x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:49:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3) 06:49:07 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x30) 06:49:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 8) 06:49:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) 06:49:07 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) [ 1686.581295] FAULT_INJECTION: forcing a failure. [ 1686.581295] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.583140] CPU: 0 PID: 14177 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1686.584134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.585324] Call Trace: [ 1686.585720] dump_stack+0x107/0x167 [ 1686.586254] should_fail.cold+0x5/0xa [ 1686.586805] ? mm_alloc+0x19/0xd0 [ 1686.587317] should_failslab+0x5/0x20 [ 1686.587870] kmem_cache_alloc+0x5b/0x310 [ 1686.588461] mm_alloc+0x19/0xd0 [ 1686.588943] alloc_bprm+0x1cb/0x8f0 [ 1686.589479] do_execveat_common+0x275/0x8d0 [ 1686.590137] ? strncpy_from_user+0x9e/0x470 [ 1686.590764] ? bprm_execve+0x1a60/0x1a60 [ 1686.591381] __x64_sys_execveat+0xed/0x140 [ 1686.592005] do_syscall_64+0x33/0x40 [ 1686.592546] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1686.593283] RIP: 0033:0x7fadc9940b19 [ 1686.593862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.596535] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1686.597655] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1686.598695] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1686.599742] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1686.600784] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000001 [ 1686.601843] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:49:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 1686.624214] FAULT_INJECTION: forcing a failure. [ 1686.624214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1686.626125] CPU: 1 PID: 14180 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1686.627130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.628329] Call Trace: [ 1686.628720] dump_stack+0x107/0x167 [ 1686.629255] should_fail.cold+0x5/0xa [ 1686.629824] _copy_from_user+0x2e/0x1b0 [ 1686.630413] move_addr_to_kernel.part.0+0x31/0x110 [ 1686.631129] __copy_msghdr_from_user+0x3e1/0x4b0 [ 1686.631820] ? __ia32_sys_shutdown+0x80/0x80 [ 1686.632479] sendmsg_copy_msghdr+0xa1/0x160 [ 1686.633107] ? do_recvmmsg+0x6d0/0x6d0 [ 1686.633684] ? lock_chain_count+0x20/0x20 [ 1686.634286] ? __is_insn_slot_addr+0x123/0x290 [ 1686.634951] ? lock_downgrade+0x6d0/0x6d0 [ 1686.635563] ? unwind_next_frame+0x13ef/0x1a90 [ 1686.636238] io_sendmsg+0x62c/0x830 [ 1686.636772] ? io_setup_async_msg+0x2d0/0x2d0 [ 1686.637433] ? mark_lock+0xf5/0x2df0 [ 1686.637994] ? lock_chain_count+0x20/0x20 [ 1686.638613] ? stack_trace_consume_entry+0x160/0x160 [ 1686.639373] ? lock_acquire+0x197/0x470 06:49:07 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x36) [ 1686.639962] ? __lock_acquire+0xbb1/0x5b00 [ 1686.640738] io_issue_sqe+0x3b3/0x7700 [ 1686.641309] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1686.642073] ? lock_chain_count+0x20/0x20 [ 1686.642669] ? __is_insn_slot_addr+0x14c/0x290 [ 1686.643328] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1686.644076] ? io_connect+0x610/0x610 [ 1686.644631] ? lock_acquire+0x197/0x470 [ 1686.645209] ? find_held_lock+0x2c/0x110 [ 1686.645812] ? __fget_files+0x26d/0x4c0 [ 1686.646383] ? lock_downgrade+0x6d0/0x6d0 [ 1686.646984] __io_queue_sqe+0x90/0x9d0 [ 1686.647553] ? io_issue_sqe+0x7700/0x7700 [ 1686.648170] io_submit_sqes+0x4461/0x85c0 [ 1686.648799] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1686.649520] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1686.650232] ? lock_downgrade+0x6d0/0x6d0 [ 1686.650832] ? find_held_lock+0x2c/0x110 [ 1686.651427] ? io_submit_sqes+0x85c0/0x85c0 [ 1686.652061] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1686.652763] ? wait_for_completion_io+0x270/0x270 [ 1686.653462] ? rcu_read_lock_any_held+0x75/0xa0 [ 1686.654139] ? vfs_write+0x354/0xa70 [ 1686.654681] ? fput_many+0x2f/0x1a0 [ 1686.655215] ? ksys_write+0x1a9/0x260 [ 1686.655765] ? __ia32_sys_read+0xb0/0xb0 [ 1686.656354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1686.657104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1686.657860] do_syscall_64+0x33/0x40 [ 1686.658401] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1686.659139] RIP: 0033:0x7feb2fbf3b19 [ 1686.659678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.662310] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1686.663405] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1686.664423] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1686.665441] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1686.666467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1686.667488] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 [ 1686.671594] FAULT_INJECTION: forcing a failure. [ 1686.671594] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1686.673626] CPU: 0 PID: 14178 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1686.674688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.675868] Call Trace: [ 1686.676258] dump_stack+0x107/0x167 [ 1686.676794] should_fail.cold+0x5/0xa [ 1686.677362] __alloc_pages_nodemask+0x182/0x600 [ 1686.678051] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1686.678814] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1686.679698] alloc_pages_current+0x187/0x280 [ 1686.680338] __get_free_pages+0xc/0xa0 [ 1686.680901] pgd_alloc+0x84/0x4e0 [ 1686.681413] ? pgd_page_get_mm+0x40/0x40 [ 1686.682024] ? lockdep_init_map_type+0x2c7/0x780 [ 1686.682703] ? lockdep_init_map_type+0x2c7/0x780 [ 1686.683396] mm_init+0x670/0xab0 [ 1686.683897] mm_alloc+0xa2/0xd0 [ 1686.684379] alloc_bprm+0x1cb/0x8f0 [ 1686.684926] do_execveat_common+0x275/0x8d0 [ 1686.685577] ? strncpy_from_user+0x9e/0x470 [ 1686.686209] ? bprm_execve+0x1a60/0x1a60 [ 1686.686817] __x64_sys_execveat+0xed/0x140 [ 1686.687436] do_syscall_64+0x33/0x40 [ 1686.687974] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1686.688730] RIP: 0033:0x7f645c050b19 [ 1686.689274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.691870] RSP: 002b:00007f64595c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1686.692938] RAX: ffffffffffffffda RBX: 00007f645c163f60 RCX: 00007f645c050b19 [ 1686.693977] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1686.694995] RBP: 00007f64595c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1686.696014] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1686.697038] R13: 00007ffdd2ffb7cf R14: 00007f64595c6300 R15: 0000000000022000 06:49:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:49:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 9) 06:49:07 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3c) [ 1686.871771] FAULT_INJECTION: forcing a failure. [ 1686.871771] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.874126] CPU: 1 PID: 14403 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1686.875133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.876309] Call Trace: [ 1686.876696] dump_stack+0x107/0x167 [ 1686.877223] should_fail.cold+0x5/0xa [ 1686.877775] ? create_object.isra.0+0x3a/0xa20 [ 1686.878435] should_failslab+0x5/0x20 [ 1686.878979] kmem_cache_alloc+0x5b/0x310 [ 1686.879569] create_object.isra.0+0x3a/0xa20 [ 1686.880200] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1686.880929] kmem_cache_alloc+0x159/0x310 [ 1686.881530] mm_alloc+0x19/0xd0 [ 1686.882019] alloc_bprm+0x1cb/0x8f0 [ 1686.882569] do_execveat_common+0x275/0x8d0 [ 1686.883200] ? strncpy_from_user+0x9e/0x470 [ 1686.883828] ? bprm_execve+0x1a60/0x1a60 [ 1686.884463] __x64_sys_execveat+0xed/0x140 [ 1686.885091] do_syscall_64+0x33/0x40 [ 1686.885646] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1686.886392] RIP: 0033:0x7fadc9940b19 [ 1686.886934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.889581] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1686.890691] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1686.891717] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1686.892745] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1686.893781] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000001 [ 1686.894804] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:49:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 10) 06:49:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:49:20 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 06:49:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4) 06:49:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xf}, 0x0) 06:49:20 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x48) 06:49:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/kmemleak', 0x200000, 0xac) sendfile(r1, r2, &(0x7f00000001c0)=0xaca, 0x6) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:49:20 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 11) 06:49:20 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c) 06:49:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 1699.517947] FAULT_INJECTION: forcing a failure. [ 1699.517947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.518952] CPU: 1 PID: 14421 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1699.519517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.520195] Call Trace: [ 1699.520429] dump_stack+0x107/0x167 [ 1699.520741] should_fail.cold+0x5/0xa [ 1699.521077] _copy_from_user+0x2e/0x1b0 [ 1699.521412] iovec_from_user+0x141/0x400 [ 1699.521769] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1699.522205] __import_iovec+0x67/0x590 [ 1699.522532] ? __ia32_sys_shutdown+0x80/0x80 [ 1699.522924] import_iovec+0x83/0xb0 [ 1699.523246] sendmsg_copy_msghdr+0x131/0x160 [ 1699.523627] ? do_recvmmsg+0x6d0/0x6d0 [ 1699.523959] ? lock_chain_count+0x20/0x20 [ 1699.524316] ? lock_downgrade+0x6d0/0x6d0 [ 1699.524677] ? unwind_next_frame+0x13ef/0x1a90 [ 1699.525062] io_sendmsg+0x62c/0x830 [ 1699.525366] ? io_setup_async_msg+0x2d0/0x2d0 [ 1699.525760] ? mark_lock+0xf5/0x2df0 [ 1699.526074] ? lock_chain_count+0x20/0x20 [ 1699.526446] ? __lock_acquire+0xbb1/0x5b00 [ 1699.526803] io_issue_sqe+0x3b3/0x7700 [ 1699.527134] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1699.527576] ? lock_chain_count+0x20/0x20 [ 1699.527923] ? __is_insn_slot_addr+0x14c/0x290 [ 1699.528315] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1699.528754] ? io_connect+0x610/0x610 [ 1699.528892] FAULT_INJECTION: forcing a failure. [ 1699.528892] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1699.529082] ? lock_acquire+0x197/0x470 [ 1699.531090] ? find_held_lock+0x2c/0x110 [ 1699.531435] ? __fget_files+0x26d/0x4c0 [ 1699.531778] ? lock_downgrade+0x6d0/0x6d0 [ 1699.532124] __io_queue_sqe+0x90/0x9d0 [ 1699.532461] ? io_issue_sqe+0x7700/0x7700 [ 1699.532817] io_submit_sqes+0x4461/0x85c0 [ 1699.533174] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1699.533595] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1699.534006] ? lock_downgrade+0x6d0/0x6d0 [ 1699.534356] ? find_held_lock+0x2c/0x110 [ 1699.534701] ? io_submit_sqes+0x85c0/0x85c0 [ 1699.535067] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1699.535477] ? wait_for_completion_io+0x270/0x270 [ 1699.535884] ? rcu_read_lock_any_held+0x75/0xa0 [ 1699.536271] ? vfs_write+0x354/0xa70 [ 1699.536592] ? fput_many+0x2f/0x1a0 [ 1699.536895] ? ksys_write+0x1a9/0x260 [ 1699.537210] ? __ia32_sys_read+0xb0/0xb0 [ 1699.537557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1699.537998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1699.538437] do_syscall_64+0x33/0x40 [ 1699.538751] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1699.539177] RIP: 0033:0x7feb2fbf3b19 [ 1699.539502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.541026] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1699.541659] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1699.542253] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1699.542850] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1699.543450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1699.544037] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 [ 1699.544660] CPU: 0 PID: 14434 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1699.545660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.546867] Call Trace: [ 1699.547242] dump_stack+0x107/0x167 [ 1699.547775] should_fail.cold+0x5/0xa [ 1699.548312] __alloc_pages_nodemask+0x182/0x600 [ 1699.548985] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 06:49:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) [ 1699.549730] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1699.550705] alloc_pages_current+0x187/0x280 [ 1699.551329] __get_free_pages+0xc/0xa0 [ 1699.551865] pgd_alloc+0x84/0x4e0 [ 1699.552348] ? pgd_page_get_mm+0x40/0x40 [ 1699.552922] ? lockdep_init_map_type+0x2c7/0x780 [ 1699.553596] ? lockdep_init_map_type+0x2c7/0x780 [ 1699.554281] mm_init+0x670/0xab0 [ 1699.554760] mm_alloc+0xa2/0xd0 [ 1699.555230] alloc_bprm+0x1cb/0x8f0 [ 1699.555747] do_execveat_common+0x275/0x8d0 [ 1699.556345] ? strncpy_from_user+0x9e/0x470 [ 1699.556955] ? bprm_execve+0x1a60/0x1a60 [ 1699.557548] __x64_sys_execveat+0xed/0x140 [ 1699.558173] do_syscall_64+0x33/0x40 [ 1699.558689] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1699.559429] RIP: 0033:0x7f645c050b19 [ 1699.559947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.562567] RSP: 002b:00007f64595c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1699.563615] RAX: ffffffffffffffda RBX: 00007f645c163f60 RCX: 00007f645c050b19 [ 1699.564644] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1699.565646] RBP: 00007f64595c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1699.566661] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1699.567663] R13: 00007ffdd2ffb7cf R14: 00007f64595c6300 R15: 0000000000022000 [ 1699.577795] FAULT_INJECTION: forcing a failure. [ 1699.577795] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1699.578831] CPU: 1 PID: 14433 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1699.579410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1699.580077] Call Trace: [ 1699.580296] dump_stack+0x107/0x167 [ 1699.580598] should_fail.cold+0x5/0xa [ 1699.580917] __alloc_pages_nodemask+0x182/0x600 [ 1699.581297] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1699.581731] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1699.582233] alloc_pages_current+0x187/0x280 [ 1699.582601] __get_free_pages+0xc/0xa0 [ 1699.582924] pgd_alloc+0x84/0x4e0 [ 1699.583216] ? pgd_page_get_mm+0x40/0x40 [ 1699.583570] ? lockdep_init_map_type+0x2c7/0x780 [ 1699.583959] ? lockdep_init_map_type+0x2c7/0x780 [ 1699.584351] mm_init+0x670/0xab0 [ 1699.584641] mm_alloc+0xa2/0xd0 [ 1699.584914] alloc_bprm+0x1cb/0x8f0 [ 1699.585216] do_execveat_common+0x275/0x8d0 [ 1699.585581] ? strncpy_from_user+0x9e/0x470 [ 1699.585941] ? bprm_execve+0x1a60/0x1a60 [ 1699.586281] __x64_sys_execveat+0xed/0x140 [ 1699.586634] do_syscall_64+0x33/0x40 [ 1699.586937] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1699.587359] RIP: 0033:0x7fadc9940b19 [ 1699.587662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1699.589150] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1699.589771] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1699.590350] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1699.590938] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1699.591525] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1699.592098] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:49:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:49:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x300}, 0x0) 06:49:20 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x68) 06:49:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 11) 06:49:33 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c) 06:49:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 1712.884265] FAULT_INJECTION: forcing a failure. [ 1712.884265] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.886177] CPU: 0 PID: 14671 Comm: syz-executor.2 Not tainted 5.10.209 #1 06:49:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x5) 06:49:33 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 12) 06:49:33 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) [ 1712.887161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.888528] Call Trace: [ 1712.888913] dump_stack+0x107/0x167 [ 1712.889440] should_fail.cold+0x5/0xa [ 1712.889999] ? vm_area_alloc+0x1c/0x110 [ 1712.890571] should_failslab+0x5/0x20 [ 1712.891114] kmem_cache_alloc+0x5b/0x310 [ 1712.891698] vm_area_alloc+0x1c/0x110 [ 1712.892243] alloc_bprm+0x337/0x8f0 [ 1712.892771] do_execveat_common+0x275/0x8d0 [ 1712.893394] ? strncpy_from_user+0x9e/0x470 [ 1712.894012] ? bprm_execve+0x1a60/0x1a60 [ 1712.894605] __x64_sys_execveat+0xed/0x140 [ 1712.895217] do_syscall_64+0x33/0x40 [ 1712.895749] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1712.896476] RIP: 0033:0x7fadc9940b19 [ 1712.897006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.899605] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1712.900687] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1712.901698] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1712.902717] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1712.903733] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1712.904744] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:49:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x900}, 0x0) 06:49:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x820, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)=0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7, 0x10010, r2, 0x8000000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_io_uring_setup(0x72e0, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd=r5, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r7}}, 0x7) ftruncate(r1, 0x3) syz_io_uring_submit(r4, r3, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x20) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 1712.956191] FAULT_INJECTION: forcing a failure. [ 1712.956191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1712.959243] CPU: 1 PID: 14680 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1712.960258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1712.961452] Call Trace: [ 1712.961840] dump_stack+0x107/0x167 [ 1712.962385] should_fail.cold+0x5/0xa [ 1712.962947] _copy_from_iter_full+0x201/0xa60 [ 1712.963618] rawv6_sendmsg+0x20e8/0x3b20 [ 1712.964222] ? rawv6_bind+0xa40/0xa40 [ 1712.964783] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1712.965551] ? lock_acquire+0x197/0x470 [ 1712.966132] ? find_held_lock+0x2c/0x110 [ 1712.966731] ? __might_fault+0xd3/0x180 [ 1712.967308] ? lock_downgrade+0x6d0/0x6d0 [ 1712.967910] ? lock_downgrade+0x6d0/0x6d0 [ 1712.968519] ? sock_has_perm+0x1ea/0x280 [ 1712.969055] FAULT_INJECTION: forcing a failure. [ 1712.969055] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1712.969116] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1712.971497] ? iovec_from_user+0x104/0x400 [ 1712.972112] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1712.972850] ? rawv6_bind+0xa40/0xa40 [ 1712.973407] inet_sendmsg+0x11d/0x140 [ 1712.973964] ? inet_send_prepare+0x540/0x540 [ 1712.974598] __sock_sendmsg+0x13c/0x190 [ 1712.975173] ____sys_sendmsg+0x70d/0x870 [ 1712.975764] ? sock_write_iter+0x3d0/0x3d0 [ 1712.976376] ? sendmsg_copy_msghdr+0xba/0x160 [ 1712.977025] ? do_recvmmsg+0x6d0/0x6d0 [ 1712.977588] ? lock_chain_count+0x20/0x20 [ 1712.978189] ? lock_downgrade+0x6d0/0x6d0 [ 1712.978798] __sys_sendmsg_sock+0x26/0x40 [ 1712.979398] io_sendmsg+0x1e6/0x830 [ 1712.979929] ? io_setup_async_msg+0x2d0/0x2d0 [ 1712.980586] ? mark_lock+0xf5/0x2df0 [ 1712.981133] ? lock_chain_count+0x20/0x20 [ 1712.981764] ? __lock_acquire+0xbb1/0x5b00 [ 1712.982391] io_issue_sqe+0x3b3/0x7700 [ 1712.982965] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1712.983727] ? lock_chain_count+0x20/0x20 [ 1712.984319] ? __is_insn_slot_addr+0x14c/0x290 [ 1712.984983] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1712.985740] ? io_connect+0x610/0x610 [ 1712.986302] ? lock_acquire+0x197/0x470 [ 1712.986879] ? find_held_lock+0x2c/0x110 [ 1712.987476] ? __fget_files+0x26d/0x4c0 [ 1712.988053] ? lock_downgrade+0x6d0/0x6d0 [ 1712.988661] __io_queue_sqe+0x90/0x9d0 [ 1712.989232] ? io_issue_sqe+0x7700/0x7700 [ 1712.989841] io_submit_sqes+0x4461/0x85c0 [ 1712.990477] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1712.991198] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1712.991901] ? lock_downgrade+0x6d0/0x6d0 [ 1712.992498] ? find_held_lock+0x2c/0x110 [ 1712.993092] ? io_submit_sqes+0x85c0/0x85c0 [ 1712.993726] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1712.994435] ? wait_for_completion_io+0x270/0x270 [ 1712.995125] ? rcu_read_lock_any_held+0x75/0xa0 [ 1712.995799] ? vfs_write+0x354/0xa70 [ 1712.996343] ? fput_many+0x2f/0x1a0 [ 1712.996874] ? ksys_write+0x1a9/0x260 [ 1712.997428] ? __ia32_sys_read+0xb0/0xb0 [ 1712.998029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1712.998788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.999536] do_syscall_64+0x33/0x40 [ 1713.000075] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1713.000814] RIP: 0033:0x7feb2fbf3b19 [ 1713.001342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.003977] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1713.005077] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1713.006108] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1713.007130] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1713.008153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1713.009186] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 [ 1713.010250] CPU: 0 PID: 14689 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1713.011255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.012443] Call Trace: [ 1713.012827] dump_stack+0x107/0x167 [ 1713.013363] should_fail.cold+0x5/0xa [ 1713.013931] __alloc_pages_nodemask+0x182/0x600 [ 1713.014629] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1713.015506] ? kmem_cache_alloc+0x301/0x310 [ 1713.016149] alloc_pages_current+0x187/0x280 [ 1713.016786] allocate_slab+0x26f/0x380 [ 1713.017352] ___slab_alloc+0x470/0x700 06:49:34 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x74) [ 1713.017933] ? lock_downgrade+0x6d0/0x6d0 [ 1713.018692] ? vm_area_alloc+0x1c/0x110 [ 1713.019269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.020016] ? trace_hardirqs_on+0x5b/0x180 [ 1713.020635] ? vm_area_alloc+0x1c/0x110 [ 1713.021206] ? kmem_cache_alloc+0x301/0x310 [ 1713.021823] kmem_cache_alloc+0x301/0x310 [ 1713.022440] vm_area_alloc+0x1c/0x110 [ 1713.022977] alloc_bprm+0x337/0x8f0 [ 1713.023500] do_execveat_common+0x275/0x8d0 [ 1713.024111] ? strncpy_from_user+0x9e/0x470 [ 1713.024722] ? bprm_execve+0x1a60/0x1a60 [ 1713.025310] __x64_sys_execveat+0xed/0x140 [ 1713.025921] do_syscall_64+0x33/0x40 [ 1713.026447] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1713.027168] RIP: 0033:0x7f645c050b19 [ 1713.027693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.030318] RSP: 002b:00007f64595c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1713.031387] RAX: ffffffffffffffda RBX: 00007f645c163f60 RCX: 00007f645c050b19 06:49:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 1713.032386] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1713.033449] RBP: 00007f64595c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1713.034469] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1713.035513] R13: 00007ffdd2ffb7cf R14: 00007f64595c6300 R15: 0000000000022000 06:49:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 06:49:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 12) 06:49:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:49:34 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a) 06:49:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 1713.234099] FAULT_INJECTION: forcing a failure. [ 1713.234099] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.236091] CPU: 1 PID: 14781 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1713.237079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.238264] Call Trace: [ 1713.238640] dump_stack+0x107/0x167 [ 1713.239162] should_fail.cold+0x5/0xa [ 1713.239700] ? create_object.isra.0+0x3a/0xa20 [ 1713.240341] should_failslab+0x5/0x20 [ 1713.240875] kmem_cache_alloc+0x5b/0x310 [ 1713.241453] create_object.isra.0+0x3a/0xa20 [ 1713.242093] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1713.242805] kmem_cache_alloc+0x159/0x310 [ 1713.243396] vm_area_alloc+0x1c/0x110 [ 1713.243926] alloc_bprm+0x337/0x8f0 [ 1713.244469] do_execveat_common+0x275/0x8d0 [ 1713.245068] ? strncpy_from_user+0x9e/0x470 [ 1713.245671] ? bprm_execve+0x1a60/0x1a60 [ 1713.246267] __x64_sys_execveat+0xed/0x140 [ 1713.246882] do_syscall_64+0x33/0x40 [ 1713.247404] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1713.248129] RIP: 0033:0x7fadc9940b19 [ 1713.248653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.251224] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1713.252285] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1713.253312] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1713.254316] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1713.255315] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1713.256303] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:49:34 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 06:49:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6) 06:49:34 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x300) [ 1713.378800] FAULT_INJECTION: forcing a failure. [ 1713.378800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1713.380950] CPU: 1 PID: 14903 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1713.381925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.383101] Call