copy_msghdr+0x160/0x160 [ 934.413147] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 934.413752] ? lock_is_held_type+0xd7/0x130 [ 934.414224] ? find_held_lock+0x2c/0x110 [ 934.414653] ? lock_release+0x3b2/0x750 [ 934.415070] ? __might_fault+0xd1/0x170 [ 934.415506] ? lock_downgrade+0x6d0/0x6d0 [ 934.415947] ? lock_is_held_type+0xd7/0x130 [ 934.416418] __sys_sendmmsg+0x195/0x470 [ 934.416843] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 934.417305] ? lock_is_held_type+0xd7/0x130 [ 934.417773] ? bit_wait_io_timeout+0x160/0x160 [ 934.418262] ? lock_is_held_type+0xd7/0x130 [ 934.418751] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 934.419363] ? vfs_write+0x422/0xac0 [ 934.419787] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 934.420420] ? fput+0x2a/0x50 [ 934.420788] __x64_sys_sendmmsg+0x99/0x100 [ 934.421271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 934.421851] do_syscall_64+0x3b/0x90 [ 934.422254] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 934.422811] RIP: 0033:0x7f89586d1b19 [ 934.423200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 934.425117] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 934.425950] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 934.426722] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 934.427517] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 934.428308] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 934.429107] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 934.429896] [ 934.443661] FAULT_INJECTION: forcing a failure. [ 934.443661] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 934.446067] CPU: 1 PID: 6100 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 934.447679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 934.449919] Call Trace: [ 934.450423] [ 934.450861] dump_stack_lvl+0x8b/0xb3 [ 934.451631] should_fail.cold+0x5/0xa [ 934.452394] prepare_alloc_pages+0x17b/0x500 [ 934.453296] __alloc_pages+0x131/0x4e0 [ 934.454061] ? udpv6_sendmsg+0x3eb/0x28d0 [ 934.454887] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 934.456062] ? mark_lock.part.0+0xef/0x2f60 [ 934.456929] ? __lock_acquire+0x164e/0x6120 [ 934.457817] alloc_pages_vma+0xde/0x500 [ 934.458612] wp_page_copy+0xefb/0x26f0 [ 934.459396] ? lock_release+0x3b2/0x750 [ 934.460187] ? do_page_mkwrite+0x650/0x650 [ 934.461020] ? lock_downgrade+0x6d0/0x6d0 [ 934.461843] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 934.462837] ? vm_normal_page+0x162/0x2e0 [ 934.463664] ? lock_release+0x750/0x750 [ 934.464464] do_wp_page+0x198/0x2b50 [ 934.465224] __handle_mm_fault+0x11fc/0x3600 [ 934.466101] ? lock_is_held_type+0xd7/0x130 [ 934.466967] ? __pmd_alloc+0x680/0x680 [ 934.467775] handle_mm_fault+0x2e6/0xa20 [ 934.468587] do_user_addr_fault+0x54a/0x12a0 [ 934.469506] exc_page_fault+0xa2/0x1a0 [ 934.470290] asm_exc_page_fault+0x1e/0x30 [ 934.471116] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 934.472108] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 934.475715] RSP: 0018:ffff88801aa97ce8 EFLAGS: 00050297 [ 934.476757] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 00000000200028b8 [ 934.478173] RDX: 0000000000040000 RSI: ffffffff8330a142 RDI: 0000000000000000 [ 934.479571] RBP: 0000000000040000 R08: 0000000000000000 R09: 0000000000000000 [ 934.480967] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 934.482367] R13: 0000000020002880 R14: 0000000000000400 R15: 00000000000003ff [ 934.483777] ? __sys_sendmmsg+0x1c2/0x470 [ 934.484618] __sys_sendmmsg+0x1cf/0x470 [ 934.485430] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 934.486292] ? lock_is_held_type+0xd7/0x130 [ 934.487181] ? bit_wait_io_timeout+0x160/0x160 [ 934.488091] ? lock_is_held_type+0xd7/0x130 [ 934.488975] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 934.490090] ? vfs_write+0x422/0xac0 [ 934.490838] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 934.491942] ? fput+0x2a/0x50 [ 934.492594] __x64_sys_sendmmsg+0x99/0x100 [ 934.493451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 934.494473] do_syscall_64+0x3b/0x90 [ 934.495232] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 934.496246] RIP: 0033:0x7f8f47a3fb19 [ 934.496975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 934.500604] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 934.502103] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 934.503501] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 934.504896] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 934.506302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 934.507703] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 934.509126] 18:07:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x5, "3397cb"}) 18:07:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x5, 0x0, "3397cb"}) 18:07:55 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) 18:07:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 21) [ 934.642965] FAULT_INJECTION: forcing a failure. [ 934.642965] name failslab, interval 1, probability 0, space 0, times 0 [ 934.644303] CPU: 0 PID: 6118 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 934.645243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 934.646625] Call Trace: [ 934.646932] [ 934.647208] dump_stack_lvl+0x8b/0xb3 [ 934.647683] should_fail.cold+0x5/0xa [ 934.648154] ? create_object.isra.0+0x3a/0xa20 [ 934.648728] should_failslab+0x5/0x10 [ 934.649216] kmem_cache_alloc+0x5b/0x480 [ 934.649713] create_object.isra.0+0x3a/0xa20 [ 934.650245] ? kasan_unpoison+0x23/0x50 [ 934.650723] __kmalloc_node_track_caller+0x269/0x440 [ 934.651344] ? alloc_skb_with_frags+0x92/0x6a0 [ 934.651911] __alloc_skb+0xe3/0x340 [ 934.652374] alloc_skb_with_frags+0x92/0x6a0 [ 934.652934] sock_alloc_send_pskb+0x7ab/0x930 [ 934.653499] ? __lock_acquire+0xbac/0x6120 [ 934.654021] ? sock_wmalloc+0x120/0x120 [ 934.654503] ? mark_lock.part.0+0xef/0x2f60 [ 934.655030] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 934.655672] ? lock_chain_count+0x20/0x20 [ 934.656175] ? lock_chain_count+0x20/0x20 [ 934.656686] ? lock_is_held_type+0xd7/0x130 [ 934.657224] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 934.657842] ? ip6_mtu+0x189/0x340 [ 934.658280] ? ip_frag_init+0x350/0x350 [ 934.658778] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 934.659333] ? ip6_mtu+0x1b0/0x340 [ 934.659768] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 934.660442] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 934.661129] ? ip6_setup_cork+0xd03/0x1550 [ 934.661677] ip6_make_skb+0x29a/0x4a0 [ 934.662142] ? ip_frag_init+0x350/0x350 [ 934.662628] ? ip6_push_pending_frames+0xe0/0xe0 [ 934.663214] ? lock_downgrade+0x6d0/0x6d0 [ 934.663712] ? ip6_default_advmss+0x4d0/0x4d0 [ 934.664267] udpv6_sendmsg+0x1d03/0x28d0 [ 934.664754] ? ip_frag_init+0x350/0x350 [ 934.665236] ? udp_v6_early_demux+0xdf0/0xdf0 [ 934.665794] ? lock_is_held_type+0xd7/0x130 [ 934.666321] ? find_held_lock+0x2c/0x110 [ 934.666814] ? lock_release+0x3b2/0x750 [ 934.667294] ? __might_fault+0xd1/0x170 [ 934.667771] ? lock_downgrade+0x6d0/0x6d0 [ 934.668294] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 934.668958] ? udp_v6_early_demux+0xdf0/0xdf0 [ 934.669514] ? inet6_sendmsg+0x4a/0x140 [ 934.670008] inet6_sendmsg+0xfd/0x140 [ 934.670476] ? inet6_compat_ioctl+0x310/0x310 [ 934.671014] sock_sendmsg+0xee/0x190 [ 934.671474] ____sys_sendmsg+0x32e/0x870 [ 934.671974] ? kernel_sendmsg+0x50/0x50 [ 934.672461] ? __ia32_sys_recvmmsg+0x260/0x260 [ 934.673029] ? lock_is_held_type+0xd7/0x130 [ 934.673569] ? find_held_lock+0x2c/0x110 [ 934.674041] ? lock_release+0x3b2/0x750 [ 934.674456] ? finish_task_switch.isra.0+0x221/0x870 [ 934.674992] ___sys_sendmsg+0xf3/0x170 [ 934.675403] ? sendmsg_copy_msghdr+0x160/0x160 [ 934.675889] ? finish_task_switch.isra.0+0x226/0x870 [ 934.676421] ? lockdep_hardirqs_on+0x79/0x100 [ 934.676900] ? finish_task_switch.isra.0+0x226/0x870 [ 934.677452] ? __schedule+0x895/0x2450 [ 934.677877] ? io_schedule_timeout+0x140/0x140 [ 934.678360] ? lock_is_held_type+0xd7/0x130 [ 934.678821] ? __cond_resched+0x13/0x20 [ 934.679245] __sys_sendmmsg+0x195/0x470 [ 934.679677] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 934.680145] ? lock_is_held_type+0xd7/0x130 [ 934.680618] ? bit_wait_io_timeout+0x160/0x160 [ 934.681113] ? lock_is_held_type+0xd7/0x130 [ 934.681587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 934.682179] ? vfs_write+0x422/0xac0 [ 934.682583] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 934.683202] ? fput+0x2a/0x50 [ 934.683570] __x64_sys_sendmmsg+0x99/0x100 [ 934.684053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 934.684630] do_syscall_64+0x3b/0x90 [ 934.685065] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 934.685655] RIP: 0033:0x7f8f47a3fb19 [ 934.686046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 934.688006] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 934.688847] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 934.689649] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 934.690426] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 934.691179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 934.691940] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 934.692743] [ 936.440363] Bluetooth: hci0: command 0x0401 tx timeout [ 936.441744] Bluetooth: hci4: command 0x0401 tx timeout [ 936.632381] Bluetooth: hci5: command 0x0401 tx timeout [ 938.488305] Bluetooth: hci0: command 0x0401 tx timeout 18:08:12 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) 18:08:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 53) socket$nl_netfilter(0x10, 0x3, 0xc) 18:08:12 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 18:08:12 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) recvfrom(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000, 0x101, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80) clone3(&(0x7f00000013c0)={0xc0100500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xb9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001300), 0x341003, 0x0) fgetxattr(r0, &(0x7f00000000c0)=@random={'system.', '\x00'}, &(0x7f00000001c0)=""/125, 0x7d) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCGPTPEER(r2, 0x5423, 0xbffffffffffff172) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x9, @remote, 0x1000}, 0x1c) 18:08:12 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x5) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:08:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x6, "3397cb"}) 18:08:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 22) 18:08:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x6, 0x0, "3397cb"}) [ 951.605130] FAULT_INJECTION: forcing a failure. [ 951.605130] name failslab, interval 1, probability 0, space 0, times 0 [ 951.606743] CPU: 0 PID: 6141 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 951.607846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 951.609364] Call Trace: [ 951.609633] FAULT_INJECTION: forcing a failure. [ 951.609633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.609734] [ 951.611660] dump_stack_lvl+0x8b/0xb3 [ 951.612176] should_fail.cold+0x5/0xa [ 951.612698] ? __alloc_skb+0x211/0x340 [ 951.613226] should_failslab+0x5/0x10 [ 951.617835] kmem_cache_alloc_node+0x55/0x490 [ 951.618456] ? lock_chain_count+0x20/0x20 [ 951.619026] __alloc_skb+0x211/0x340 [ 951.619541] alloc_skb_with_frags+0x92/0x6a0 [ 951.620142] sock_alloc_send_pskb+0x7ab/0x930 [ 951.620748] ? __lock_acquire+0xbac/0x6120 [ 951.621329] ? sock_wmalloc+0x120/0x120 [ 951.621899] ? mark_lock.part.0+0xef/0x2f60 [ 951.622474] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 951.623173] ? lock_chain_count+0x20/0x20 [ 951.623732] ? lock_chain_count+0x20/0x20 [ 951.624283] ? lock_is_held_type+0xd7/0x130 [ 951.624879] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 951.625597] ? ip6_mtu+0x189/0x340 [ 951.626083] ? ip_frag_init+0x350/0x350 [ 951.626628] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 951.627259] ? ip6_mtu+0x1b0/0x340 [ 951.627749] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 951.628490] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 951.629226] ? ip6_setup_cork+0xd03/0x1550 [ 951.629833] ip6_make_skb+0x29a/0x4a0 [ 951.630342] ? ip_frag_init+0x350/0x350 [ 951.630875] ? ip6_push_pending_frames+0xe0/0xe0 [ 951.631512] ? lock_downgrade+0x6d0/0x6d0 [ 951.632055] ? ip6_default_advmss+0x4d0/0x4d0 [ 951.632657] udpv6_sendmsg+0x1d03/0x28d0 [ 951.633194] ? ip_frag_init+0x350/0x350 [ 951.633828] ? udp_v6_early_demux+0xdf0/0xdf0 [ 951.634430] ? lock_is_held_type+0xd7/0x130 [ 951.635017] ? find_held_lock+0x2c/0x110 [ 951.635571] ? lock_release+0x3b2/0x750 [ 951.636110] ? __might_fault+0xd1/0x170 [ 951.636652] ? lock_downgrade+0x6d0/0x6d0 [ 951.637232] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 951.638125] ? udp_v6_early_demux+0xdf0/0xdf0 [ 951.638711] ? inet6_sendmsg+0x4a/0x140 [ 951.639305] inet6_sendmsg+0xfd/0x140 [ 951.639890] ? inet6_compat_ioctl+0x310/0x310 [ 951.640473] sock_sendmsg+0xee/0x190 [ 951.640960] ____sys_sendmsg+0x32e/0x870 [ 951.641578] ? kernel_sendmsg+0x50/0x50 [ 951.642088] ? __ia32_sys_recvmmsg+0x260/0x260 [ 951.642676] ? find_held_lock+0x2c/0x110 [ 951.643282] ? lock_release+0x3b2/0x750 [ 951.643877] ___sys_sendmsg+0xf3/0x170 [ 951.644441] ? sendmsg_copy_msghdr+0x160/0x160 [ 951.645140] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 951.645869] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 951.646582] ? do_user_addr_fault+0x59b/0x12a0 [ 951.647184] ? exc_page_fault+0xca/0x1a0 [ 951.647714] ? lockdep_hardirqs_on+0x79/0x100 [ 951.648299] ? exc_page_fault+0xca/0x1a0 [ 951.648826] ? asm_exc_page_fault+0x1e/0x30 [ 951.649396] ? lock_is_held_type+0xd7/0x130 [ 951.650630] __sys_sendmmsg+0x195/0x470 [ 951.651560] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 951.652539] ? lock_is_held_type+0xd7/0x130 [ 951.653788] ? bit_wait_io_timeout+0x160/0x160 [ 951.654904] ? lock_is_held_type+0xd7/0x130 [ 951.656209] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 951.657829] ? vfs_write+0x422/0xac0 [ 951.658712] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 951.660306] ? fput+0x2a/0x50 [ 951.661240] __x64_sys_sendmmsg+0x99/0x100 [ 951.662566] ? syscall_enter_from_user_mode+0x1d/0x50 [ 951.663908] do_syscall_64+0x3b/0x90 [ 951.664969] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 951.666492] RIP: 0033:0x7f8f47a3fb19 [ 951.667561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 951.672563] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 951.674658] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 951.676533] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 951.678624] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 951.680608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 951.682728] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 951.684935] [ 951.685639] CPU: 1 PID: 6139 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 951.687131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 951.688878] Call Trace: [ 951.689517] [ 951.689849] dump_stack_lvl+0x8b/0xb3 [ 951.690511] should_fail.cold+0x5/0xa [ 951.691138] _copy_from_user+0x2a/0x170 [ 951.691741] __copy_msghdr_from_user+0x91/0x4b0 [ 951.692487] ? __ia32_sys_shutdown+0x70/0x70 [ 951.693204] ? udp_v6_early_demux+0xdf0/0xdf0 [ 951.693878] ? inet6_sendmsg+0x4a/0x140 [ 951.694579] ? inet6_sendmsg+0xbd/0x140 [ 951.695223] ? inet6_compat_ioctl+0x310/0x310 [ 951.695899] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 951.696757] ? sock_sendmsg+0x55/0x190 [ 951.697423] sendmsg_copy_msghdr+0xa1/0x160 [ 951.698188] ? __ia32_sys_recvmmsg+0x260/0x260 [ 951.698863] ? __lock_acquire+0x164e/0x6120 [ 951.699560] ___sys_sendmsg+0xc6/0x170 [ 951.700199] ? sendmsg_copy_msghdr+0x160/0x160 [ 951.700875] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 951.701773] ? lock_is_held_type+0xd7/0x130 [ 951.702518] ? find_held_lock+0x2c/0x110 [ 951.703178] ? lock_release+0x3b2/0x750 [ 951.703770] ? __might_fault+0xd1/0x170 [ 951.704414] ? lock_downgrade+0x6d0/0x6d0 [ 951.705101] ? lock_is_held_type+0xd7/0x130 [ 951.705784] __sys_sendmmsg+0x195/0x470 [ 951.706525] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 951.707265] ? lock_is_held_type+0xd7/0x130 [ 951.707856] ? bit_wait_io_timeout+0x160/0x160 [ 951.708511] ? lock_is_held_type+0xd7/0x130 [ 951.709096] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 951.709898] ? vfs_write+0x422/0xac0 [ 951.710466] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 951.711260] ? fput+0x2a/0x50 [ 951.711709] __x64_sys_sendmmsg+0x99/0x100 [ 951.712324] ? syscall_enter_from_user_mode+0x1d/0x50 [ 951.713061] do_syscall_64+0x3b/0x90 [ 951.713628] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 951.714358] RIP: 0033:0x7f89586d1b19 [ 951.714901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 951.717499] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 951.719174] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 951.720978] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 951.722980] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 951.725118] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 951.727122] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 951.745346] 18:08:12 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)=ANY=[@ANYBLOB="010000834927372afd003464656d6768696a6b6c6d6e6f78797a30313233343536"], 0x29, 0xffffffffffffffff) keyctl$search(0xa, r2, &(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x2}, r0) keyctl$set_timeout(0xf, 0x0, 0x0) 18:08:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x7, "3397cb"}) 18:08:12 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) 18:08:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x7, 0x0, "3397cb"}) 18:08:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 23) 18:08:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 54) socket$nl_netfilter(0x10, 0x3, 0xc) [ 951.932767] FAULT_INJECTION: forcing a failure. 