Trace: [ 1713.383481] dump_stack+0x107/0x167 [ 1713.384015] should_fail.cold+0x5/0xa [ 1713.384575] _copy_from_user+0x2e/0x1b0 [ 1713.385143] __copy_msghdr_from_user+0x91/0x4b0 [ 1713.385793] ? __ia32_sys_shutdown+0x80/0x80 [ 1713.386450] ? inet_sendmsg+0xbd/0x140 [ 1713.386998] ? inet_send_prepare+0x540/0x540 [ 1713.387627] ? __sock_sendmsg+0x55/0x190 [ 1713.388200] ? ____sys_sendmsg+0x426/0x870 [ 1713.388810] sendmsg_copy_msghdr+0xa1/0x160 [ 1713.389413] ? do_recvmmsg+0x6d0/0x6d0 [ 1713.389981] ? lock_chain_count+0x20/0x20 [ 1713.390572] ? lock_downgrade+0x6d0/0x6d0 [ 1713.391209] io_sendmsg+0x62c/0x830 [ 1713.391727] ? io_setup_async_msg+0x2d0/0x2d0 [ 1713.392392] ? mark_lock+0xf5/0x2df0 [ 1713.392925] ? mark_lock+0xf5/0x2df0 [ 1713.393493] ? lock_chain_count+0x20/0x20 [ 1713.394126] ? __lock_acquire+0xbb1/0x5b00 [ 1713.394778] io_issue_sqe+0x3b3/0x7700 [ 1713.395339] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1713.396120] ? lock_chain_count+0x20/0x20 [ 1713.396707] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1713.397489] ? io_connect+0x610/0x610 [ 1713.398052] ? lock_acquire+0x197/0x470 [ 1713.398644] ? find_held_lock+0x2c/0x110 [ 1713.399232] ? __fget_files+0x26d/0x4c0 [ 1713.399827] ? lock_downgrade+0x6d0/0x6d0 [ 1713.400416] __io_queue_sqe+0x90/0x9d0 [ 1713.401000] ? io_issue_sqe+0x7700/0x7700 [ 1713.401609] io_submit_sqes+0x4461/0x85c0 [ 1713.402267] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1713.402973] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1713.403694] ? lock_downgrade+0x6d0/0x6d0 [ 1713.404282] ? find_held_lock+0x2c/0x110 [ 1713.404896] ? io_submit_sqes+0x85c0/0x85c0 [ 1713.405516] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1713.406260] ? wait_for_completion_io+0x270/0x270 [ 1713.406950] ? rcu_read_lock_any_held+0x75/0xa0 [ 1713.407643] ? vfs_write+0x354/0xa70 [ 1713.408178] ? fput_many+0x2f/0x1a0 [ 1713.408725] ? ksys_write+0x1a9/0x260 [ 1713.409260] ? __ia32_sys_read+0xb0/0xb0 [ 1713.409873] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.410630] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1713.411409] do_syscall_64+0x33/0x40 [ 1713.411933] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1713.412700] RIP: 0033:0x7feb2fbf3b19 [ 1713.413233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.415978] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1713.417052] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1713.418130] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1713.419142] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1713.420228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1713.421242] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:49:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 06:49:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 13) 06:49:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 06:49:34 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x500) 06:49:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:49:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:49:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 13) 06:49:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:49:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 06:49:34 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x600) [ 1713.755222] FAULT_INJECTION: forcing a failure. [ 1713.755222] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1713.757139] CPU: 1 PID: 14932 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1713.758137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.759308] Call Trace: [ 1713.759693] dump_stack+0x107/0x167 [ 1713.760219] should_fail.cold+0x5/0xa [ 1713.760770] __alloc_pages_nodemask+0x182/0x600 [ 1713.761436] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1713.762303] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 1713.763012] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1713.763767] alloc_pages_current+0x187/0x280 [ 1713.764403] get_zeroed_page+0x14/0xb0 [ 1713.764959] __pud_alloc+0x33/0x270 [ 1713.765489] handle_mm_fault+0x1a73/0x3500 [ 1713.766111] ? lock_chain_count+0x20/0x20 [ 1713.766706] ? __pmd_alloc+0x5e0/0x5e0 [ 1713.767283] __get_user_pages+0x61b/0x1380 [ 1713.767897] ? follow_page_mask+0x1900/0x1900 [ 1713.768555] __get_user_pages_remote+0x1d5/0x870 [ 1713.769232] ? __might_fault+0xd3/0x180 [ 1713.769808] get_user_pages_remote+0x63/0x90 [ 1713.770452] get_arg_page+0xba/0x200 [ 1713.770986] ? acct_arg_size+0xe0/0xe0 [ 1713.771545] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1713.772223] ? count.constprop.0+0x1b3/0x290 [ 1713.772857] copy_string_kernel+0x1b4/0x450 [ 1713.773483] do_execveat_common+0x525/0x8d0 [ 1713.774110] ? bprm_execve+0x1a60/0x1a60 [ 1713.774706] __x64_sys_execveat+0xed/0x140 [ 1713.775319] do_syscall_64+0x33/0x40 [ 1713.775851] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1713.776579] RIP: 0033:0x7f645c050b19 [ 1713.777110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.779707] RSP: 002b:00007f64595c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1713.780790] RAX: ffffffffffffffda RBX: 00007f645c163f60 RCX: 00007f645c050b19 [ 1713.781803] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1713.782823] RBP: 00007f64595c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1713.783837] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1713.784851] R13: 00007ffdd2ffb7cf R14: 00007f64595c6300 R15: 0000000000022000 [ 1713.827223] FAULT_INJECTION: forcing a failure. [ 1713.827223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1713.829055] CPU: 1 PID: 14991 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1713.830077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.831279] Call Trace: [ 1713.831673] dump_stack+0x107/0x167 [ 1713.832215] should_fail.cold+0x5/0xa [ 1713.832777] __alloc_pages_nodemask+0x182/0x600 [ 1713.833461] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1713.834343] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 1713.835067] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1713.835831] alloc_pages_current+0x187/0x280 [ 1713.836478] get_zeroed_page+0x14/0xb0 [ 1713.837045] __pud_alloc+0x33/0x270 [ 1713.837581] handle_mm_fault+0x1a73/0x3500 [ 1713.838208] ? __pmd_alloc+0x5e0/0x5e0 [ 1713.838800] __get_user_pages+0x61b/0x1380 [ 1713.839433] ? follow_page_mask+0x1900/0x1900 [ 1713.840091] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.840870] __get_user_pages_remote+0x1d5/0x870 [ 1713.841561] ? __might_fault+0xd3/0x180 [ 1713.842161] get_user_pages_remote+0x63/0x90 [ 1713.842808] get_arg_page+0xba/0x200 [ 1713.843353] ? acct_arg_size+0xe0/0xe0 [ 1713.843921] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1713.844615] ? count.constprop.0+0x1b3/0x290 [ 1713.845262] copy_string_kernel+0x1b4/0x450 [ 1713.845913] do_execveat_common+0x525/0x8d0 [ 1713.846528] ? bprm_execve+0x1a60/0x1a60 [ 1713.847135] __x64_sys_execveat+0xed/0x140 [ 1713.847757] do_syscall_64+0x33/0x40 [ 1713.848303] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1713.849048] RIP: 0033:0x7fadc9940b19 [ 1713.849595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.852254] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1713.853361] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1713.854402] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1713.855426] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1713.856452] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1713.857488] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:49:50 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 06:49:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 06:49:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0x0, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:49:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 14) 06:49:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7) 06:49:50 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x700) 06:49:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x3, 0x0, 0x20, 0x3ff, 0x2, 0x3, 0x8, 0x1ca, 0x40, 0x25, 0x800, 0x0, 0x38, 0x2, 0xf87, 0x1, 0x2}, [{0x6, 0xffffffff, 0x1, 0x80, 0x2, 0x81, 0xd9, 0x40}], "560372146d15da82a25b99a628b99026b957337d8d864d93b7260856da4f96ecc83712a6b10296db76580787f891b56a2d538858230e508aea645fb6408f1ba45f86441858d388b7a0320df6cf0a2b3fd7733ec05bd361d19d741ec78874dcc4c330c76dded70391064ec80b3e10555bb7c94a92aed20b61f4a7272de804547732152e76b557e9bfb6e5fb339e77f9135fcf73c7440c4b1f8fb3a99d917d88192117d3756ba1ceba422fd0802ddda49624e620e2e3a9d5ee", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x630) 06:49:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 14) [ 1729.051780] FAULT_INJECTION: forcing a failure. [ 1729.051780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1729.052935] CPU: 1 PID: 15184 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1729.053548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1729.054317] Call Trace: [ 1729.054565] dump_stack+0x107/0x167 [ 1729.054901] should_fail.cold+0x5/0xa [ 1729.055248] _copy_from_user+0x2e/0x1b0 [ 1729.055622] move_addr_to_kernel.part.0+0x31/0x110 [ 1729.056063] __copy_msghdr_from_user+0x3e1/0x4b0 [ 1729.056488] ? __ia32_sys_shutdown+0x80/0x80 [ 1729.056890] ? __sock_sendmsg+0x55/0x190 [ 1729.057257] ? ____sys_sendmsg+0x426/0x870 [ 1729.057641] sendmsg_copy_msghdr+0xa1/0x160 [ 1729.058027] ? do_recvmmsg+0x6d0/0x6d0 [ 1729.058408] ? lock_chain_count+0x20/0x20 [ 1729.058783] ? lock_downgrade+0x6d0/0x6d0 [ 1729.059169] io_sendmsg+0x62c/0x830 [ 1729.059494] ? io_setup_async_msg+0x2d0/0x2d0 [ 1729.059899] ? mark_lock+0xf5/0x2df0 [ 1729.060237] ? lock_chain_count+0x20/0x20 [ 1729.060627] ? __lock_acquire+0xbb1/0x5b00 [ 1729.061008] io_issue_sqe+0x3b3/0x7700 [ 1729.061364] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1729.061832] ? lock_chain_count+0x20/0x20 [ 1729.062234] ? __is_insn_slot_addr+0x14c/0x290 [ 1729.062648] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1729.063124] ? io_connect+0x610/0x610 [ 1729.063469] ? lock_acquire+0x197/0x470 [ 1729.063825] ? find_held_lock+0x2c/0x110 [ 1729.064197] ? __fget_files+0x26d/0x4c0 [ 1729.064553] ? lock_downgrade+0x6d0/0x6d0 [ 1729.064932] __io_queue_sqe+0x90/0x9d0 [ 1729.065284] ? io_issue_sqe+0x7700/0x7700 [ 1729.065663] io_submit_sqes+0x4461/0x85c0 [ 1729.066051] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1729.066521] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1729.066964] ? lock_downgrade+0x6d0/0x6d0 [ 1729.067333] ? find_held_lock+0x2c/0x110 [ 1729.067699] ? io_submit_sqes+0x85c0/0x85c0 [ 1729.068092] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1729.068543] ? wait_for_completion_io+0x270/0x270 [ 1729.068979] ? rcu_read_lock_any_held+0x75/0xa0 [ 1729.069396] ? vfs_write+0x354/0xa70 [ 1729.069732] ? fput_many+0x2f/0x1a0 [ 1729.070055] ? ksys_write+0x1a9/0x260 [ 1729.070410] ? __ia32_sys_read+0xb0/0xb0 [ 1729.070774] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1729.071238] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1729.071700] do_syscall_64+0x33/0x40 [ 1729.072033] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1729.072506] RIP: 0033:0x7feb2fbf3b19 [ 1729.072843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1729.074481] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1729.075153] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1729.075786] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1729.076431] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1729.077059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1729.077689] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 [ 1729.184917] FAULT_INJECTION: forcing a failure. [ 1729.184917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1729.187228] CPU: 0 PID: 15182 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1729.188412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1729.189811] Call Trace: [ 1729.190282] dump_stack+0x107/0x167 [ 1729.190920] should_fail.cold+0x5/0xa [ 1729.191589] __alloc_pages_nodemask+0x182/0x600 [ 1729.192395] ? lock_acquire+0x197/0x470 [ 1729.193084] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1729.194133] ? lock_downgrade+0x6d0/0x6d0 [ 1729.194856] ? do_raw_spin_lock+0x121/0x260 [ 1729.195544] alloc_pages_current+0x187/0x280 [ 1729.196188] __pmd_alloc+0x37/0x5e0 [ 1729.196711] handle_mm_fault+0x1ac4/0x3500 [ 1729.197337] ? __pmd_alloc+0x5e0/0x5e0 [ 1729.197927] __get_user_pages+0x61b/0x1380 [ 1729.198560] ? follow_page_mask+0x1900/0x1900 [ 1729.199219] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1729.199876] __get_user_pages_remote+0x1d5/0x870 [ 1729.200557] ? __might_fault+0xd3/0x180 [ 1729.201142] get_user_pages_remote+0x63/0x90 [ 1729.201797] get_arg_page+0xba/0x200 [ 1729.202362] ? acct_arg_size+0xe0/0xe0 [ 1729.202919] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1729.203615] ? count.constprop.0+0x1b3/0x290 [ 1729.204268] copy_string_kernel+0x1b4/0x450 [ 1729.204917] do_execveat_common+0x525/0x8d0 [ 1729.205562] ? bprm_execve+0x1a60/0x1a60 [ 1729.205711] FAULT_INJECTION: forcing a failure. [ 1729.205711] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1729.206179] __x64_sys_execveat+0xed/0x140 [ 1729.207806] do_syscall_64+0x33/0x40 [ 1729.208358] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1729.209117] RIP: 0033:0x7f645c050b19 [ 1729.209674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1729.212393] RSP: 002b:00007f64595c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1729.213510] RAX: ffffffffffffffda RBX: 00007f645c163f60 RCX: 00007f645c050b19 [ 1729.214581] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1729.215642] RBP: 00007f64595c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1729.216710] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1729.217783] R13: 00007ffdd2ffb7cf R14: 00007f64595c6300 R15: 0000000000022000 [ 1729.218903] CPU: 1 PID: 15178 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1729.219503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1729.220189] Call Trace: [ 1729.220431] dump_stack+0x107/0x167 [ 1729.220735] should_fail.cold+0x5/0xa [ 1729.221056] __alloc_pages_nodemask+0x182/0x600 [ 1729.221444] ? lock_acquire+0x197/0x470 [ 1729.221772] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1729.222299] ? lock_downgrade+0x6d0/0x6d0 [ 1729.222644] ? do_raw_spin_lock+0x121/0x260 [ 1729.223002] alloc_pages_current+0x187/0x280 [ 1729.223365] __pmd_alloc+0x37/0x5e0 [ 1729.223671] handle_mm_fault+0x1ac4/0x3500 [ 1729.224018] ? lock_chain_count+0x20/0x20 [ 1729.224358] ? __pmd_alloc+0x5e0/0x5e0 [ 1729.224688] __get_user_pages+0x61b/0x1380 [ 1729.225051] ? follow_page_mask+0x1900/0x1900 [ 1729.225428] __get_user_pages_remote+0x1d5/0x870 [ 1729.225818] ? __might_fault+0xd3/0x180 [ 1729.226177] get_user_pages_remote+0x63/0x90 [ 1729.226567] get_arg_page+0xba/0x200 [ 1729.226879] ? acct_arg_size+0xe0/0xe0 [ 1729.227212] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1729.227625] ? count.constprop.0+0x1b3/0x290 [ 1729.227988] copy_string_kernel+0x1b4/0x450 [ 1729.228357] do_execveat_common+0x525/0x8d0 [ 1729.228717] ? bprm_execve+0x1a60/0x1a60 [ 1729.229061] __x64_sys_execveat+0xed/0x140 [ 1729.229412] do_syscall_64+0x33/0x40 [ 1729.229723] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1729.230149] RIP: 0033:0x7fadc9940b19 [ 1729.230459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1729.231955] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1729.232605] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1729.233184] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1729.233764] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1729.234374] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1729.234960] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:50:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:50:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 06:50:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 15) [ 1743.739051] FAULT_INJECTION: forcing a failure. [ 1743.739051] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.740038] CPU: 1 PID: 15411 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1743.740595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1743.741263] Call Trace: [ 1743.741481] dump_stack+0x107/0x167 [ 1743.741783] should_fail.cold+0x5/0xa [ 1743.742068] ? __pmd_alloc+0x94/0x5e0 [ 1743.742397] should_failslab+0x5/0x20 [ 1743.742682] kmem_cache_alloc+0x5b/0x310 [ 1743.742983] __pmd_alloc+0x94/0x5e0 [ 1743.743253] handle_mm_fault+0x1ac4/0x3500 [ 1743.743569] ? lock_chain_count+0x20/0x20 [ 1743.743881] ? __pmd_alloc+0x5e0/0x5e0 [ 1743.744181] __get_user_pages+0x61b/0x1380 [ 1743.744532] ? follow_page_mask+0x1900/0x1900 [ 1743.744876] __get_user_pages_remote+0x1d5/0x870 [ 1743.745265] ? __might_fault+0xd3/0x180 [ 1743.745564] get_user_pages_remote+0x63/0x90 [ 1743.745923] get_arg_page+0xba/0x200 [ 1743.746203] ? acct_arg_size+0xe0/0xe0 [ 1743.746525] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1743.746876] ? count.constprop.0+0x1b3/0x290 [ 1743.747235] copy_string_kernel+0x1b4/0x450 [ 1743.747558] do_execveat_common+0x525/0x8d0 [ 1743.747905] ? bprm_execve+0x1a60/0x1a60 [ 1743.748213] __x64_sys_execveat+0xed/0x140 [ 1743.748559] do_syscall_64+0x33/0x40 [ 1743.748839] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1743.749212] RIP: 0033:0x7fadc9940b19 [ 1743.749513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1743.751001] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1743.751606] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1743.752181] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1743.752751] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1743.753329] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1743.753896] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:50:04 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 06:50:04 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xc00) 06:50:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0x0, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:50:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x8) 06:50:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 15) 06:50:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) [ 1743.784114] FAULT_INJECTION: forcing a failure. [ 1743.784114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1743.786320] CPU: 0 PID: 15405 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1743.787398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1743.788687] Call Trace: [ 1743.789204] dump_stack+0x107/0x167 [ 1743.789791] should_fail.cold+0x5/0xa [ 1743.790413] _copy_from_user+0x2e/0x1b0 [ 1743.791043] iovec_from_user+0x141/0x400 [ 1743.791682] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1743.792673] __import_iovec+0x67/0x590 [ 1743.793347] ? __ia32_sys_shutdown+0x80/0x80 [ 1743.794221] import_iovec+0x83/0xb0 [ 1743.794869] sendmsg_copy_msghdr+0x131/0x160 [ 1743.795760] ? do_recvmmsg+0x6d0/0x6d0 [ 1743.796385] ? lock_chain_count+0x20/0x20 [ 1743.797044] ? lock_downgrade+0x6d0/0x6d0 [ 1743.797710] io_sendmsg+0x62c/0x830 [ 1743.798445] ? io_setup_async_msg+0x2d0/0x2d0 [ 1743.799163] ? mark_lock+0xf5/0x2df0 [ 1743.799905] ? lock_chain_count+0x20/0x20 [ 1743.800662] ? __lock_acquire+0xbb1/0x5b00 [ 1743.801499] io_issue_sqe+0x3b3/0x7700 [ 1743.802127] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1743.803174] ? lock_chain_count+0x20/0x20 [ 1743.803828] ? __is_insn_slot_addr+0x14c/0x290 [ 1743.804717] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1743.805611] ? io_connect+0x610/0x610 [ 1743.806387] ? lock_acquire+0x197/0x470 [ 1743.807019] ? find_held_lock+0x2c/0x110 [ 1743.807831] ? __fget_files+0x26d/0x4c0 [ 1743.808467] ? lock_downgrade+0x6d0/0x6d0 [ 1743.809280] __io_queue_sqe+0x90/0x9d0 [ 1743.809906] ? io_issue_sqe+0x7700/0x7700 [ 1743.810758] io_submit_sqes+0x4461/0x85c0 [ 1743.811455] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1743.812450] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1743.813215] ? lock_downgrade+0x6d0/0x6d0 [ 1743.814033] ? find_held_lock+0x2c/0x110 [ 1743.814700] ? io_submit_sqes+0x85c0/0x85c0 [ 1743.815561] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1743.816524] ? wait_for_completion_io+0x270/0x270 [ 1743.817478] ? rcu_read_lock_any_held+0x75/0xa0 [ 1743.818414] ? vfs_write+0x354/0xa70 [ 1743.819161] ? fput_many+0x2f/0x1a0 [ 1743.819884] ? ksys_write+0x1a9/0x260 [ 1743.820496] ? __ia32_sys_read+0xb0/0xb0 [ 1743.821308] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1743.822134] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1743.823154] do_syscall_64+0x33/0x40 [ 1743.823740] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1743.824739] RIP: 0033:0x7feb2fbf3b19 06:50:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 1743.825336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1743.828965] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1743.830141] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1743.831253] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1743.832343] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1743.833433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1743.834530] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:50:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0x0, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:50:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 16) 06:50:04 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x1200) [ 1743.899958] FAULT_INJECTION: forcing a failure. [ 1743.899958] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.902094] CPU: 0 PID: 15401 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1743.903166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1743.904424] Call Trace: [ 1743.904833] dump_stack+0x107/0x167 [ 1743.905397] should_fail.cold+0x5/0xa [ 1743.905983] ? __pmd_alloc+0x94/0x5e0 [ 1743.906575] should_failslab+0x5/0x20 [ 1743.907145] kmem_cache_alloc+0x5b/0x310 [ 1743.907758] __pmd_alloc+0x94/0x5e0 [ 1743.908312] handle_mm_fault+0x1ac4/0x3500 [ 1743.908949] ? lock_chain_count+0x20/0x20 [ 1743.909573] ? __pmd_alloc+0x5e0/0x5e0 [ 1743.910175] __get_user_pages+0x61b/0x1380 [ 1743.910828] ? follow_page_mask+0x1900/0x1900 [ 1743.911522] __get_user_pages_remote+0x1d5/0x870 [ 1743.912244] ? __might_fault+0xd3/0x180 [ 1743.912856] get_user_pages_remote+0x63/0x90 [ 1743.913532] get_arg_page+0xba/0x200 [ 1743.914102] ? acct_arg_size+0xe0/0xe0 [ 1743.914705] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1743.915428] ? count.constprop.0+0x1b3/0x290 [ 1743.916109] copy_string_kernel+0x1b4/0x450 [ 1743.916776] do_execveat_common+0x525/0x8d0 [ 1743.917439] ? bprm_execve+0x1a60/0x1a60 [ 1743.918081] __x64_sys_execveat+0xed/0x140 [ 1743.918730] do_syscall_64+0x33/0x40 [ 1743.919290] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1743.920056] RIP: 0033:0x7f645c050b19 [ 1743.920620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1743.923351] RSP: 002b:00007f64595c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1743.924502] RAX: ffffffffffffffda RBX: 00007f645c163f60 RCX: 00007f645c050b19 [ 1743.925561] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1743.926625] RBP: 00007f64595c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1743.927696] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1743.928776] R13: 00007ffdd2ffb7cf R14: 00007f64595c6300 R15: 0000000000022000 06:50:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 06:50:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x48) 06:50:05 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x1800) 06:50:05 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(0xffffffffffffffff, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:50:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 1744.028898] FAULT_INJECTION: forcing a failure. [ 1744.028898] name failslab, interval 1, probability 0, space 0, times 0 [ 1744.030815] CPU: 0 PID: 15644 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1744.031819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1744.033010] Call Trace: [ 1744.033399] dump_stack+0x107/0x167 [ 1744.033933] should_fail.cold+0x5/0xa [ 1744.034499] ? create_object.isra.0+0x3a/0xa20 [ 1744.035161] should_failslab+0x5/0x20 [ 1744.035715] kmem_cache_alloc+0x5b/0x310 [ 1744.036313] create_object.isra.0+0x3a/0xa20 [ 1744.036950] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1744.037685] kmem_cache_alloc+0x159/0x310 [ 1744.038301] __pmd_alloc+0x94/0x5e0 [ 1744.038834] handle_mm_fault+0x1ac4/0x3500 [ 1744.039459] ? lock_chain_count+0x20/0x20 [ 1744.040063] ? __pmd_alloc+0x5e0/0x5e0 [ 1744.040651] __get_user_pages+0x61b/0x1380 [ 1744.041275] ? follow_page_mask+0x1900/0x1900 [ 1744.041946] __get_user_pages_remote+0x1d5/0x870 [ 1744.042649] ? __might_fault+0xd3/0x180 [ 1744.043233] get_user_pages_remote+0x63/0x90 [ 1744.043881] get_arg_page+0xba/0x200 [ 1744.044430] ? acct_arg_size+0xe0/0xe0 [ 1744.044996] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1744.045683] ? count.constprop.0+0x1b3/0x290 [ 1744.046337] copy_string_kernel+0x1b4/0x450 [ 1744.046971] do_execveat_common+0x525/0x8d0 [ 1744.047604] ? bprm_execve+0x1a60/0x1a60 [ 1744.048209] __x64_sys_execveat+0xed/0x140 [ 1744.048825] do_syscall_64+0x33/0x40 [ 1744.049366] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1744.050101] RIP: 0033:0x7fadc9940b19 [ 1744.050655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1744.053285] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1744.054380] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1744.055389] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1744.056407] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1744.057418] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1744.058444] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:50:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 16) 06:50:05 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 06:50:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 06:50:05 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x1e00) 06:50:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c) 06:50:05 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(0xffffffffffffffff, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:50:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0xd000)=nil, 0xd000, 0xd, 0x13, r1, 0xa7091000) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x6200, 0x2) [ 1744.224554] FAULT_INJECTION: forcing a failure. [ 1744.224554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1744.225593] CPU: 1 PID: 15878 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1744.226145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1744.226758] Call Trace: [ 1744.226963] dump_stack+0x107/0x167 [ 1744.227261] should_fail.cold+0x5/0xa [ 1744.227550] _copy_from_iter_full+0x201/0xa60 [ 1744.227920] rawv6_sendmsg+0x20e8/0x3b20 [ 1744.228228] ? rawv6_bind+0xa40/0xa40 [ 1744.228524] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1744.228913] ? lock_acquire+0x197/0x470 [ 1744.229210] ? find_held_lock+0x2c/0x110 [ 1744.229522] ? __might_fault+0xd3/0x180 [ 1744.229847] ? lock_downgrade+0x6d0/0x6d0 [ 1744.230178] ? lock_downgrade+0x6d0/0x6d0 [ 1744.230508] ? sock_has_perm+0x1ea/0x280 [ 1744.230836] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1744.231223] ? iovec_from_user+0x104/0x400 [ 1744.231567] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1744.231985] ? rawv6_bind+0xa40/0xa40 [ 1744.232272] inet_sendmsg+0x11d/0x140 [ 1744.232576] ? inet_send_prepare+0x540/0x540 [ 1744.232902] __sock_sendmsg+0x13c/0x190 [ 1744.233226] ____sys_sendmsg+0x70d/0x870 [ 1744.233553] ? sock_write_iter+0x3d0/0x3d0 [ 1744.233868] ? sendmsg_copy_msghdr+0xba/0x160 [ 1744.234210] ? do_recvmmsg+0x6d0/0x6d0 [ 1744.234511] ? lock_chain_count+0x20/0x20 [ 1744.234819] ? lock_downgrade+0x6d0/0x6d0 [ 1744.235157] __sys_sendmsg_sock+0x26/0x40 [ 1744.235494] io_sendmsg+0x1e6/0x830 [ 1744.235765] ? io_setup_async_msg+0x2d0/0x2d0 [ 1744.236130] ? mark_lock+0xf5/0x2df0 [ 1744.236413] ? lock_chain_count+0x20/0x20 [ 1744.236735] ? __lock_acquire+0xbb1/0x5b00 [ 1744.237048] io_issue_sqe+0x3b3/0x7700 [ 1744.237341] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1744.237724] ? lock_chain_count+0x20/0x20 [ 1744.238054] ? lock_chain_count+0x20/0x20 [ 1744.238374] ? __is_insn_slot_addr+0x14c/0x290 [ 1744.238742] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1744.239128] ? io_connect+0x610/0x610 [ 1744.239443] ? lock_acquire+0x197/0x470 [ 1744.239751] ? find_held_lock+0x2c/0x110 [ 1744.240081] ? __fget_files+0x26d/0x4c0 [ 1744.240381] ? lock_downgrade+0x6d0/0x6d0 [ 1744.240721] __io_queue_sqe+0x90/0x9d0 [ 1744.241016] ? io_issue_sqe+0x7700/0x7700 [ 1744.241359] io_submit_sqes+0x4461/0x85c0 [ 1744.241683] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1744.242085] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1744.242452] ? lock_downgrade+0x6d0/0x6d0 [ 1744.242792] ? find_held_lock+0x2c/0x110 [ 1744.243104] ? io_submit_sqes+0x85c0/0x85c0 [ 1744.243464] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1744.243829] ? wait_for_completion_io+0x270/0x270 [ 1744.244221] ? rcu_read_lock_any_held+0x75/0xa0 [ 1744.244572] ? vfs_write+0x354/0xa70 [ 1744.244876] ? fput_many+0x2f/0x1a0 [ 1744.245153] ? ksys_write+0x1a9/0x260 [ 1744.245461] ? __ia32_sys_read+0xb0/0xb0 [ 1744.245767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1744.246190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1744.246583] do_syscall_64+0x33/0x40 [ 1744.246885] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1744.247274] RIP: 0033:0x7feb2fbf3b19 [ 1744.247587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1744.248933] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1744.249545] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1744.250064] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1744.250600] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1744.251116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1744.251634] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 [ 1744.276736] FAULT_INJECTION: forcing a failure. [ 1744.276736] name failslab, interval 1, probability 0, space 0, times 0 [ 1744.278628] CPU: 0 PID: 15862 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1744.279646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1744.280852] Call Trace: [ 1744.281256] dump_stack+0x107/0x167 [ 1744.281801] should_fail.cold+0x5/0xa [ 1744.282384] ? create_object.isra.0+0x3a/0xa20 [ 1744.283065] should_failslab+0x5/0x20 [ 1744.283632] kmem_cache_alloc+0x5b/0x310 [ 1744.284240] create_object.isra.0+0x3a/0xa20 [ 1744.284886] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1744.285631] kmem_cache_alloc+0x159/0x310 [ 1744.286258] __pmd_alloc+0x94/0x5e0 [ 1744.286810] handle_mm_fault+0x1ac4/0x3500 [ 1744.287446] ? __pmd_alloc+0x5e0/0x5e0 [ 1744.288043] __get_user_pages+0x61b/0x1380 [ 1744.288686] ? follow_page_mask+0x1900/0x1900 [ 1744.289371] __get_user_pages_remote+0x1d5/0x870 [ 1744.290065] ? __might_fault+0xd3/0x180 [ 1744.290667] get_user_pages_remote+0x63/0x90 [ 1744.291321] get_arg_page+0xba/0x200 [ 1744.291876] ? acct_arg_size+0xe0/0xe0 [ 1744.292441] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1744.293134] ? count.constprop.0+0x1b3/0x290 [ 1744.293788] copy_string_kernel+0x1b4/0x450 [ 1744.294440] do_execveat_common+0x525/0x8d0 [ 1744.295077] ? bprm_execve+0x1a60/0x1a60 [ 1744.295692] __x64_sys_execveat+0xed/0x140 [ 1744.296324] do_syscall_64+0x33/0x40 [ 1744.296867] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1744.297610] RIP: 0033:0x7f645c050b19 [ 1744.298171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1744.300864] RSP: 002b:00007f64595c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1744.301985] RAX: ffffffffffffffda RBX: 00007f645c163f60 RCX: 00007f645c050b19 [ 1744.303031] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1744.304079] RBP: 00007f64595c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1744.305121] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1744.306166] R13: 00007ffdd2ffb7cf R14: 00007f64595c6300 R15: 0000000000022000 06:50:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 17) 06:50:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 06:50:20 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(0xffffffffffffffff, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:50:20 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 17) 06:50:20 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x2000) 06:50:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x68) 06:50:20 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 06:50:20 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file2\x00', 0x20501, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0x1ff, 0x0, 0x17, 0x4, "f6d8eb9d2c42f33dedccaece0c542dc235ca06c87f731467bb2159d3a24798a5ae50770594507024f87b97ba1d8865f68f484a28b344aef1a8c67d950361ca87", "9d717890afa2fa7628c8c8895b3344551b43d9c6b0b2968b6c524ec73e228087", [0x3, 0x81]}) r1 = syz_io_uring_setup(0x5f60, &(0x7f0000000240)={0x0, 0x48e8, 0x0, 0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000300), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) syz_io_uring_setup(0x7323, &(0x7f00000000c0)={0x0, 0x60f7, 0x1, 0x3, 0x393, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x0, 0x22}, &(0x7f00000a0000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x40009, &(0x7f0000000040)}, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r5, &(0x7f0000000400)='./file1\x00', 0x40, 0x112) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./file1\x00', 0x0, 0x800, 0x12345}, 0xfffffffb) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 1759.364263] FAULT_INJECTION: forcing a failure. [ 1759.364263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1759.366042] CPU: 0 PID: 16102 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1759.367081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1759.368260] Call Trace: [ 1759.368650] dump_stack+0x107/0x167 [ 1759.369182] should_fail.cold+0x5/0xa [ 1759.369743] _copy_from_user+0x2e/0x1b0 [ 1759.370329] __copy_msghdr_from_user+0x91/0x4b0 [ 1759.371005] ? __ia32_sys_shutdown+0x80/0x80 [ 1759.371640] ? inet_sendmsg+0xbd/0x140 [ 1759.372198] ? inet_send_prepare+0x540/0x540 [ 1759.372825] ? __sock_sendmsg+0x55/0x190 [ 1759.373413] ? ____sys_sendmsg+0x426/0x870 [ 1759.374024] sendmsg_copy_msghdr+0xa1/0x160 [ 1759.374655] ? do_recvmmsg+0x6d0/0x6d0 [ 1759.375216] ? lock_chain_count+0x20/0x20 [ 1759.375816] ? lock_downgrade+0x6d0/0x6d0 [ 1759.376422] io_sendmsg+0x62c/0x830 [ 1759.376946] ? io_setup_async_msg+0x2d0/0x2d0 [ 1759.377601] ? mark_lock+0xf5/0x2df0 [ 1759.378143] ? lock_chain_count+0x20/0x20 [ 1759.378783] ? __lock_acquire+0xbb1/0x5b00 [ 1759.379408] io_issue_sqe+0x3b3/0x7700 [ 1759.379976] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1759.380731] ? lock_chain_count+0x20/0x20 [ 1759.381327] ? __is_insn_slot_addr+0x14c/0x290 [ 1759.381985] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1759.382754] ? io_connect+0x610/0x610 [ 1759.383303] ? lock_acquire+0x197/0x470 [ 1759.383870] ? find_held_lock+0x2c/0x110 [ 1759.384463] ? __fget_files+0x26d/0x4c0 [ 1759.385033] ? lock_downgrade+0x6d0/0x6d0 [ 1759.385645] __io_queue_sqe+0x90/0x9d0 [ 1759.386213] ? io_issue_sqe+0x7700/0x7700 [ 1759.386846] io_submit_sqes+0x4461/0x85c0 [ 1759.387476] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1759.388203] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1759.388912] ? lock_downgrade+0x6d0/0x6d0 [ 1759.389515] ? find_held_lock+0x2c/0x110 [ 1759.390111] ? io_submit_sqes+0x85c0/0x85c0 [ 1759.390753] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1759.391457] ? wait_for_completion_io+0x270/0x270 [ 1759.392160] ? rcu_read_lock_any_held+0x75/0xa0 [ 1759.392836] ? vfs_write+0x354/0xa70 [ 1759.393384] ? fput_many+0x2f/0x1a0 [ 1759.393912] ? ksys_write+0x1a9/0x260 [ 1759.394477] ? __ia32_sys_read+0xb0/0xb0 [ 1759.395066] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1759.395829] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1759.396583] do_syscall_64+0x33/0x40 [ 1759.397125] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1759.397865] RIP: 0033:0x7feb2fbf3b19 [ 1759.398406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1759.401065] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1759.402167] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1759.403204] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1759.404231] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1759.405264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1759.406293] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:50:20 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x3d36e08f}, 0x0) [ 1759.441219] FAULT_INJECTION: forcing a failure. [ 1759.441219] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1759.443539] CPU: 0 PID: 16091 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1759.444544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1759.445743] Call Trace: [ 1759.446127] dump_stack+0x107/0x167 [ 1759.446674] should_fail.cold+0x5/0xa [ 1759.447232] __alloc_pages_nodemask+0x182/0x600 [ 1759.447913] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1759.448780] ? find_held_lock+0x2c/0x110 [ 1759.449379] ? __pmd_alloc+0x2db/0x5e0 [ 1759.449952] ? lock_downgrade+0x6d0/0x6d0 [ 1759.450569] ? do_raw_spin_lock+0x121/0x260 [ 1759.451199] alloc_pages_current+0x187/0x280 [ 1759.451842] pte_alloc_one+0x16/0x1a0 [ 1759.452398] __pte_alloc+0x1d/0x330 [ 1759.452932] handle_mm_fault+0x287f/0x3500 [ 1759.453564] ? lock_chain_count+0x20/0x20 [ 1759.454169] ? __pmd_alloc+0x5e0/0x5e0 [ 1759.454763] __get_user_pages+0x61b/0x1380 [ 1759.455388] ? follow_page_mask+0x1900/0x1900 [ 1759.456056] __get_user_pages_remote+0x1d5/0x870 [ 1759.456749] ? __might_fault+0xd3/0x180 [ 1759.457331] get_user_pages_remote+0x63/0x90 [ 1759.457971] get_arg_page+0xba/0x200 [ 1759.458522] ? acct_arg_size+0xe0/0xe0 [ 1759.459085] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1759.459775] ? count.constprop.0+0x1b3/0x290 [ 1759.460416] copy_string_kernel+0x1b4/0x450 [ 1759.461058] do_execveat_common+0x525/0x8d0 [ 1759.461689] ? bprm_execve+0x1a60/0x1a60 [ 1759.462294] __x64_sys_execveat+0xed/0x140 [ 1759.462921] do_syscall_64+0x33/0x40 [ 1759.463463] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1759.464210] RIP: 0033:0x7fadc9940b19 [ 1759.464759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1759.467412] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1759.468519] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1759.469549] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1759.470584] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1759.471622] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1759.472657] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 [ 1759.545719] FAULT_INJECTION: forcing a failure. [ 1759.545719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1759.547605] CPU: 1 PID: 16098 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1759.548611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1759.549822] Call Trace: [ 1759.550219] dump_stack+0x107/0x167 [ 1759.550764] should_fail.cold+0x5/0xa [ 1759.551327] __alloc_pages_nodemask+0x182/0x600 [ 1759.552005] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1759.552877] ? find_held_lock+0x2c/0x110 [ 1759.553478] ? __pmd_alloc+0x2db/0x5e0 [ 1759.554047] ? lock_downgrade+0x6d0/0x6d0 [ 1759.554661] ? do_raw_spin_lock+0x121/0x260 [ 1759.555293] alloc_pages_current+0x187/0x280 [ 1759.555951] pte_alloc_one+0x16/0x1a0 [ 1759.556510] __pte_alloc+0x1d/0x330 [ 1759.557047] handle_mm_fault+0x287f/0x3500 [ 1759.557675] ? lock_chain_count+0x20/0x20 [ 1759.558282] ? __pmd_alloc+0x5e0/0x5e0 [ 1759.558874] __get_user_pages+0x61b/0x1380 [ 1759.559506] ? follow_page_mask+0x1900/0x1900 [ 1759.560174] __get_user_pages_remote+0x1d5/0x870 [ 1759.560874] ? __might_fault+0xd3/0x180 [ 1759.561463] get_user_pages_remote+0x63/0x90 [ 1759.562111] get_arg_page+0xba/0x200 [ 1759.562663] ? acct_arg_size+0xe0/0xe0 [ 1759.563226] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1759.563917] ? count.constprop.0+0x1b3/0x290 [ 1759.564557] copy_string_kernel+0x1b4/0x450 [ 1759.565193] do_execveat_common+0x525/0x8d0 [ 1759.565829] ? bprm_execve+0x1a60/0x1a60 [ 1759.566444] __x64_sys_execveat+0xed/0x140 [ 1759.567067] do_syscall_64+0x33/0x40 [ 1759.567608] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1759.568345] RIP: 0033:0x7f645c050b19 [ 1759.568894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1759.571550] RSP: 002b:00007f64595c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1759.572655] RAX: ffffffffffffffda RBX: 00007f645c163f60 RCX: 00007f645c050b19 [ 1759.573686] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1759.574713] RBP: 00007f64595c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1759.575742] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1759.576775] R13: 00007ffdd2ffb7cf R14: 00007f64595c6300 R15: 0000000000022000 06:50:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 18) 06:50:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x8fe0363d}, 0x0) 06:50:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c) 06:50:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:50:34 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x2400) 06:50:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 18) 06:50:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:50:34 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) [ 1773.174166] FAULT_INJECTION: forcing a failure. [ 1773.174166] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.175524] CPU: 1 PID: 16336 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1773.176102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1773.176822] Call Trace: [ 1773.177052] dump_stack+0x107/0x167 [ 1773.177375] should_fail.cold+0x5/0xa [ 1773.177713] ? ptlock_alloc+0x1d/0x70 [ 1773.178042] should_failslab+0x5/0x20 [ 1773.178368] kmem_cache_alloc+0x5b/0x310 [ 1773.178726] ptlock_alloc+0x1d/0x70 [ 1773.179033] pte_alloc_one+0x68/0x1a0 [ 1773.179353] __pte_alloc+0x1d/0x330 [ 1773.179661] handle_mm_fault+0x287f/0x3500 [ 1773.180030] ? lock_chain_count+0x20/0x20 [ 1773.180387] ? __pmd_alloc+0x5e0/0x5e0 [ 1773.180727] __get_user_pages+0x61b/0x1380 [ 1773.181097] ? follow_page_mask+0x1900/0x1900 [ 1773.181486] __get_user_pages_remote+0x1d5/0x870 [ 1773.181888] ? __might_fault+0xd3/0x180 [ 1773.182225] get_user_pages_remote+0x63/0x90 [ 1773.182604] get_arg_page+0xba/0x200 [ 1773.182918] ? acct_arg_size+0xe0/0xe0 [ 1773.183258] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1773.183667] ? count.constprop.0+0x1b3/0x290 [ 1773.184037] copy_string_kernel+0x1b4/0x450 [ 1773.184414] do_execveat_common+0x525/0x8d0 [ 1773.184778] ? bprm_execve+0x1a60/0x1a60 [ 1773.185127] __x64_sys_execveat+0xed/0x140 [ 1773.185493] do_syscall_64+0x33/0x40 [ 1773.185814] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1773.186255] RIP: 0033:0x7fadc9940b19 [ 1773.186579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.188138] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1773.188783] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1773.189377] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1773.189972] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1773.190577] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1773.191194] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:50:34 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x2a00) 06:50:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:50:34 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3000) [ 1773.243102] FAULT_INJECTION: forcing a failure. [ 1773.243102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1773.244964] CPU: 0 PID: 16338 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1773.245966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1773.247179] Call Trace: [ 1773.247575] dump_stack+0x107/0x167 [ 1773.248116] should_fail.cold+0x5/0xa [ 1773.248685] _copy_from_user+0x2e/0x1b0 [ 1773.249263] __copy_msghdr_from_user+0x91/0x4b0 [ 1773.249938] ? __ia32_sys_shutdown+0x80/0x80 [ 1773.250578] ? inet_sendmsg+0xbd/0x140 [ 1773.251157] ? inet_send_prepare+0x540/0x540 [ 1773.251793] ? __sock_sendmsg+0x55/0x190 [ 1773.252384] ? ____sys_sendmsg+0x426/0x870 [ 1773.252998] sendmsg_copy_msghdr+0xa1/0x160 [ 1773.253625] ? do_recvmmsg+0x6d0/0x6d0 [ 1773.254177] ? lock_chain_count+0x20/0x20 [ 1773.254778] ? lock_downgrade+0x6d0/0x6d0 [ 1773.255387] io_sendmsg+0x62c/0x830 [ 1773.255912] ? io_setup_async_msg+0x2d0/0x2d0 [ 1773.256569] ? mark_lock+0xf5/0x2df0 [ 1773.257116] ? lock_chain_count+0x20/0x20 [ 1773.257748] ? __lock_acquire+0xbb1/0x5b00 [ 1773.258367] io_issue_sqe+0x3b3/0x7700 [ 1773.258943] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1773.259704] ? lock_chain_count+0x20/0x20 [ 1773.260308] ? __is_insn_slot_addr+0x14c/0x290 [ 1773.260983] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1773.261747] ? io_connect+0x610/0x610 [ 1773.262308] ? lock_acquire+0x197/0x470 [ 1773.262892] ? find_held_lock+0x2c/0x110 [ 1773.263498] ? __fget_files+0x26d/0x4c0 [ 1773.264071] ? lock_downgrade+0x6d0/0x6d0 [ 1773.264691] __io_queue_sqe+0x90/0x9d0 [ 1773.265263] ? io_issue_sqe+0x7700/0x7700 [ 1773.265885] io_submit_sqes+0x4461/0x85c0 [ 1773.266521] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1773.267244] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1773.267946] ? lock_downgrade+0x6d0/0x6d0 [ 1773.268543] ? find_held_lock+0x2c/0x110 [ 1773.269133] ? io_submit_sqes+0x85c0/0x85c0 [ 1773.269770] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1773.270473] ? wait_for_completion_io+0x270/0x270 [ 1773.271184] ? rcu_read_lock_any_held+0x75/0xa0 [ 1773.271859] ? vfs_write+0x354/0xa70 [ 1773.272418] ? fput_many+0x2f/0x1a0 [ 1773.272945] ? ksys_write+0x1a9/0x260 [ 1773.273512] ? __ia32_sys_read+0xb0/0xb0 [ 1773.274106] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1773.274585] FAULT_INJECTION: forcing a failure. [ 1773.274585] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.274909] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.274935] do_syscall_64+0x33/0x40 [ 1773.277122] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1773.277864] RIP: 0033:0x7feb2fbf3b19 [ 1773.278402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.281078] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1773.282175] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1773.283208] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1773.284233] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1773.285264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1773.286290] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 [ 1773.287357] CPU: 1 PID: 16324 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1773.287935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1773.288614] Call Trace: [ 1773.288838] dump_stack+0x107/0x167 [ 1773.289138] should_fail.cold+0x5/0xa [ 1773.289456] ? __pmd_alloc+0x94/0x5e0 [ 1773.289778] should_failslab+0x5/0x20 [ 1773.290088] kmem_cache_alloc+0x5b/0x310 [ 1773.290421] __pmd_alloc+0x94/0x5e0 [ 1773.290753] handle_mm_fault+0x1ac4/0x3500 [ 1773.291106] ? lock_chain_count+0x20/0x20 [ 1773.291475] ? __pmd_alloc+0x5e0/0x5e0 [ 1773.291804] __get_user_pages+0x61b/0x1380 [ 1773.292185] ? follow_page_mask+0x1900/0x1900 [ 1773.292556] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1773.293048] __get_user_pages_remote+0x1d5/0x870 [ 1773.293449] ? __might_fault+0xd3/0x180 [ 1773.293806] get_user_pages_remote+0x63/0x90 [ 1773.294171] get_arg_page+0xba/0x200 [ 1773.294506] ? acct_arg_size+0xe0/0xe0 [ 1773.294833] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1773.295256] ? count.constprop.0+0x1b3/0x290 [ 1773.295619] copy_string_kernel+0x1b4/0x450 [ 1773.296014] do_execveat_common+0x525/0x8d0 [ 1773.296375] ? bprm_execve+0x1a60/0x1a60 [ 1773.296749] __x64_sys_execveat+0xed/0x140 [ 1773.297105] do_syscall_64+0x33/0x40 [ 1773.297441] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1773.297863] RIP: 0033:0x7f645c050b19 [ 1773.298193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.299666] RSP: 002b:00007f64595c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1773.300340] RAX: ffffffffffffffda RBX: 00007f645c163f60 RCX: 00007f645c050b19 [ 1773.300974] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1773.301600] RBP: 00007f64595c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1773.302224] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1773.302857] R13: 00007ffdd2ffb7cf R14: 00007f64595c6300 R15: 0000000000022000 06:50:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)={0x208101, 0x49, 0xc}, 0x18) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x24, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)) openat(r0, &(0x7f00000001c0)='./file1\x00', 0x8000, 0x0) syz_io_uring_setup(0x5e8c, &(0x7f00000000c0)={0x0, 0x1fffffff, 0x4, 0x0, 0x60, 0x0, r2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000180)={0x5, 0xe27b, 0x100000000, 0x401, 0xbb02, 0x1}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_complete(r3) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) syz_io_uring_setup(0x3b47, &(0x7f00000002c0)={0x0, 0x45da, 0x8, 0x0, 0x3c5, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000340)) syz_io_uring_complete(r4) 06:50:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:50:47 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 06:50:47 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3600) 06:50:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 06:50:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 19) 06:50:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 19) 06:50:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x74) 06:50:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 1786.777286] FAULT_INJECTION: forcing a failure. [ 1786.777286] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.778591] CPU: 0 PID: 16574 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1786.779221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1786.779961] Call Trace: [ 1786.780203] dump_stack+0x107/0x167 [ 1786.780539] should_fail.cold+0x5/0xa [ 1786.780891] ? create_object.isra.0+0x3a/0xa20 [ 1786.781310] should_failslab+0x5/0x20 [ 1786.781657] kmem_cache_alloc+0x5b/0x310 [ 1786.782025] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1786.782559] create_object.isra.0+0x3a/0xa20 [ 1786.782968] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1786.783423] kmem_cache_alloc+0x159/0x310 [ 1786.783802] ptlock_alloc+0x1d/0x70 [ 1786.784134] pte_alloc_one+0x68/0x1a0 [ 1786.784477] __pte_alloc+0x1d/0x330 [ 1786.784807] handle_mm_fault+0x287f/0x3500 [ 1786.785189] FAULT_INJECTION: forcing a failure. [ 1786.785189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1786.786210] ? lock_chain_count+0x20/0x20 [ 1786.786586] ? __pmd_alloc+0x5e0/0x5e0 [ 1786.786956] __get_user_pages+0x61b/0x1380 [ 1786.787345] ? follow_page_mask+0x1900/0x1900 [ 1786.787759] __get_user_pages_remote+0x1d5/0x870 [ 1786.788186] ? __might_fault+0xd3/0x180 [ 1786.788546] get_user_pages_remote+0x63/0x90 [ 1786.788945] get_arg_page+0xba/0x200 [ 1786.789275] ? acct_arg_size+0xe0/0xe0 [ 1786.789624] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1786.790038] ? count.constprop.0+0x1b3/0x290 [ 1786.790435] copy_string_kernel+0x1b4/0x450 [ 1786.790837] do_execveat_common+0x525/0x8d0 [ 1786.791222] ? bprm_execve+0x1a60/0x1a60 [ 1786.791594] __x64_sys_execveat+0xed/0x140 [ 1786.791979] do_syscall_64+0x33/0x40 [ 1786.792312] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1786.792761] RIP: 0033:0x7fadc9940b19 [ 1786.793088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1786.794721] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1786.795407] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1786.796045] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1786.796664] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1786.797298] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1786.797919] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 [ 1786.798594] CPU: 1 PID: 16581 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1786.799664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1786.800906] Call Trace: [ 1786.801307] dump_stack+0x107/0x167 [ 1786.801865] should_fail.cold+0x5/0xa [ 1786.802446] _copy_from_user+0x2e/0x1b0 [ 1786.803065] iovec_from_user+0x141/0x400 [ 1786.803707] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1786.804508] __import_iovec+0x67/0x590 [ 1786.805122] ? __ia32_sys_shutdown+0x80/0x80 [ 1786.805824] import_iovec+0x83/0xb0 [ 1786.806406] sendmsg_copy_msghdr+0x131/0x160 [ 1786.807107] ? do_recvmmsg+0x6d0/0x6d0 [ 1786.807722] ? lock_chain_count+0x20/0x20 [ 1786.808373] ? lock_downgrade+0x6d0/0x6d0 [ 1786.809037] io_sendmsg+0x62c/0x830 [ 1786.809613] ? io_setup_async_msg+0x2d0/0x2d0 [ 1786.810326] ? mark_lock+0xf5/0x2df0 [ 1786.810937] ? lock_chain_count+0x20/0x20 [ 1786.811622] ? __lock_acquire+0xbb1/0x5b00 [ 1786.812295] io_issue_sqe+0x3b3/0x7700 [ 1786.812918] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1786.813727] ? lock_chain_count+0x20/0x20 [ 1786.814378] ? __is_insn_slot_addr+0x14c/0x290 [ 1786.815099] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1786.815891] ? io_connect+0x610/0x610 [ 1786.816486] ? lock_acquire+0x197/0x470 [ 1786.817092] ? find_held_lock+0x2c/0x110 [ 1786.817729] ? __fget_files+0x26d/0x4c0 06:50:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 1786.818337] ? lock_downgrade+0x6d0/0x6d0 [ 1786.819133] __io_queue_sqe+0x90/0x9d0 [ 1786.819752] ? io_issue_sqe+0x7700/0x7700 [ 1786.820409] io_submit_sqes+0x4461/0x85c0 [ 1786.821063] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1786.821831] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1786.822578] ? lock_downgrade+0x6d0/0x6d0 [ 1786.823229] ? find_held_lock+0x2c/0x110 [ 1786.823865] ? io_submit_sqes+0x85c0/0x85c0 [ 1786.824541] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1786.825295] ? wait_for_completion_io+0x270/0x270 [ 1786.826043] ? rcu_read_lock_any_held+0x75/0xa0 [ 1786.826769] ? vfs_write+0x354/0xa70 [ 1786.827355] ? fput_many+0x2f/0x1a0 [ 1786.827912] ? ksys_write+0x1a9/0x260 [ 1786.828502] ? __ia32_sys_read+0xb0/0xb0 [ 1786.829135] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1786.829943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1786.830735] do_syscall_64+0x33/0x40 [ 1786.831324] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1786.832115] RIP: 0033:0x7feb2fbf3b19 [ 1786.832693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1786.835524] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1786.836695] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1786.837787] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1786.838116] FAULT_INJECTION: forcing a failure. [ 1786.838116] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.838878] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1786.838889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1786.838899] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 [ 1786.842009] CPU: 0 PID: 16573 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1786.842622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1786.843354] Call Trace: [ 1786.843589] dump_stack+0x107/0x167 [ 1786.843916] should_fail.cold+0x5/0xa [ 1786.844263] ? create_object.isra.0+0x3a/0xa20 [ 1786.844670] should_failslab+0x5/0x20 [ 1786.845011] kmem_cache_alloc+0x5b/0x310 [ 1786.845370] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1786.845899] create_object.isra.0+0x3a/0xa20 [ 1786.846299] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1786.846758] kmem_cache_alloc+0x159/0x310 [ 1786.847137] ptlock_alloc+0x1d/0x70 [ 1786.847468] pte_alloc_one+0x68/0x1a0 [ 1786.847807] __pte_alloc+0x1d/0x330 [ 1786.848131] handle_mm_fault+0x287f/0x3500 [ 1786.848509] ? lock_chain_count+0x20/0x20 [ 1786.848878] ? __pmd_alloc+0x5e0/0x5e0 [ 1786.849234] __get_user_pages+0x61b/0x1380 [ 1786.849620] ? follow_page_mask+0x1900/0x1900 [ 1786.850028] __get_user_pages_remote+0x1d5/0x870 [ 1786.850462] ? __might_fault+0xd3/0x180 [ 1786.850822] get_user_pages_remote+0x63/0x90 [ 1786.851219] get_arg_page+0xba/0x200 [ 1786.851550] ? acct_arg_size+0xe0/0xe0 [ 1786.851912] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1786.852332] ? count.constprop.0+0x1b3/0x290 [ 1786.852725] copy_string_kernel+0x1b4/0x450 [ 1786.853113] do_execveat_common+0x525/0x8d0 [ 1786.853497] ? bprm_execve+0x1a60/0x1a60 [ 1786.853866] __x64_sys_execveat+0xed/0x140 [ 1786.854258] do_syscall_64+0x33/0x40 [ 1786.854583] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1786.855052] RIP: 0033:0x7f645c050b19 [ 1786.855382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1786.857012] RSP: 002b:00007f64595c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1786.857680] RAX: ffffffffffffffda RBX: 00007f645c163f60 RCX: 00007f645c050b19 [ 1786.858312] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1786.858948] RBP: 00007f64595c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1786.859583] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1786.860202] R13: 00007ffdd2ffb7cf R14: 00007f64595c6300 R15: 0000000000022000 06:50:47 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3c00) 06:50:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 20) 06:50:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:50:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) [ 1786.970952] FAULT_INJECTION: forcing a failure. [ 1786.970952] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.972128] CPU: 0 PID: 16620 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1786.972720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1786.973406] Call Trace: [ 1786.973631] dump_stack+0x107/0x167 [ 1786.973948] should_fail.cold+0x5/0xa [ 1786.974276] ? __anon_vma_prepare+0x62/0x500 [ 1786.974648] should_failslab+0x5/0x20 [ 1786.974983] kmem_cache_alloc+0x5b/0x310 [ 1786.975337] __anon_vma_prepare+0x62/0x500 [ 1786.975680] ? __pte_alloc+0x194/0x330 [ 1786.976001] handle_mm_fault+0x2b2d/0x3500 [ 1786.976365] ? lock_chain_count+0x20/0x20 [ 1786.976718] ? __pmd_alloc+0x5e0/0x5e0 [ 1786.977053] __get_user_pages+0x61b/0x1380 [ 1786.977417] ? follow_page_mask+0x1900/0x1900 [ 1786.977805] __get_user_pages_remote+0x1d5/0x870 [ 1786.978203] ? __might_fault+0xd3/0x180 [ 1786.978544] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1786.978991] get_user_pages_remote+0x63/0x90 [ 1786.979367] get_arg_page+0xba/0x200 [ 1786.979670] ? acct_arg_size+0xe0/0xe0 [ 1786.980001] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1786.980386] ? count.constprop.0+0x1b3/0x290 [ 1786.980760] copy_string_kernel+0x1b4/0x450 [ 1786.981115] do_execveat_common+0x525/0x8d0 [ 1786.981483] ? bprm_execve+0x1a60/0x1a60 [ 1786.981820] __x64_sys_execveat+0xed/0x140 [ 1786.982183] do_syscall_64+0x33/0x40 [ 1786.982495] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1786.982912] RIP: 0033:0x7fadc9940b19 [ 1786.983231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1786.984695] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1786.985339] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1786.985912] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1786.986518] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1786.987125] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1786.987724] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:50:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:50:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 20) [ 1787.078896] FAULT_INJECTION: forcing a failure. [ 1787.078896] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.079915] CPU: 0 PID: 16749 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1787.080482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1787.081152] Call Trace: [ 1787.081366] dump_stack+0x107/0x167 [ 1787.081659] should_fail.cold+0x5/0xa [ 1787.081965] ? __anon_vma_prepare+0x62/0x500 [ 1787.082317] should_failslab+0x5/0x20 [ 1787.082620] kmem_cache_alloc+0x5b/0x310 [ 1787.082959] __anon_vma_prepare+0x62/0x500 [ 1787.083301] ? __pte_alloc+0x194/0x330 [ 1787.083610] handle_mm_fault+0x2b2d/0x3500 [ 1787.083963] ? lock_chain_count+0x20/0x20 [ 1787.084296] ? __pmd_alloc+0x5e0/0x5e0 [ 1787.084630] __get_user_pages+0x61b/0x1380 [ 1787.084970] ? follow_page_mask+0x1900/0x1900 [ 1787.085334] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1787.085780] __get_user_pages_remote+0x1d5/0x870 [ 1787.086156] ? __might_fault+0xd3/0x180 [ 1787.086484] get_user_pages_remote+0x63/0x90 [ 1787.086850] get_arg_page+0xba/0x200 [ 1787.087144] ? acct_arg_size+0xe0/0xe0 [ 1787.087451] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1787.087834] ? count.constprop.0+0x1b3/0x290 [ 1787.088183] copy_string_kernel+0x1b4/0x450 [ 1787.088526] do_execveat_common+0x525/0x8d0 [ 1787.088878] ? bprm_execve+0x1a60/0x1a60 [ 1787.089206] __x64_sys_execveat+0xed/0x140 [ 1787.089544] do_syscall_64+0x33/0x40 [ 1787.089846] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1787.090248] RIP: 0033:0x7f645c050b19 [ 1787.090546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1787.092021] RSP: 002b:00007f64595c6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1787.092615] RAX: ffffffffffffffda RBX: 00007f645c163f60 RCX: 00007f645c050b19 [ 1787.093167] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1787.093731] RBP: 00007f64595c61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1787.094303] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1787.094865] R13: 00007ffdd2ffb7cf R14: 00007f64595c6300 R15: 0000000000022000 06:51:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:51:01 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000340)={0x1, 0x8, 0x3}) read(r1, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x9080, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="11dff54c43212b334c0000", @ANYRES16=r0, @ANYBLOB="100429bd7000fbdbdf0a0001007770616e34000000050036000100000005003300a01afb93c8838b650000bcb5ec75000100000005003300070000000a000100777f907efe17aa024534b57d7f"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x24000090) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x15, 0x0, &(0x7f0000000200)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:51:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 21) 06:51:01 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3f00) 06:51:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 06:51:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 21) 06:51:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a) 06:51:01 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) [ 1800.538937] FAULT_INJECTION: forcing a failure. [ 1800.538937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1800.541023] CPU: 1 PID: 16826 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1800.542030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1800.543243] Call Trace: [ 1800.543641] dump_stack+0x107/0x167 [ 1800.544173] should_fail.cold+0x5/0xa [ 1800.544735] _copy_from_iter_full+0x201/0xa60 [ 1800.545402] rawv6_sendmsg+0x20e8/0x3b20 [ 1800.546010] ? rawv6_bind+0xa40/0xa40 [ 1800.546571] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1800.547348] ? lock_acquire+0x197/0x470 [ 1800.547926] ? find_held_lock+0x2c/0x110 [ 1800.548525] ? __might_fault+0xd3/0x180 [ 1800.549110] ? lock_downgrade+0x6d0/0x6d0 [ 1800.549710] ? lock_downgrade+0x6d0/0x6d0 [ 1800.550316] ? sock_has_perm+0x1ea/0x280 [ 1800.550922] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1800.551689] ? iovec_from_user+0x104/0x400 [ 1800.552305] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1800.553042] ? rawv6_bind+0xa40/0xa40 [ 1800.553602] inet_sendmsg+0x11d/0x140 [ 1800.554157] ? inet_send_prepare+0x540/0x540 [ 1800.554793] __sock_sendmsg+0x13c/0x190 [ 1800.555377] ____sys_sendmsg+0x70d/0x870 [ 1800.555967] ? sock_write_iter+0x3d0/0x3d0 [ 1800.556580] ? sendmsg_copy_msghdr+0xba/0x160 [ 1800.557228] ? do_recvmmsg+0x6d0/0x6d0 [ 1800.557795] ? lock_chain_count+0x20/0x20 [ 1800.558402] ? lock_downgrade+0x6d0/0x6d0 [ 1800.559019] __sys_sendmsg_sock+0x26/0x40 [ 1800.559622] io_sendmsg+0x1e6/0x830 [ 1800.560155] ? io_setup_async_msg+0x2d0/0x2d0 [ 1800.560813] ? mark_lock+0xf5/0x2df0 [ 1800.561362] ? lock_chain_count+0x20/0x20 [ 1800.561998] ? __lock_acquire+0xbb1/0x5b00 [ 1800.562619] io_issue_sqe+0x3b3/0x7700 [ 1800.563196] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1800.563958] ? lock_chain_count+0x20/0x20 [ 1800.564564] ? __is_insn_slot_addr+0x14c/0x290 [ 1800.565235] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1800.565987] ? io_connect+0x610/0x610 [ 1800.566544] ? lock_acquire+0x197/0x470 [ 1800.567129] ? find_held_lock+0x2c/0x110 [ 1800.567728] ? __fget_files+0x26d/0x4c0 [ 1800.568312] ? lock_downgrade+0x6d0/0x6d0 [ 1800.568917] __io_queue_sqe+0x90/0x9d0 [ 1800.569490] ? io_issue_sqe+0x7700/0x7700 [ 1800.570104] io_submit_sqes+0x4461/0x85c0 [ 1800.570732] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1800.571463] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1800.572172] ? lock_downgrade+0x6d0/0x6d0 [ 1800.572772] ? find_held_lock+0x2c/0x110 [ 1800.573370] ? io_submit_sqes+0x85c0/0x85c0 [ 1800.574007] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1800.574719] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1800.575486] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1800.576263] ? trace_hardirqs_on+0x5b/0x180 [ 1800.576896] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1800.577684] ? __io_uring_cancel+0x20/0x20 [ 1800.578310] do_syscall_64+0x33/0x40 [ 1800.578851] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1800.579600] RIP: 0033:0x7feb2fbf3b19 [ 1800.580147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1800.582786] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1800.583895] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1800.584930] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1800.585958] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1800.587001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1800.588029] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:51:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 06:51:01 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4000) [ 1800.721985] FAULT_INJECTION: forcing a failure. [ 1800.721985] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.723866] CPU: 1 PID: 16838 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1800.724876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1800.726084] Call Trace: [ 1800.726479] dump_stack+0x107/0x167 [ 1800.727024] should_fail.cold+0x5/0xa [ 1800.727588] ? __anon_vma_prepare+0x62/0x500 [ 1800.728232] should_failslab+0x5/0x20 [ 1800.728792] kmem_cache_alloc+0x5b/0x310 [ 1800.729396] __anon_vma_prepare+0x62/0x500 [ 1800.730015] ? __pte_alloc+0x194/0x330 [ 1800.730578] handle_mm_fault+0x2b2d/0x3500 [ 1800.731213] ? __pmd_alloc+0x5e0/0x5e0 [ 1800.731803] __get_user_pages+0x61b/0x1380 [ 1800.732432] ? follow_page_mask+0x1900/0x1900 [ 1800.733091] ? lock_acquire+0xaf/0x470 [ 1800.733670] __get_user_pages_remote+0x1d5/0x870 [ 1800.734363] ? __might_fault+0xd3/0x180 [ 1800.734948] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1800.735746] get_user_pages_remote+0x63/0x90 [ 1800.736391] get_arg_page+0xba/0x200 [ 1800.736938] ? acct_arg_size+0xe0/0xe0 [ 1800.737507] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1800.738195] ? count.constprop.0+0x1b3/0x290 [ 1800.738841] copy_string_kernel+0x1b4/0x450 [ 1800.739477] do_execveat_common+0x525/0x8d0 [ 1800.740115] ? bprm_execve+0x1a60/0x1a60 [ 1800.740724] __x64_sys_execveat+0xed/0x140 [ 1800.741348] do_syscall_64+0x33/0x40 [ 1800.741891] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1800.742640] RIP: 0033:0x7fadc9940b19 [ 1800.743192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1800.745830] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1800.746947] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1800.747982] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1800.749012] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1800.750045] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1800.751081] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:51:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:51:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:51:01 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4800) 06:51:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 06:51:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x300) 06:51:02 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c00) 06:51:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) [ 1800.985794] cgroup: fork rejected by pids controller in /syz6 [ 1801.060274] FAULT_INJECTION: forcing a failure. [ 1801.060274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1801.062356] CPU: 1 PID: 17145 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1801.063373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1801.064574] Call Trace: [ 1801.064966] dump_stack+0x107/0x167 [ 1801.065508] should_fail.cold+0x5/0xa [ 1801.066072] _copy_from_user+0x2e/0x1b0 [ 1801.066662] __copy_msghdr_from_user+0x91/0x4b0 [ 1801.067352] ? __ia32_sys_shutdown+0x80/0x80 [ 1801.067999] ? inet_sendmsg+0xbd/0x140 [ 1801.068571] ? inet_send_prepare+0x540/0x540 [ 1801.069212] ? __sock_sendmsg+0x55/0x190 [ 1801.069819] ? ____sys_sendmsg+0x426/0x870 [ 1801.070446] sendmsg_copy_msghdr+0xa1/0x160 [ 1801.071080] ? do_recvmmsg+0x6d0/0x6d0 [ 1801.071649] ? lock_chain_count+0x20/0x20 [ 1801.072259] ? lock_downgrade+0x6d0/0x6d0 [ 1801.072873] io_sendmsg+0x62c/0x830 [ 1801.073408] ? io_setup_async_msg+0x2d0/0x2d0 [ 1801.074071] ? mark_lock+0xf5/0x2df0 [ 1801.074620] ? lock_chain_count+0x20/0x20 [ 1801.075262] ? __lock_acquire+0xbb1/0x5b00 [ 1801.075886] io_issue_sqe+0x3b3/0x7700 [ 1801.076466] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1801.077229] ? lock_chain_count+0x20/0x20 [ 1801.077833] ? __is_insn_slot_addr+0x14c/0x290 [ 1801.078502] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1801.079274] ? io_connect+0x610/0x610 [ 1801.079835] ? lock_acquire+0x197/0x470 [ 1801.080414] ? find_held_lock+0x2c/0x110 [ 1801.081007] ? __fget_files+0x26d/0x4c0 [ 1801.081590] ? lock_downgrade+0x6d0/0x6d0 [ 1801.082197] __io_queue_sqe+0x90/0x9d0 [ 1801.082771] ? io_issue_sqe+0x7700/0x7700 [ 1801.083397] io_submit_sqes+0x4461/0x85c0 [ 1801.084031] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1801.084754] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1801.085458] ? lock_downgrade+0x6d0/0x6d0 [ 1801.086062] ? find_held_lock+0x2c/0x110 [ 1801.086665] ? io_submit_sqes+0x85c0/0x85c0 [ 1801.087314] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1801.088021] ? wait_for_completion_io+0x270/0x270 [ 1801.088728] ? rcu_read_lock_any_held+0x75/0xa0 [ 1801.089406] ? vfs_write+0x354/0xa70 [ 1801.089953] ? fput_many+0x2f/0x1a0 [ 1801.090488] ? ksys_write+0x1a9/0x260 [ 1801.091052] ? __ia32_sys_read+0xb0/0xb0 [ 1801.091655] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1801.092413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1801.093173] do_syscall_64+0x33/0x40 [ 1801.093719] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1801.094464] RIP: 0033:0x7feb2fbf3b19 [ 1801.095015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1801.097663] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1801.098767] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1801.099805] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1801.100822] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1801.101847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1801.102876] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:51:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x1, 0x2, 0x1d, 0x19, "11501d999e692384e7bbf1880c0da9731892aed8cf94b0c20e1b6b0d98521b12f449f7694856408187dcd642e21b1395012e27a8df4094e060a73698068a0181", "0da0bbbed5c27e660d9ee435fe123a5c11f00568553c96d918442135b217706f", [0xbb, 0x8]}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000440), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x9, 0x12, 0x12, 0x8, "e580f286f867baa14d9989abf4ba707cd9af2805e4185050dd7cd4c712e8798592703e3768dda617a5550e559eb765e8e837d1fae8ef111ef1f33735427ef20b", "87eca78be5cfd2ff13e56217ef158314e3e3f1c3ca22c70cc5a1ce8d2887401d", [0xfffffffffffffffc, 0x8]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000380)={0x0, {}, 0x0, {}, 0x40, 0x6, 0x17, 0x10, "6bdb1117b4ae269c12ac6be6a3346f41789d7d80bce1c52894310e34eb361772900d3a75ae8d6f1252a89d46934ae3df85dadd08baf09c4811e80fa6b7170f86", "c1aa6f46559f5cf2f39dc4f10c59f59bfc4b21b4f72e8857a76a87d053e2494b", [0x10001, 0x98a]}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xefa2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:51:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 22) 06:51:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x2) 06:51:02 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6800) 06:51:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:51:02 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c00) 06:51:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x2) [ 1801.275845] FAULT_INJECTION: forcing a failure. [ 1801.275845] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.277752] CPU: 1 PID: 17183 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1801.278762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1801.279972] Call Trace: [ 1801.280370] dump_stack+0x107/0x167 [ 1801.280907] should_fail.cold+0x5/0xa [ 1801.281467] ? __anon_vma_prepare+0x270/0x500 [ 1801.282121] should_failslab+0x5/0x20 [ 1801.282673] kmem_cache_alloc+0x5b/0x310 [ 1801.283277] __anon_vma_prepare+0x270/0x500 [ 1801.283907] ? __pte_alloc+0x194/0x330 [ 1801.284480] handle_mm_fault+0x2b2d/0x3500 06:51:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x3) [ 1801.285104] ? __pmd_alloc+0x5e0/0x5e0 [ 1801.285848] __get_user_pages+0x61b/0x1380 [ 1801.286471] ? follow_page_mask+0x1900/0x1900 [ 1801.287148] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1801.287813] __get_user_pages_remote+0x1d5/0x870 [ 1801.288500] ? __might_fault+0xd3/0x180 [ 1801.289082] get_user_pages_remote+0x63/0x90 [ 1801.289731] get_arg_page+0xba/0x200 [ 1801.290276] ? acct_arg_size+0xe0/0xe0 [ 1801.290839] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1801.291530] ? count.constprop.0+0x1b3/0x290 [ 1801.292175] copy_string_kernel+0x1b4/0x450 [ 1801.292816] do_execveat_common+0x525/0x8d0 [ 1801.293442] ? bprm_execve+0x1a60/0x1a60 [ 1801.294050] __x64_sys_execveat+0xed/0x140 [ 1801.294674] do_syscall_64+0x33/0x40 [ 1801.295222] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1801.295966] RIP: 0033:0x7fadc9940b19 [ 1801.296515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1801.299153] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1801.300261] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1801.301291] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1801.302324] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1801.303360] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1801.304390] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:51:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) 06:51:02 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7400) 06:51:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 1801.446108] FAULT_INJECTION: forcing a failure. [ 1801.446108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1801.447947] CPU: 0 PID: 17309 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1801.448939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1801.450100] Call Trace: [ 1801.450483] dump_stack+0x107/0x167 [ 1801.451031] should_fail.cold+0x5/0xa [ 1801.451579] _copy_from_user+0x2e/0x1b0 [ 1801.452148] move_addr_to_kernel.part.0+0x31/0x110 [ 1801.452847] __copy_msghdr_from_user+0x3e1/0x4b0 [ 1801.453526] ? __ia32_sys_shutdown+0x80/0x80 [ 1801.454155] ? __sock_sendmsg+0x55/0x190 [ 1801.454737] ? ____sys_sendmsg+0x426/0x870 [ 1801.455351] sendmsg_copy_msghdr+0xa1/0x160 [ 1801.455966] ? do_recvmmsg+0x6d0/0x6d0 [ 1801.456520] ? lock_chain_count+0x20/0x20 [ 1801.457104] ? lock_downgrade+0x6d0/0x6d0 [ 1801.457707] io_sendmsg+0x62c/0x830 [ 1801.458230] ? io_setup_async_msg+0x2d0/0x2d0 [ 1801.458876] ? mark_lock+0xf5/0x2df0 [ 1801.459421] ? lock_chain_count+0x20/0x20 [ 1801.460037] ? __lock_acquire+0xbb1/0x5b00 [ 1801.460642] io_issue_sqe+0x3b3/0x7700 [ 1801.461209] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1801.461955] ? lock_chain_count+0x20/0x20 [ 1801.462543] ? __is_insn_slot_addr+0x14c/0x290 [ 1801.463195] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1801.463939] ? io_connect+0x610/0x610 [ 1801.464481] ? lock_acquire+0x197/0x470 [ 1801.465040] ? find_held_lock+0x2c/0x110 [ 1801.465619] ? __fget_files+0x26d/0x4c0 [ 1801.466179] ? lock_downgrade+0x6d0/0x6d0 [ 1801.466774] __io_queue_sqe+0x90/0x9d0 [ 1801.467351] ? io_issue_sqe+0x7700/0x7700 [ 1801.467953] io_submit_sqes+0x4461/0x85c0 [ 1801.468577] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1801.469279] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1801.469958] ? lock_downgrade+0x6d0/0x6d0 [ 1801.470537] ? find_held_lock+0x2c/0x110 [ 1801.471117] ? io_submit_sqes+0x85c0/0x85c0 [ 1801.471735] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1801.472433] ? wait_for_completion_io+0x270/0x270 [ 1801.473111] ? rcu_read_lock_any_held+0x75/0xa0 [ 1801.473768] ? vfs_write+0x354/0xa70 [ 1801.474295] ? fput_many+0x2f/0x1a0 [ 1801.474808] ? ksys_write+0x1a9/0x260 [ 1801.475368] ? __ia32_sys_read+0xb0/0xb0 [ 1801.475950] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1801.476687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1801.477431] do_syscall_64+0x33/0x40 [ 1801.477958] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1801.478682] RIP: 0033:0x7feb2fbf3b19 [ 