18:08:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x3c, "3397cb"}) [ 951.932767] name failslab, interval 1, probability 0, space 0, times 0 [ 951.938456] CPU: 1 PID: 6158 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 951.939571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 951.941079] Call Trace: [ 951.941427] [ 951.941770] dump_stack_lvl+0x8b/0xb3 [ 951.942302] should_fail.cold+0x5/0xa [ 951.942828] ? __alloc_skb+0x211/0x340 [ 951.943341] should_failslab+0x5/0x10 [ 951.943855] kmem_cache_alloc_node+0x55/0x490 [ 951.944460] ? lock_chain_count+0x20/0x20 [ 951.945031] __alloc_skb+0x211/0x340 [ 951.945579] alloc_skb_with_frags+0x92/0x6a0 [ 951.946189] sock_alloc_send_pskb+0x7ab/0x930 [ 951.946804] ? __lock_acquire+0xbac/0x6120 [ 951.947387] ? sock_wmalloc+0x120/0x120 [ 951.947931] ? mark_lock.part.0+0xef/0x2f60 [ 951.948525] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 951.949231] ? lock_chain_count+0x20/0x20 [ 951.949835] ? lock_chain_count+0x20/0x20 [ 951.950394] ? lock_is_held_type+0xd7/0x130 [ 951.950996] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 951.951671] ? ip6_mtu+0x189/0x340 [ 951.952162] ? ip_frag_init+0x350/0x350 [ 951.952725] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 951.953366] ? ip6_mtu+0x1b0/0x340 [ 951.953897] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 951.954645] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 951.955398] ? ip6_setup_cork+0xd03/0x1550 [ 951.955998] ip6_make_skb+0x29a/0x4a0 [ 951.956530] ? ip_frag_init+0x350/0x350 [ 951.957067] ? ip6_push_pending_frames+0xe0/0xe0 [ 951.957761] ? lock_downgrade+0x6d0/0x6d0 [ 951.958330] ? ip6_default_advmss+0x4d0/0x4d0 [ 951.958961] udpv6_sendmsg+0x1d03/0x28d0 [ 951.959522] ? ip_frag_init+0x350/0x350 [ 951.960073] ? udp_v6_early_demux+0xdf0/0xdf0 [ 951.960692] ? lock_is_held_type+0xd7/0x130 [ 951.961281] ? find_held_lock+0x2c/0x110 [ 951.961856] ? lock_release+0x3b2/0x750 [ 951.962401] ? __might_fault+0xd1/0x170 [ 951.962959] ? lock_downgrade+0x6d0/0x6d0 [ 951.963553] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 951.964299] ? udp_v6_early_demux+0xdf0/0xdf0 [ 951.964898] ? inet6_sendmsg+0x4a/0x140 [ 951.965427] inet6_sendmsg+0xfd/0x140 [ 951.965995] ? inet6_compat_ioctl+0x310/0x310 [ 951.966617] sock_sendmsg+0xee/0x190 [ 951.967133] ____sys_sendmsg+0x32e/0x870 [ 951.967695] ? kernel_sendmsg+0x50/0x50 [ 951.968241] ? __ia32_sys_recvmmsg+0x260/0x260 [ 951.968853] ? __lock_acquire+0x164e/0x6120 [ 951.969480] ___sys_sendmsg+0xf3/0x170 [ 951.969999] ? sendmsg_copy_msghdr+0x160/0x160 [ 951.970621] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 951.971351] ? lock_is_held_type+0xd7/0x130 [ 951.971914] ? find_held_lock+0x2c/0x110 [ 951.972450] ? lock_release+0x3b2/0x750 [ 951.972983] ? __might_fault+0xd1/0x170 [ 951.973544] ? lock_downgrade+0x6d0/0x6d0 [ 951.974114] ? lock_is_held_type+0xd7/0x130 [ 951.974700] __sys_sendmmsg+0x195/0x470 [ 951.975260] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 951.975833] ? lock_is_held_type+0xd7/0x130 [ 951.976433] ? bit_wait_io_timeout+0x160/0x160 [ 951.977030] ? lock_is_held_type+0xd7/0x130 [ 951.977634] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 951.978361] ? vfs_write+0x422/0xac0 [ 951.978865] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 951.979586] ? fput+0x2a/0x50 [ 951.980027] __x64_sys_sendmmsg+0x99/0x100 [ 951.980592] ? syscall_enter_from_user_mode+0x1d/0x50 [ 951.981276] do_syscall_64+0x3b/0x90 [ 951.981802] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 951.982482] RIP: 0033:0x7f8f47a3fb19 [ 951.982973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 951.985349] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 951.986390] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 951.987329] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 951.988276] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 951.989213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 951.990307] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 951.991278] 18:08:13 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) [ 952.018123] FAULT_INJECTION: forcing a failure. [ 952.018123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.020015] CPU: 1 PID: 6160 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 952.021290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 952.022972] Call Trace: [ 952.023387] [ 952.023728] dump_stack_lvl+0x8b/0xb3 [ 952.024336] should_fail.cold+0x5/0xa [ 952.024932] _copy_from_user+0x2a/0x170 [ 952.025592] __copy_msghdr_from_user+0x91/0x4b0 [ 952.026223] ? __ia32_sys_shutdown+0x70/0x70 [ 952.026827] ? udp_v6_early_demux+0xdf0/0xdf0 [ 952.027428] ? inet6_sendmsg+0x4a/0x140 [ 952.027991] ? inet6_sendmsg+0xbd/0x140 [ 952.028533] ? inet6_compat_ioctl+0x310/0x310 [ 952.029156] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 952.029981] ? sock_sendmsg+0x55/0x190 [ 952.030602] sendmsg_copy_msghdr+0xa1/0x160 [ 952.031283] ? __ia32_sys_recvmmsg+0x260/0x260 [ 952.032011] ? __lock_acquire+0x164e/0x6120 [ 952.032711] ___sys_sendmsg+0xc6/0x170 [ 952.033356] ? sendmsg_copy_msghdr+0x160/0x160 [ 952.034079] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 952.034972] ? lock_is_held_type+0xd7/0x130 [ 952.035663] ? find_held_lock+0x2c/0x110 [ 952.036303] ? lock_release+0x3b2/0x750 [ 952.036928] ? __might_fault+0xd1/0x170 [ 952.037582] ? lock_downgrade+0x6d0/0x6d0 [ 952.038255] ? lock_is_held_type+0xd7/0x130 [ 952.038964] __sys_sendmmsg+0x195/0x470 [ 952.039601] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 952.040275] ? lock_is_held_type+0xd7/0x130 [ 952.040972] ? bit_wait_io_timeout+0x160/0x160 [ 952.041726] ? lock_is_held_type+0xd7/0x130 [ 952.042425] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 952.043300] ? vfs_write+0x422/0xac0 [ 952.043897] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 952.044764] ? fput+0x2a/0x50 [ 952.045281] __x64_sys_sendmmsg+0x99/0x100 [ 952.045948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 952.046714] do_syscall_64+0x3b/0x90 [ 952.047309] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 952.048129] RIP: 0033:0x7f89586d1b19 [ 952.048726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.051375] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 952.052386] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 952.053342] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 952.054300] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 952.055242] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 952.056198] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 952.057172] 18:08:13 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) keyctl$revoke(0x3, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "4d432a3b91cb4221a69e4cd11d461127fa862403080d7409c6759f8e7edae289e11cf8e355a4895ad8ab0f2d5a06946734bb1081529c3431a3b28fcea508a278", 0x15}, 0x48, r0) r1 = add_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="4dc3c1c7cc0e78ed7acdd1959b7dc6b66f3d2a09d67425f77ba0694847f5cfe99b9222f4dd907a69825c02d2", 0x2c, r0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) keyctl$revoke(0x3, r2) r3 = add_key(0x0, 0x0, 0x0, 0x89, r2) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) keyctl$set_timeout(0xf, r4, 0x7) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r6, r5, 0x1) keyctl$set_timeout(0xf, 0x0, 0x0) 18:08:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3c, 0x0, "3397cb"}) [ 953.658362] Bluetooth: hci0: command 0x0401 tx timeout [ 953.659476] Bluetooth: hci6: command 0x0401 tx timeout [ 953.913574] Bluetooth: hci7: command 0x0401 tx timeout [ 955.705394] Bluetooth: hci0: command 0x0401 tx timeout [ 957.752383] Bluetooth: hci0: command 0x0401 tx timeout [ 967.683276] FAULT_INJECTION: forcing a failure. [ 967.683276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.684640] CPU: 1 PID: 6183 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 967.685504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 967.686719] Call Trace: [ 967.686988] [ 967.687224] dump_stack_lvl+0x8b/0xb3 [ 967.687642] should_fail.cold+0x5/0xa [ 967.688041] _copy_from_user+0x2a/0x170 [ 967.688471] __copy_msghdr_from_user+0x91/0x4b0 [ 967.688963] ? __ia32_sys_shutdown+0x70/0x70 [ 967.689426] ? udp_v6_early_demux+0xdf0/0xdf0 [ 967.689907] ? inet6_sendmsg+0x4a/0x140 [ 967.690357] ? lock_chain_count+0x20/0x20 [ 967.690810] ? inet6_sendmsg+0xbd/0x140 [ 967.691235] ? inet6_compat_ioctl+0x310/0x310 [ 967.691720] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 967.692314] ? sock_sendmsg+0x55/0x190 [ 967.692739] sendmsg_copy_msghdr+0xa1/0x160 [ 967.693213] ? __ia32_sys_recvmmsg+0x260/0x260 18:08:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x300, "3397cb"}) 18:08:28 executing program 2: keyctl$revoke(0x3, 0x0) r0 = add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="341ea769c30baaa275cc2e194bf17b12c71fbf390bcd3e75aac505319352ceb63bbd29c6638029816280c1c6d254138350c25c8be042195b87edf025460b2317bbb098c3350870", 0x47, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x65, 0x30, 0x39, 0x31, 0x0, 0x39, 0x34, 0x3b, 0x31, 0x39, 0x63, 0x31, 0x37, 0x30, 0x64, 0x35]}, &(0x7f0000000080)={0x0, "92665ba30499ad40e2638ed333fb69eced0d25c83198827b1291bbd689fb41222c75992753a948abe5e1cd6c832eb7b178cef4c0ba5aeacb3b28017195466e9a", 0x10}, 0x48, r0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) keyctl$revoke(0x3, r2) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$revoke(0x3, r3) r4 = add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)={0x1, 0x0, @d}, 0x18, r0) keyctl$revoke(0x3, r4) request_key(&(0x7f0000000200)='logon\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='$.^\x00', r1) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r5, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:08:28 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 18:08:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 24) 18:08:28 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) 18:08:28 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) keyctl$revoke(0x3, r1) keyctl$get_security(0x11, r1, &(0x7f00000003c0)=""/4096, 0x1000) keyctl$revoke(0x3, r0) add_key(0x0, 0x0, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='cifs.spnego\x00', 0x0) keyctl$set_timeout(0xf, 0x0, 0x1) r4 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)={0x3, 0x0, @c}, 0x29, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="957251a75240cbc4843b40217cb1538a1dfa6c02b1a5c2ed3e0ebe193a89d45b7ff536445e775f29a6b881cef4971eab32e7514b520ca6a1adb4402c4544e16920277f3d8b74f486d992302ebe33da428b98e5224da8f9b815128984b0e2fb1e74d5a28155d7404988e66e740e0242494b0842e1640e90073b579b6c3a5e11a6825df51654093f5216f60930f5", 0x8d, r3) keyctl$search(0xa, r4, &(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={'syz', 0x3}, r5) 18:08:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x300, 0x0, "3397cb"}) 18:08:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 55) socket$nl_netfilter(0x10, 0x3, 0xc) [ 967.693723] ? __lock_acquire+0x164e/0x6120 [ 967.694440] ? mark_held_locks+0x9e/0xe0 [ 967.694919] ___sys_sendmsg+0xc6/0x170 [ 967.695352] ? sendmsg_copy_msghdr+0x160/0x160 [ 967.695852] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 967.696451] ? lock_is_held_type+0xd7/0x130 [ 967.696929] ? find_held_lock+0x2c/0x110 [ 967.697373] ? lock_release+0x3b2/0x750 [ 967.697821] ? __might_fault+0xd1/0x170 [ 967.698255] ? lock_downgrade+0x6d0/0x6d0 [ 967.698718] ? lock_is_held_type+0xd7/0x130 [ 967.699208] __sys_sendmmsg+0x195/0x470 [ 967.699659] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 967.700129] ? lock_is_held_type+0xd7/0x130 [ 967.700616] ? bit_wait_io_timeout+0x160/0x160 [ 967.701123] ? lock_is_held_type+0xd7/0x130 [ 967.701598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 967.702227] ? vfs_write+0x422/0xac0 [ 967.702640] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 967.703235] ? fput+0x2a/0x50 [ 967.703581] __x64_sys_sendmmsg+0x99/0x100 [ 967.704045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 967.704603] do_syscall_64+0x3b/0x90 [ 967.705004] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 967.705570] RIP: 0033:0x7f89586d1b19 [ 967.705984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 967.707945] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 967.708758] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 967.709531] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 967.710301] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 967.711074] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 967.711830] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 967.712599] [ 967.727456] FAULT_INJECTION: forcing a failure. [ 967.727456] name failslab, interval 1, probability 0, space 0, times 0 [ 967.729911] CPU: 0 PID: 6190 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 967.731543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 967.733761] Call Trace: [ 967.734282] [ 967.734723] dump_stack_lvl+0x8b/0xb3 [ 967.735515] should_fail.cold+0x5/0xa [ 967.736276] should_failslab+0x5/0x10 [ 967.737035] __kmalloc_node_track_caller+0x7e/0x440 [ 967.738072] ? alloc_skb_with_frags+0x92/0x6a0 [ 967.738983] __alloc_skb+0xe3/0x340 [ 967.739708] alloc_skb_with_frags+0x92/0x6a0 [ 967.740595] ? mark_lock.part.0+0xef/0x2f60 [ 967.741458] sock_alloc_send_pskb+0x7ab/0x930 [ 967.742367] ? __lock_acquire+0xbac/0x6120 [ 967.743216] ? sock_wmalloc+0x120/0x120 [ 967.744006] ? mark_lock.part.0+0xef/0x2f60 [ 967.744860] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 967.745948] ? lock_chain_count+0x20/0x20 [ 967.746763] ? lock_chain_count+0x20/0x20 [ 967.747607] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 967.748609] ? ip6_mtu+0x189/0x340 [ 967.749338] ? ip_frag_init+0x350/0x350 [ 967.750148] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 967.751123] ? ip6_mtu+0x1b0/0x340 [ 967.751832] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 967.752916] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 967.754003] ? ip6_setup_cork+0xd03/0x1550 [ 967.754856] ip6_make_skb+0x29a/0x4a0 [ 967.755604] ? ip_frag_init+0x350/0x350 [ 967.756389] ? ip6_push_pending_frames+0xe0/0xe0 [ 967.757336] ? lock_downgrade+0x6d0/0x6d0 [ 967.758166] ? ip6_default_advmss+0x4d0/0x4d0 [ 967.759069] udpv6_sendmsg+0x1d03/0x28d0 [ 967.759889] ? ip_frag_init+0x350/0x350 [ 967.760683] ? udp_v6_early_demux+0xdf0/0xdf0 [ 967.761592] ? lock_is_held_type+0xd7/0x130 [ 967.762468] ? find_held_lock+0x2c/0x110 [ 967.763286] ? lock_release+0x3b2/0x750 [ 967.764069] ? __might_fault+0xd1/0x170 [ 967.764865] ? lock_downgrade+0x6d0/0x6d0 [ 967.765721] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 967.766836] ? udp_v6_early_demux+0xdf0/0xdf0 [ 967.767718] ? inet6_sendmsg+0x4a/0x140 [ 967.768529] inet6_sendmsg+0xfd/0x140 [ 967.769283] ? inet6_compat_ioctl+0x310/0x310 [ 967.770206] sock_sendmsg+0xee/0x190 [ 967.770950] ____sys_sendmsg+0x32e/0x870 [ 967.771765] ? kernel_sendmsg+0x50/0x50 [ 967.772549] ? __ia32_sys_recvmmsg+0x260/0x260 [ 967.773465] ? find_held_lock+0x2c/0x110 [ 967.774272] ? lock_release+0x3b2/0x750 [ 967.775081] ___sys_sendmsg+0xf3/0x170 [ 967.775861] ? sendmsg_copy_msghdr+0x160/0x160 [ 967.776784] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 967.777893] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 967.779006] ? do_user_addr_fault+0x59b/0x12a0 [ 967.779912] ? exc_page_fault+0xca/0x1a0 [ 967.780732] ? lockdep_hardirqs_on+0x79/0x100 [ 967.781620] ? exc_page_fault+0xca/0x1a0 [ 967.782456] ? asm_exc_page_fault+0x1e/0x30 [ 967.783339] ? lock_is_held_type+0xd7/0x130 [ 967.784208] __sys_sendmmsg+0x195/0x470 [ 967.785017] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 967.785897] ? lock_is_held_type+0xd7/0x130 [ 967.786792] ? bit_wait_io_timeout+0x160/0x160 [ 967.787692] ? lock_is_held_type+0xd7/0x130 [ 967.788570] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 967.789657] ? vfs_write+0x422/0xac0 [ 967.790415] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 967.791502] ? fput+0x2a/0x50 [ 967.792149] __x64_sys_sendmmsg+0x99/0x100 [ 967.792991] ? syscall_enter_from_user_mode+0x1d/0x50 [ 967.794023] do_syscall_64+0x3b/0x90 [ 967.794760] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 967.795796] RIP: 0033:0x7f8f47a3fb19 [ 967.796519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 967.800166] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 967.801666] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 967.803081] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 967.804486] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 967.805917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 967.807340] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 967.808779] 18:08:28 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) 18:08:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x500, "3397cb"}) 18:08:28 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b8731f97c069dbe82449f79e84c6f30e40545a4a9edaf681f7267962112a2b65de1de0e77a13611a58dbc2f1cd39a4482512f43267", 0x35, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r1}) keyctl$set_timeout(0xf, r1, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:08:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 25) 18:08:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x500, 0x0, "3397cb"}) [ 967.916812] FAULT_INJECTION: forcing a failure. [ 967.916812] name failslab, interval 1, probability 0, space 0, times 0 [ 967.918200] CPU: 1 PID: 6204 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 967.919098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 967.920329] Call Trace: [ 967.920604] [ 967.920848] dump_stack_lvl+0x8b/0xb3 [ 967.921276] should_fail.cold+0x5/0xa [ 967.921711] should_failslab+0x5/0x10 [ 967.922136] __kmalloc_node_track_caller+0x7e/0x440 [ 967.922702] ? alloc_skb_with_frags+0x92/0x6a0 [ 967.923208] __alloc_skb+0xe3/0x340 [ 967.923617] alloc_skb_with_frags+0x92/0x6a0 [ 967.924125] sock_alloc_send_pskb+0x7ab/0x930 [ 967.924625] ? __lock_acquire+0xbac/0x6120 [ 967.925099] ? sock_wmalloc+0x120/0x120 [ 967.925535] ? mark_lock.part.0+0xef/0x2f60 [ 967.926036] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 967.926618] ? lock_chain_count+0x20/0x20 [ 967.927072] ? lock_chain_count+0x20/0x20 [ 967.927520] ? lock_is_held_type+0xd7/0x130 [ 967.928015] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 967.928577] ? ip6_mtu+0x189/0x340 [ 967.928971] ? ip_frag_init+0x350/0x350 [ 967.929420] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 967.929925] ? ip6_mtu+0x1b0/0x340 [ 967.930326] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 967.930928] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 967.931537] ? ip6_setup_cork+0xd03/0x1550 [ 967.932012] ip6_make_skb+0x29a/0x4a0 [ 967.932436] ? ip_frag_init+0x350/0x350 [ 967.932876] ? ip6_push_pending_frames+0xe0/0xe0 [ 967.933403] ? lock_downgrade+0x6d0/0x6d0 [ 967.933852] ? ip6_default_advmss+0x4d0/0x4d0 [ 967.934357] udpv6_sendmsg+0x1d03/0x28d0 [ 967.934811] ? ip_frag_init+0x350/0x350 [ 967.935262] ? udp_v6_early_demux+0xdf0/0xdf0 [ 967.935765] ? lock_is_held_type+0xd7/0x130 [ 967.936242] ? find_held_lock+0x2c/0x110 [ 967.936672] ? lock_release+0x3b2/0x750 [ 967.937117] ? __might_fault+0xd1/0x170 [ 967.937540] ? lock_downgrade+0x6d0/0x6d0 [ 967.938024] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 967.938634] ? udp_v6_early_demux+0xdf0/0xdf0 [ 967.939115] ? inet6_sendmsg+0x4a/0x140 [ 967.939567] inet6_sendmsg+0xfd/0x140 [ 967.939979] ? inet6_compat_ioctl+0x310/0x310 [ 967.940482] sock_sendmsg+0xee/0x190 [ 967.940886] ____sys_sendmsg+0x32e/0x870 [ 967.941350] ? kernel_sendmsg+0x50/0x50 [ 967.941785] ? __ia32_sys_recvmmsg+0x260/0x260 [ 967.942306] ? __lock_acquire+0x164e/0x6120 [ 967.942798] ___sys_sendmsg+0xf3/0x170 [ 967.943214] ? sendmsg_copy_msghdr+0x160/0x160 [ 967.943729] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 967.944336] ? lock_is_held_type+0xd7/0x130 [ 967.944825] ? find_held_lock+0x2c/0x110 [ 967.945273] ? lock_release+0x3b2/0x750 [ 967.945716] ? __might_fault+0xd1/0x170 [ 967.946147] ? lock_downgrade+0x6d0/0x6d0 [ 967.946602] ? lock_is_held_type+0xd7/0x130 [ 967.947095] __sys_sendmmsg+0x195/0x470 [ 967.947549] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 967.948017] ? lock_is_held_type+0xd7/0x130 [ 967.948508] ? bit_wait_io_timeout+0x160/0x160 [ 967.949005] ? lock_is_held_type+0xd7/0x130 [ 967.949486] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 967.950111] ? vfs_write+0x422/0xac0 [ 967.950530] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 967.951126] ? fput+0x2a/0x50 [ 967.951484] __x64_sys_sendmmsg+0x99/0x100 [ 967.951943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 967.952513] do_syscall_64+0x3b/0x90 [ 967.952928] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 967.953505] RIP: 0033:0x7f8f47a3fb19 [ 967.953931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 967.955932] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 967.956755] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 967.957533] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 967.958332] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 967.959099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 967.959869] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 967.960661] 18:08:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 56) socket$nl_netfilter(0x10, 0x3, 0xc) 18:08:29 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44aa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb4, 0x0, 0x8, 0x7, 0x0, 0x3, 0x20, 0xd, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x0, 0x1000}, 0x11, 0x39d700000, 0x7ff, 0x6, 0x1c, 0x10000, 0x6, 0x0, 0xfffffff9, 0x0, 0x9}, r1, 0x6, r2, 0xb) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r5 = dup2(r0, r3) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002580)='clear_refs\x00') mq_notify(r6, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="7000001e8ecb375a2478bbd2a4338ba8e9aaa307c86e496ff070b5612ce1b7c2f6fd99b3b4e9bbce9c0928378b925d733df88dfd979c04f2fe663e923538fcf360e535c22a227e0f", @ANYRES16=r7, @ANYBLOB="000429bd7000ffdbdf250d0000003c0002800400040034000380080001000800000008000200010000000800020007000000080002000100000008000200ff0100000800010032a60000"], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x24040080) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) 18:08:29 executing program 0: keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000002c0)="29daa719c2c1197ad3c12e9eb29ecc7c8cb59032b55684064930251935b29f4b145be02d07e94cf7284b733fba1b3ac3d8ad1798ab31484c3c480949f8235297da26fed416d84fce218df683ba3c01bfc331589c0780f695b4909f406c57a7e196a85d09a7df8efbb16deb496ec8b7d0b1cae3dbe54aad0878ac739d65a752b82ce53779379075a9687fede9a4c06e0ad47653587c12591abdb50a6ae0ddcd83f1b6f26fa1a967959f14f14b402a3c8cef33e02d8c86015f02d30a385aaeac2a3e7091bcd6ef0a814f23fbdc132f32941d915a4f8542564922ff0ecfecf166a0f3ae3ac164c22bc73f", 0xe9, 0xfffffffffffffffb) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "bb27763e36f7b4d5b061af6e17aebb2fac8a7d9ad01271a8d9411c2a40310d19c30b2b8c7c799edde13a2f586679f4008de5124c6ed64af57ce6c0ed76f037da", 0x2c}, 0x48, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$set_timeout(0xf, 0x0, 0x0) keyctl$revoke(0x3, r1) 18:08:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x600, "3397cb"}) [ 968.041356] FAULT_INJECTION: forcing a failure. [ 968.041356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.042643] CPU: 1 PID: 6214 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 968.043499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 968.044680] Call Trace: [ 968.044964] [ 968.045203] dump_stack_lvl+0x8b/0xb3 [ 968.045631] should_fail.cold+0x5/0xa [ 968.046047] _copy_from_user+0x2a/0x170 [ 968.046481] __copy_msghdr_from_user+0x91/0x4b0 [ 968.046992] ? __ia32_sys_shutdown+0x70/0x70 [ 968.047459] ? udp_v6_early_demux+0xdf0/0xdf0 [ 968.047936] ? inet6_sendmsg+0x4a/0x140 [ 968.048362] ? inet6_sendmsg+0xbd/0x140 [ 968.048785] ? inet6_compat_ioctl+0x310/0x310 [ 968.049259] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 968.049855] ? sock_sendmsg+0x55/0x190 [ 968.050283] sendmsg_copy_msghdr+0xa1/0x160 [ 968.050752] ? __ia32_sys_recvmmsg+0x260/0x260 [ 968.051268] ? __lock_acquire+0x164e/0x6120 [ 968.051733] ___sys_sendmsg+0xc6/0x170 [ 968.052175] ? sendmsg_copy_msghdr+0x160/0x160 [ 968.052661] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 968.053273] ? lock_is_held_type+0xd7/0x130 [ 968.053750] ? find_held_lock+0x2c/0x110 [ 968.054197] ? lock_release+0x3b2/0x750 [ 968.054615] ? __might_fault+0xd1/0x170 [ 968.055051] ? lock_downgrade+0x6d0/0x6d0 [ 968.055506] ? lock_is_held_type+0xd7/0x130 [ 968.055994] __sys_sendmmsg+0x195/0x470 [ 968.056421] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 968.056890] ? lock_is_held_type+0xd7/0x130 [ 968.057372] ? bit_wait_io_timeout+0x160/0x160 [ 968.057877] ? lock_is_held_type+0xd7/0x130 [ 968.058354] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 968.058949] ? vfs_write+0x422/0xac0 [ 968.059357] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 968.059959] ? fput+0x2a/0x50 [ 968.060303] __x64_sys_sendmmsg+0x99/0x100 [ 968.060772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 968.061322] do_syscall_64+0x3b/0x90 [ 968.061768] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 968.062313] RIP: 0033:0x7f89586d1b19 [ 968.062712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 968.064621] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 968.065437] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 968.066189] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 968.066928] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 968.067676] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 968.068414] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 968.069161] [ 969.785003] Bluetooth: hci0: command 0x0401 tx timeout [ 971.832372] Bluetooth: hci0: command 0x0401 tx timeout [ 973.881732] Bluetooth: hci0: command 0x0401 tx timeout 18:08:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x600, 0x0, "3397cb"}) 18:08:43 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44aa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb4, 0x0, 0x8, 0x7, 0x0, 0x3, 0x20, 0xd, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x0, 0x1000}, 0x11, 0x39d700000, 0x7ff, 0x6, 0x1c, 0x10000, 0x6, 0x0, 0xfffffff9, 0x0, 0x9}, r1, 0x6, r2, 0xb) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r5 = dup2(r0, r3) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002580)='clear_refs\x00') mq_notify(r6, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="7000001e8ecb375a2478bbd2a4338ba8e9aaa307c86e496ff070b5612ce1b7c2f6fd99b3b4e9bbce9c0928378b925d733df88dfd979c04f2fe663e923538fcf360e535c22a227e0f", @ANYRES16=r7, @ANYBLOB="000429bd7000ffdbdf250d0000003c0002800400040034000380080001000800000008000200010000000800020007000000080002000100000008000200ff0100000800010032a60000"], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x24040080) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) 18:08:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 57) socket$nl_netfilter(0x10, 0x3, 0xc) 18:08:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 26) 18:08:43 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x500, "3397cb"}) 18:08:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x700, "3397cb"}) 18:08:43 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='.\\\x00', r0) keyctl$set_timeout(0xf, r1, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:08:43 executing program 7: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44aa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb4, 0x0, 0x8, 0x7, 0x0, 0x3, 0x20, 0xd, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x0, 0x1000}, 0x11, 0x39d700000, 0x7ff, 0x6, 0x1c, 0x10000, 0x6, 0x0, 0xfffffff9, 0x0, 0x9}, r1, 0x6, r2, 0xb) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r5 = dup2(r0, r3) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002580)='clear_refs\x00') mq_notify(r6, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="7000001e8ecb375a2478bbd2a4338ba8e9aaa307c86e496ff070b5612ce1b7c2f6fd99b3b4e9bbce9c0928378b925d733df88dfd979c04f2fe663e923538fcf360e535c22a227e0f", @ANYRES16=r7, @ANYBLOB="000429bd7000ffdbdf250d0000003c0002800400040034000380080001000800000008000200010000000800020007000000080002000100000008000200ff0100000800010032a60000"], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x24040080) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) [ 982.509498] FAULT_INJECTION: forcing a failure. [ 982.509498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.510936] CPU: 1 PID: 6235 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 982.511896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 982.513166] Call Trace: [ 982.513440] [ 982.513686] dump_stack_lvl+0x8b/0xb3 [ 982.514150] should_fail.cold+0x5/0xa [ 982.514641] _copy_from_user+0x2a/0x170 [ 982.515090] __copy_msghdr_from_user+0x91/0x4b0 [ 982.515593] ? __ia32_sys_shutdown+0x70/0x70 [ 982.516068] ? udp_v6_early_demux+0xdf0/0xdf0 [ 982.516562] ? inet6_sendmsg+0x4a/0x140 [ 982.516985] ? inet6_sendmsg+0xbd/0x140 [ 982.517412] ? inet6_compat_ioctl+0x310/0x310 [ 982.517930] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 982.518579] ? sock_sendmsg+0x55/0x190 [ 982.519013] sendmsg_copy_msghdr+0xa1/0x160 [ 982.519485] ? __ia32_sys_recvmmsg+0x260/0x260 [ 982.520058] ? __lock_acquire+0x164e/0x6120 [ 982.520529] ___sys_sendmsg+0xc6/0x170 [ 982.520948] ? sendmsg_copy_msghdr+0x160/0x160 [ 982.521494] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 982.522108] ? lock_is_held_type+0xd7/0x130 [ 982.522586] ? find_held_lock+0x2c/0x110 [ 982.523073] ? lock_release+0x3b2/0x750 [ 982.523540] ? __might_fault+0xd1/0x170 [ 982.523964] ? lock_downgrade+0x6d0/0x6d0 [ 982.524413] ? lock_is_held_type+0xd7/0x130 [ 982.524880] __sys_sendmmsg+0x195/0x470 [ 982.525355] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 982.525872] ? lock_is_held_type+0xd7/0x130 [ 982.526380] ? bit_wait_io_timeout+0x160/0x160 [ 982.526879] ? lock_is_held_type+0xd7/0x130 [ 982.527370] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 982.527967] ? vfs_write+0x422/0xac0 [ 982.528380] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 982.528984] ? fput+0x2a/0x50 [ 982.529366] __x64_sys_sendmmsg+0x99/0x100 [ 982.529919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 982.530481] do_syscall_64+0x3b/0x90 [ 982.530902] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 982.531461] RIP: 0033:0x7f89586d1b19 [ 982.531912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 982.533922] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 982.534796] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 982.535584] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 982.536375] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 982.537137] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 982.538020] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 982.538857] [ 982.542131] FAULT_INJECTION: forcing a failure. [ 982.542131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.543497] CPU: 1 PID: 6236 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 982.544428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 982.545637] Call Trace: [ 982.545929] [ 982.546170] dump_stack_lvl+0x8b/0xb3 [ 982.546657] should_fail.cold+0x5/0xa [ 982.547091] _copy_from_user+0x2a/0x170 [ 982.547544] __copy_msghdr_from_user+0x91/0x4b0 [ 982.548132] ? __ia32_sys_shutdown+0x70/0x70 [ 982.548629] ? udp_v6_early_demux+0xdf0/0xdf0 [ 982.549140] ? inet6_sendmsg+0x4a/0x140 [ 982.549665] ? inet6_sendmsg+0xbd/0x140 [ 982.550136] ? inet6_compat_ioctl+0x310/0x310 [ 982.550635] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 982.551240] ? sock_sendmsg+0x55/0x190 [ 982.551673] sendmsg_copy_msghdr+0xa1/0x160 [ 982.552178] ? __ia32_sys_recvmmsg+0x260/0x260 [ 982.552706] ? __lock_acquire+0x164e/0x6120 [ 982.553193] ___sys_sendmsg+0xc6/0x170 [ 982.553619] ? sendmsg_copy_msghdr+0x160/0x160 [ 982.554145] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 982.554760] ? lock_is_held_type+0xd7/0x130 [ 982.555258] ? find_held_lock+0x2c/0x110 [ 982.555703] ? lock_release+0x3b2/0x750 [ 982.556155] ? __might_fault+0xd1/0x170 [ 982.556588] ? lock_downgrade+0x6d0/0x6d0 [ 982.557063] ? lock_is_held_type+0xd7/0x130 [ 982.557544] __sys_sendmmsg+0x195/0x470 [ 982.558013] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 982.558476] ? lock_is_held_type+0xd7/0x130 [ 982.558977] ? bit_wait_io_timeout+0x160/0x160 [ 982.559466] ? lock_is_held_type+0xd7/0x130 [ 982.559962] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 982.560538] ? vfs_write+0x422/0xac0 [ 982.560956] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 982.561531] ? fput+0x2a/0x50 [ 982.561896] __x64_sys_sendmmsg+0x99/0x100 [ 982.562362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 982.562930] do_syscall_64+0x3b/0x90 [ 982.563323] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 982.563911] RIP: 0033:0x7f8f47a3fb19 [ 982.564304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 982.566356] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 982.567139] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 982.567930] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 982.568711] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 982.569486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 982.570296] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 982.571084] 18:08:43 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="2903686a12502c88a16c2f16f74c5f8a8127108b4655", 0x16, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='logon\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r2}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:08:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x3c00, "3397cb"}) 18:08:43 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$read(0xb, r0, &(0x7f00000002c0)=""/4096, 0x1000) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:08:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 27) 18:08:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 58) socket$nl_netfilter(0x10, 0x3, 0xc) 18:08:43 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x500, "3397cb"}) 18:08:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x700, 0x0, "3397cb"}) [ 982.758862] FAULT_INJECTION: forcing a failure. [ 982.758862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.760141] CPU: 1 PID: 6261 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 982.760991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 982.762134] FAULT_INJECTION: forcing a failure. [ 982.762134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.762175] Call Trace: [ 982.762183] [ 982.765066] dump_stack_lvl+0x8b/0xb3 [ 982.765484] should_fail.cold+0x5/0xa [ 982.765891] _copy_from_user+0x2a/0x170 [ 982.766338] __copy_msghdr_from_user+0x91/0x4b0 [ 982.766841] ? __ia32_sys_shutdown+0x70/0x70 [ 982.767317] ? udp_v6_early_demux+0xdf0/0xdf0 [ 982.767799] ? inet6_sendmsg+0x4a/0x140 [ 982.768223] ? inet6_sendmsg+0xbd/0x140 [ 982.768638] ? inet6_compat_ioctl+0x310/0x310 [ 982.769109] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 982.769688] ? sock_sendmsg+0x55/0x190 [ 982.770112] sendmsg_copy_msghdr+0xa1/0x160 [ 982.770566] ? __ia32_sys_recvmmsg+0x260/0x260 [ 982.771054] ? __lock_acquire+0x164e/0x6120 [ 982.771521] ___sys_sendmsg+0xc6/0x170 [ 982.771937] ? sendmsg_copy_msghdr+0x160/0x160 [ 982.772420] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 982.773009] ? lock_is_held_type+0xd7/0x130 [ 982.773468] ? find_held_lock+0x2c/0x110 [ 982.773895] ? lock_release+0x3b2/0x750 [ 982.774330] ? __might_fault+0xd1/0x170 [ 982.774755] ? lock_downgrade+0x6d0/0x6d0 [ 982.775194] ? lock_is_held_type+0xd7/0x130 [ 982.775660] __sys_sendmmsg+0x195/0x470 [ 982.776085] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 982.776548] ? lock_is_held_type+0xd7/0x130 [ 982.777015] ? bit_wait_io_timeout+0x160/0x160 [ 982.777495] ? lock_is_held_type+0xd7/0x130 [ 982.777971] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 982.778545] ? vfs_write+0x422/0xac0 [ 982.778942] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 982.779520] ? fput+0x2a/0x50 [ 982.779860] __x64_sys_sendmmsg+0x99/0x100 [ 982.780300] ? syscall_enter_from_user_mode+0x1d/0x50 [ 982.780852] do_syscall_64+0x3b/0x90 [ 982.781259] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 982.781807] RIP: 0033:0x7f89586d1b19 [ 982.782205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 982.784114] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 982.784907] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 982.785657] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 982.786410] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 982.787146] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 982.787877] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 982.788668] [ 982.788918] CPU: 0 PID: 6262 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 18:08:43 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$read(0xb, r1, &(0x7f0000000180)=""/174, 0xae) keyctl$search(0xa, r2, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x0}, r0) keyctl$set_timeout(0xf, r1, 0x7) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$set_timeout(0xf, r4, 0x2000000) [ 982.790686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 982.793165] Call Trace: [ 982.793724] [ 982.794211] dump_stack_lvl+0x8b/0xb3 [ 982.795029] should_fail.cold+0x5/0xa [ 982.795839] _copy_from_user+0x2a/0x170 [ 982.796687] __copy_msghdr_from_user+0x91/0x4b0 [ 982.797667] ? __ia32_sys_shutdown+0x70/0x70 [ 982.798601] ? udp_v6_early_demux+0xdf0/0xdf0 [ 982.799545] ? inet6_sendmsg+0x4a/0x140 [ 982.800391] ? inet6_sendmsg+0xbd/0x140 [ 982.801230] ? inet6_compat_ioctl+0x310/0x310 [ 982.802184] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 982.803355] ? sock_sendmsg+0x55/0x190 [ 982.804188] sendmsg_copy_msghdr+0xa1/0x160 [ 982.805101] ? __ia32_sys_recvmmsg+0x260/0x260 [ 982.806085] ? __lock_acquire+0x164e/0x6120 [ 982.807015] ___sys_sendmsg+0xc6/0x170 [ 982.807851] ? sendmsg_copy_msghdr+0x160/0x160 [ 982.808816] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 982.810001] ? lock_is_held_type+0xd7/0x130 [ 982.810926] ? find_held_lock+0x2c/0x110 [ 982.811785] ? lock_release+0x3b2/0x750 [ 982.812619] ? __might_fault+0xd1/0x170 [ 982.813468] ? lock_downgrade+0x6d0/0x6d0 [ 982.814386] ? lock_is_held_type+0xd7/0x130 [ 982.815314] __sys_sendmmsg+0x195/0x470 [ 982.816167] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 982.817078] ? lock_is_held_type+0xd7/0x130 [ 982.818022] ? bit_wait_io_timeout+0x160/0x160 [ 982.818991] ? lock_is_held_type+0xd7/0x130 [ 982.819932] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 982.821085] ? vfs_write+0x422/0xac0 [ 982.821866] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 982.823033] ? fput+0x2a/0x50 [ 982.823711] __x64_sys_sendmmsg+0x99/0x100 [ 982.824625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 982.825698] do_syscall_64+0x3b/0x90 [ 982.826500] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 982.827620] RIP: 0033:0x7f8f47a3fb19 [ 982.828401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 982.832242] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 982.833826] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 982.835344] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 982.836825] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 982.838310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 982.839784] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 982.841283] 18:08:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3c00, 0x0, "3397cb"}) 18:08:44 executing program 2: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='.