1801.479218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1801.481788] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1801.482845] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1801.483852] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1801.484849] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1801.485854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1801.486838] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:51:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x500) 06:51:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 06:51:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:51:18 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a00) 06:51:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 23) 06:51:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x8) 06:51:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3) 06:51:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:51:18 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x80000) [ 1817.807953] FAULT_INJECTION: forcing a failure. [ 1817.807953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1817.810690] CPU: 0 PID: 17536 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1817.812057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1817.812286] FAULT_INJECTION: forcing a failure. [ 1817.812286] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.813676] Call Trace: [ 1817.813701] dump_stack+0x107/0x167 [ 1817.813734] should_fail.cold+0x5/0xa [ 1817.816818] _copy_from_user+0x2e/0x1b0 [ 1817.817610] iovec_from_user+0x141/0x400 [ 1817.818417] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1817.819201] __import_iovec+0x67/0x590 [ 1817.819965] ? __ia32_sys_shutdown+0x80/0x80 [ 1817.820842] import_iovec+0x83/0xb0 [ 1817.821585] sendmsg_copy_msghdr+0x131/0x160 [ 1817.822467] ? do_recvmmsg+0x6d0/0x6d0 [ 1817.823250] ? lock_chain_count+0x20/0x20 [ 1817.824082] ? lock_downgrade+0x6d0/0x6d0 [ 1817.824917] io_sendmsg+0x62c/0x830 [ 1817.825639] ? io_setup_async_msg+0x2d0/0x2d0 [ 1817.826528] ? mark_lock+0xf5/0x2df0 [ 1817.827110] ? lock_chain_count+0x20/0x20 [ 1817.827977] ? __lock_acquire+0xbb1/0x5b00 [ 1817.828826] io_issue_sqe+0x3b3/0x7700 [ 1817.829616] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1817.830651] ? lock_chain_count+0x20/0x20 [ 1817.831482] ? __is_insn_slot_addr+0x14c/0x290 [ 1817.832396] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1817.833426] ? io_connect+0x610/0x610 [ 1817.834201] ? lock_acquire+0x197/0x470 [ 1817.834992] ? find_held_lock+0x2c/0x110 [ 1817.835829] ? __fget_files+0x26d/0x4c0 [ 1817.836617] ? lock_downgrade+0x6d0/0x6d0 [ 1817.837448] __io_queue_sqe+0x90/0x9d0 [ 1817.838054] ? io_issue_sqe+0x7700/0x7700 [ 1817.838886] io_submit_sqes+0x4461/0x85c0 [ 1817.839749] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1817.840723] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1817.841692] ? lock_downgrade+0x6d0/0x6d0 [ 1817.842536] ? io_submit_sqes+0x85c0/0x85c0 [ 1817.843413] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1817.844375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1817.845412] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1817.846473] ? trace_hardirqs_on+0x5b/0x180 [ 1817.847218] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1817.848308] do_syscall_64+0x33/0x40 [ 1817.848944] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1817.849939] RIP: 0033:0x7feb2fbf3b19 [ 1817.850590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1817.854152] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1817.855412] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1817.856492] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1817.857564] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1817.858636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1817.859710] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 [ 1817.860808] CPU: 1 PID: 17530 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1817.861501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1817.862278] Call Trace: [ 1817.862539] dump_stack+0x107/0x167 [ 1817.862889] should_fail.cold+0x5/0xa [ 1817.863257] ? create_object.isra.0+0x3a/0xa20 [ 1817.863690] should_failslab+0x5/0x20 [ 1817.864052] kmem_cache_alloc+0x5b/0x310 [ 1817.864437] create_object.isra.0+0x3a/0xa20 [ 1817.864852] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1817.865332] kmem_cache_alloc+0x159/0x310 [ 1817.865729] __anon_vma_prepare+0x270/0x500 [ 1817.866135] ? __pte_alloc+0x194/0x330 [ 1817.866506] handle_mm_fault+0x2b2d/0x3500 [ 1817.866910] ? lock_chain_count+0x20/0x20 [ 1817.867315] ? __pmd_alloc+0x5e0/0x5e0 [ 1817.867694] __get_user_pages+0x61b/0x1380 [ 1817.868099] ? follow_page_mask+0x1900/0x1900 [ 1817.868531] __get_user_pages_remote+0x1d5/0x870 [ 1817.868975] ? __might_fault+0xd3/0x180 [ 1817.869353] get_user_pages_remote+0x63/0x90 [ 1817.869771] get_arg_page+0xba/0x200 [ 1817.870123] ? acct_arg_size+0xe0/0xe0 [ 1817.870492] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1817.870934] ? count.constprop.0+0x1b3/0x290 [ 1817.871360] copy_string_kernel+0x1b4/0x450 [ 1817.871769] do_execveat_common+0x525/0x8d0 [ 1817.872174] ? bprm_execve+0x1a60/0x1a60 [ 1817.872566] __x64_sys_execveat+0xed/0x140 [ 1817.872970] do_syscall_64+0x33/0x40 [ 1817.873321] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1817.873800] RIP: 0033:0x7fadc9940b19 [ 1817.874148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1817.875865] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1817.876575] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1817.877243] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1817.877903] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1817.878562] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1817.879226] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:51:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x9) 06:51:32 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 06:51:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:51:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 24) 06:51:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4) 06:51:32 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x100000) 06:51:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:51:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xf) 06:51:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x600) 06:51:32 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x200000) [ 1831.370739] FAULT_INJECTION: forcing a failure. [ 1831.370739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1831.372861] CPU: 1 PID: 17869 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1831.373897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1831.375120] Call Trace: [ 1831.375538] dump_stack+0x107/0x167 [ 1831.376092] should_fail.cold+0x5/0xa [ 1831.376668] _copy_from_iter_full+0x201/0xa60 [ 1831.377356] rawv6_sendmsg+0x20e8/0x3b20 [ 1831.377978] ? rawv6_bind+0xa40/0xa40 [ 1831.378566] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1831.379351] ? lock_acquire+0x197/0x470 [ 1831.379934] ? find_held_lock+0x2c/0x110 [ 1831.380544] ? __might_fault+0xd3/0x180 [ 1831.381128] ? lock_downgrade+0x6d0/0x6d0 [ 1831.381730] ? lock_downgrade+0x6d0/0x6d0 [ 1831.382360] ? sock_has_perm+0x1ea/0x280 [ 1831.382955] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1831.383728] ? iovec_from_user+0x104/0x400 [ 1831.384357] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1831.385100] ? rawv6_bind+0xa40/0xa40 [ 1831.385665] inet_sendmsg+0x11d/0x140 [ 1831.386225] ? inet_send_prepare+0x540/0x540 [ 1831.386873] __sock_sendmsg+0x13c/0x190 [ 1831.387476] ____sys_sendmsg+0x70d/0x870 [ 1831.388067] ? sock_write_iter+0x3d0/0x3d0 [ 1831.388687] ? sendmsg_copy_msghdr+0xba/0x160 [ 1831.389346] ? do_recvmmsg+0x6d0/0x6d0 [ 1831.389919] ? lock_chain_count+0x20/0x20 [ 1831.390523] ? lock_downgrade+0x6d0/0x6d0 [ 1831.391148] __sys_sendmsg_sock+0x26/0x40 [ 1831.391766] io_sendmsg+0x1e6/0x830 [ 1831.392292] ? io_setup_async_msg+0x2d0/0x2d0 [ 1831.392955] ? mark_lock+0xf5/0x2df0 [ 1831.393498] ? lock_chain_count+0x20/0x20 [ 1831.394146] ? __lock_acquire+0xbb1/0x5b00 [ 1831.394784] io_issue_sqe+0x3b3/0x7700 [ 1831.395381] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1831.396141] ? lock_chain_count+0x20/0x20 [ 1831.396740] ? __is_insn_slot_addr+0x14c/0x290 [ 1831.397411] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1831.398166] ? io_connect+0x610/0x610 [ 1831.398737] ? lock_acquire+0x197/0x470 [ 1831.399324] ? find_held_lock+0x2c/0x110 [ 1831.399925] ? __fget_files+0x26d/0x4c0 [ 1831.400508] ? lock_downgrade+0x6d0/0x6d0 [ 1831.401115] __io_queue_sqe+0x90/0x9d0 [ 1831.401694] ? io_issue_sqe+0x7700/0x7700 [ 1831.402309] io_submit_sqes+0x4461/0x85c0 [ 1831.402937] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1831.403661] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1831.404367] ? lock_downgrade+0x6d0/0x6d0 [ 1831.404968] ? find_held_lock+0x2c/0x110 [ 1831.405565] ? io_submit_sqes+0x85c0/0x85c0 [ 1831.406199] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1831.406900] ? wait_for_completion_io+0x270/0x270 [ 1831.407604] ? rcu_read_lock_any_held+0x75/0xa0 [ 1831.408297] ? vfs_write+0x354/0xa70 [ 1831.408839] ? fput_many+0x2f/0x1a0 [ 1831.409372] ? ksys_write+0x1a9/0x260 06:51:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xf0) [ 1831.409935] ? __ia32_sys_read+0xb0/0xb0 [ 1831.410726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1831.411499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1831.412251] do_syscall_64+0x33/0x40 [ 1831.412788] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1831.413536] RIP: 0033:0x7feb2fbf3b19 [ 1831.414076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1831.416706] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1831.417808] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1831.418833] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1831.419872] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1831.420893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1831.421914] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 [ 1831.483526] FAULT_INJECTION: forcing a failure. [ 1831.483526] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1831.485332] CPU: 1 PID: 17864 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1831.486344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1831.487547] Call Trace: [ 1831.487941] dump_stack+0x107/0x167 [ 1831.488480] should_fail.cold+0x5/0xa [ 1831.489041] __alloc_pages_nodemask+0x182/0x600 [ 1831.489720] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1831.490593] ? up_write+0x191/0x550 [ 1831.491127] ? rwlock_bug.part.0+0x90/0x90 [ 1831.491754] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1831.492551] alloc_pages_vma+0xbb/0x410 [ 1831.493135] handle_mm_fault+0x152f/0x3500 [ 1831.493755] ? lock_chain_count+0x20/0x20 [ 1831.494358] ? __pmd_alloc+0x5e0/0x5e0 [ 1831.494954] __get_user_pages+0x61b/0x1380 [ 1831.495598] ? follow_page_mask+0x1900/0x1900 [ 1831.496269] __get_user_pages_remote+0x1d5/0x870 [ 1831.496956] ? __might_fault+0xd3/0x180 [ 1831.497541] get_user_pages_remote+0x63/0x90 [ 1831.498185] get_arg_page+0xba/0x200 [ 1831.498728] ? acct_arg_size+0xe0/0xe0 [ 1831.499301] ? get_user_arg_ptr.isra.0+0x58/0xc0 [ 1831.499994] ? count.constprop.0+0x1b3/0x290 [ 1831.500641] copy_string_kernel+0x1b4/0x450 [ 1831.501270] do_execveat_common+0x525/0x8d0 [ 1831.501912] ? bprm_execve+0x1a60/0x1a60 [ 1831.502526] __x64_sys_execveat+0xed/0x140 [ 1831.503150] do_syscall_64+0x33/0x40 [ 1831.503706] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1831.504453] RIP: 0033:0x7fadc9940b19 [ 1831.504997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1831.507648] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1831.508745] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1831.509771] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1831.510798] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1831.511835] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1831.512858] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:51:47 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 06:51:47 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x400000) 06:51:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)=0x0) io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x100010, r1, 0x8000000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000000c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100), 0x1, 0x1}, 0x40) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f00000002c0)="f8417f04216a10f88dacce688a9c2760db80437589c669b4abf27f56547b050a889af84dc96b7c458119b8c0b2051c04584e60cdf09259dfca845703e5b8df9f0d2ad1e9b03ea744ea775508573247f99a0ca2213e8e0749d0f9a00a9591fef3a4183536e09e4f15ef1b54cabfa4b550fba38d7387fed9037b25186c4753d1de0685e59d4c9bbe44d51c84dfaa5779d3eaaaaf666c2948d0e5903c7e5c645fca8c96a15eeccb4f2f287414258edab191f62c6e84756d7a07886821f48a62e3a3ee") 06:51:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x5) 06:51:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:51:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x700) 06:51:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x300) 06:51:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 25) [ 1846.886107] FAULT_INJECTION: forcing a failure. [ 1846.886107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1846.887961] CPU: 0 PID: 18202 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1846.889010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1846.890267] Call Trace: [ 1846.890678] dump_stack+0x107/0x167 [ 1846.891243] should_fail.cold+0x5/0xa [ 1846.891853] _copy_from_user+0x2e/0x1b0 [ 1846.892467] __copy_msghdr_from_user+0x91/0x4b0 [ 1846.893178] ? __ia32_sys_shutdown+0x80/0x80 [ 1846.893850] ? inet_sendmsg+0xbd/0x140 [ 1846.894442] ? inet_send_prepare+0x540/0x540 [ 1846.895108] ? __sock_sendmsg+0x55/0x190 [ 1846.895734] ? ____sys_sendmsg+0x426/0x870 [ 1846.896376] sendmsg_copy_msghdr+0xa1/0x160 [ 1846.897034] ? do_recvmmsg+0x6d0/0x6d0 [ 1846.897620] ? lock_chain_count+0x20/0x20 [ 1846.898258] ? lock_downgrade+0x6d0/0x6d0 [ 1846.898901] io_sendmsg+0x62c/0x830 [ 1846.899460] ? io_setup_async_msg+0x2d0/0x2d0 [ 1846.900158] ? mark_lock+0xf5/0x2df0 [ 1846.900735] ? lock_chain_count+0x20/0x20 [ 1846.901392] ? __lock_acquire+0xbb1/0x5b00 [ 1846.902045] io_issue_sqe+0x3b3/0x7700 [ 1846.902647] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1846.903449] ? lock_chain_count+0x20/0x20 [ 1846.904090] ? __is_insn_slot_addr+0x14c/0x290 [ 1846.904791] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1846.905586] ? io_connect+0x610/0x610 [ 1846.906169] ? lock_acquire+0x197/0x470 [ 1846.906771] ? find_held_lock+0x2c/0x110 [ 1846.907390] ? __fget_files+0x26d/0x4c0 [ 1846.908004] ? lock_downgrade+0x6d0/0x6d0 [ 1846.908637] __io_queue_sqe+0x90/0x9d0 [ 1846.909234] ? io_issue_sqe+0x7700/0x7700 [ 1846.909879] io_submit_sqes+0x4461/0x85c0 [ 1846.910535] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1846.911284] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1846.912024] ? lock_downgrade+0x6d0/0x6d0 [ 1846.912661] ? find_held_lock+0x2c/0x110 [ 1846.913273] ? io_submit_sqes+0x85c0/0x85c0 [ 1846.913937] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1846.914682] ? wait_for_completion_io+0x270/0x270 [ 1846.915419] ? rcu_read_lock_any_held+0x75/0xa0 [ 1846.916114] ? vfs_write+0x354/0xa70 [ 1846.916699] ? fput_many+0x2f/0x1a0 [ 1846.917255] ? ksys_write+0x1a9/0x260 [ 1846.917824] ? __ia32_sys_read+0xb0/0xb0 [ 1846.918434] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1846.919231] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1846.920015] do_syscall_64+0x33/0x40 [ 1846.920579] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1846.921352] RIP: 0033:0x7feb2fbf3b19 [ 1846.921916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1846.924650] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1846.925782] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1846.926854] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1846.927924] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1846.928983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1846.930029] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 [ 1846.978844] FAULT_INJECTION: forcing a failure. [ 1846.978844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1846.980885] CPU: 1 PID: 18215 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1846.981919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1846.983127] Call Trace: [ 1846.983533] dump_stack+0x107/0x167 [ 1846.984072] should_fail.cold+0x5/0xa [ 1846.984638] __alloc_pages_nodemask+0x182/0x600 [ 1846.985319] ? lock_downgrade+0x6d0/0x6d0 [ 1846.985929] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1846.986813] ? kmem_cache_free+0xa7/0x2d0 [ 1846.987426] alloc_pages_current+0x187/0x280 [ 1846.988081] __get_free_pages+0xc/0xa0 [ 1846.988650] ? kmem_cache_free+0x249/0x2d0 [ 1846.989266] tlb_remove_table+0x3ca/0xcb0 [ 1846.989875] ___pte_free_tlb+0x86/0xb0 [ 1846.990441] free_pgd_range+0x747/0x1380 [ 1846.991060] free_pgtables+0x230/0x2f0 [ 1846.991650] exit_mmap+0x28e/0x4f0 [ 1846.992171] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 1846.992946] ? strnlen_user+0x231/0x2f0 [ 1846.993526] ? __might_fault+0x144/0x180 [ 1846.994130] mmput+0xca/0x340 [ 1846.994603] free_bprm+0x65/0x2e0 [ 1846.995105] do_execveat_common+0x2e1/0x8d0 [ 1846.995759] ? bprm_execve+0x1a60/0x1a60 [ 1846.996372] __x64_sys_execveat+0xed/0x140 [ 1846.996998] do_syscall_64+0x33/0x40 [ 1846.997544] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1846.998296] RIP: 0033:0x7fadc9940b19 [ 1846.998840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.001502] RSP: 002b:00007fadc6eb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1847.002613] RAX: ffffffffffffffda RBX: 00007fadc9a53f60 RCX: 00007fadc9940b19 [ 1847.003652] RDX: 0000000000000000 RSI: 0000000020019300 RDI: ffffffffffffffff [ 1847.004687] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1847.005720] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1847.006756] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:51:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:51:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x900) 06:51:48 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x1000000) 06:51:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6) 06:51:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) (fail_nth: 26) 06:51:48 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x2000000) 06:51:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xf00) 06:51:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4800) [ 1847.352100] FAULT_INJECTION: forcing a failure. [ 1847.352100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1847.354215] CPU: 0 PID: 18479 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1847.355313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.356627] Call Trace: [ 1847.357046] dump_stack+0x107/0x167 [ 1847.357629] should_fail.cold+0x5/0xa [ 1847.358237] _copy_to_user+0x2e/0x180 [ 1847.358838] simple_read_from_buffer+0xcc/0x160 [ 1847.359594] proc_fail_nth_read+0x198/0x230 [ 1847.360274] ? proc_sessionid_read+0x230/0x230 [ 1847.360994] ? security_file_permission+0x24e/0x570 [ 1847.361773] ? perf_trace_initcall_start+0x101/0x380 [ 1847.362583] ? proc_sessionid_read+0x230/0x230 [ 1847.363290] vfs_read+0x228/0x580 [ 1847.363853] ksys_read+0x12d/0x260 [ 1847.364409] ? vfs_write+0xa70/0xa70 [ 1847.365006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1847.365826] do_syscall_64+0x33/0x40 [ 1847.366407] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1847.367197] RIP: 0033:0x7fadc98f369c [ 1847.367784] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1847.370647] RSP: 002b:00007fadc6eb6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1847.371844] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fadc98f369c [ 1847.372947] RDX: 000000000000000f RSI: 00007fadc6eb61e0 RDI: 0000000000000005 [ 1847.374049] RBP: 00007fadc6eb61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1847.375172] R10: 000000002001a440 R11: 0000000000000246 R12: 0000000000000002 [ 1847.376282] R13: 00007ffece3925ef R14: 00007fadc6eb6300 R15: 0000000000022000 06:51:48 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 06:51:48 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3000000) [ 1847.547907] FAULT_INJECTION: forcing a failure. [ 1847.547907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1847.549818] CPU: 0 PID: 18622 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1847.550880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1847.552156] Call Trace: [ 1847.552574] dump_stack+0x107/0x167 [ 1847.553149] should_fail.cold+0x5/0xa [ 1847.553748] _copy_from_user+0x2e/0x1b0 [ 1847.554379] move_addr_to_kernel.part.0+0x31/0x110 [ 1847.555146] __copy_msghdr_from_user+0x3e1/0x4b0 [ 1847.555882] ? __ia32_sys_shutdown+0x80/0x80 [ 1847.556569] ? __sock_sendmsg+0x55/0x190 [ 1847.557202] ? ____sys_sendmsg+0x426/0x870 [ 1847.557875] sendmsg_copy_msghdr+0xa1/0x160 [ 1847.558547] ? do_recvmmsg+0x6d0/0x6d0 [ 1847.559160] ? lock_chain_count+0x20/0x20 [ 1847.559819] ? lock_downgrade+0x6d0/0x6d0 [ 1847.560473] io_sendmsg+0x62c/0x830 [ 1847.561048] ? io_setup_async_msg+0x2d0/0x2d0 [ 1847.561758] ? mark_lock+0xf5/0x2df0 [ 1847.562351] ? lock_chain_count+0x20/0x20 [ 1847.563034] ? __lock_acquire+0xbb1/0x5b00 [ 1847.563723] io_issue_sqe+0x3b3/0x7700 [ 1847.564342] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1847.565157] ? lock_chain_count+0x20/0x20 [ 1847.565808] ? lock_chain_count+0x20/0x20 [ 1847.566452] ? lock_chain_count+0x20/0x20 [ 1847.567106] ? io_connect+0x610/0x610 [ 1847.567713] ? lock_acquire+0x197/0x470 [ 1847.568335] ? find_held_lock+0x2c/0x110 [ 1847.568979] ? __fget_files+0x26d/0x4c0 [ 1847.569611] ? lock_downgrade+0x6d0/0x6d0 [ 1847.570258] __io_queue_sqe+0x90/0x9d0 [ 1847.570871] ? io_issue_sqe+0x7700/0x7700 [ 1847.571539] io_submit_sqes+0x4461/0x85c0 [ 1847.572224] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1847.572998] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1847.573753] ? lock_downgrade+0x6d0/0x6d0 [ 1847.574402] ? find_held_lock+0x2c/0x110 [ 1847.575054] ? io_submit_sqes+0x85c0/0x85c0 [ 1847.575750] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1847.576500] ? wait_for_completion_io+0x270/0x270 [ 1847.577268] ? rcu_read_lock_any_held+0x75/0xa0 [ 1847.578007] ? vfs_write+0x354/0xa70 [ 1847.578601] ? fput_many+0x2f/0x1a0 [ 1847.579173] ? ksys_write+0x1a9/0x260 [ 1847.579779] ? __ia32_sys_read+0xb0/0xb0 [ 1847.580420] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1847.581228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1847.582047] do_syscall_64+0x33/0x40 [ 1847.582631] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1847.583426] RIP: 0033:0x7feb2fbf3b19 [ 1847.584020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1847.586883] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1847.588076] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1847.589176] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1847.590282] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1847.591389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1847.592501] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:52:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c00) 06:52:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 06:52:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:52:02 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4000000) 06:52:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xf000) 06:52:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:52:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7) 06:52:02 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/igmp6\x00') ioctl$CDROMREADCOOKED(r0, 0x5315, &(0x7f00000002c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r1, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 1861.082824] FAULT_INJECTION: forcing a failure. [ 1861.082824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1861.084686] CPU: 0 PID: 18786 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1861.085716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1861.086941] Call Trace: [ 1861.087365] dump_stack+0x107/0x167 [ 1861.087925] should_fail.cold+0x5/0xa [ 1861.088523] _copy_from_iter_full+0x201/0xa60 [ 1861.089196] rawv6_sendmsg+0x20e8/0x3b20 [ 1861.089800] ? rawv6_bind+0xa40/0xa40 [ 1861.090358] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1861.091126] ? lock_acquire+0x197/0x470 [ 1861.091721] ? find_held_lock+0x2c/0x110 [ 1861.092322] ? __might_fault+0xd3/0x180 [ 1861.092908] ? lock_downgrade+0x6d0/0x6d0 [ 1861.093510] ? lock_downgrade+0x6d0/0x6d0 [ 1861.094126] ? sock_has_perm+0x1ea/0x280 [ 1861.094724] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1861.095494] ? iovec_from_user+0x104/0x400 [ 1861.096115] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1861.096863] ? rawv6_bind+0xa40/0xa40 [ 1861.097426] inet_sendmsg+0x11d/0x140 [ 1861.097990] ? inet_send_prepare+0x540/0x540 [ 1861.098689] __sock_sendmsg+0x13c/0x190 [ 1861.099275] ____sys_sendmsg+0x70d/0x870 [ 1861.099873] ? sock_write_iter+0x3d0/0x3d0 [ 1861.100494] ? sendmsg_copy_msghdr+0xba/0x160 [ 1861.101142] ? do_recvmmsg+0x6d0/0x6d0 [ 1861.101724] ? __is_insn_slot_addr+0x123/0x290 [ 1861.102392] ? lock_downgrade+0x6d0/0x6d0 [ 1861.103004] __sys_sendmsg_sock+0x26/0x40 [ 1861.103611] io_sendmsg+0x1e6/0x830 [ 1861.104155] ? io_setup_async_msg+0x2d0/0x2d0 [ 1861.104814] ? __is_insn_slot_addr+0x14c/0x290 [ 1861.105485] ? mark_lock+0xf5/0x2df0 [ 1861.106034] ? register_lock_class+0xbb/0x17b0 [ 1861.106695] ? arch_stack_walk+0x99/0xf0 [ 1861.107292] ? lock_chain_count+0x20/0x20 [ 1861.107934] ? __lock_acquire+0xbb1/0x5b00 [ 1861.108562] io_issue_sqe+0x3b3/0x7700 [ 1861.109136] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1861.109905] ? lock_chain_count+0x20/0x20 [ 1861.110512] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1861.111276] ? io_connect+0x610/0x610 [ 1861.111846] ? lock_acquire+0x197/0x470 [ 1861.112429] ? find_held_lock+0x2c/0x110 [ 1861.113029] ? __fget_files+0x26d/0x4c0 [ 1861.113614] ? lock_downgrade+0x6d0/0x6d0 [ 1861.114225] __io_queue_sqe+0x90/0x9d0 [ 1861.114801] ? io_issue_sqe+0x7700/0x7700 [ 1861.115420] io_submit_sqes+0x4461/0x85c0 [ 1861.116061] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1861.116788] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1861.117499] ? lock_downgrade+0x6d0/0x6d0 [ 1861.118100] ? find_held_lock+0x2c/0x110 [ 1861.118703] ? io_submit_sqes+0x85c0/0x85c0 [ 1861.119343] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1861.120061] ? wait_for_completion_io+0x270/0x270 [ 1861.120756] ? rcu_read_lock_any_held+0x75/0xa0 [ 1861.121432] ? vfs_write+0x354/0xa70 [ 1861.121975] ? fput_many+0x2f/0x1a0 [ 1861.122507] ? ksys_write+0x1a9/0x260 [ 1861.123059] ? __ia32_sys_read+0xb0/0xb0 [ 1861.123660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1861.124414] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1861.125165] do_syscall_64+0x33/0x40 [ 1861.125707] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1861.126443] RIP: 0033:0x7feb2fbf3b19 [ 1861.126985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1861.129611] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1861.130712] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1861.131741] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1861.132763] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1861.133789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1861.134813] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:52:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x30000) 06:52:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:52:02 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x5000000) 06:52:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x34000) 06:52:02 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6000000) 06:52:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x8) 06:52:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:52:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x80000) 06:52:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6800) 06:52:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x40009, &(0x7f0000000040)}, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00000000810000006c653100"]) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x5, 0x4, 0x20, 0x0, "4b7eac9c706b9c079cc7cff5b801e5e62da9a586cda74b0029780b9ea52ce3063e0e0733c3bff3b21d7246b09123111333deb43d403e8854595c8bbd661fc82f", "bb560ac9afb3fe794a3150bc79a1b5eab42ab5486aa33a703af29b7270b3b6e4", [0x0, 0xfffffffffffffff9]}) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x40009, &(0x7f0000000040)}, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) syz_io_uring_submit(r2, r6, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2007, @fd=r7, 0xa45b, 0x0, 0x401, 0x14, 0x0, {0x3}}, 0x0) 06:52:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 06:52:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x400300) [ 1861.520103] FAULT_INJECTION: forcing a failure. [ 1861.520103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1861.522713] CPU: 0 PID: 19144 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1861.523852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1861.525190] Call Trace: [ 1861.525626] dump_stack+0x107/0x167 [ 1861.526230] should_fail.cold+0x5/0xa [ 1861.526866] _copy_from_iter_full+0x201/0xa60 [ 1861.527621] rawv6_sendmsg+0x20e8/0x3b20 [ 1861.528251] ? rawv6_bind+0xa40/0xa40 [ 1861.528844] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1861.529766] ? lock_acquire+0x197/0x470 [ 1861.530417] ? find_held_lock+0x2c/0x110 [ 1861.531083] ? __might_fault+0xd3/0x180 [ 1861.531744] ? lock_downgrade+0x6d0/0x6d0 [ 1861.532428] ? lock_downgrade+0x6d0/0x6d0 [ 1861.533118] ? sock_has_perm+0x1ea/0x280 [ 1861.533786] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1861.534652] ? iovec_from_user+0x104/0x400 [ 1861.535274] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1861.536070] ? rawv6_bind+0xa40/0xa40 [ 1861.536695] inet_sendmsg+0x11d/0x140 [ 1861.537329] ? inet_send_prepare+0x540/0x540 [ 1861.538048] __sock_sendmsg+0x13c/0x190 [ 1861.538698] ____sys_sendmsg+0x70d/0x870 [ 1861.539372] ? sock_write_iter+0x3d0/0x3d0 [ 1861.540072] ? sendmsg_copy_msghdr+0xba/0x160 [ 1861.540806] ? do_recvmmsg+0x6d0/0x6d0 [ 1861.541443] ? lock_chain_count+0x20/0x20 [ 1861.542127] ? lock_downgrade+0x6d0/0x6d0 [ 1861.542816] __sys_sendmsg_sock+0x26/0x40 [ 1861.543420] io_sendmsg+0x1e6/0x830 [ 1861.543959] ? io_setup_async_msg+0x2d0/0x2d0 [ 1861.544613] ? mark_lock+0xf5/0x2df0 [ 1861.545161] ? lock_chain_count+0x20/0x20 [ 1861.545792] ? __lock_acquire+0xbb1/0x5b00 [ 1861.546418] io_issue_sqe+0x3b3/0x7700 [ 1861.546992] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1861.547749] ? lock_chain_count+0x20/0x20 [ 1861.548331] ? __is_insn_slot_addr+0x14c/0x290 [ 1861.548986] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1861.549722] ? io_connect+0x610/0x610 [ 1861.550264] ? lock_acquire+0x197/0x470 [ 1861.550825] ? find_held_lock+0x2c/0x110 [ 1861.551411] ? __fget_files+0x26d/0x4c0 [ 1861.551979] ? lock_downgrade+0x6d0/0x6d0 [ 1861.552567] __io_queue_sqe+0x90/0x9d0 [ 1861.553138] ? io_issue_sqe+0x7700/0x7700 [ 1861.553759] io_submit_sqes+0x4461/0x85c0 [ 1861.554386] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1861.555129] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1861.555841] ? lock_downgrade+0x6d0/0x6d0 [ 1861.556441] ? find_held_lock+0x2c/0x110 [ 1861.557039] ? io_submit_sqes+0x85c0/0x85c0 [ 1861.557693] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1861.558405] ? wait_for_completion_io+0x270/0x270 [ 1861.559105] ? rcu_read_lock_any_held+0x75/0xa0 [ 1861.559792] ? vfs_write+0x354/0xa70 [ 1861.560346] ? fput_many+0x2f/0x1a0 [ 1861.560880] ? ksys_write+0x1a9/0x260 [ 1861.561434] ? __ia32_sys_read+0xb0/0xb0 [ 1861.562044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1861.562811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1861.563569] do_syscall_64+0x33/0x40 [ 1861.564127] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1861.564871] RIP: 0033:0x7feb2fbf3b19 [ 1861.565415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1861.568118] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1861.569236] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1861.570277] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1861.571320] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1861.572372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1861.573414] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:52:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:52:16 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7000000) 06:52:16 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 06:52:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xf0ffff) 06:52:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:52:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x2) 06:52:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c00) 06:52:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x48) [ 1875.386159] FAULT_INJECTION: forcing a failure. [ 1875.386159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1875.387555] CPU: 0 PID: 19461 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1875.388220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1875.389013] Call Trace: [ 1875.389276] dump_stack+0x107/0x167 [ 1875.389650] should_fail.cold+0x5/0xa [ 1875.390027] _copy_from_user+0x2e/0x1b0 [ 1875.390414] __copy_msghdr_from_user+0x91/0x4b0 [ 1875.390845] ? __ia32_sys_shutdown+0x80/0x80 [ 1875.391247] ? inet_sendmsg+0xbd/0x140 [ 1875.391604] ? inet_send_prepare+0x540/0x540 [ 1875.392010] ? __sock_sendmsg+0x55/0x190 [ 1875.392386] ? ____sys_sendmsg+0x426/0x870 [ 1875.392778] sendmsg_copy_msghdr+0xa1/0x160 [ 1875.393169] ? do_recvmmsg+0x6d0/0x6d0 [ 1875.393535] ? lock_chain_count+0x20/0x20 [ 1875.393916] ? lock_downgrade+0x6d0/0x6d0 [ 1875.394296] io_sendmsg+0x62c/0x830 [ 1875.394636] ? io_setup_async_msg+0x2d0/0x2d0 [ 1875.395043] ? mark_lock+0xf5/0x2df0 [ 1875.395383] ? lock_chain_count+0x20/0x20 [ 1875.395779] ? __lock_acquire+0xbb1/0x5b00 [ 1875.396171] io_issue_sqe+0x3b3/0x7700 [ 1875.396529] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1875.397012] ? lock_chain_count+0x20/0x20 [ 1875.397389] ? __is_insn_slot_addr+0x14c/0x290 [ 1875.397807] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1875.398283] ? io_connect+0x610/0x610 [ 1875.398635] ? lock_acquire+0x197/0x470 [ 1875.399005] ? find_held_lock+0x2c/0x110 [ 1875.399388] ? __fget_files+0x26d/0x4c0 [ 1875.399744] ? lock_downgrade+0x6d0/0x6d0 [ 1875.400135] __io_queue_sqe+0x90/0x9d0 [ 1875.400495] ? io_issue_sqe+0x7700/0x7700 [ 1875.400881] io_submit_sqes+0x4461/0x85c0 [ 1875.401272] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1875.401727] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1875.402162] ? lock_downgrade+0x6d0/0x6d0 [ 1875.402535] ? find_held_lock+0x2c/0x110 [ 1875.402912] ? io_submit_sqes+0x85c0/0x85c0 [ 1875.403310] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1875.403748] ? wait_for_completion_io+0x270/0x270 [ 1875.404198] ? rcu_read_lock_any_held+0x75/0xa0 [ 1875.404623] ? vfs_write+0x354/0xa70 [ 1875.404973] ? fput_many+0x2f/0x1a0 [ 1875.405309] ? ksys_write+0x1a9/0x260 [ 1875.405663] ? __ia32_sys_read+0xb0/0xb0 [ 1875.406035] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1875.406505] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1875.406976] do_syscall_64+0x33/0x40 [ 1875.407313] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1875.407779] RIP: 0033:0x7feb2fbf3b19 [ 1875.408124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1875.409783] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1875.410475] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1875.411122] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1875.411767] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1875.412431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1875.413067] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:52:16 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xc000000) 06:52:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x1000000) 06:52:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:52:28 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x12000000) 06:52:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:52:28 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 06:52:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x2000000) 06:52:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7400) 06:52:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c) 06:52:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3) 06:52:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x40009, &(0x7f0000000040)}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) vmsplice(r5, &(0x7f0000000340)=[{&(0x7f0000000180)="25aaac05f52c783d2ec4a5e2b0f5aa510e0557a61571a90265c44c534a214c0acbc5b4b44302a78f17", 0x29}, {&(0x7f00000001c0)="84130839e649ac968d56ba35fdedd3d098891a45c473d63cece61c3000cadd6d8bb27ac0aac2740eb291f7621777233ebed9f6faffd1f3f65ff4b3a9c05ad6f25ae43d0311ba906a384c4a277d6e0b05cbca7c6e3a", 0x55}, {&(0x7f00000002c0)="93b383bf3184678fc364adf47bad3a9f92fd7ef58a132d3d9d5d8ec1f6b0f3b416ccf45652ebf3dbb9684344b8a8910b461485e9cf17bc3672eb4b8733a62e7d147841132b3b65ba0469c6f32ba45882d9c47b7a", 0x54}], 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000100)=@IORING_OP_NOP={0x0, 0x5}, 0xea33) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x13, r1, 0xdc848000) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r6, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000000001bad9a0e0bdcead5b6168a5735010000000000000030f6b50f89fbf50c7721e512971fc2d3ec6e0f535f993d3e1b9adff4938012a018e8f9b47242957b18deeee3db13e9b74c1078f25c7eb22eacba7757ffcd635c7a1b3bce6b5852c2fb79382cdd943ea7ec01915f8312693f8c08bfbda386fa3398976a8a7dc0fe064459d34e79e99666f7052b0802cf6535df169a8080dcec48a46995be956bacaae797a865507f1a57886ec20c4fabea472baacb1f637916edfb0ad0d1b5d24a23fd177d0abdfa71c5174aa45665aed86a1d8bfa2e21bf1e76f4b0c4dad076", @ANYRES32=r6, @ANYBLOB="07dbd80f50839669605da5c78ca00000"]) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 1887.924964] FAULT_INJECTION: forcing a failure. [ 1887.924964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1887.926167] CPU: 1 PID: 19896 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1887.926795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1887.927550] Call Trace: [ 1887.927798] dump_stack+0x107/0x167 [ 1887.928158] should_fail.cold+0x5/0xa [ 1887.928520] _copy_from_user+0x2e/0x1b0 [ 1887.928895] __copy_msghdr_from_user+0x91/0x4b0 [ 1887.929323] ? __ia32_sys_shutdown+0x80/0x80 [ 1887.929724] ? inet_sendmsg+0xbd/0x140 [ 1887.930070] ? inet_send_prepare+0x540/0x540 [ 1887.930484] ? __sock_sendmsg+0x55/0x190 [ 1887.930850] ? ____sys_sendmsg+0x426/0x870 [ 1887.931243] sendmsg_copy_msghdr+0xa1/0x160 [ 1887.931644] ? do_recvmmsg+0x6d0/0x6d0 [ 1887.932030] ? lock_chain_count+0x20/0x20 [ 1887.932412] ? lock_downgrade+0x6d0/0x6d0 [ 1887.932807] io_sendmsg+0x62c/0x830 [ 1887.933142] ? io_setup_async_msg+0x2d0/0x2d0 [ 1887.933548] ? mark_lock+0xf5/0x2df0 [ 1887.933895] ? lock_chain_count+0x20/0x20 [ 1887.934293] ? __lock_acquire+0xbb1/0x5b00 [ 1887.934694] io_issue_sqe+0x3b3/0x7700 [ 1887.935059] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1887.935544] ? lock_chain_count+0x20/0x20 [ 1887.935929] ? __is_insn_slot_addr+0x14c/0x290 [ 1887.936361] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1887.936835] ? io_connect+0x610/0x610 [ 1887.937181] ? lock_acquire+0x197/0x470 [ 1887.937540] ? find_held_lock+0x2c/0x110 [ 1887.937909] ? __fget_files+0x26d/0x4c0 [ 1887.938266] ? lock_downgrade+0x6d0/0x6d0 [ 1887.938651] __io_queue_sqe+0x90/0x9d0 [ 1887.939002] ? io_issue_sqe+0x7700/0x7700 [ 1887.939389] io_submit_sqes+0x4461/0x85c0 [ 1887.939788] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1887.940248] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1887.940702] ? lock_downgrade+0x6d0/0x6d0 [ 1887.941075] ? find_held_lock+0x2c/0x110 [ 1887.941448] ? io_submit_sqes+0x85c0/0x85c0 [ 1887.941845] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1887.942286] ? wait_for_completion_io+0x270/0x270 06:52:29 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x18000000) [ 1887.942723] ? rcu_read_lock_any_held+0x75/0xa0 [ 1887.943254] ? vfs_write+0x354/0xa70 [ 1887.943590] ? fput_many+0x2f/0x1a0 [ 1887.943911] ? ksys_write+0x1a9/0x260 [ 1887.944272] ? __ia32_sys_read+0xb0/0xb0 [ 1887.944650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1887.945162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1887.945677] do_syscall_64+0x33/0x40 [ 1887.946019] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1887.946483] RIP: 0033:0x7feb2fbf3b19 [ 1887.946817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1887.948470] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1887.949156] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1887.949796] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1887.950423] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1887.951051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1887.951701] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:52:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x3000000) 06:52:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x68) 06:52:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x13c, 0x14, 0x0, 0x70bd29, 0x25dfdbfc, {0x23, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x23, 0x1, "85f5257e350c090db08da893002ca9e34c3faab7c2aab4f3b7c10b32f7350d"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "0719946ef5a181f904c1aa0bc8023f7c7f944b81c5032877768d0ecfde6de8170b0cdbd051cdd25e54e65f4cd7f02f37544b8046e3c9db25a02a4a07c691ea458058afe34a4c8e3366dac61985c4a0e0f72d90600698f912f1a3d5606bd02fb7dfe99103cbdff2dcfb252e025d9abbb1e159fe5a9ab101e12160c65793baf29f7081a668e5a8c0d3bf275dc88068437b2c55419d3ae874f0ea03edab80d7f4d610fafc44f555a277f20b33e76732a2fcefd17ab903345cee014b0808b062ab29b377c614733d07ad4e0f4a59ab2c6f254c89e973a47afad87708558fd912e493"}, @INET_DIAG_REQ_BYTECODE={0x1e, 0x1, "f117655f0b93771be91301eaedb836c7f7560d250eb1407d21fa"}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0c5}, 0x40000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r1, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:52:29 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x1e000000) 06:52:29 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 06:52:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x9000000) 06:52:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a00) 06:52:29 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x20000000) 06:52:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:52:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4) [ 1888.270281] FAULT_INJECTION: forcing a failure. [ 1888.270281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1888.272109] CPU: 0 PID: 20314 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1888.273110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1888.274312] Call Trace: [ 1888.274707] dump_stack+0x107/0x167 [ 1888.275248] should_fail.cold+0x5/0xa [ 1888.275813] _copy_from_user+0x2e/0x1b0 [ 1888.276405] iovec_from_user+0x141/0x400 [ 1888.276994] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1888.277730] __import_iovec+0x67/0x590 [ 1888.278291] ? __ia32_sys_shutdown+0x80/0x80 [ 1888.278939] import_iovec+0x83/0xb0 [ 1888.279479] sendmsg_copy_msghdr+0x131/0x160 [ 1888.280129] ? do_recvmmsg+0x6d0/0x6d0 [ 1888.280702] ? lock_chain_count+0x20/0x20 [ 1888.281308] ? lock_downgrade+0x6d0/0x6d0 [ 1888.281925] io_sendmsg+0x62c/0x830 [ 1888.282457] ? io_setup_async_msg+0x2d0/0x2d0 [ 1888.283115] ? mark_lock+0xf5/0x2df0 [ 1888.283659] ? lock_chain_count+0x20/0x20 [ 1888.284303] ? __lock_acquire+0xbb1/0x5b00 [ 1888.284929] io_issue_sqe+0x3b3/0x7700 [ 1888.285506] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1888.286271] ? lock_chain_count+0x20/0x20 [ 1888.286875] ? __is_insn_slot_addr+0x14c/0x290 [ 1888.287539] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1888.288304] ? io_connect+0x610/0x610 [ 1888.288867] ? lock_acquire+0x197/0x470 [ 1888.289448] ? find_held_lock+0x2c/0x110 [ 1888.290042] ? __fget_files+0x26d/0x4c0 [ 1888.290619] ? lock_downgrade+0x6d0/0x6d0 [ 1888.291225] __io_queue_sqe+0x90/0x9d0 [ 1888.291799] ? io_issue_sqe+0x7700/0x7700 [ 1888.292437] io_submit_sqes+0x4461/0x85c0 06:52:29 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x24000000) [ 1888.293063] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1888.293910] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1888.294607] ? lock_downgrade+0x6d0/0x6d0 06:52:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 1888.295235] ? find_held_lock+0x2c/0x110 [ 1888.295831] ? io_submit_sqes+0x85c0/0x85c0 [ 1888.296478] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1888.297174] ? wait_for_completion_io+0x270/0x270 [ 1888.297876] ? rcu_read_lock_any_held+0x75/0xa0 [ 1888.298547] ? vfs_write+0x354/0xa70 [ 1888.299093] ? fput_many+0x2f/0x1a0 [ 1888.299627] ? ksys_write+0x1a9/0x260 [ 1888.300198] ? __ia32_sys_read+0xb0/0xb0 [ 1888.300795] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1888.301552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1888.302305] do_syscall_64+0x33/0x40 [ 1888.302842] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1888.303583] RIP: 0033:0x7feb2fbf3b19 [ 1888.304137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1888.306770] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1888.307870] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1888.308910] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1888.309950] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1888.310972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1888.312009] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:52:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xf000000) 06:52:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x3d36e08f) 06:52:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c) 06:52:29 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x2a000000) 06:52:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:52:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x5) 06:52:29 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x30000000) 06:52:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x8fe0363d) 06:52:45 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 06:52:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x80000) 06:52:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2001f, &(0x7f00000000c0), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0xf7, 0x28, 0x4, 0x0, 0x2, 0x202, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6c0, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x800, 0x3d83a694, 0x8290, 0x4, 0x10000, 0x2, 0x40, 0x0, 0xd33, 0x0, 0x1000000000000}, 0xffffffffffffffff, 0x7, r1, 0x8) 06:52:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x9effffff) 06:52:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:52:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x74) 06:52:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6) 06:52:45 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x36000000) 06:52:45 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3c000000) [ 1904.679887] FAULT_INJECTION: forcing a failure. [ 1904.679887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1904.681716] CPU: 0 PID: 21089 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1904.682708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1904.683896] Call Trace: [ 1904.684300] dump_stack+0x107/0x167 [ 1904.684837] should_fail.cold+0x5/0xa [ 1904.685405] _copy_from_iter_full+0x201/0xa60 [ 1904.686081] rawv6_sendmsg+0x20e8/0x3b20 [ 1904.686672] ? rawv6_bind+0xa40/0xa40 [ 1904.687220] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1904.687978] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1904.688791] ? lock_acquire+0x197/0x470 [ 1904.689359] ? find_held_lock+0x2c/0x110 [ 1904.689947] ? __might_fault+0xd3/0x180 [ 1904.690513] ? lock_downgrade+0x6d0/0x6d0 [ 1904.691102] ? lock_downgrade+0x6d0/0x6d0 [ 1904.691710] ? sock_has_perm+0x1ea/0x280 [ 1904.692303] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1904.693044] ? iovec_from_user+0x104/0x400 [ 1904.693659] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1904.694388] ? rawv6_bind+0xa40/0xa40 [ 1904.694946] inet_sendmsg+0x11d/0x140 [ 1904.695497] ? inet_send_prepare+0x540/0x540 [ 1904.696125] __sock_sendmsg+0x13c/0x190 [ 1904.696721] ____sys_sendmsg+0x70d/0x870 [ 1904.697302] ? sock_write_iter+0x3d0/0x3d0 [ 1904.697905] ? sendmsg_copy_msghdr+0xba/0x160 [ 1904.698547] ? do_recvmmsg+0x6d0/0x6d0 [ 1904.699105] ? lock_chain_count+0x20/0x20 [ 1904.699697] ? lock_downgrade+0x6d0/0x6d0 [ 1904.700312] __sys_sendmsg_sock+0x26/0x40 [ 1904.700904] io_sendmsg+0x1e6/0x830 [ 1904.701425] ? io_setup_async_msg+0x2d0/0x2d0 [ 1904.702072] ? mark_lock+0xf5/0x2df0 [ 1904.702615] ? lock_chain_count+0x20/0x20 [ 1904.703239] ? __lock_acquire+0xbb1/0x5b00 [ 1904.703854] io_issue_sqe+0x3b3/0x7700 [ 1904.704427] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1904.705172] ? lock_chain_count+0x20/0x20 [ 1904.705757] ? lock_chain_count+0x20/0x20 [ 1904.706350] ? __is_insn_slot_addr+0x14c/0x290 [ 1904.707001] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1904.707740] ? io_connect+0x610/0x610 [ 1904.708305] ? lock_acquire+0x197/0x470 [ 1904.708874] ? find_held_lock+0x2c/0x110 [ 1904.709462] ? __fget_files+0x26d/0x4c0 [ 1904.710031] ? lock_downgrade+0x6d0/0x6d0 [ 1904.710622] __io_queue_sqe+0x90/0x9d0 [ 1904.711185] ? io_issue_sqe+0x7700/0x7700 [ 1904.711790] io_submit_sqes+0x4461/0x85c0 [ 1904.712428] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1904.713132] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1904.713825] ? lock_downgrade+0x6d0/0x6d0 [ 1904.714412] ? find_held_lock+0x2c/0x110 [ 1904.715000] ? io_submit_sqes+0x85c0/0x85c0 [ 1904.715626] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1904.716324] ? wait_for_completion_io+0x270/0x270 [ 1904.717036] ? rcu_read_lock_any_held+0x75/0xa0 [ 1904.717734] ? vfs_write+0x354/0xa70 [ 1904.718291] ? fput_many+0x2f/0x1a0 [ 1904.718832] ? ksys_write+0x1a9/0x260 [ 1904.719395] ? __ia32_sys_read+0xb0/0xb0 [ 1904.719998] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1904.720776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1904.721542] do_syscall_64+0x33/0x40 [ 1904.722094] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1904.722859] RIP: 0033:0x7feb2fbf3b19 [ 1904.723413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1904.726127] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1904.727253] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1904.728306] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1904.729349] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1904.730403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1904.731444] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:52:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xf0ffffff) 06:52:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:52:45 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3f000000) 06:52:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7) 06:52:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xfffff000) 06:52:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x1000000) 06:52:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a) 06:53:01 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x40000000) 06:53:01 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 06:53:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:53:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xffffff7f) 