\\\x00', r0) keyctl$set_timeout(0xf, r1, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:08:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:08:44 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) keyctl$revoke(0x3, r1) r2 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="21ee3af22eebcd52e9b01e6f36e7b02885e8dd7dae8a9e7507026cddfa5a049563c440416bd3a4154bf0780eb5b5c6fb9a8107e4fbf5487b4f68478a2b1dcf52001265d73671ba003e381e3396b0fc677c084e0404b652ab295335d3a6277802ff0382891cb3b8a25a9a49b1d31f06974ab5c112b9a2fc47123654b88c097db0006845053d3332e33c857d108087dae7bf0c03ca42fec453c3125cd99964aa3df06a02f5cc32fbf074c573ad193ce8490fe4fbaa0cd761caab94621f4d17793836ea864e49816a2d33ecc432a9cb945da239f72f", 0xd4, 0xffffffffffffffff) keyctl$search(0xa, r2, &(0x7f0000000200)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x3}, r0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$revoke(0x3, r3) keyctl$set_timeout(0xf, r3, 0x9) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:08:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:08:44 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x500, "3397cb"}) 18:08:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 59) socket$nl_netfilter(0x10, 0x3, 0xc) [ 983.052831] FAULT_INJECTION: forcing a failure. [ 983.052831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.054232] CPU: 1 PID: 6288 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 983.055164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 983.056451] Call Trace: [ 983.056736] [ 983.056985] dump_stack_lvl+0x8b/0xb3 [ 983.057432] should_fail.cold+0x5/0xa [ 983.057871] _copy_from_user+0x2a/0x170 [ 983.058347] __copy_msghdr_from_user+0x91/0x4b0 [ 983.058880] ? __ia32_sys_shutdown+0x70/0x70 [ 983.059379] ? udp_v6_early_demux+0xdf0/0xdf0 [ 983.059891] ? inet6_sendmsg+0x4a/0x140 [ 983.060348] ? inet6_sendmsg+0xbd/0x140 [ 983.060813] ? inet6_compat_ioctl+0x310/0x310 [ 983.061320] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 983.061958] ? sock_sendmsg+0x55/0x190 [ 983.062406] sendmsg_copy_msghdr+0xa1/0x160 [ 983.062901] ? __ia32_sys_recvmmsg+0x260/0x260 [ 983.063434] ? __lock_acquire+0x164e/0x6120 [ 983.063915] ___sys_sendmsg+0xc6/0x170 [ 983.064345] ? sendmsg_copy_msghdr+0x160/0x160 [ 983.064843] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 983.065447] ? lock_is_held_type+0xd7/0x130 [ 983.065941] ? find_held_lock+0x2c/0x110 [ 983.066387] ? lock_release+0x3b2/0x750 [ 983.066819] ? __might_fault+0xd1/0x170 [ 983.067257] ? lock_downgrade+0x6d0/0x6d0 [ 983.067710] ? lock_is_held_type+0xd7/0x130 [ 983.068188] __sys_sendmmsg+0x195/0x470 [ 983.068629] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 983.069098] ? lock_is_held_type+0xd7/0x130 [ 983.069585] ? bit_wait_io_timeout+0x160/0x160 [ 983.070092] ? lock_is_held_type+0xd7/0x130 [ 983.070569] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 983.071169] ? vfs_write+0x422/0xac0 [ 983.071573] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 983.072169] ? fput+0x2a/0x50 [ 983.072544] __x64_sys_sendmmsg+0x99/0x100 [ 983.073006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 983.073564] do_syscall_64+0x3b/0x90 [ 983.073981] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 983.074555] RIP: 0033:0x7f89586d1b19 [ 983.074954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 983.076920] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 983.077733] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 983.078523] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 983.079289] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 983.080052] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 983.080854] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 983.081668] [ 984.633313] Bluetooth: hci0: command 0x0401 tx timeout [ 986.681318] Bluetooth: hci0: command 0x0401 tx timeout [ 988.728337] Bluetooth: hci0: command 0x0401 tx timeout [ 990.908830] Bluetooth: hci0: command 0x0401 tx timeout [ 992.952342] Bluetooth: hci0: command 0x0401 tx timeout [ 995.000339] Bluetooth: hci0: command 0x0401 tx timeout [ 997.050301] Bluetooth: hci0: command 0x0401 tx timeout 18:09:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 28) 18:09:01 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) (fail_nth: 1) 18:09:01 executing program 2: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b8731f97c069dbe82449f79e84c6f30e40545a4a9edaf681f7267962112a2b65de1de0e77a13611a58dbc2f1cd39a4482512f43267", 0x35, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r1}) keyctl$set_timeout(0xf, r1, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:09:01 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) keyctl$revoke(0x3, r1) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$set_timeout(0xf, r2, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:09:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x2, "3397cb"}) 18:09:01 executing program 6: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0x500, "3397cb"}) 18:09:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb", 0x2}) 18:09:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 60) socket$nl_netfilter(0x10, 0x3, 0xc) [ 1000.059926] FAULT_INJECTION: forcing a failure. [ 1000.059926] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.063725] CPU: 1 PID: 6306 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1000.066239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1000.069554] Call Trace: [ 1000.070372] [ 1000.071044] dump_stack_lvl+0x8b/0xb3 [ 1000.072287] should_fail.cold+0x5/0xa [ 1000.073465] ? create_object.isra.0+0x3a/0xa20 [ 1000.074925] should_failslab+0x5/0x10 [ 1000.076050] kmem_cache_alloc+0x5b/0x480 [ 1000.077235] create_object.isra.0+0x3a/0xa20 18:09:01 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) keyctl$revoke(0x3, r1) keyctl$unlink(0x9, 0x0, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 1000.078540] ? kasan_unpoison+0x23/0x50 [ 1000.079909] kmem_cache_alloc_node+0x248/0x490 [ 1000.081299] __alloc_skb+0x211/0x340 [ 1000.082433] alloc_skb_with_frags+0x92/0x6a0 [ 1000.083779] sock_alloc_send_pskb+0x7ab/0x930 [ 1000.085170] ? __lock_acquire+0xbac/0x6120 [ 1000.086595] ? sock_wmalloc+0x120/0x120 [ 1000.087781] ? mark_lock.part.0+0xef/0x2f60 [ 1000.089087] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1000.090695] ? lock_chain_count+0x20/0x20 [ 1000.091978] ? lock_chain_count+0x20/0x20 [ 1000.093234] ? lock_is_held_type+0xd7/0x130 [ 1000.094634] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 1000.096120] ? ip6_mtu+0x189/0x340 [ 1000.097161] ? ip_frag_init+0x350/0x350 [ 1000.097919] FAULT_INJECTION: forcing a failure. [ 1000.097919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.098366] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 1000.101976] ? ip6_mtu+0x1b0/0x340 [ 1000.102555] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1000.103382] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1000.104205] ? ip6_setup_cork+0xd03/0x1550 [ 1000.104851] ip6_make_skb+0x29a/0x4a0 [ 1000.105444] ? ip_frag_init+0x350/0x350 [ 1000.106054] ? ip6_push_pending_frames+0xe0/0xe0 [ 1000.106794] ? lock_downgrade+0x6d0/0x6d0 [ 1000.107424] ? ip6_default_advmss+0x4d0/0x4d0 [ 1000.108114] udpv6_sendmsg+0x1d03/0x28d0 [ 1000.109448] ? ip_frag_init+0x350/0x350 [ 1000.110042] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1000.110755] ? lock_is_held_type+0xd7/0x130 [ 1000.112039] ? find_held_lock+0x2c/0x110 [ 1000.113224] ? lock_release+0x3b2/0x750 [ 1000.114396] ? __might_fault+0xd1/0x170 [ 1000.115563] ? lock_downgrade+0x6d0/0x6d0 [ 1000.116851] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1000.118585] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1000.119991] ? inet6_sendmsg+0x4a/0x140 [ 1000.121219] inet6_sendmsg+0xfd/0x140 [ 1000.122404] ? inet6_compat_ioctl+0x310/0x310 [ 1000.123725] sock_sendmsg+0xee/0x190 [ 1000.124868] ____sys_sendmsg+0x32e/0x870 [ 1000.126141] ? kernel_sendmsg+0x50/0x50 [ 1000.127340] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1000.128655] ? __lock_acquire+0x164e/0x6120 [ 1000.129964] ___sys_sendmsg+0xf3/0x170 [ 1000.131107] ? sendmsg_copy_msghdr+0x160/0x160 [ 1000.132264] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1000.133672] ? lock_is_held_type+0xd7/0x130 [ 1000.134954] ? find_held_lock+0x2c/0x110 [ 1000.136164] ? lock_release+0x3b2/0x750 [ 1000.137337] ? __might_fault+0xd1/0x170 [ 1000.138590] ? lock_downgrade+0x6d0/0x6d0 [ 1000.139827] ? lock_is_held_type+0xd7/0x130 [ 1000.141237] __sys_sendmmsg+0x195/0x470 [ 1000.142398] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1000.143593] ? lock_is_held_type+0xd7/0x130 [ 1000.144807] ? bit_wait_io_timeout+0x160/0x160 [ 1000.146050] ? lock_is_held_type+0xd7/0x130 [ 1000.147295] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1000.148845] ? vfs_write+0x422/0xac0 [ 1000.149977] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1000.151598] ? fput+0x2a/0x50 [ 1000.152561] __x64_sys_sendmmsg+0x99/0x100 [ 1000.153850] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1000.155391] do_syscall_64+0x3b/0x90 [ 1000.156530] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1000.158026] RIP: 0033:0x7f8f47a3fb19 [ 1000.159140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1000.164867] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1000.167205] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 1000.169296] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1000.171639] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1000.173784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1000.175975] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 1000.178136] [ 1000.178828] CPU: 0 PID: 6311 Comm: syz-executor.7 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1000.180082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1000.181727] Call Trace: [ 1000.182104] [ 1000.182471] dump_stack_lvl+0x8b/0xb3 [ 1000.183045] should_fail.cold+0x5/0xa [ 1000.183617] _copy_to_user+0x2a/0x140 [ 1000.184191] simple_read_from_buffer+0xcc/0x160 [ 1000.184929] proc_fail_nth_read+0x194/0x220 [ 1000.185615] ? proc_exe_link+0x1d0/0x1d0 [ 1000.186249] ? security_file_permission+0xb1/0xd0 [ 1000.186976] ? proc_exe_link+0x1d0/0x1d0 [ 1000.187576] vfs_read+0x1ea/0x5d0 [ 1000.188103] ksys_read+0x127/0x250 [ 1000.189320] ? __ia32_sys_pwrite64+0x220/0x220 [ 1000.190022] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1000.191635] do_syscall_64+0x3b/0x90 [ 1000.192820] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1000.194545] RIP: 0033:0x7f3b5d22669c [ 1000.195254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1000.197824] RSP: 002b:00007f3b5a7c8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1000.198974] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3b5d22669c [ 1000.199970] RDX: 000000000000000f RSI: 00007f3b5a7c81e0 RDI: 0000000000000006 [ 1000.201462] RBP: 00007f3b5a7c81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1000.203772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.206086] R13: 00007fffc9d5d6cf R14: 00007f3b5a7c8300 R15: 0000000000022000 [ 1000.208344] [ 1000.220526] FAULT_INJECTION: forcing a failure. [ 1000.220526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.223676] CPU: 1 PID: 6312 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1000.226304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1000.229887] Call Trace: [ 1000.230743] [ 1000.231462] dump_stack_lvl+0x8b/0xb3 [ 1000.232650] should_fail.cold+0x5/0xa [ 1000.233911] _copy_from_user+0x2a/0x170 [ 1000.235158] __copy_msghdr_from_user+0x91/0x4b0 [ 1000.236623] ? __ia32_sys_shutdown+0x70/0x70 [ 1000.238042] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1000.239479] ? inet6_sendmsg+0x4a/0x140 [ 1000.240689] ? inet6_sendmsg+0xbd/0x140 [ 1000.241909] ? inet6_compat_ioctl+0x310/0x310 [ 1000.243307] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1000.244987] ? sock_sendmsg+0x55/0x190 [ 1000.246235] sendmsg_copy_msghdr+0xa1/0x160 [ 1000.247619] ? __ia32_sys_recvmmsg+0x260/0x260 18:09:01 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) r2 = request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='$^\x00', r1) keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, r0, 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 1000.249018] ? __lock_acquire+0x164e/0x6120 [ 1000.255413] ___sys_sendmsg+0xc6/0x170 [ 1000.256073] ? sendmsg_copy_msghdr+0x160/0x160 [ 1000.256884] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1000.257685] ? lock_is_held_type+0xd7/0x130 [ 1000.258537] ? find_held_lock+0x2c/0x110 [ 1000.259137] ? lock_release+0x3b2/0x750 [ 1000.259707] ? __might_fault+0xd1/0x170 [ 1000.260282] ? lock_downgrade+0x6d0/0x6d0 [ 1000.260936] ? lock_is_held_type+0xd7/0x130 [ 1000.261580] __sys_sendmmsg+0x195/0x470 [ 1000.262266] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1000.262916] ? lock_is_held_type+0xd7/0x130 [ 1000.263558] ? bit_wait_io_timeout+0x160/0x160 [ 1000.264230] ? lock_is_held_type+0xd7/0x130 [ 1000.264902] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1000.265693] ? vfs_write+0x422/0xac0 [ 1000.266661] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1000.267469] ? fput+0x2a/0x50 [ 1000.267942] __x64_sys_sendmmsg+0x99/0x100 [ 1000.268578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1000.269319] do_syscall_64+0x3b/0x90 [ 1000.269868] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1000.270846] RIP: 0033:0x7f89586d1b19 [ 1000.271993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1000.274969] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1000.276066] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 1000.277097] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1000.279476] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1000.280513] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 1000.281543] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 1000.283427] 18:09:01 executing program 6: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0x500, "3397cb"}) 18:09:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) (fail_nth: 1) [ 1000.410424] FAULT_INJECTION: forcing a failure. [ 1000.410424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.414095] CPU: 0 PID: 6322 Comm: syz-executor.2 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1000.416709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1000.420109] Call Trace: [ 1000.420859] [ 1000.421520] dump_stack_lvl+0x8b/0xb3 [ 1000.422658] should_fail.cold+0x5/0xa [ 1000.423825] _copy_from_user+0x2a/0x170 [ 1000.425083] do_seccomp+0xb31/0x27e0 [ 1000.426225] ? lock_is_held_type+0xd7/0x130 [ 1000.427524] ? seccomp_notify_ioctl+0xdc0/0xdc0 [ 1000.429011] ? __seccomp_filter+0x1070/0x1070 [ 1000.430481] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1000.432317] ? fput+0x2a/0x50 [ 1000.433363] ? __secure_computing+0x195/0x2f0 [ 1000.434812] do_syscall_64+0x3b/0x90 [ 1000.436004] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1000.437588] RIP: 0033:0x7f9aea92bb19 [ 1000.438791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1000.444419] RSP: 002b:00007f9ae7ea1188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1000.446617] RAX: ffffffffffffffda RBX: 00007f9aeaa3ef60 RCX: 00007f9aea92bb19 [ 1000.448788] RDX: 0000000020000180 RSI: 0000000000000001 RDI: 0000000000000001 [ 1000.451244] RBP: 00007f9ae7ea11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1000.453326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.455367] R13: 00007fffc063c3cf R14: 00007f9ae7ea1300 R15: 0000000000022000 [ 1000.457465] [ 1002.104365] Bluetooth: hci0: command 0x0401 tx timeout [ 1004.152334] Bluetooth: hci0: command 0x0401 tx timeout 18:09:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x3, "3397cb"}) 18:09:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb", 0x3}) 18:09:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 29) 18:09:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 61) socket$nl_netfilter(0x10, 0x3, 0xc) 18:09:17 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) (fail_nth: 2) 18:09:17 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000002c0)=""/204, 0xcc, 0x40000000, &(0x7f0000000100)=@in={0x2, 0x4e20, @loopback}, 0x80) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000000000fffffffffffffc01000000"]) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) r4 = getgid() syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@gid={'gid', 0x3d, r4}}]}) getgroups(0x8, &(0x7f00000005c0)=[r4, r4, r4, r4, r4, r4, r4, r4]) keyctl$revoke(0x3, r3) r6 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000003c0)={0x0, "476449113338c235d94b9e8f7b3947819d369f52b1552841d7357e7f9256b00a120e765352a1c4f69e16477882b4419eb5271238d0e736ace8dd96b33d4acaea", 0x18}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000440)='encrypted\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) keyctl$chown(0x4, r2, r7, r5) 18:09:17 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 18:09:18 executing program 6: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0x500, "3397cb"}) [ 1016.969297] FAULT_INJECTION: forcing a failure. [ 1016.969297] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.969364] FAULT_INJECTION: forcing a failure. [ 1016.969364] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.970920] CPU: 1 PID: 6342 Comm: syz-executor.2 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1016.973474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1016.975000] Call