06:53:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) fcntl$setown(r0, 0x8, 0xffffffffffffffff) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:53:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x8) 06:53:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x2000000) 06:53:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x300) [ 1920.073059] FAULT_INJECTION: forcing a failure. [ 1920.073059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1920.074336] CPU: 1 PID: 21849 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1920.075123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1920.075885] Call Trace: [ 1920.076202] dump_stack+0x107/0x167 [ 1920.076642] should_fail.cold+0x5/0xa [ 1920.077078] _copy_from_user+0x2e/0x1b0 [ 1920.077538] __copy_msghdr_from_user+0x91/0x4b0 [ 1920.078066] ? __ia32_sys_shutdown+0x80/0x80 [ 1920.078571] ? inet_sendmsg+0xbd/0x140 [ 1920.079015] ? inet_send_prepare+0x540/0x540 [ 1920.079425] ? __sock_sendmsg+0x55/0x190 [ 1920.079894] ? ____sys_sendmsg+0x426/0x870 [ 1920.080401] sendmsg_copy_msghdr+0xa1/0x160 [ 1920.080900] ? do_recvmmsg+0x6d0/0x6d0 [ 1920.081353] ? lock_chain_count+0x20/0x20 [ 1920.081830] ? lock_downgrade+0x6d0/0x6d0 [ 1920.082320] io_sendmsg+0x62c/0x830 [ 1920.082737] ? io_setup_async_msg+0x2d0/0x2d0 [ 1920.083260] ? mark_lock+0xf5/0x2df0 [ 1920.083701] ? lock_chain_count+0x20/0x20 [ 1920.084199] ? __lock_acquire+0xbb1/0x5b00 [ 1920.084704] io_issue_sqe+0x3b3/0x7700 [ 1920.085162] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1920.085768] ? lock_chain_count+0x20/0x20 [ 1920.086251] ? __is_insn_slot_addr+0x14c/0x290 [ 1920.086775] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1920.087365] ? io_connect+0x610/0x610 [ 1920.087798] ? lock_acquire+0x197/0x470 [ 1920.088252] ? find_held_lock+0x2c/0x110 [ 1920.088688] ? __fget_files+0x26d/0x4c0 [ 1920.089146] ? lock_downgrade+0x6d0/0x6d0 [ 1920.089627] __io_queue_sqe+0x90/0x9d0 [ 1920.090081] ? io_issue_sqe+0x7700/0x7700 [ 1920.090562] io_submit_sqes+0x4461/0x85c0 [ 1920.091056] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1920.091619] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1920.092169] ? lock_downgrade+0x6d0/0x6d0 [ 1920.092655] ? find_held_lock+0x2c/0x110 [ 1920.093144] ? io_submit_sqes+0x85c0/0x85c0 [ 1920.093577] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1920.094137] ? wait_for_completion_io+0x270/0x270 [ 1920.094684] ? rcu_read_lock_any_held+0x75/0xa0 [ 1920.095212] ? vfs_write+0x354/0xa70 [ 1920.095646] ? fput_many+0x2f/0x1a0 [ 1920.096065] ? ksys_write+0x1a9/0x260 [ 1920.096512] ? __ia32_sys_read+0xb0/0xb0 [ 1920.096975] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1920.097565] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1920.098157] do_syscall_64+0x33/0x40 [ 1920.098578] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1920.099159] RIP: 0033:0x7feb2fbf3b19 [ 1920.099579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1920.101632] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1920.102489] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1920.103294] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1920.103978] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1920.104832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1920.105646] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:53:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:53:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xffffff9e) 06:53:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:53:16 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x48000000) 06:53:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3000000) 06:53:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xfffffff0) 06:53:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x500) 06:53:16 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 06:53:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4bdb, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:53:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x48) 06:53:16 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c000000) [ 1935.497923] FAULT_INJECTION: forcing a failure. [ 1935.497923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1935.499777] CPU: 1 PID: 22292 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1935.500818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1935.502043] Call Trace: [ 1935.502442] dump_stack+0x107/0x167 [ 1935.502983] should_fail.cold+0x5/0xa [ 1935.503551] _copy_from_user+0x2e/0x1b0 [ 1935.504146] move_addr_to_kernel.part.0+0x31/0x110 [ 1935.504895] __copy_msghdr_from_user+0x3e1/0x4b0 [ 1935.505612] ? __ia32_sys_shutdown+0x80/0x80 [ 1935.506272] ? __sock_sendmsg+0x55/0x190 [ 1935.506890] ? ____sys_sendmsg+0x426/0x870 [ 1935.507518] sendmsg_copy_msghdr+0xa1/0x160 [ 1935.508162] ? do_recvmmsg+0x6d0/0x6d0 [ 1935.508766] ? lock_chain_count+0x20/0x20 [ 1935.509357] ? lock_downgrade+0x6d0/0x6d0 [ 1935.509991] io_sendmsg+0x62c/0x830 [ 1935.510545] ? io_setup_async_msg+0x2d0/0x2d0 [ 1935.511220] ? mark_lock+0xf5/0x2df0 [ 1935.511800] ? lock_chain_count+0x20/0x20 [ 1935.512446] ? __lock_acquire+0xbb1/0x5b00 [ 1935.513078] io_issue_sqe+0x3b3/0x7700 [ 1935.513634] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1935.514420] ? lock_chain_count+0x20/0x20 [ 1935.515028] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1935.515803] ? io_connect+0x610/0x610 [ 1935.516347] ? lock_acquire+0x197/0x470 [ 1935.516937] ? find_held_lock+0x2c/0x110 [ 1935.517551] ? __fget_files+0x26d/0x4c0 [ 1935.518140] ? lock_downgrade+0x6d0/0x6d0 [ 1935.518754] __io_queue_sqe+0x90/0x9d0 [ 1935.519324] ? io_issue_sqe+0x7700/0x7700 [ 1935.519963] io_submit_sqes+0x4461/0x85c0 [ 1935.520624] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1935.521353] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1935.522070] ? lock_downgrade+0x6d0/0x6d0 [ 1935.522687] ? find_held_lock+0x2c/0x110 [ 1935.523280] ? io_submit_sqes+0x85c0/0x85c0 [ 1935.523926] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1935.524648] ? wait_for_completion_io+0x270/0x270 [ 1935.525324] ? rcu_read_lock_any_held+0x75/0xa0 [ 1935.526012] ? vfs_write+0x354/0xa70 [ 1935.526571] ? fput_many+0x2f/0x1a0 [ 1935.527112] ? ksys_write+0x1a9/0x260 [ 1935.527671] ? __ia32_sys_read+0xb0/0xb0 [ 1935.528270] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1935.529052] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1935.529803] do_syscall_64+0x33/0x40 [ 1935.530358] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1935.531104] RIP: 0033:0x7feb2fbf3b19 [ 1935.531665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1935.534339] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1935.535450] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1935.536503] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1935.537508] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1935.538563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1935.539594] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:53:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x3000000000000) 06:53:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:53:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x8000000000000) 06:53:16 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x68000000) 06:53:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c) 06:53:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4000000) 06:53:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x600) 06:53:16 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c000000) 06:53:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x40030000000000) 06:53:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:53:17 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 06:53:17 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x74000000) 06:53:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xf0ffffffffffff) [ 1936.099201] FAULT_INJECTION: forcing a failure. [ 1936.099201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1936.101057] CPU: 1 PID: 22896 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1936.102074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1936.103421] Call Trace: [ 1936.103840] dump_stack+0x107/0x167 [ 1936.104523] should_fail.cold+0x5/0xa [ 1936.105189] _copy_from_user+0x2e/0x1b0 [ 1936.105921] iovec_from_user+0x141/0x400 [ 1936.106676] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1936.107602] __import_iovec+0x67/0x590 [ 1936.108325] ? __ia32_sys_shutdown+0x80/0x80 [ 1936.109201] import_iovec+0x83/0xb0 [ 1936.109918] sendmsg_copy_msghdr+0x131/0x160 [ 1936.110775] ? do_recvmmsg+0x6d0/0x6d0 [ 1936.111540] ? lock_chain_count+0x20/0x20 [ 1936.112357] ? lock_downgrade+0x6d0/0x6d0 [ 1936.113169] ? lock_chain_count+0x20/0x20 [ 1936.113995] io_sendmsg+0x62c/0x830 [ 1936.114711] ? io_setup_async_msg+0x2d0/0x2d0 [ 1936.115611] ? mark_lock+0xf5/0x2df0 [ 1936.116318] ? lock_chain_count+0x20/0x20 [ 1936.117190] ? __lock_acquire+0xbb1/0x5b00 [ 1936.117993] io_issue_sqe+0x3b3/0x7700 [ 1936.118728] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1936.119758] ? lock_chain_count+0x20/0x20 [ 1936.120545] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1936.121582] ? io_connect+0x610/0x610 [ 1936.122300] ? lock_acquire+0x197/0x470 [ 1936.123086] ? find_held_lock+0x2c/0x110 [ 1936.123853] ? __fget_files+0x26d/0x4c0 [ 1936.124645] ? lock_downgrade+0x6d0/0x6d0 [ 1936.125478] __io_queue_sqe+0x90/0x9d0 [ 1936.126252] ? io_issue_sqe+0x7700/0x7700 [ 1936.127091] io_submit_sqes+0x4461/0x85c0 [ 1936.127939] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1936.128701] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1936.129381] ? lock_downgrade+0x6d0/0x6d0 [ 1936.129961] ? find_held_lock+0x2c/0x110 [ 1936.130535] ? io_submit_sqes+0x85c0/0x85c0 [ 1936.131140] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1936.131818] ? wait_for_completion_io+0x270/0x270 [ 1936.132502] ? rcu_read_lock_any_held+0x75/0xa0 [ 1936.133176] ? vfs_write+0x354/0xa70 [ 1936.133707] ? fput_many+0x2f/0x1a0 [ 1936.134222] ? ksys_write+0x1a9/0x260 [ 1936.134871] ? __ia32_sys_read+0xb0/0xb0 [ 1936.135539] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1936.136397] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1936.137279] do_syscall_64+0x33/0x40 [ 1936.137800] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1936.138653] RIP: 0033:0x7feb2fbf3b19 [ 1936.139188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1936.142139] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1936.143229] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1936.144512] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1936.145630] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1936.146704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1936.147753] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:53:34 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 06:53:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x100000000000000) 06:53:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x5000000) 06:53:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x7, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf9, 0x2, 0x2, 0x8, 0x0, 0xffffffff80000000, 0x280, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x498d2788, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0xa100, 0x9, 0x100, 0x1, 0x1, 0x1000, 0x83, 0x0, 0x345, 0x0, 0x8}, 0x0, 0x6, r1, 0x1) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) pipe(&(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getown(r2, 0x9) 06:53:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x700) 06:53:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x68) 06:53:34 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a000000) 06:53:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 1953.450051] FAULT_INJECTION: forcing a failure. [ 1953.450051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1953.451422] CPU: 1 PID: 23072 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1953.452089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1953.452873] Call Trace: [ 1953.453137] dump_stack+0x107/0x167 [ 1953.453494] should_fail.cold+0x5/0xa [ 1953.453846] _copy_from_user+0x2e/0x1b0 [ 1953.454214] __copy_msghdr_from_user+0x91/0x4b0 [ 1953.454638] ? __ia32_sys_shutdown+0x80/0x80 [ 1953.455038] ? inet_sendmsg+0xbd/0x140 [ 1953.455391] ? inet_send_prepare+0x540/0x540 [ 1953.455788] ? __sock_sendmsg+0x55/0x190 [ 1953.456155] ? ____sys_sendmsg+0x426/0x870 [ 1953.456551] sendmsg_copy_msghdr+0xa1/0x160 [ 1953.456961] ? do_recvmmsg+0x6d0/0x6d0 [ 1953.457322] ? __is_insn_slot_addr+0x123/0x290 [ 1953.457741] ? lock_downgrade+0x6d0/0x6d0 [ 1953.458124] io_sendmsg+0x62c/0x830 [ 1953.458456] ? io_setup_async_msg+0x2d0/0x2d0 [ 1953.458871] ? __is_insn_slot_addr+0x14c/0x290 [ 1953.459288] ? mark_lock+0xf5/0x2df0 [ 1953.459638] ? register_lock_class+0xbb/0x17b0 [ 1953.460055] ? arch_stack_walk+0x99/0xf0 [ 1953.460422] ? lock_chain_count+0x20/0x20 [ 1953.460827] ? __lock_acquire+0xbb1/0x5b00 [ 1953.461214] io_issue_sqe+0x3b3/0x7700 [ 1953.461585] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1953.462060] ? lock_chain_count+0x20/0x20 [ 1953.462442] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1953.462918] ? io_connect+0x610/0x610 [ 1953.463270] ? lock_acquire+0x197/0x470 [ 1953.463632] ? find_held_lock+0x2c/0x110 [ 1953.464005] ? __fget_files+0x26d/0x4c0 [ 1953.464378] ? lock_downgrade+0x6d0/0x6d0 [ 1953.464769] __io_queue_sqe+0x90/0x9d0 [ 1953.465138] ? io_issue_sqe+0x7700/0x7700 [ 1953.465530] io_submit_sqes+0x4461/0x85c0 [ 1953.465921] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1953.466381] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1953.466817] ? lock_downgrade+0x6d0/0x6d0 [ 1953.467192] ? find_held_lock+0x2c/0x110 [ 1953.467566] ? io_submit_sqes+0x85c0/0x85c0 [ 1953.467966] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1953.468405] ? wait_for_completion_io+0x270/0x270 [ 1953.468860] ? rcu_read_lock_any_held+0x75/0xa0 [ 1953.469289] ? vfs_write+0x354/0xa70 [ 1953.469634] ? fput_many+0x2f/0x1a0 [ 1953.469965] ? ksys_write+0x1a9/0x260 [ 1953.470307] ? __ia32_sys_read+0xb0/0xb0 [ 1953.470676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1953.471148] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1953.471608] do_syscall_64+0x33/0x40 [ 1953.471958] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1953.472437] RIP: 0033:0x7feb2fbf3b19 [ 1953.472780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1953.474422] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1953.475095] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1953.475735] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1953.476373] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1953.477012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1953.477647] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:53:34 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x807f0000) 06:53:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x200000000000000) 06:53:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4800) 06:53:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x8000, 0x10) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) preadv2(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000001380)=""/181, 0xb5}, {&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f00000012c0)=""/147, 0x93}], 0x4, 0xd7, 0x1, 0x5) 06:53:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:53:34 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xffffff7f) 06:53:34 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x300000000000000) 06:53:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 1953.755836] cgroup: fork rejected by pids controller in /syz3 06:53:47 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 06:53:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:53:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6000000) 06:53:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c) 06:53:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x900000000000000) 06:53:47 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xc0ff7f0000) 06:53:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x5e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = epoll_create1(0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x88, 0x0, 0xab, 0xe, 0x8, 0x2, 0x0, 0x200, 0x2c5, 0x40, 0x365, 0x9, 0x0, 0x38, 0x2, 0xa27, 0x6, 0xcdca}, [{0x7, 0x6ba2, 0xe550, 0x5, 0x5, 0xe96, 0x6, 0x9}], "66bd62ff1998529aa2c19034a70839bbe46913d4f7780d8561eba62635caa9f2a4747835029f8fedf62ccf5f6074b734105a4d933d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaad) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) r3 = pidfd_getfd(r0, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x90000010}) 06:53:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c00) [ 1966.184113] FAULT_INJECTION: forcing a failure. [ 1966.184113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1966.185191] CPU: 0 PID: 23732 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1966.185866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.186552] Call Trace: [ 1966.186785] dump_stack+0x107/0x167 [ 1966.187105] should_fail.cold+0x5/0xa [ 1966.187447] _copy_from_user+0x2e/0x1b0 [ 1966.187799] __copy_msghdr_from_user+0x91/0x4b0 [ 1966.188200] ? __ia32_sys_shutdown+0x80/0x80 [ 1966.188596] ? inet_sendmsg+0xbd/0x140 [ 1966.188938] ? inet_send_prepare+0x540/0x540 [ 1966.189328] ? __sock_sendmsg+0x55/0x190 [ 1966.189680] ? ____sys_sendmsg+0x426/0x870 [ 1966.190048] sendmsg_copy_msghdr+0xa1/0x160 [ 1966.190431] ? do_recvmmsg+0x6d0/0x6d0 [ 1966.190763] ? lock_chain_count+0x20/0x20 [ 1966.191125] ? lock_downgrade+0x6d0/0x6d0 [ 1966.191496] io_sendmsg+0x62c/0x830 [ 1966.191812] ? io_setup_async_msg+0x2d0/0x2d0 [ 1966.192203] ? mark_lock+0xf5/0x2df0 [ 1966.192547] ? lock_chain_count+0x20/0x20 [ 1966.192927] ? __lock_acquire+0xbb1/0x5b00 [ 1966.193313] io_issue_sqe+0x3b3/0x7700 [ 1966.193656] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1966.194115] ? lock_chain_count+0x20/0x20 [ 1966.194491] ? __is_insn_slot_addr+0x14c/0x290 [ 1966.194884] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1966.195338] ? io_connect+0x610/0x610 [ 1966.195674] ? lock_acquire+0x197/0x470 [ 1966.196016] ? find_held_lock+0x2c/0x110 [ 1966.196383] ? __fget_files+0x26d/0x4c0 [ 1966.196730] ? lock_downgrade+0x6d0/0x6d0 [ 1966.197097] __io_queue_sqe+0x90/0x9d0 [ 1966.197452] ? io_issue_sqe+0x7700/0x7700 [ 1966.197819] io_submit_sqes+0x4461/0x85c0 [ 1966.198196] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1966.198635] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1966.199051] ? lock_downgrade+0x6d0/0x6d0 [ 1966.199410] ? find_held_lock+0x2c/0x110 [ 1966.199767] ? io_submit_sqes+0x85c0/0x85c0 [ 1966.200142] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1966.200561] ? wait_for_completion_io+0x270/0x270 [ 1966.200986] ? rcu_read_lock_any_held+0x75/0xa0 [ 1966.201391] ? vfs_write+0x354/0xa70 [ 1966.201716] ? fput_many+0x2f/0x1a0 [ 1966.202031] ? ksys_write+0x1a9/0x260 [ 1966.202372] ? __ia32_sys_read+0xb0/0xb0 [ 1966.202735] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.203192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.203660] do_syscall_64+0x33/0x40 [ 1966.203982] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1966.204431] RIP: 0033:0x7feb2fbf3b19 [ 1966.204753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.206369] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1966.207020] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1966.207639] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1966.208254] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1966.208861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1966.209483] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:53:47 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7f8000000000) 06:53:47 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7fffc0000000) 06:53:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xf00000000000000) 06:53:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6800) 06:53:47 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 06:53:47 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7fffffe00000) [ 1966.439775] FAULT_INJECTION: forcing a failure. [ 1966.439775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1966.440816] CPU: 0 PID: 24129 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1966.441392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.442060] Call Trace: [ 1966.442292] dump_stack+0x107/0x167 [ 1966.442598] should_fail.cold+0x5/0xa [ 1966.442918] _copy_from_user+0x2e/0x1b0 [ 1966.443254] move_addr_to_kernel.part.0+0x31/0x110 [ 1966.443659] __copy_msghdr_from_user+0x3e1/0x4b0 [ 1966.444043] ? __ia32_sys_shutdown+0x80/0x80 [ 1966.444411] ? __sock_sendmsg+0x55/0x190 [ 1966.444743] ? ____sys_sendmsg+0x426/0x870 [ 1966.445097] sendmsg_copy_msghdr+0xa1/0x160 [ 1966.445460] ? do_recvmmsg+0x6d0/0x6d0 [ 1966.445780] ? lock_chain_count+0x20/0x20 [ 1966.446119] ? lock_downgrade+0x6d0/0x6d0 [ 1966.446482] io_sendmsg+0x62c/0x830 [ 1966.446783] ? io_setup_async_msg+0x2d0/0x2d0 [ 1966.447163] ? mark_lock+0xf5/0x2df0 [ 1966.447487] ? lock_chain_count+0x20/0x20 [ 1966.447848] ? __lock_acquire+0xbb1/0x5b00 [ 1966.448204] io_issue_sqe+0x3b3/0x7700 [ 1966.448541] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1966.448975] ? lock_chain_count+0x20/0x20 [ 1966.449322] ? __is_insn_slot_addr+0x14c/0x290 [ 1966.449693] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1966.450116] ? io_connect+0x610/0x610 [ 1966.450441] ? lock_acquire+0x197/0x470 [ 1966.450763] ? find_held_lock+0x2c/0x110 [ 1966.451098] ? __fget_files+0x26d/0x4c0 [ 1966.451429] ? lock_downgrade+0x6d0/0x6d0 [ 1966.451772] __io_queue_sqe+0x90/0x9d0 [ 1966.452091] ? io_issue_sqe+0x7700/0x7700 [ 1966.452443] io_submit_sqes+0x4461/0x85c0 [ 1966.452792] ? __do_sys_io_uring_enter+0x1f2/0x1920 [ 1966.453216] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1966.453633] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1966.454027] ? lock_downgrade+0x6d0/0x6d0 [ 1966.454378] ? find_held_lock+0x2c/0x110 [ 1966.454719] ? io_submit_sqes+0x85c0/0x85c0 [ 1966.455079] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1966.455488] ? wait_for_completion_io+0x270/0x270 [ 1966.455885] ? rcu_read_lock_any_held+0x75/0xa0 [ 1966.456268] ? vfs_write+0x354/0xa70 [ 1966.456575] ? fput_many+0x2f/0x1a0 [ 1966.456874] ? ksys_write+0x1a9/0x260 [ 1966.457192] ? __ia32_sys_read+0xb0/0xb0 [ 1966.457531] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.457953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.458389] do_syscall_64+0x33/0x40 [ 1966.458692] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1966.459105] RIP: 0033:0x7feb2fbf3b19 [ 1966.459417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.460911] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1966.461551] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1966.462124] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1966.462679] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1966.463198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1966.463747] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:54:01 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) 06:54:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:54:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c00) 06:54:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7000000) 06:54:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x3d36e08f00000000) 06:54:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x74) 06:54:01 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7fffffefe000) 06:54:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000002c0)={0x1, 0x3, 0x4, 0x9, 0x8, 0xfff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x3, 0x2, 0xd, 0x19, "58d15ade8f7bcac4517089049d4a973140635403dbdc566655949258773686b2e9dfa2d8659bef407e80d624979f8b4824b399abc7548d8b876cf3fd73ab4b92", "2290151ac79d90d6eb528835d5325e134c25c1503448db6de893a8755346b97e", [0x0, 0x1]}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) fsetxattr$security_capability(r3, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}], r4}, 0x18, 0x0) syz_mount_image$nfs4(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x10000, 0x5, &(0x7f0000001580)=[{&(0x7f0000000380)="96c88c293e9de9e9c0f93e95f811b75de402e661d718c0b89363bed214f5", 0x1e, 0x6}, {&(0x7f00000003c0)="0e25341f2c8dba8784b787b58ab85db92b0e40d6daf81099a5c2dd49b7d2a2cc59a24de6ebf87a8f0eecd9ad29dd6d139091c8d12b33487b8d12c9dc0fd3745dd9529539a010c3ab63a9fae6369541d87bfe8745cb4519e9c30a7f0e6f941aa26bc7ec624d0ae0a6ac153c94405567abff60a3c6acd90db3ff4d432cdd5a0c9906df15583eba914864689978ffd20f06a1b871bd66a3ffc181be96b1873cd5a92e4bbbf8cd0cf27d1f644238c011329b601288c9516d46c2c50004a33ee70caf344986", 0xc3, 0x7}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="1349bb8c", 0x4, 0x100}, {&(0x7f0000001500)="54ca4433ada1beacd18ac41f8bc3a6137caaed7ce84fd70641ee14cca2b582b8629e4d4961c3ed95ab1282ba55e017d593c596c48b01a418eab26b4554270cf61f627b50a25c", 0x46, 0x9fda}], 0x3011416, &(0x7f0000001600)={[{'\x00'}, {'\x00'}, {'\xd1'}, {'$():-$.@[#'}, {'\x00'}, {'\x11.@%*\'*'}, {'\\#[.