Trace: [ 1016.975353] [ 1016.975644] dump_stack_lvl+0x8b/0xb3 [ 1016.976153] should_fail.cold+0x5/0xa [ 1016.976657] ? do_seccomp+0x2d5/0x27e0 [ 1016.977214] should_failslab+0x5/0x10 [ 1016.977703] kmem_cache_alloc_trace+0x55/0x3c0 [ 1016.978298] do_seccomp+0x2d5/0x27e0 [ 1016.978817] ? lock_is_held_type+0xd7/0x130 [ 1016.979392] ? seccomp_notify_ioctl+0xdc0/0xdc0 [ 1016.980003] ? __seccomp_filter+0x1070/0x1070 [ 1016.980592] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1016.981312] ? fput+0x2a/0x50 [ 1016.981706] ? __secure_computing+0x195/0x2f0 [ 1016.982237] do_syscall_64+0x3b/0x90 [ 1016.982713] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1016.983318] RIP: 0033:0x7f9aea92bb19 [ 1016.983747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1016.985876] RSP: 002b:00007f9ae7ea1188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1016.986794] RAX: ffffffffffffffda RBX: 00007f9aeaa3ef60 RCX: 00007f9aea92bb19 [ 1016.987610] RDX: 0000000020000180 RSI: 0000000000000001 RDI: 0000000000000001 [ 1016.988448] RBP: 00007f9ae7ea11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1016.989288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.990143] R13: 00007fffc063c3cf R14: 00007f9ae7ea1300 R15: 0000000000022000 [ 1016.991072] [ 1016.991358] CPU: 0 PID: 6340 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1016.992452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1016.993873] Call Trace: [ 1016.994192] [ 1016.994518] dump_stack_lvl+0x8b/0xb3 [ 1016.995007] should_fail.cold+0x5/0xa [ 1016.995496] should_failslab+0x5/0x10 [ 1016.995992] __kmalloc_node_track_caller+0x7e/0x440 [ 1016.996650] ? alloc_skb_with_frags+0x92/0x6a0 [ 1016.997263] __alloc_skb+0xe3/0x340 [ 1016.997756] alloc_skb_with_frags+0x92/0x6a0 [ 1016.998350] sock_alloc_send_pskb+0x7ab/0x930 [ 1016.998965] ? __lock_acquire+0xbac/0x6120 [ 1016.999535] ? sock_wmalloc+0x120/0x120 [ 1017.000048] ? mark_lock.part.0+0xef/0x2f60 [ 1017.000613] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1017.001295] ? lock_chain_count+0x20/0x20 [ 1017.001512] FAULT_INJECTION: forcing a failure. [ 1017.001512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.001838] ? lock_chain_count+0x20/0x20 [ 1017.001867] ? lock_is_held_type+0xd7/0x130 [ 1017.004498] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 1017.005174] ? ip6_mtu+0x189/0x340 [ 1017.005658] ? ip_frag_init+0x350/0x350 [ 1017.006203] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 1017.006855] ? ip6_mtu+0x1b0/0x340 [ 1017.007326] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1017.008049] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.008766] ? ip6_setup_cork+0xd03/0x1550 [ 1017.009307] ip6_make_skb+0x29a/0x4a0 [ 1017.009777] ? ip_frag_init+0x350/0x350 [ 1017.010279] ? ip6_push_pending_frames+0xe0/0xe0 [ 1017.010914] ? lock_downgrade+0x6d0/0x6d0 [ 1017.011439] ? ip6_default_advmss+0x4d0/0x4d0 [ 1017.012000] udpv6_sendmsg+0x1d03/0x28d0 [ 1017.012485] ? ip_frag_init+0x350/0x350 [ 1017.012970] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1017.013573] ? lock_is_held_type+0xd7/0x130 [ 1017.014154] ? find_held_lock+0x2c/0x110 [ 1017.014697] ? lock_release+0x3b2/0x750 [ 1017.015214] ? __might_fault+0xd1/0x170 [ 1017.015726] ? lock_downgrade+0x6d0/0x6d0 [ 1017.016301] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.017037] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1017.017611] ? inet6_sendmsg+0x4a/0x140 [ 1017.018165] inet6_sendmsg+0xfd/0x140 [ 1017.018721] ? inet6_compat_ioctl+0x310/0x310 [ 1017.019347] sock_sendmsg+0xee/0x190 [ 1017.019850] ____sys_sendmsg+0x32e/0x870 [ 1017.020382] ? kernel_sendmsg+0x50/0x50 [ 1017.020902] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1017.021502] ? lock_is_held_type+0xd7/0x130 [ 1017.022081] ? find_held_lock+0x2c/0x110 [ 1017.022699] ? lock_release+0x3b2/0x750 [ 1017.023253] ? finish_task_switch.isra.0+0x221/0x870 [ 1017.023912] ___sys_sendmsg+0xf3/0x170 [ 1017.024446] ? sendmsg_copy_msghdr+0x160/0x160 [ 1017.025048] ? finish_task_switch.isra.0+0x226/0x870 [ 1017.025713] ? finish_task_switch.isra.0+0x2b7/0x870 [ 1017.026464] ? __schedule+0x895/0x2450 [ 1017.026979] ? io_schedule_timeout+0x140/0x140 [ 1017.027585] ? lock_is_held_type+0xd7/0x130 [ 1017.028160] ? __cond_resched+0x13/0x20 [ 1017.028681] __sys_sendmmsg+0x195/0x470 [ 1017.029213] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1017.029775] ? lock_is_held_type+0xd7/0x130 [ 1017.030435] ? bit_wait_io_timeout+0x160/0x160 [ 1017.031046] ? lock_is_held_type+0xd7/0x130 [ 1017.031627] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.032353] ? vfs_write+0x422/0xac0 [ 1017.032849] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1017.033568] ? fput+0x2a/0x50 [ 1017.033991] __x64_sys_sendmmsg+0x99/0x100 [ 1017.034597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1017.035262] do_syscall_64+0x3b/0x90 [ 1017.035760] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1017.036437] RIP: 0033:0x7f8f47a3fb19 [ 1017.036908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.039215] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1017.040190] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 1017.041104] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1017.042011] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.042926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1017.043824] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 1017.044758] [ 1017.045064] CPU: 1 PID: 6346 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1017.046173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1017.047647] Call Trace: [ 1017.047987] [ 1017.048278] dump_stack_lvl+0x8b/0xb3 [ 1017.048767] should_fail.cold+0x5/0xa [ 1017.049246] _copy_from_user+0x2a/0x170 [ 1017.049784] __copy_msghdr_from_user+0x91/0x4b0 [ 1017.050430] ? __ia32_sys_shutdown+0x70/0x70 [ 1017.051006] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1017.051597] ? inet6_sendmsg+0x4a/0x140 [ 1017.052131] ? inet6_sendmsg+0xbd/0x140 [ 1017.052644] ? inet6_compat_ioctl+0x310/0x310 [ 1017.053226] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.053940] ? sock_sendmsg+0x55/0x190 [ 1017.057211] sendmsg_copy_msghdr+0xa1/0x160 [ 1017.057800] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1017.058429] ? __lock_acquire+0x164e/0x6120 [ 1017.059014] ___sys_sendmsg+0xc6/0x170 [ 1017.059539] ? sendmsg_copy_msghdr+0x160/0x160 [ 1017.060144] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.060918] ? lock_is_held_type+0xd7/0x130 [ 1017.061539] ? find_held_lock+0x2c/0x110 [ 1017.062066] ? lock_release+0x3b2/0x750 [ 1017.062668] ? __might_fault+0xd1/0x170 [ 1017.063220] ? lock_downgrade+0x6d0/0x6d0 [ 1017.063785] ? lock_is_held_type+0xd7/0x130 [ 1017.064364] __sys_sendmmsg+0x195/0x470 [ 1017.064888] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1017.065456] ? lock_is_held_type+0xd7/0x130 [ 1017.066030] ? bit_wait_io_timeout+0x160/0x160 [ 1017.066704] ? lock_is_held_type+0xd7/0x130 [ 1017.067299] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.068002] ? vfs_write+0x422/0xac0 [ 1017.068498] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1017.069220] ? fput+0x2a/0x50 [ 1017.069630] __x64_sys_sendmmsg+0x99/0x100 [ 1017.070195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1017.070989] do_syscall_64+0x3b/0x90 [ 1017.071495] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1017.072168] RIP: 0033:0x7f89586d1b19 [ 1017.072650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.074977] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1017.075940] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 1017.076834] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1017.077735] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.078678] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 1017.079565] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 1017.080482] 18:09:18 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, r2) keyctl$set_timeout(0xf, 0x0, 0x136) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$set_timeout(0xf, r3, 0x7) keyctl$revoke(0x3, r3) keyctl$link(0x8, r0, r3) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) 18:09:18 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0x500, "3397cb"}) 18:09:18 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) (fail_nth: 3) 18:09:18 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x2) [ 1017.182896] FAULT_INJECTION: forcing a failure. [ 1017.182896] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.184432] CPU: 1 PID: 6353 Comm: syz-executor.2 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1017.185620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1017.187081] Call Trace: [ 1017.187427] [ 1017.187726] dump_stack_lvl+0x8b/0xb3 [ 1017.188212] should_fail.cold+0x5/0xa [ 1017.188688] ? create_object.isra.0+0x3a/0xa20 [ 1017.189265] should_failslab+0x5/0x10 [ 1017.189744] kmem_cache_alloc+0x5b/0x480 [ 1017.190267] create_object.isra.0+0x3a/0xa20 [ 1017.190847] ? kasan_unpoison+0x23/0x50 [ 1017.191358] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1017.191967] do_seccomp+0x2d5/0x27e0 [ 1017.192439] ? lock_is_held_type+0xd7/0x130 [ 1017.192986] ? seccomp_notify_ioctl+0xdc0/0xdc0 [ 1017.193566] ? __seccomp_filter+0x1070/0x1070 [ 1017.194114] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1017.194842] ? fput+0x2a/0x50 [ 1017.195255] ? __secure_computing+0x195/0x2f0 [ 1017.195843] do_syscall_64+0x3b/0x90 [ 1017.196349] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1017.196995] RIP: 0033:0x7f9aea92bb19 [ 1017.197458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.199839] RSP: 002b:00007f9ae7ea1188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1017.200792] RAX: ffffffffffffffda RBX: 00007f9aeaa3ef60 RCX: 00007f9aea92bb19 [ 1017.201686] RDX: 0000000020000180 RSI: 0000000000000001 RDI: 0000000000000001 [ 1017.202832] RBP: 00007f9ae7ea11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.203733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.204847] R13: 00007fffc063c3cf R14: 00007f9ae7ea1300 R15: 0000000000022000 [ 1017.206753] 18:09:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 30) 18:09:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 62) socket$nl_netfilter(0x10, 0x3, 0xc) [ 1017.258068] FAULT_INJECTION: forcing a failure. [ 1017.258068] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.259734] CPU: 1 PID: 6361 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1017.260869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1017.262418] Call Trace: [ 1017.262806] [ 1017.263110] dump_stack_lvl+0x8b/0xb3 [ 1017.263642] should_fail.cold+0x5/0xa [ 1017.264159] should_failslab+0x5/0x10 [ 1017.264677] __kmalloc_node_track_caller+0x7e/0x440 [ 1017.265418] ? alloc_skb_with_frags+0x92/0x6a0 [ 1017.266049] __alloc_skb+0xe3/0x340 [ 1017.266618] alloc_skb_with_frags+0x92/0x6a0 [ 1017.267227] sock_alloc_send_pskb+0x7ab/0x930 [ 1017.267863] ? __lock_acquire+0xbac/0x6120 [ 1017.268479] ? sock_wmalloc+0x120/0x120 [ 1017.269056] ? mark_lock.part.0+0xef/0x2f60 [ 1017.269642] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1017.270388] ? lock_chain_count+0x20/0x20 [ 1017.270978] ? lock_chain_count+0x20/0x20 [ 1017.271561] ? lock_is_held_type+0xd7/0x130 [ 1017.272169] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 1017.272858] ? ip6_mtu+0x189/0x340 [ 1017.273393] ? ip_frag_init+0x350/0x350 [ 1017.273977] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 1017.274688] ? ip6_mtu+0x1b0/0x340 [ 1017.275178] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1017.275918] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.276668] ? ip6_setup_cork+0xd03/0x1550 [ 1017.277255] ip6_make_skb+0x29a/0x4a0 [ 1017.277780] ? ip_frag_init+0x350/0x350 [ 1017.278367] ? ip6_push_pending_frames+0xe0/0xe0 [ 1017.279044] ? lock_downgrade+0x6d0/0x6d0 [ 1017.279631] ? ip6_default_advmss+0x4d0/0x4d0 [ 1017.280278] udpv6_sendmsg+0x1d03/0x28d0 [ 1017.280895] ? ip_frag_init+0x350/0x350 [ 1017.281524] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1017.282195] ? lock_is_held_type+0xd7/0x130 [ 1017.282870] ? find_held_lock+0x2c/0x110 [ 1017.283431] ? lock_release+0x3b2/0x750 [ 1017.284002] ? __might_fault+0xd1/0x170 [ 1017.284547] ? lock_downgrade+0x6d0/0x6d0 [ 1017.285134] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.285921] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1017.286645] ? inet6_sendmsg+0x4a/0x140 [ 1017.287216] inet6_sendmsg+0xfd/0x140 [ 1017.287741] ? inet6_compat_ioctl+0x310/0x310 [ 1017.288358] sock_sendmsg+0xee/0x190 [ 1017.288920] ____sys_sendmsg+0x32e/0x870 [ 1017.289475] ? kernel_sendmsg+0x50/0x50 [ 1017.290014] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1017.291245] ? __lock_acquire+0x164e/0x6120 [ 1017.292763] ___sys_sendmsg+0xf3/0x170 [ 1017.294090] ? sendmsg_copy_msghdr+0x160/0x160 [ 1017.294911] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.295700] ? lock_is_held_type+0xd7/0x130 [ 1017.296290] ? find_held_lock+0x2c/0x110 [ 1017.296830] ? lock_release+0x3b2/0x750 [ 1017.297373] ? __might_fault+0xd1/0x170 [ 1017.297913] ? lock_downgrade+0x6d0/0x6d0 [ 1017.298585] ? lock_is_held_type+0xd7/0x130 [ 1017.299324] __sys_sendmmsg+0x195/0x470 [ 1017.299910] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1017.300539] ? lock_is_held_type+0xd7/0x130 [ 1017.301165] ? bit_wait_io_timeout+0x160/0x160 [ 1017.301770] ? lock_is_held_type+0xd7/0x130 [ 1017.302339] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.303770] ? vfs_write+0x422/0xac0 [ 1017.304590] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1017.306009] ? fput+0x2a/0x50 [ 1017.306896] __x64_sys_sendmmsg+0x99/0x100 [ 1017.307998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1017.309259] do_syscall_64+0x3b/0x90 [ 1017.310144] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1017.311503] RIP: 0033:0x7f8f47a3fb19 [ 1017.312455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.317154] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1017.319120] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 1017.320973] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1017.322822] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.324825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1017.326888] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 1017.328787] 18:09:18 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0x500, "3397cb"}) [ 1017.337527] audit: type=1326 audit(1649959758.419:145): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6351 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=0 compat=0 ip=0x7f9aea8de69c code=0x0 [ 1017.347561] FAULT_INJECTION: forcing a failure. [ 1017.347561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.350940] CPU: 1 PID: 6366 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1017.353249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1017.356432] Call Trace: [ 1017.357168] [ 1017.357806] dump_stack_lvl+0x8b/0xb3 [ 1017.358921] should_fail.cold+0x5/0xa [ 1017.360005] _copy_from_user+0x2a/0x170 [ 1017.361120] __copy_msghdr_from_user+0x91/0x4b0 [ 1017.362464] ? __ia32_sys_shutdown+0x70/0x70 [ 1017.363729] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1017.365012] ? inet6_sendmsg+0x4a/0x140 [ 1017.366141] ? inet6_sendmsg+0xbd/0x140 [ 1017.366864] ? inet6_compat_ioctl+0x310/0x310 [ 1017.367485] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.368238] ? sock_sendmsg+0x55/0x190 [ 1017.368785] sendmsg_copy_msghdr+0xa1/0x160 [ 1017.369387] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1017.370022] ? __lock_acquire+0x164e/0x6120 [ 1017.370735] ___sys_sendmsg+0xc6/0x170 [ 1017.371280] ? sendmsg_copy_msghdr+0x160/0x160 [ 1017.371914] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.372677] ? lock_is_held_type+0xd7/0x130 [ 1017.373293] ? find_held_lock+0x2c/0x110 [ 1017.373894] ? lock_release+0x3b2/0x750 [ 1017.374535] ? __might_fault+0xd1/0x170 [ 1017.375082] ? lock_downgrade+0x6d0/0x6d0 [ 1017.375658] ? lock_is_held_type+0xd7/0x130 [ 1017.376273] __sys_sendmmsg+0x195/0x470 [ 1017.376837] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1017.377436] ? lock_is_held_type+0xd7/0x130 [ 1017.378057] ? bit_wait_io_timeout+0x160/0x160 [ 1017.378730] ? lock_is_held_type+0xd7/0x130 [ 1017.379335] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.380086] ? vfs_write+0x422/0xac0 [ 1017.380605] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1017.381361] ? fput+0x2a/0x50 [ 1017.381811] __x64_sys_sendmmsg+0x99/0x100 [ 1017.382427] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1017.383135] do_syscall_64+0x3b/0x90 [ 1017.383642] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1017.384346] RIP: 0033:0x7f89586d1b19 [ 1017.384854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.387358] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1017.388369] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 1017.389295] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1017.390228] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.391272] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 1017.392217] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 1017.393200] [ 1017.398776] audit: type=1326 audit(1649959758.481:146): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6351 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7f9aea9508e1 code=0x0 [ 1019.006829] Bluetooth: hci0: command 0x0401 tx timeout [ 1021.048320] Bluetooth: hci0: command 0x0401 tx timeout [ 1023.096322] Bluetooth: hci0: command 0x0401 tx timeout 18:09:36 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:09:36 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:09:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x4, "3397cb"}) 18:09:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 63) socket$nl_netfilter(0x10, 0x3, 0xc) 18:09:36 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x0, 0x500, "3397cb"}) 18:09:36 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x2000000) 18:09:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 31) 18:09:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb", 0x4}) [ 1035.218623] audit: type=1326 audit(1649959776.300:147): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6373 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aea92bb19 code=0x0 [ 1035.242690] FAULT_INJECTION: forcing a failure. [ 1035.242690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.244079] CPU: 0 PID: 6385 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1035.244997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1035.246257] Call Trace: [ 1035.246537] [ 1035.246789] dump_stack_lvl+0x8b/0xb3 [ 1035.247233] should_fail.cold+0x5/0xa [ 1035.247639] _copy_from_user+0x2a/0x170 [ 1035.248103] __copy_msghdr_from_user+0x91/0x4b0 [ 1035.248623] ? __ia32_sys_shutdown+0x70/0x70 [ 1035.249123] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1035.249620] ? inet6_sendmsg+0x4a/0x140 [ 1035.250052] ? inet6_sendmsg+0xbd/0x140 [ 1035.250511] ? inet6_compat_ioctl+0x310/0x310 [ 1035.251002] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.251599] ? sock_sendmsg+0x55/0x190 [ 1035.251688] FAULT_INJECTION: forcing a failure. [ 1035.251688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.252032] sendmsg_copy_msghdr+0xa1/0x160 [ 1035.253736] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1035.254252] ? __lock_acquire+0x164e/0x6120 [ 1035.254733] ___sys_sendmsg+0xc6/0x170 [ 1035.255162] ? sendmsg_copy_msghdr+0x160/0x160 [ 1035.255668] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.256273] ? lock_is_held_type+0xd7/0x130 [ 1035.256753] ? find_held_lock+0x2c/0x110 [ 1035.257186] ? lock_release+0x3b2/0x750 [ 1035.257623] ? __might_fault+0xd1/0x170 [ 1035.258066] ? lock_downgrade+0x6d0/0x6d0 [ 1035.258506] ? lock_is_held_type+0xd7/0x130 [ 1035.259004] __sys_sendmmsg+0x195/0x470 [ 1035.259424] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1035.259910] ? lock_is_held_type+0xd7/0x130 [ 1035.260381] ? bit_wait_io_timeout+0x160/0x160 [ 1035.260880] ? lock_is_held_type+0xd7/0x130 [ 1035.261371] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.261957] ? vfs_write+0x422/0xac0 [ 1035.262371] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1035.262973] ? fput+0x2a/0x50 [ 1035.263328] __x64_sys_sendmmsg+0x99/0x100 [ 1035.263787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1035.264330] do_syscall_64+0x3b/0x90 [ 1035.264724] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1035.265304] RIP: 0033:0x7f89586d1b19 [ 1035.265701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1035.267721] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1035.268533] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 1035.269304] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1035.270053] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1035.270836] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 1035.271623] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 1035.272406] [ 1035.272655] CPU: 1 PID: 6389 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1035.273565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1035.274804] Call Trace: [ 1035.275088] [ 1035.275333] dump_stack_lvl+0x8b/0xb3 [ 1035.275752] should_fail.cold+0x5/0xa [ 1035.276177] _copy_from_user+0x2a/0x170 [ 1035.276622] __copy_msghdr_from_user+0x91/0x4b0 [ 1035.277136] ? __ia32_sys_shutdown+0x70/0x70 [ 1035.277622] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1035.278114] ? inet6_sendmsg+0x4a/0x140 [ 1035.278542] ? inet6_sendmsg+0xbd/0x140 [ 1035.278992] ? inet6_compat_ioctl+0x310/0x310 [ 1035.279480] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.280081] ? sock_sendmsg+0x55/0x190 [ 1035.280509] sendmsg_copy_msghdr+0xa1/0x160 [ 1035.280984] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1035.281496] ? __lock_acquire+0x164e/0x6120 [ 1035.281961] ___sys_sendmsg+0xc6/0x170 [ 1035.282385] ? sendmsg_copy_msghdr+0x160/0x160 [ 1035.282887] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.283487] ? lock_is_held_type+0xd7/0x130 [ 1035.283980] ? find_held_lock+0x2c/0x110 [ 1035.284427] ? lock_release+0x3b2/0x750 [ 1035.284867] ? __might_fault+0xd1/0x170 [ 1035.285293] ? lock_downgrade+0x6d0/0x6d0 [ 1035.285756] ? lock_is_held_type+0xd7/0x130 [ 1035.286219] __sys_sendmmsg+0x195/0x470 [ 1035.286667] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1035.287130] ? lock_is_held_type+0xd7/0x130 [ 1035.287605] ? bit_wait_io_timeout+0x160/0x160 [ 1035.288106] ? lock_is_held_type+0xd7/0x130 [ 1035.288587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.289197] ? vfs_write+0x422/0xac0 [ 1035.289604] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1035.290214] ? fput+0x2a/0x50 [ 1035.290552] __x64_sys_sendmmsg+0x99/0x100 [ 1035.291043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1035.291575] do_syscall_64+0x3b/0x90 [ 1035.291988] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1035.292559] RIP: 0033:0x7f8f47a3fb19 [ 1035.292960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1035.294939] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1035.295727] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 1035.296471] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1035.297206] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1035.297996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1035.298781] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 1035.299587] [ 1035.304815] audit: type=1326 audit(1649959776.369:148): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6373 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f9aea8de72b code=0x0 18:09:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 64) socket$nl_netfilter(0x10, 0x3, 0xc) [ 1035.320929] FAULT_INJECTION: forcing a failure. [ 1035.320929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.322279] CPU: 0 PID: 6392 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1035.323154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1035.324357] Call Trace: [ 1035.324627] [ 1035.324879] dump_stack_lvl+0x8b/0xb3 [ 1035.325314] should_fail.cold+0x5/0xa [ 1035.325725] _copy_from_user+0x2a/0x170 [ 1035.326149] __copy_msghdr_from_user+0x91/0x4b0 [ 1035.326696] ? __ia32_sys_shutdown+0x70/0x70 [ 1035.327182] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1035.327670] ? inet6_sendmsg+0x4a/0x140 [ 1035.328123] ? inet6_sendmsg+0xbd/0x140 [ 1035.328569] ? inet6_compat_ioctl+0x310/0x310 [ 1035.329067] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.329664] ? sock_sendmsg+0x55/0x190 [ 1035.330101] sendmsg_copy_msghdr+0xa1/0x160 [ 1035.330579] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1035.331086] ? __lock_acquire+0x164e/0x6120 [ 1035.331564] ___sys_sendmsg+0xc6/0x170 [ 1035.331990] ? sendmsg_copy_msghdr+0x160/0x160 [ 1035.332471] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.333085] ? lock_is_held_type+0xd7/0x130 [ 1035.333561] ? find_held_lock+0x2c/0x110 [ 1035.334005] ? lock_release+0x3b2/0x750 [ 1035.334439] ? __might_fault+0xd1/0x170 [ 1035.334866] ? lock_downgrade+0x6d0/0x6d0 [ 1035.335306] ? lock_is_held_type+0xd7/0x130 [ 1035.335771] __sys_sendmmsg+0x195/0x470 [ 1035.336231] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1035.336711] ? lock_is_held_type+0xd7/0x130 [ 1035.337185] ? bit_wait_io_timeout+0x160/0x160 [ 1035.337676] ? lock_is_held_type+0xd7/0x130 [ 1035.338148] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.338738] ? vfs_write+0x422/0xac0 [ 1035.339144] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1035.339731] ? fput+0x2a/0x50 [ 1035.340088] __x64_sys_sendmmsg+0x99/0x100 [ 1035.340546] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1035.341091] do_syscall_64+0x3b/0x90 [ 1035.341518] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1035.342072] RIP: 0033:0x7f89586d1b19 [ 1035.342470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1035.344433] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1035.345261] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 1035.346047] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1035.346832] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1035.347562] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 1035.348325] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 1035.349105] 18:09:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCGPTPEER(r1, 0x5423, 0xbffffffffffff172) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:09:36 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 18:09:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 32) [ 1035.410600] FAULT_INJECTION: forcing a failure. [ 1035.410600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.411939] CPU: 1 PID: 6401 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1035.412820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1035.414007] Call Trace: [ 1035.414289] [ 1035.414532] dump_stack_lvl+0x8b/0xb3 [ 1035.414985] should_fail.cold+0x5/0xa [ 1035.415427] _copy_from_user+0x2a/0x170 [ 1035.415893] __copy_msghdr_from_user+0x91/0x4b0 [ 1035.416433] ? __ia32_sys_shutdown+0x70/0x70 [ 1035.416930] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1035.417450] ? inet6_sendmsg+0x4a/0x140 [ 1035.417892] ? inet6_sendmsg+0xbd/0x140 [ 1035.418342] ? inet6_compat_ioctl+0x310/0x310 [ 1035.418857] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.419482] ? sock_sendmsg+0x55/0x190 [ 1035.419923] sendmsg_copy_msghdr+0xa1/0x160 [ 1035.420408] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1035.420911] ? __lock_acquire+0x164e/0x6120 [ 1035.421384] ___sys_sendmsg+0xc6/0x170 [ 1035.421811] ? sendmsg_copy_msghdr+0x160/0x160 [ 1035.422308] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.422949] ? lock_is_held_type+0xd7/0x130 [ 1035.423429] ? find_held_lock+0x2c/0x110 [ 1035.423859] ? lock_release+0x3b2/0x750 [ 1035.424317] ? __might_fault+0xd1/0x170 [ 1035.424746] ? lock_downgrade+0x6d0/0x6d0 [ 1035.425189] ? lock_is_held_type+0xd7/0x130 [ 1035.425658] __sys_sendmmsg+0x195/0x470 [ 1035.426113] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1035.426578] ? lock_is_held_type+0xd7/0x130 [ 1035.427102] ? bit_wait_io_timeout+0x160/0x160 [ 1035.427591] ? lock_is_held_type+0xd7/0x130 [ 1035.428067] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.428689] ? vfs_write+0x422/0xac0 [ 1035.429082] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1035.429696] ? fput+0x2a/0x50 [ 1035.430042] __x64_sys_sendmmsg+0x99/0x100 [ 1035.430501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1035.431054] do_syscall_64+0x3b/0x90 [ 1035.431464] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1035.432032] RIP: 0033:0x7f8f47a3fb19 [ 1035.432415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1035.434436] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1035.435245] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 1035.435983] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1035.436760] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1035.437503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1035.438254] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 1035.439025] [ 1037.240359] Bluetooth: hci0: command 0x0401 tx timeout [ 1039.288287] Bluetooth: hci0: command 0x0401 tx timeout 18:09:53 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x2, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:09:53 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$set_timeout(0xf, 0x0, 0x0) add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="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", 0xfb, r1) keyctl$set_timeout(0xf, r0, 0x2f7) 18:09:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 33) 18:09:53 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 18:09:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 65) socket$nl_netfilter(0x10, 0x3, 0xc) 18:09:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb", 0x5}) 18:09:53 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r3, 0x200000000000000) 18:09:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x5, "3397cb"}) [ 1052.917083] FAULT_INJECTION: forcing a failure. [ 1052.917083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.919522] CPU: 1 PID: 6418 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1052.921112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1052.923321] Call Trace: [ 1052.923821] [ 1052.924257] dump_stack_lvl+0x8b/0xb3 [ 1052.925017] should_fail.cold+0x5/0xa [ 1052.925764] _copy_from_user+0x2a/0x170 [ 1052.926558] __copy_msghdr_from_user+0x91/0x4b0 [ 1052.927503] ? __ia32_sys_shutdown+0x70/0x70 [ 1052.928364] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1052.929243] ? inet6_sendmsg+0x4a/0x140 [ 1052.930025] ? inet6_sendmsg+0xbd/0x140 [ 1052.930803] ? inet6_compat_ioctl+0x310/0x310 [ 1052.931699] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1052.932773] ? sock_sendmsg+0x55/0x190 [ 1052.933539] sendmsg_copy_msghdr+0xa1/0x160 [ 1052.934388] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1052.935307] ? __lock_acquire+0x164e/0x6120 [ 1052.936166] ___sys_sendmsg+0xc6/0x170 [ 1052.936936] ? sendmsg_copy_msghdr+0x160/0x160 [ 1052.937834] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1052.938927] ? lock_is_held_type+0xd7/0x130 [ 1052.939779] ? find_held_lock+0x2c/0x110 [ 1052.940574] ? lock_release+0x3b2/0x750 [ 1052.941346] ? __might_fault+0xd1/0x170 [ 1052.941649] FAULT_INJECTION: forcing a failure. [ 1052.941649] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.942120] ? lock_downgrade+0x6d0/0x6d0 [ 1052.945349] ? lock_is_held_type+0xd7/0x130 [ 1052.946204] __sys_sendmmsg+0x195/0x470 [ 1052.947001] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1052.947845] ? lock_is_held_type+0xd7/0x130 [ 1052.948717] ? bit_wait_io_timeout+0x160/0x160 [ 1052.949606] ? lock_is_held_type+0xd7/0x130 [ 1052.950457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1052.951546] ? vfs_write+0x422/0xac0 [ 1052.952328] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1052.953650] ? fput+0x2a/0x50 [ 1052.954363] __x64_sys_sendmmsg+0x99/0x100 [ 1052.955396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1052.956533] do_syscall_64+0x3b/0x90 [ 1052.957421] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1052.958571] RIP: 0033:0x7f89586d1b19 [ 1052.959454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1052.963459] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1052.965231] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 1052.966801] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1052.968387] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1052.970060] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 1052.971635] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 1052.973215] [ 1052.973725] CPU: 0 PID: 6419 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1052.975495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1052.977876] Call Trace: [ 1052.978416] [ 1052.978917] dump_stack_lvl+0x8b/0xb3 [ 1052.979746] should_fail.cold+0x5/0xa [ 1052.980574] ? create_object.isra.0+0x3a/0xa20 [ 1052.981558] should_failslab+0x5/0x10 [ 1052.982373] kmem_cache_alloc+0x5b/0x480 [ 1052.983292] create_object.isra.0+0x3a/0xa20 [ 1052.984230] ? kasan_unpoison+0x23/0x50 [ 1052.985097] kmem_cache_alloc_node+0x248/0x490 [ 1052.986082] __alloc_skb+0x211/0x340 [ 1052.986916] alloc_skb_with_frags+0x92/0x6a0 [ 1052.987903] sock_alloc_send_pskb+0x7ab/0x930 [ 1052.988854] ? __lock_acquire+0xbac/0x6120 [ 1052.989787] ? sock_wmalloc+0x120/0x120 [ 1052.990652] ? mark_lock.part.0+0xef/0x2f60 [ 1052.991607] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1052.992765] ? lock_chain_count+0x20/0x20 [ 1052.993687] ? lock_chain_count+0x20/0x20 [ 1052.994605] ? lock_is_held_type+0xd7/0x130 [ 1052.995567] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 1052.996710] ? ip6_mtu+0x189/0x340 [ 1052.997487] ? ip_frag_init+0x350/0x350 [ 1052.998376] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 1052.999402] ? ip6_mtu+0x1b0/0x340 [ 1053.000199] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1053.001350] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1053.002551] ? ip6_setup_cork+0xd03/0x1550 [ 1053.003498] ip6_make_skb+0x29a/0x4a0 [ 1053.004340] ? ip_frag_init+0x350/0x350 [ 1053.005232] ? ip6_push_pending_frames+0xe0/0xe0 [ 1053.006249] ? lock_downgrade+0x6d0/0x6d0 [ 1053.007170] ? ip6_default_advmss+0x4d0/0x4d0 [ 1053.008167] udpv6_sendmsg+0x1d03/0x28d0 [ 1053.009049] ? ip_frag_init+0x350/0x350 [ 1053.009958] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1053.010972] ? lock_is_held_type+0xd7/0x130 [ 1053.011919] ? find_held_lock+0x2c/0x110 [ 1053.012792] ? lock_release+0x3b2/0x750 [ 1053.013632] ? __might_fault+0xd1/0x170 [ 1053.014477] ? lock_downgrade+0x6d0/0x6d0 [ 1053.015427] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1053.016583] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1053.017551] ? inet6_sendmsg+0x4a/0x140 [ 1053.018419] inet6_sendmsg+0xfd/0x140 [ 1053.019249] ? inet6_compat_ioctl+0x310/0x310 [ 1053.020204] sock_sendmsg+0xee/0x190 [ 1053.021030] ____sys_sendmsg+0x32e/0x870 [ 1053.021944] ? kernel_sendmsg+0x50/0x50 [ 1053.022797] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1053.023804] ? __lock_acquire+0x164e/0x6120 [ 1053.024737] ___sys_sendmsg+0xf3/0x170 [ 1053.025583] ? sendmsg_copy_msghdr+0x160/0x160 [ 1053.026561] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1053.027790] ? lock_is_held_type+0xd7/0x130 [ 1053.028712] ? find_held_lock+0x2c/0x110 [ 1053.029568] ? lock_release+0x3b2/0x750 [ 1053.030409] ? __might_fault+0xd1/0x170 [ 1053.031265] ? lock_downgrade+0x6d0/0x6d0 [ 1053.032160] ? lock_is_held_type+0xd7/0x130 [ 1053.033089] __sys_sendmmsg+0x195/0x470 [ 1053.033954] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1053.034866] ? lock_is_held_type+0xd7/0x130 [ 1053.035820] ? bit_wait_io_timeout+0x160/0x160 [ 1053.036780] ? lock_is_held_type+0xd7/0x130 [ 1053.037702] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1053.038860] ? vfs_write+0x422/0xac0 [ 1053.039667] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1053.040834] ? fput+0x2a/0x50 [ 1053.041514] __x64_sys_sendmmsg+0x99/0x100 [ 1053.042418] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1053.043517] do_syscall_64+0x3b/0x90 [ 1053.044308] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1053.045407] RIP: 0033:0x7f8f47a3fb19 [ 1053.046187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.050041] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1053.051646] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 1053.053134] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1053.054629] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.056134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1053.057625] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 1053.059164] 18:09:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:09:54 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 18:09:54 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x7) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) 18:09:54 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3}, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) 18:09:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x6, "3397cb"}) 18:09:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 66) socket$nl_netfilter(0x10, 0x3, 0xc) 18:09:54 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb"}) 18:09:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x4, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:09:54 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 1053.282317] FAULT_INJECTION: forcing a failure. [ 1053.282317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.284997] CPU: 0 PID: 6444 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1053.286779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1053.289260] Call Trace: [ 1053.289823] [ 1053.290310] dump_stack_lvl+0x8b/0xb3 [ 1053.291161] should_fail.cold+0x5/0xa [ 1053.292011] _copy_from_user+0x2a/0x170 [ 1053.292903] __copy_msghdr_from_user+0x91/0x4b0 [ 1053.293921] ? __ia32_sys_shutdown+0x70/0x70 [ 1053.294917] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1053.295896] ? inet6_sendmsg+0x4a/0x140 [ 1053.296776] ? inet6_sendmsg+0xbd/0x140 [ 1053.297656] ? inet6_compat_ioctl+0x310/0x310 [ 1053.298637] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1053.299836] ? sock_sendmsg+0x55/0x190 [ 1053.300637] sendmsg_copy_msghdr+0xa1/0x160 [ 1053.301485] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1053.302420] ? __lock_acquire+0x164e/0x6120 [ 1053.303285] ___sys_sendmsg+0xc6/0x170 [ 1053.304075] ? sendmsg_copy_msghdr+0x160/0x160 [ 1053.304983] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1053.306082] ? lock_is_held_type+0xd7/0x130 [ 1053.306953] ? find_held_lock+0x2c/0x110 [ 1053.307776] ? lock_release+0x3b2/0x750 [ 1053.308542] ? __might_fault+0xd1/0x170 [ 1053.309334] ? lock_downgrade+0x6d0/0x6d0 [ 1053.310144] ? lock_is_held_type+0xd7/0x130 [ 1053.311031] __sys_sendmmsg+0x195/0x470 [ 1053.311848] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1053.312737] ? lock_is_held_type+0xd7/0x130 [ 1053.313634] ? bit_wait_io_timeout+0x160/0x160 [ 1053.314526] ? lock_is_held_type+0xd7/0x130 [ 1053.315410] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1053.316511] ? vfs_write+0x422/0xac0 [ 1053.317268] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1053.318376] ? fput+0x2a/0x50 [ 1053.319029] __x64_sys_sendmmsg+0x99/0x100 [ 1053.319892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1053.320902] do_syscall_64+0x3b/0x90 [ 1053.321641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1053.322674] RIP: 0033:0x7f89586d1b19 [ 1053.323423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.327110] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1053.328608] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 1053.330006] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1053.331400] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.332793] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 1053.334180] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 1053.335626] 18:09:54 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) keyctl$revoke(0x3, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 1054.968737] Bluetooth: hci0: command 0x0401 tx timeout [ 1057.016360] Bluetooth: hci0: command 0x0401 tx timeout [ 1059.065400] Bluetooth: hci0: command 0x0401 tx timeout [ 1061.115208] Bluetooth: hci0: command 0x0401 tx timeout 18:10:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 67) socket$nl_netfilter(0x10, 0x3, 0xc) 18:10:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x5, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:10:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x6, "3397cb"}) 18:10:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 34) 18:10:09 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x30, 0x0, 0xd0b, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0xa, 0xf7d}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x30, r2, 0xd0b, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0xa, 0xf7d}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x4, 0x7f, 0xff, 0x6ef3, 0x49, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x1, 0x5, 0xf8a}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x30, r7, 0xd0b, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0xa, 0xf7d}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x30}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x4d4, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r4}, {0x18c, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x101, 0x9, 0x3f}, {0x4, 0x0, 0x7, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x743}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xd86c, 0x3f, 0x2, 0x3ff}, {0x4, 0x2, 0x9, 0x5}, {0x1, 0x7, 0x4, 0x3f}, {0x0, 0x22, 0xf3, 0x4}, {0x7f, 0x5f, 0x40, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x83}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc998}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r5}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9f}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x4d, 0x3, 0x7}, {0x68f7, 0x43, 0x80, 0x240}, {0x9, 0x99, 0x3}]}}}]}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x40080}, 0xd) keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r10 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r10, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:10:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb", 0x6}) 18:10:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x7, "3397cb"}) 18:10:09 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) recvmmsg(r3, &(0x7f0000000580)=[{{&(0x7f0000000280)=@sco={0x1f, @none}, 0x80, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/192, 0xc0}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000480)=""/116, 0x74}, 0xca}], 0x1, 0x40000000, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) recvfrom(r4, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r4, 0x0) syz_io_uring_setup(0x6546, &(0x7f0000000500), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0xbff3473d5abe9253, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '8^W', 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r8, &(0x7f0000000240)={0x10002000}, r7, 0x1, 0x0, 0x1}, 0x5) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000380)=0x5) sendto(r4, &(0x7f00000005c0)="8dd528966803381d06bd78232682291214a65d975d6308af419c91bdcacfde7ec12298338add4a8ccd6f17ef8f1a6bf08456f0dfd1c9a8a0680a8ee0abd68bc58a8ee6638dc9d6d3b7a0cc07abe17a9be721d5c963d6dbce9f22f605bffd38404a056f1195ab86268b", 0x69, 0x800, &(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x80000001, 0x1}, 0x80) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x3, &(0x7f00000006c0)={0x0, 0x989680}, 0x1, 0x0, 0xf7056d9994c434d5, {0x0, r10}}, 0x10002) syz_io_uring_submit(r5, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r4, 0x40, 0x0, 0xfe1a, 0x0, 0x0, {0x0, r9}}, 0x6) [ 1068.918625] FAULT_INJECTION: forcing a failure. [ 1068.918625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.921744] CPU: 0 PID: 6476 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1068.924160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1068.927514] Call Trace: [ 1068.928313] [ 1068.928985] dump_stack_lvl+0x8b/0xb3 [ 1068.930129] should_fail.cold+0x5/0xa [ 1068.931271] _copy_from_user+0x2a/0x170 [ 1068.932447] __copy_msghdr_from_user+0x91/0x4b0 [ 1068.933790] ? __ia32_sys_shutdown+0x70/0x70 [ 1068.935135] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1068.936457] ? inet6_sendmsg+0x4a/0x140 [ 1068.937636] ? inet6_sendmsg+0xbd/0x140 [ 1068.938796] ? inet6_compat_ioctl+0x310/0x310 [ 1068.940107] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1068.941709] ? sock_sendmsg+0x55/0x190 [ 1068.942862] sendmsg_copy_msghdr+0xa1/0x160 [ 1068.944150] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1068.945524] ? __lock_acquire+0x164e/0x6120 [ 1068.946811] ___sys_sendmsg+0xc6/0x170 [ 1068.947976] ? sendmsg_copy_msghdr+0x160/0x160 [ 1068.949356] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1068.950978] ? lock_is_held_type+0xd7/0x130 [ 1068.952278] ? find_held_lock+0x2c/0x110 [ 1068.953472] ? lock_release+0x3b2/0x750 [ 1068.954639] ? __might_fault+0xd1/0x170 [ 1068.955810] ? lock_downgrade+0x6d0/0x6d0 [ 1068.957053] ? lock_is_held_type+0xd7/0x130 [ 1068.958370] __sys_sendmmsg+0x195/0x470 [ 1068.959610] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1068.960902] ? lock_is_held_type+0xd7/0x130 [ 1068.962183] ? bit_wait_io_timeout+0x160/0x160 [ 1068.963341] ? lock_is_held_type+0xd7/0x130 [ 1068.963884] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1068.964601] ? vfs_write+0x422/0xac0 [ 1068.965089] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1068.965800] ? fput+0x2a/0x50 [ 1068.966221] __x64_sys_sendmmsg+0x99/0x100 [ 1068.966767] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1068.967444] do_syscall_64+0x3b/0x90 [ 1068.967927] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1068.968596] RIP: 0033:0x7f89586d1b19 [ 1068.969075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1068.971467] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1068.972462] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 1068.973391] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1068.974450] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1068.975389] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 1068.976320] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 1068.977268] [ 1068.986142] FAULT_INJECTION: forcing a failure. [ 1068.986142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.987854] CPU: 1 PID: 6481 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1068.988989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1068.990516] Call Trace: [ 1068.990880] [ 1068.991211] dump_stack_lvl+0x8b/0xb3 [ 1068.991756] should_fail.cold+0x5/0xa [ 1068.992294] _copy_from_user+0x2a/0x170 [ 1068.992863] __copy_msghdr_from_user+0x91/0x4b0 [ 1068.993529] ? __ia32_sys_shutdown+0x70/0x70 [ 1068.994181] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1068.994873] ? inet6_sendmsg+0x4a/0x140 [ 1068.995471] ? inet6_sendmsg+0xbd/0x140 [ 1068.996019] ? inet6_compat_ioctl+0x310/0x310 [ 1068.996641] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1068.997406] ? sock_sendmsg+0x55/0x190 [ 1068.997953] sendmsg_copy_msghdr+0xa1/0x160 [ 1068.998549] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1068.999177] ? __lock_acquire+0x164e/0x6120 [ 1068.999794] ___sys_sendmsg+0xc6/0x170 [ 1069.000379] ? sendmsg_copy_msghdr+0x160/0x160 [ 1069.001051] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1069.001851] ? lock_is_held_type+0xd7/0x130 [ 1069.002495] ? find_held_lock+0x2c/0x110 [ 1069.003066] ? lock_release+0x3b2/0x750 [ 1069.003649] ? __might_fault+0xd1/0x170 [ 1069.004227] ? lock_downgrade+0x6d0/0x6d0 [ 1069.004830] ? lock_is_held_type+0xd7/0x130 [ 1069.005437] __sys_sendmmsg+0x195/0x470 [ 1069.006009] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1069.006614] ? lock_is_held_type+0xd7/0x130 [ 1069.007234] ? bit_wait_io_timeout+0x160/0x160 [ 1069.007890] ? lock_is_held_type+0xd7/0x130 [ 1069.008522] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1069.009306] ? vfs_write+0x422/0xac0 [ 1069.009837] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1069.010630] ? fput+0x2a/0x50 [ 1069.011082] __x64_sys_sendmmsg+0x99/0x100 [ 1069.011680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1069.012355] do_syscall_64+0x3b/0x90 [ 1069.012858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1069.013579] RIP: 0033:0x7f8f47a3fb19 [ 1069.014083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1069.016570] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1069.017595] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 1069.018566] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1069.019573] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1069.020527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1069.021484] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 1069.022457] 18:10:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 35) 18:10:10 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffc) keyctl$set_timeout(0xf, 0x0, 0xfffffffffffffffc) 18:10:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 68) socket$nl_netfilter(0x10, 0x3, 0xc) 18:10:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x8, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) [ 1069.105744] FAULT_INJECTION: forcing a failure. [ 1069.105744] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.107378] CPU: 1 PID: 6492 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1069.108446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1069.109915] Call Trace: [ 1069.110242] [ 1069.110512] dump_stack_lvl+0x8b/0xb3 [ 1069.111032] should_fail.cold+0x5/0xa [ 1069.111548] should_failslab+0x5/0x10 [ 1069.112050] __kmalloc_node_track_caller+0x7e/0x440 [ 1069.112704] ? alloc_skb_with_frags+0x92/0x6a0 [ 1069.113292] __alloc_skb+0xe3/0x340 [ 1069.113763] alloc_skb_with_frags+0x92/0x6a0 [ 1069.114291] sock_alloc_send_pskb+0x7ab/0x930 [ 1069.114873] ? __lock_acquire+0xbac/0x6120 [ 1069.115094] FAULT_INJECTION: forcing a failure. [ 1069.115094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.115449] ? sock_wmalloc+0x120/0x120 [ 1069.117318] ? mark_lock.part.0+0xef/0x2f60 [ 1069.117864] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1069.118526] ? lock_chain_count+0x20/0x20 [ 1069.119045] ? lock_chain_count+0x20/0x20 [ 1069.119577] ? lock_is_held_type+0xd7/0x130 [ 1069.120133] __ip6_append_data.isra.0+0x1e1e/0x3d60 [ 1069.120774] ? ip6_mtu+0x189/0x340 [ 1069.121222] ? ip_frag_init+0x350/0x350 [ 1069.121726] ? ip6_finish_output2+0x1ad0/0x1ad0 [ 1069.122320] ? ip6_mtu+0x1b0/0x340 [ 1069.122764] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1069.123489] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1069.124174] ? ip6_setup_cork+0xd03/0x1550 [ 1069.124710] ip6_make_skb+0x29a/0x4a0 [ 1069.125180] ? ip_frag_init+0x350/0x350 [ 1069.125685] ? ip6_push_pending_frames+0xe0/0xe0 [ 1069.126290] ? lock_downgrade+0x6d0/0x6d0 [ 1069.126812] ? ip6_default_advmss+0x4d0/0x4d0 [ 1069.127417] udpv6_sendmsg+0x1d03/0x28d0 [ 1069.127928] ? ip_frag_init+0x350/0x350 [ 1069.128445] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1069.129014] ? lock_is_held_type+0xd7/0x130 [ 1069.129561] ? find_held_lock+0x2c/0x110 [ 1069.130078] ? lock_release+0x3b2/0x750 [ 1069.130572] ? __might_fault+0xd1/0x170 [ 1069.131068] ? lock_downgrade+0x6d0/0x6d0 [ 1069.131582] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1069.132199] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1069.132700] ? inet6_sendmsg+0x4a/0x140 [ 1069.133146] inet6_sendmsg+0xfd/0x140 [ 1069.133586] ? inet6_compat_ioctl+0x310/0x310 [ 1069.134099] sock_sendmsg+0xee/0x190 [ 1069.134499] ____sys_sendmsg+0x32e/0x870 [ 1069.134937] ? kernel_sendmsg+0x50/0x50 [ 1069.135399] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1069.135910] ? __lock_acquire+0x164e/0x6120 [ 1069.136402] ___sys_sendmsg+0xf3/0x170 [ 1069.136822] ? sendmsg_copy_msghdr+0x160/0x160 [ 1069.137324] ? finish_task_switch.isra.0+0x226/0x870 [ 1069.137898] ? lock_is_held_type+0xd7/0x130 [ 1069.138382] ? find_held_lock+0x2c/0x110 [ 1069.138828] ? lock_release+0x3b2/0x750 [ 1069.139276] ? __might_fault+0xd1/0x170 [ 1069.139727] ? lock_downgrade+0x6d0/0x6d0 [ 1069.140200] ? lock_is_held_type+0xd7/0x130 [ 1069.140701] __sys_sendmmsg+0x195/0x470 [ 1069.141161] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1069.141657] ? lock_is_held_type+0xd7/0x130 [ 1069.142161] ? bit_wait_io_timeout+0x160/0x160 [ 1069.142683] ? lock_is_held_type+0xd7/0x130 [ 1069.143188] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1069.143813] ? vfs_write+0x422/0xac0 [ 1069.144236] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1069.144858] ? fput+0x2a/0x50 [ 1069.145221] __x64_sys_sendmmsg+0x99/0x100 [ 1069.145699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1069.146279] do_syscall_64+0x3b/0x90 [ 1069.146702] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1069.147316] RIP: 0033:0x7f8f47a3fb19 [ 1069.147732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1069.149756] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1069.150580] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 1069.151378] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1069.152154] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1069.152935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1069.153709] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 1069.154499] [ 1069.154756] CPU: 0 PID: 6495 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1069.155760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1069.157032] Call Trace: [ 1069.157329] [ 1069.157583] dump_stack_lvl+0x8b/0xb3 [ 1069.158031] should_fail.cold+0x5/0xa [ 1069.158472] _copy_from_user+0x2a/0x170 [ 1069.158924] __copy_msghdr_from_user+0x91/0x4b0 [ 1069.159486] ? __ia32_sys_shutdown+0x70/0x70 [ 1069.159994] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1069.160533] ? inet6_sendmsg+0x4a/0x140 [ 1069.160997] ? inet6_sendmsg+0xbd/0x140 [ 1069.161466] ? inet6_compat_ioctl+0x310/0x310 [ 1069.161977] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1069.162629] ? sock_sendmsg+0x55/0x190 [ 1069.163080] sendmsg_copy_msghdr+0xa1/0x160 [ 1069.163624] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1069.164143] ? __lock_acquire+0x164e/0x6120 [ 1069.164668] ___sys_sendmsg+0xc6/0x170 [ 1069.165119] ? sendmsg_copy_msghdr+0x160/0x160 [ 1069.165658] ? finish_task_switch.isra.0+0x226/0x870 [ 1069.166269] ? lock_is_held_type+0xd7/0x130 [ 1069.166774] ? find_held_lock+0x2c/0x110 [ 1069.167261] ? lock_release+0x3b2/0x750 [ 1069.167740] ? __might_fault+0xd1/0x170 [ 1069.168203] ? lock_downgrade+0x6d0/0x6d0 [ 1069.168697] ? lock_is_held_type+0xd7/0x130 [ 1069.169211] __sys_sendmmsg+0x195/0x470 [ 1069.169679] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1069.170184] ? lock_is_held_type+0xd7/0x130 [ 1069.170706] ? bit_wait_io_timeout+0x160/0x160 [ 1069.171258] ? lock_is_held_type+0xd7/0x130 [ 1069.171773] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1069.172426] ? vfs_write+0x422/0xac0 [ 1069.172872] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1069.173529] ? fput+0x2a/0x50 [ 1069.173900] __x64_sys_sendmmsg+0x99/0x100 [ 1069.174394] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1069.174982] do_syscall_64+0x3b/0x90 [ 1069.175448] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1069.176059] RIP: 0033:0x7f89586d1b19 [ 1069.176500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1069.178664] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1069.179563] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 1069.180398] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1069.181233] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1069.182047] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 1069.182881] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 1069.183741] 18:10:10 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) keyctl$revoke(0x3, r1) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$set_timeout(0xf, r2, 0x7) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "cd7ab0795ef13fe2abe2f7a834133c0de9d58ef23388b370047d79c7123f4a230ef558856a8e9ed2974ca472a0d46a9b6826eb573c0344257ed80dd63d111c82", 0x11}, 0x48, r0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='syz', r3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) [ 1071.032359] Bluetooth: hci0: command 0x0401 tx timeout [ 1073.080313] Bluetooth: hci0: command 0x0401 tx timeout [ 1075.128262] Bluetooth: hci0: command 0x0401 tx timeout 18:10:26 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x9, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:10:26 executing program 6: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:10:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x3c, "3397cb"}) 18:10:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 69) socket$nl_netfilter(0x10, 0x3, 0xc) 18:10:26 executing program 0: keyctl$revoke(0x3, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='--$\xd5:^T\x00', 0xfffffffffffffff9) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:10:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 36) 18:10:26 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCGPTPEER(r4, 0x5423, 0xbffffffffffff172) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r5, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000200)={0x40, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r5]}, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r6}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r4, 0x35d5, 0x0, 0x0, 0x0, 0xffffffffffffff3f) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000000)) recvfrom(r6, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r6, 0x0) 18:10:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "3397cb", 0x7}) [ 1085.315943] FAULT_INJECTION: forcing a failure. [ 1085.315943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.316494] FAULT_INJECTION: forcing a failure. [ 1085.316494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.318866] CPU: 0 PID: 6526 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1085.321863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1085.323563] Call Trace: [ 1085.323934] [ 1085.324273] dump_stack_lvl+0x8b/0xb3 [ 1085.324840] should_fail.cold+0x5/0xa [ 1085.325433] _copy_from_user+0x2a/0x170 [ 1085.326012] __copy_msghdr_from_user+0x91/0x4b0 [ 1085.326686] ? __ia32_sys_shutdown+0x70/0x70 [ 1085.327389] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1085.328054] ? inet6_sendmsg+0x4a/0x140 [ 1085.328649] ? inet6_sendmsg+0xbd/0x140 [ 1085.329235] ? inet6_compat_ioctl+0x310/0x310 [ 1085.329904] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1085.330681] ? sock_sendmsg+0x55/0x190 [ 1085.331267] sendmsg_copy_msghdr+0xa1/0x160 [ 1085.331924] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1085.332594] ? __lock_acquire+0x164e/0x6120 [ 1085.333248] ___sys_sendmsg+0xc6/0x170 [ 1085.333812] ? sendmsg_copy_msghdr+0x160/0x160 [ 1085.334502] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1085.335377] ? lock_is_held_type+0xd7/0x130 [ 1085.336044] ? find_held_lock+0x2c/0x110 [ 1085.336659] ? lock_release+0x3b2/0x750 [ 1085.337264] ? __might_fault+0xd1/0x170 [ 1085.337864] ? lock_downgrade+0x6d0/0x6d0 [ 1085.338484] ? lock_is_held_type+0xd7/0x130 [ 1085.339150] __sys_sendmmsg+0x195/0x470 [ 1085.339772] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1085.340436] ? lock_is_held_type+0xd7/0x130 [ 1085.341114] ? bit_wait_io_timeout+0x160/0x160 [ 1085.341817] ? lock_is_held_type+0xd7/0x130 [ 1085.342492] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1085.343320] ? vfs_write+0x422/0xac0 [ 1085.343925] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1085.344740] ? fput+0x2a/0x50 [ 1085.345217] __x64_sys_sendmmsg+0x99/0x100 [ 1085.345849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1085.346618] do_syscall_64+0x3b/0x90 [ 1085.347198] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1085.348034] RIP: 0033:0x7f89586d1b19 [ 1085.348582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.351328] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1085.352479] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 1085.353575] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1085.354663] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1085.355727] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 1085.356807] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 1085.357877] [ 1085.358234] CPU: 1 PID: 6522 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1085.359591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1085.361254] Call Trace: [ 1085.361644] [ 1085.361984] dump_stack_lvl+0x8b/0xb3 [ 1085.362526] should_fail.cold+0x5/0xa [ 1085.363090] _copy_from_user+0x2a/0x170 [ 1085.363720] __copy_msghdr_from_user+0x91/0x4b0 [ 1085.364437] ? __ia32_sys_shutdown+0x70/0x70 [ 1085.365100] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1085.365745] ? inet6_sendmsg+0x4a/0x140 [ 1085.366330] ? inet6_sendmsg+0xbd/0x140 [ 1085.366954] ? inet6_compat_ioctl+0x310/0x310 [ 1085.368739] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1085.369521] ? sock_sendmsg+0x55/0x190 [ 1085.370046] sendmsg_copy_msghdr+0xa1/0x160 [ 1085.370694] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1085.371524] ? __lock_acquire+0x164e/0x6120 [ 1085.372161] ___sys_sendmsg+0xc6/0x170 [ 1085.372781] ? sendmsg_copy_msghdr+0x160/0x160 [ 1085.373483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1085.374319] ? lock_is_held_type+0xd7/0x130 [ 1085.374895] ? find_held_lock+0x2c/0x110 [ 1085.375504] ? lock_release+0x3b2/0x750 [ 1085.376018] ? __might_fault+0xd1/0x170 [ 1085.376570] ? lock_downgrade+0x6d0/0x6d0 [ 1085.377134] ? lock_is_held_type+0xd7/0x130 [ 1085.377735] __sys_sendmmsg+0x195/0x470 [ 1085.378276] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1085.378830] ? lock_is_held_type+0xd7/0x130 [ 1085.379445] ? bit_wait_io_timeout+0x160/0x160 [ 1085.380035] ? lock_is_held_type+0xd7/0x130 [ 1085.380611] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1085.381330] ? vfs_write+0x422/0xac0 [ 1085.381817] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1085.382523] ? fput+0x2a/0x50 [ 1085.383028] __x64_sys_sendmmsg+0x99/0x100 [ 1085.383676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1085.384420] do_syscall_64+0x3b/0x90 [ 1085.384985] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1085.385751] RIP: 0033:0x7f8f47a3fb19 [ 1085.386333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.389096] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1085.390209] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 1085.391283] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1085.392339] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1085.393349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1085.394386] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 1085.395425] 18:10:26 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="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", 0xff, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x1) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0x7) keyctl$revoke(0x3, r3) keyctl$KEYCTL_MOVE(0x1e, r1, r3, 0xfffffffffffffff9, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) 18:10:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x7ffffff7) (fail_nth: 70) socket$nl_netfilter(0x10, 0x3, 0xc) 18:10:26 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x3, "3397cb"}) 18:10:26 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0xa, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:10:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) (fail_nth: 37) [ 1085.538834] FAULT_INJECTION: forcing a failure. [ 1085.538834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.540649] CPU: 1 PID: 6542 Comm: syz-executor.5 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1085.541761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1085.543395] Call Trace: [ 1085.543735] [ 1085.544079] dump_stack_lvl+0x8b/0xb3 [ 1085.544603] should_fail.cold+0x5/0xa [ 1085.545168] _copy_from_user+0x2a/0x170 [ 1085.545693] __copy_msghdr_from_user+0x91/0x4b0 [ 1085.546358] ? __ia32_sys_shutdown+0x70/0x70 [ 1085.546930] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1085.547647] ? inet6_sendmsg+0x4a/0x140 [ 1085.548231] ? inet6_sendmsg+0xbd/0x140 [ 1085.548762] ? inet6_compat_ioctl+0x310/0x310 [ 1085.549439] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1085.550218] ? sock_sendmsg+0x55/0x190 [ 1085.552929] sendmsg_copy_msghdr+0xa1/0x160 [ 1085.553569] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1085.554225] ? __lock_acquire+0x164e/0x6120 [ 1085.554805] ___sys_sendmsg+0xc6/0x170 [ 1085.555452] ? sendmsg_copy_msghdr+0x160/0x160 [ 1085.556166] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1085.556936] ? lock_is_held_type+0xd7/0x130 [ 1085.557578] ? find_held_lock+0x2c/0x110 [ 1085.558168] ? lock_release+0x3b2/0x750 [ 1085.558672] ? __might_fault+0xd1/0x170 [ 1085.559248] ? lock_downgrade+0x6d0/0x6d0 [ 1085.559834] ? lock_is_held_type+0xd7/0x130 [ 1085.560524] __sys_sendmmsg+0x195/0x470 [ 1085.561132] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1085.561741] ? lock_is_held_type+0xd7/0x130 [ 1085.562411] ? bit_wait_io_timeout+0x160/0x160 [ 1085.563007] ? lock_is_held_type+0xd7/0x130 [ 1085.563657] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1085.564425] ? vfs_write+0x422/0xac0 [ 1085.564921] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1085.565749] ? fput+0x2a/0x50 [ 1085.566244] __x64_sys_sendmmsg+0x99/0x100 [ 1085.566812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1085.567554] do_syscall_64+0x3b/0x90 [ 1085.568074] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1085.568768] RIP: 0033:0x7f89586d1b19 [ 1085.569353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.571858] RSP: 002b:00007f8955c47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1085.572979] RAX: ffffffffffffffda RBX: 00007f89587e4f60 RCX: 00007f89586d1b19 [ 1085.573984] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1085.574980] RBP: 00007f8955c471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1085.576454] R10: 000000007ffffff7 R11: 0000000000000246 R12: 0000000000000002 [ 1085.577440] R13: 00007ffe95ea565f R14: 00007f8955c47300 R15: 0000000000022000 [ 1085.578486] 18:10:26 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_io_uring_setup(0x1522, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0xb, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) 18:10:26 executing program 0: keyctl$revoke(0x3, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = request_key(&(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='tmpfs\x00', r0) keyctl$search(0xa, r0, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, r1) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x7) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@gid={'gid', 0x3d, r4}}]}) keyctl$chown(0x4, r0, r3, r4) 18:10:26 executing program 7: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x39b, 0x4, 0x0, 0x124, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}, 0x0) io_uring_enter(r0, 0xcda, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) syz_io_uring_setup(0x281, &(0x7f0000000340)={0x0, 0x397a, 0x20, 0x0, 0x2e5, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) syz_io_uring_setup(0x617e, &(0x7f0000000200)={0x0, 0xa0ce, 0x8, 0x3, 0x177, 0x0, r6}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) recvfrom(r4, 0x0, 0x1000000, 0x0, 0x0, 0x0) shutdown(r4, 0x0) sendto(r4, &(0x7f0000000000)="94bcf7205f535723e6ab49406aecf96c67fc6214eb16800154e1b4ec5dc6b05b46f1028bde", 0x25, 0x40, 0x0, 0x0) [ 1085.640545] FAULT_INJECTION: forcing a failure. [ 1085.640545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.642153] CPU: 1 PID: 6551 Comm: syz-executor.4 Not tainted 5.18.0-rc2-next-20220414 #1 [ 1085.643856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1085.645970] Call Trace: [ 1085.646320] [ 1085.646624] dump_stack_lvl+0x8b/0xb3 [ 1085.647152] should_fail.cold+0x5/0xa [ 1085.647683] _copy_from_user+0x2a/0x170 [ 1085.648230] __copy_msghdr_from_user+0x91/0x4b0 [ 1085.648862] ? __ia32_sys_shutdown+0x70/0x70 [ 1085.649461] ? udp_v6_early_demux+0xdf0/0xdf0 [ 1085.650072] ? inet6_sendmsg+0x4a/0x140 [ 1085.650676] ? inet6_sendmsg+0xbd/0x140 [ 1085.651217] ? inet6_compat_ioctl+0x310/0x310 [ 1085.651985] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1085.652807] ? sock_sendmsg+0x55/0x190 [ 1085.653539] sendmsg_copy_msghdr+0xa1/0x160 [ 1085.654299] ? __ia32_sys_recvmmsg+0x260/0x260 [ 1085.655039] ? __lock_acquire+0x164e/0x6120 [ 1085.655699] ___sys_sendmsg+0xc6/0x170 [ 1085.656234] ? sendmsg_copy_msghdr+0x160/0x160 [ 1085.656891] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1085.657636] ? lock_is_held_type+0xd7/0x130 [ 1085.658222] ? find_held_lock+0x2c/0x110 [ 1085.658776] ? lock_release+0x3b2/0x750 [ 1085.659321] ? __might_fault+0xd1/0x170 [ 1085.660099] ? lock_downgrade+0x6d0/0x6d0 [ 1085.660725] ? lock_is_held_type+0xd7/0x130 [ 1085.661382] __sys_sendmmsg+0x195/0x470 [ 1085.661996] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1085.662633] ? lock_is_held_type+0xd7/0x130 [ 1085.663294] ? bit_wait_io_timeout+0x160/0x160 [ 1085.663984] ? lock_is_held_type+0xd7/0x130 [ 1085.664635] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1085.665417] ? vfs_write+0x422/0xac0 [ 1085.665940] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1085.666747] ? fput+0x2a/0x50 [ 1085.667229] __x64_sys_sendmmsg+0x99/0x100 [ 1085.667894] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1085.668655] do_syscall_64+0x3b/0x90 [ 1085.669164] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1085.669869] RIP: 0033:0x7f8f47a3fb19 [ 1085.670370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.672809] RSP: 002b:00007f8f44fb5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1085.673828] RAX: ffffffffffffffda RBX: 00007f8f47b52f60 RCX: 00007f8f47a3fb19 [ 1085.674752] RDX: 0000000004000101 RSI: 0000000020002880 RDI: 0000000000000004 [ 1085.675966] RBP: 00007f8f44fb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1085.677806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1085.679575] R13: 00007ffc2c1cdb6f R14: 00007f8f44fb5300 R15: 0000000000022000 [ 1085.680538] [ 1087.352286] Bluetooth: hci0: command 0x0401 tx timeout [ 1089.400280] Bluetooth: hci0: command 0x0401 tx timeout [ 1091.648950] Bluetooth: hci0: command 0x0401 tx timeout [ 1093.688305] Bluetooth: hci0: command 0x0401 tx timeout [ 1098.543565] kmemleak: 20 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88800e77bc00 (size 512): comm "syz-executor.2", pid 6525, jiffies 4295752259 (age 22.380s) hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ backtrace: [<0000000027cecfdf>] do_seccomp+0x2d5/0x27e0 [<00000000fe7ad7f0>] do_syscall_64+0x3b/0x90 [<00000000014fba8d>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffffc90000147000 (size 4096): comm "syz-executor.2", pid 6525, jiffies 4295752259 (age 22.380s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000be6b577f>] __vmalloc_node_range+0x11d9/0x13d0 [<0000000098235c8a>] __vmalloc_node+0xb5/0x100 [<00000000c22426d8>] bpf_prog_alloc_no_stats+0x38/0x340 [<000000009f119261>] bpf_prog_alloc+0x24/0x170 [<00000000b6811592>] bpf_prog_create_from_user+0xad/0x2e0 [<000000009c044ca2>] do_seccomp+0x325/0x27e0 [<00000000fe7ad7f0>] do_syscall_64+0x3b/0x90 [<00000000014fba8d>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffff888042dd6000 (size 2048): comm "syz-executor.2", pid 6525, jiffies 4295752259 (age 22.380s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000ad727ed2>] bpf_prog_alloc_no_stats+0xeb/0x340 [<000000009f119261>] bpf_prog_alloc+0x24/0x170 [<00000000b6811592>] bpf_prog_create_from_user+0xad/0x2e0 [<000000009c044ca2>] do_seccomp+0x325/0x27e0 [<00000000fe7ad7f0>] do_syscall_64+0x3b/0x90 [<00000000014fba8d>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffff888017fa2620 (size 16): comm "syz-executor.2", pid 6525, jiffies 4295752259 (age 22.380s) hex dump (first 16 bytes): 01 00 ff 42 80 88 ff ff 80 2c 2c 0e 80 88 ff ff ...B.....,,..... backtrace: [<0000000007e38ee7>] bpf_prog_store_orig_filter+0x7b/0x1e0 [<000000007be85adc>] bpf_prog_create_from_user+0x1c6/0x2e0 [<000000009c044ca2>] do_seccomp+0x325/0x27e0 [<00000000fe7ad7f0>] do_syscall_64+0x3b/0x90 [<00000000014fba8d>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffff88800e2c2c80 (size 8): comm "syz-executor.2", pid 6525, jiffies 4295752259 (age 22.380s) hex dump (first 8 bytes): 06 00 00 00 00 00 ff 7f ........ backtrace: [<0000000058f7ccf3>] kmemdup+0x23/0x50 [<00000000aff275da>] bpf_prog_store_orig_filter+0x103/0x1e0 [<000000007be85adc>] bpf_prog_create_from_user+0x1c6/0x2e0 [<000000009c044ca2>] do_seccomp+0x325/0x27e0 [<00000000fe7ad7f0>] do_syscall_64+0x3b/0x90 [<00000000014fba8d>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffff888042167400 (size 512): comm "syz-executor.2", pid 6525, jiffies 4295752359 (age 22.280s) hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ backtrace: [<0000000027cecfdf>] do_seccomp+0x2d5/0x27e0 [<00000000fe7ad7f0>] do_syscall_64+0x3b/0x90 [<00000000014fba8d>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: leak checking failed VM DIAGNOSIS: 18:10:49 Registers: info registers vcpu 0 RAX=fffffbfff0b1bcba RBX=fffffbfff0b1bcbb RCX=ffffffff8128fcb8 RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff858de5d0 RBP=fffffbfff0b1bcba RSP=ffff88806ce09e70 R8 =0000000000000000 R9 =ffffffff858de5d7 R10=fffffbfff0b1bcba R11=0000000000000001 R12=ffffffff85222308 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81775e48 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffef254e7a0 CR3=000000000d14a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 418830bf80000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffffff84154810 RBX=ffff8880081e3580 RCX=ffffffff84136ca1 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffff88800820fe48 R8 =0000000000000001 R9 =ffff88806cf38d13 R10=ffffed100d9e71a2 R11=0000000000000001 R12=ffffed100103c6b0 R13=ffffffff858de5d0 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff84200c30 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5eaecb0198 CR3=000000000d14a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 31636e75662e6e75 522e6c697475736f YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0a2963317830202c 7d357830202c6c61 YMM09=0000000000000000 0000000000000000 72283674656e6924 67736d6d646e6573 YMM10=0000000000000000 0000000000000000 3230303030303066 3778302826202c31 YMM11=0000000000000000 0000000000000000 2c31303130303034 7830202c29303838 YMM12=0000000000000000 0000000000000000 6166282029376666 6666666637783020 YMM13=0000000000000000 0000000000000000 6b636f730a293037 203a68746e5f6c69 YMM14=0000000000000000 0000000000000000 287265746c696674 656e5f6c6e247465 YMM15=0000000000000000 0000000000000000 0a29637830202c33 7830202c30317830