^@}'}, {'\x00'}, {'\x00'}], [{@uid_lt={'uid<', r4}}]}) read(r1, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:54:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x9effffff00000000) [ 1980.821827] FAULT_INJECTION: forcing a failure. [ 1980.821827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1980.823601] CPU: 1 PID: 24294 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1980.824606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.825818] Call Trace: [ 1980.826209] dump_stack+0x107/0x167 [ 1980.826746] should_fail.cold+0x5/0xa [ 1980.827316] _copy_from_user+0x2e/0x1b0 [ 1980.827896] iovec_from_user+0x141/0x400 [ 1980.828494] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1980.829247] __import_iovec+0x67/0x590 [ 1980.829816] ? __ia32_sys_shutdown+0x80/0x80 [ 1980.830472] import_iovec+0x83/0xb0 [ 1980.831014] sendmsg_copy_msghdr+0x131/0x160 [ 1980.831657] ? do_recvmmsg+0x6d0/0x6d0 [ 1980.832222] ? lock_chain_count+0x20/0x20 [ 1980.832829] ? lock_downgrade+0x6d0/0x6d0 [ 1980.833449] io_sendmsg+0x62c/0x830 [ 1980.833985] ? io_setup_async_msg+0x2d0/0x2d0 [ 1980.834644] ? mark_lock+0xf5/0x2df0 [ 1980.835203] ? lock_chain_count+0x20/0x20 [ 1980.835838] ? __lock_acquire+0xbb1/0x5b00 [ 1980.836466] io_issue_sqe+0x3b3/0x7700 [ 1980.837043] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1980.837815] ? lock_chain_count+0x20/0x20 [ 1980.838416] ? lock_chain_count+0x20/0x20 [ 1980.839022] ? __is_insn_slot_addr+0x14c/0x290 [ 1980.839683] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1980.840441] ? io_connect+0x610/0x610 [ 1980.840997] ? lock_acquire+0x197/0x470 [ 1980.841588] ? find_held_lock+0x2c/0x110 [ 1980.842188] ? __fget_files+0x26d/0x4c0 [ 1980.842767] ? lock_downgrade+0x6d0/0x6d0 [ 1980.843375] __io_queue_sqe+0x90/0x9d0 [ 1980.843950] ? io_issue_sqe+0x7700/0x7700 [ 1980.844568] io_submit_sqes+0x4461/0x85c0 [ 1980.845213] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1980.845943] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1980.846647] ? lock_downgrade+0x6d0/0x6d0 [ 1980.847247] ? find_held_lock+0x2c/0x110 [ 1980.847846] ? io_submit_sqes+0x85c0/0x85c0 [ 1980.848483] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1980.849199] ? wait_for_completion_io+0x270/0x270 [ 1980.849900] ? rcu_read_lock_any_held+0x75/0xa0 [ 1980.850577] ? vfs_write+0x354/0xa70 [ 1980.851127] ? fput_many+0x2f/0x1a0 [ 1980.851661] ? ksys_write+0x1a9/0x260 [ 1980.852213] ? __ia32_sys_read+0xb0/0xb0 [ 1980.852807] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.853572] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.854324] do_syscall_64+0x33/0x40 [ 1980.854869] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1980.855616] RIP: 0033:0x7feb2fbf3b19 [ 1980.856155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.858838] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1980.859938] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1980.860965] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1980.861999] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1980.863026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1980.864050] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:54:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x48000000) 06:54:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c000000) 06:54:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7400) 06:54:14 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 06:54:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:54:14 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xe0ffff7f0000) 06:54:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xf0ffffff00000000) 06:54:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a) 06:54:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2568, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:54:14 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x8000000000000) 06:54:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xffffff7f00000000) [ 1993.147136] FAULT_INJECTION: forcing a failure. [ 1993.147136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1993.149055] CPU: 1 PID: 24827 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1993.150048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1993.151220] Call Trace: [ 1993.151599] dump_stack+0x107/0x167 [ 1993.152124] should_fail.cold+0x5/0xa [ 1993.152669] _copy_from_iter_full+0x201/0xa60 [ 1993.153331] rawv6_sendmsg+0x20e8/0x3b20 [ 1993.153917] ? rawv6_bind+0xa40/0xa40 [ 1993.154459] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1993.155204] ? lock_acquire+0x197/0x470 [ 1993.155779] ? find_held_lock+0x2c/0x110 [ 1993.156368] ? __might_fault+0xd3/0x180 [ 1993.156955] ? lock_downgrade+0x6d0/0x6d0 [ 1993.157552] ? lock_downgrade+0x6d0/0x6d0 [ 1993.158137] ? sock_has_perm+0x1ea/0x280 [ 1993.158715] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1993.159457] ? iovec_from_user+0x104/0x400 [ 1993.160056] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1993.160780] ? rawv6_bind+0xa40/0xa40 [ 1993.161329] inet_sendmsg+0x11d/0x140 [ 1993.161865] ? inet_send_prepare+0x540/0x540 [ 1993.162474] __sock_sendmsg+0x13c/0x190 [ 1993.163068] ____sys_sendmsg+0x70d/0x870 [ 1993.163657] ? sock_write_iter+0x3d0/0x3d0 [ 1993.164269] ? sendmsg_copy_msghdr+0xba/0x160 [ 1993.164900] ? do_recvmmsg+0x6d0/0x6d0 [ 1993.165458] ? lock_chain_count+0x20/0x20 [ 1993.166045] ? lock_downgrade+0x6d0/0x6d0 [ 1993.166633] __sys_sendmsg_sock+0x26/0x40 [ 1993.167214] io_sendmsg+0x1e6/0x830 [ 1993.167731] ? io_setup_async_msg+0x2d0/0x2d0 [ 1993.168374] ? mark_lock+0xf5/0x2df0 [ 1993.168912] ? lock_chain_count+0x20/0x20 [ 1993.169539] ? __lock_acquire+0xbb1/0x5b00 [ 1993.170138] io_issue_sqe+0x3b3/0x7700 [ 1993.170699] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1993.171451] ? lock_chain_count+0x20/0x20 [ 1993.172036] ? __is_insn_slot_addr+0x14c/0x290 [ 1993.172679] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1993.173442] ? io_connect+0x610/0x610 [ 1993.173980] ? lock_acquire+0x197/0x470 [ 1993.174557] ? find_held_lock+0x2c/0x110 [ 1993.175136] ? __fget_files+0x26d/0x4c0 [ 1993.175712] ? lock_downgrade+0x6d0/0x6d0 [ 1993.176303] __io_queue_sqe+0x90/0x9d0 [ 1993.176874] ? io_issue_sqe+0x7700/0x7700 [ 1993.177494] io_submit_sqes+0x4461/0x85c0 [ 1993.178107] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1993.178819] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1993.179502] ? lock_downgrade+0x6d0/0x6d0 [ 1993.180083] ? find_held_lock+0x2c/0x110 [ 1993.180668] ? io_submit_sqes+0x85c0/0x85c0 [ 1993.181310] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1993.181994] ? wait_for_completion_io+0x270/0x270 [ 1993.182701] ? rcu_read_lock_any_held+0x75/0xa0 [ 1993.183353] ? vfs_write+0x354/0xa70 [ 1993.183899] ? fput_many+0x2f/0x1a0 [ 1993.184411] ? ksys_write+0x1a9/0x260 [ 1993.184973] ? __ia32_sys_read+0xb0/0xb0 [ 1993.185560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1993.186289] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1993.187020] do_syscall_64+0x33/0x40 [ 1993.187535] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1993.188255] RIP: 0033:0x7feb2fbf3b19 [ 1993.188777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1993.191338] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1993.192397] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 1993.193391] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1993.194385] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 1993.195375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1993.196365] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:54:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a00) 06:54:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x68000000) 06:54:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x300) 06:54:28 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 06:54:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:54:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:54:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0xfffffffffffff000) 06:54:28 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x10000000000000) [ 2007.128993] FAULT_INJECTION: forcing a failure. [ 2007.128993] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.130733] CPU: 1 PID: 25273 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2007.131745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.132946] Call Trace: [ 2007.133342] dump_stack+0x107/0x167 [ 2007.133888] should_fail.cold+0x5/0xa [ 2007.134454] should_failslab+0x5/0x20 [ 2007.135015] kmem_cache_alloc_bulk+0x4b/0x320 [ 2007.135681] io_submit_sqes+0x6f76/0x85c0 [ 2007.136319] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2007.137042] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2007.137762] ? lock_downgrade+0x6d0/0x6d0 [ 2007.138365] ? find_held_lock+0x2c/0x110 [ 2007.138965] ? io_submit_sqes+0x85c0/0x85c0 [ 2007.139600] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2007.140309] ? wait_for_completion_io+0x270/0x270 [ 2007.141013] ? rcu_read_lock_any_held+0x75/0xa0 [ 2007.141699] ? vfs_write+0x354/0xa70 [ 2007.142250] ? fput_many+0x2f/0x1a0 [ 2007.142783] ? ksys_write+0x1a9/0x260 [ 2007.143341] ? __ia32_sys_read+0xb0/0xb0 [ 2007.143941] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.144710] ? syscall_enter_from_user_mode+0x1d/0x50 06:54:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4202}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r5, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c051}, 0x48040) [ 2007.145478] do_syscall_64+0x33/0x40 [ 2007.146195] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2007.146943] RIP: 0033:0x7feb2fbf3b19 [ 2007.147486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.150103] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2007.151205] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2007.152229] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2007.153266] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2007.154295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2007.155322] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:54:28 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x20000000000000) 06:54:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:54:28 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x40000000000000) 06:54:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x40009, &(0x7f0000000040)}, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000180)=ANY=[@ANYBLOB="54bfa5469d34cf5f81d022db59d77558125745a189f88a351d9fc4c1cc0d8c17531de1e902f9996238443137c43b5de69b2bfe5d7ba2c2e34eff88bf171f9e0d2a57f071f37e6b7e9bd71a7ea283b0bcc77c44abb4b69a23f83d251bb2cd", @ANYRES32=r3, @ANYBLOB="010400f87cb48a0000002e000000999df6877be4b290931d19987c10c42d968ddd9579556e2380d88f1d49290f4df8f83dc5c3e400"], 0x14}}, 0x0) 06:54:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x500) 06:54:28 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xe0efffff7f0000) 06:54:28 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 06:54:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x80000) 06:54:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c000000) 06:54:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x194, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b9ccbe7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15b2ec5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcb8b1b2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x12c, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1124612b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3831}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x487f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf174}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9918}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x310c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x998b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4dc8c5c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6daa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa8f4}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x965d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3120883e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f74}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19672712}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d964ee3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf194c15}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb34}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x333060c4}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7578}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xddf7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x422c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb744}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ee685ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x784a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb81}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc61}]}, {0x4}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa00d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cf7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xade9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa179}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36114b26}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8249}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x84}, 0x4004) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="11000000", @ANYRES16=r1, @ANYBLOB="010400000000000000002e000000"], 0x14}}, 0x0) [ 2007.489117] FAULT_INJECTION: forcing a failure. [ 2007.489117] name failslab, interval 1, probability 0, space 0, times 0 [ 2007.490948] CPU: 1 PID: 25706 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2007.491944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2007.493137] Call Trace: [ 2007.493543] dump_stack+0x107/0x167 [ 2007.494088] should_fail.cold+0x5/0xa [ 2007.494649] ? create_object.isra.0+0x3a/0xa20 [ 2007.495313] should_failslab+0x5/0x20 [ 2007.495863] kmem_cache_alloc+0x5b/0x310 [ 2007.496459] create_object.isra.0+0x3a/0xa20 [ 2007.497100] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2007.497864] kmem_cache_alloc_bulk+0x168/0x320 [ 2007.498544] io_submit_sqes+0x6f76/0x85c0 [ 2007.499165] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2007.499878] __do_sys_io_uring_enter+0x6b5/0x1920 06:54:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x2000}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x800, 0x0, 0xf, 0x1, "a41de37beb1d60cbf4a808d3a717a1f63e64a99eed1eb320b46261dac085c42dd08ce862dc4c2d3c35ae1e30f56d4fbf135bc0776a8557a56db7715a576c8879", "f178a13ec9f22af2cda8bd357154f2688565d3d87e9cdb7b8b88d9567a1b6228", [0x7, 0x8e8]}) signalfd(r1, &(0x7f00000000c0)={[0x3f]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 2007.500578] ? lock_downgrade+0x6d0/0x6d0 [ 2007.501318] ? find_held_lock+0x2c/0x110 [ 2007.501944] ? io_submit_sqes+0x85c0/0x85c0 [ 2007.502595] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2007.503299] ? wait_for_completion_io+0x270/0x270 [ 2007.504000] ? rcu_read_lock_any_held+0x75/0xa0 [ 2007.504670] ? vfs_write+0x354/0xa70 [ 2007.505226] ? fput_many+0x2f/0x1a0 [ 2007.505770] ? ksys_write+0x1a9/0x260 [ 2007.506320] ? __ia32_sys_read+0xb0/0xb0 [ 2007.506917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2007.507675] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2007.508430] do_syscall_64+0x33/0x40 [ 2007.508970] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2007.509730] RIP: 0033:0x7feb2fbf3b19 [ 2007.510269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2007.512890] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2007.513993] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2007.515021] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2007.516037] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2007.517049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2007.518083] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:54:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:54:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x1000000) 06:54:42 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x100000000000000) 06:54:42 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 06:54:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:54:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r2, 0x401}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r5) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="3610db25", @ANYRES16=r7, @ANYBLOB="01000000000000000000090000000500130000000000"], 0x1c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r8) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r8) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) 06:54:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x74000000) 06:54:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x600) 06:54:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 2021.745154] FAULT_INJECTION: forcing a failure. [ 2021.745154] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.746282] CPU: 0 PID: 26137 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2021.746929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.747697] Call Trace: [ 2021.747954] dump_stack+0x107/0x167 [ 2021.748283] should_fail.cold+0x5/0xa [ 2021.748651] ? create_object.isra.0+0x3a/0xa20 [ 2021.749081] should_failslab+0x5/0x20 [ 2021.749445] kmem_cache_alloc+0x5b/0x310 [ 2021.749809] create_object.isra.0+0x3a/0xa20 [ 2021.750218] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.750665] kmem_cache_alloc_bulk+0x168/0x320 [ 2021.751099] io_submit_sqes+0x6f76/0x85c0 [ 2021.751509] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2021.751958] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2021.752399] ? lock_downgrade+0x6d0/0x6d0 [ 2021.752786] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2021.753295] ? io_submit_sqes+0x85c0/0x85c0 [ 2021.753726] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2021.754189] ? vfs_write+0x58a/0xa70 [ 2021.754528] ? wait_for_completion_io+0x270/0x270 [ 2021.754964] ? rcu_read_lock_any_held+0x75/0xa0 [ 2021.755386] ? vfs_write+0x354/0xa70 [ 2021.755740] ? fput_many+0x2f/0x1a0 [ 2021.756067] ? ksys_write+0x1a9/0x260 [ 2021.756420] ? __ia32_sys_read+0xb0/0xb0 [ 2021.756777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.757267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.757752] do_syscall_64+0x33/0x40 [ 2021.758097] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2021.758570] RIP: 0033:0x7feb2fbf3b19 [ 2021.758902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.760563] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2021.761204] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2021.761870] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2021.762527] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2021.763191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2021.763845] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:54:42 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x200000000000000) 06:54:42 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 06:54:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) pwrite64(r0, &(0x7f00000002c0)="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", 0x1000, 0x5) 06:54:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:54:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x300400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4080) 06:54:43 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x300000000000000) [ 2021.955944] FAULT_INJECTION: forcing a failure. [ 2021.955944] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.957022] CPU: 0 PID: 26498 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2021.957607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2021.958370] Call Trace: [ 2021.958622] dump_stack+0x107/0x167 [ 2021.958958] should_fail.cold+0x5/0xa [ 2021.959286] ? create_object.isra.0+0x3a/0xa20 [ 2021.959706] should_failslab+0x5/0x20 [ 2021.960029] kmem_cache_alloc+0x5b/0x310 [ 2021.960399] ? mark_held_locks+0x9e/0xe0 [ 2021.960769] create_object.isra.0+0x3a/0xa20 [ 2021.961140] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2021.961620] kmem_cache_alloc_bulk+0x168/0x320 [ 2021.962045] io_submit_sqes+0x6f76/0x85c0 [ 2021.962439] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2021.962893] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2021.963336] ? lock_downgrade+0x6d0/0x6d0 [ 2021.963713] ? find_held_lock+0x2c/0x110 [ 2021.964087] ? io_submit_sqes+0x85c0/0x85c0 [ 2021.964496] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2021.964937] ? wait_for_completion_io+0x270/0x270 [ 2021.965377] ? rcu_read_lock_any_held+0x75/0xa0 [ 2021.965816] ? vfs_write+0x354/0xa70 [ 2021.966157] ? fput_many+0x2f/0x1a0 [ 2021.966491] ? ksys_write+0x1a9/0x260 [ 2021.966838] ? __ia32_sys_read+0xb0/0xb0 [ 2021.967216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2021.967695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2021.968172] do_syscall_64+0x33/0x40 [ 2021.968516] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2021.968949] RIP: 0033:0x7feb2fbf3b19 [ 2021.969289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2021.970823] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2021.971514] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2021.972099] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2021.972743] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2021.973339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2021.973935] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:54:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x700) 06:54:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a000000) 06:54:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x2000000) 06:54:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) 06:54:43 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x400000000000000) 06:54:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0x0, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:54:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010400000008040000002e000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}]}, 0x50}}, 0x0) 06:54:56 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 06:54:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xffffff7f) 06:54:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3000000) 06:54:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0x0, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:54:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4800) 06:54:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1b5}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0xbd, 0x600000) flock(r1, 0x5) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530003af33d6771105458a0ce8fed8a86dfc76e56738e837f22505be150fdacaa24c766085eb5b69c8bdc03f65efb83a3e3ada3456cff7baf4d99506f7ae6a9846885f963094d7927ce87252631e3d0f789b0e7701e68dab803b8de294c2fe218bdd7f6dd44a2ded183b249acd7b732e35d31cf8850e1899b33c41e0d3e5007567a1be2961ce1c47bc42b209d4af4d1dda3174039650347993ec6f158fe741299a6360e668e09ea520d06217faa"]) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000200)={0x6, 0x7, 0x79f, 0x7, 0x7}) 06:54:56 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x500000000000000) [ 2035.360667] FAULT_INJECTION: forcing a failure. [ 2035.360667] name failslab, interval 1, probability 0, space 0, times 0 [ 2035.362411] CPU: 0 PID: 27010 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2035.363375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2035.364518] Call Trace: [ 2035.364894] dump_stack+0x107/0x167 [ 2035.365408] should_fail.cold+0x5/0xa [ 2035.365954] ? create_object.isra.0+0x3a/0xa20 [ 2035.366597] should_failslab+0x5/0x20 [ 2035.367125] kmem_cache_alloc+0x5b/0x310 [ 2035.367700] create_object.isra.0+0x3a/0xa20 [ 2035.368317] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2035.369043] kmem_cache_alloc_bulk+0x168/0x320 [ 2035.369686] io_submit_sqes+0x6f76/0x85c0 [ 2035.370301] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2035.371009] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2035.371712] ? lock_downgrade+0x6d0/0x6d0 [ 2035.372306] ? find_held_lock+0x2c/0x110 [ 2035.372877] ? io_submit_sqes+0x85c0/0x85c0 [ 2035.373492] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2035.374178] ? wait_for_completion_io+0x270/0x270 [ 2035.374861] ? rcu_read_lock_any_held+0x75/0xa0 [ 2035.375517] ? vfs_write+0x354/0xa70 [ 2035.376044] ? fput_many+0x2f/0x1a0 [ 2035.376562] ? ksys_write+0x1a9/0x260 [ 2035.377094] ? __ia32_sys_read+0xb0/0xb0 [ 2035.377667] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2035.378398] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2035.379129] do_syscall_64+0x33/0x40 [ 2035.379649] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2035.380358] RIP: 0033:0x7feb2fbf3b19 [ 2035.380876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2035.383386] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2035.384444] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2035.385425] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2035.386434] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2035.387418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2035.388402] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:54:56 executing program 0: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x800) recvmsg$unix(r0, &(0x7f00000003c0)={&(0x7f00000000c0), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/188, 0xbc}, {&(0x7f0000000200)=""/129, 0x81}], 0x2, &(0x7f0000000300)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x40000001) open$dir(&(0x7f0000000400)='./file0\x00', 0xa99e2ac9986496e5, 0x181) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r2, 0x401}, 0x14}}, 0x0) 06:54:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0x0, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:54:56 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x600000000000000) 06:55:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c00) 06:55:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0, r1, r0, r0], 0x4) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:55:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:55:09 executing program 0: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r0, 0xa02, 0x0, 0xfffffffe}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r4, 0x401, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x70, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x70}, 0x1, 0x0, 0x0, 0xa5}, 0x48000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40001) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r8) sendmsg$NLBL_MGMT_C_PROTOCOLS(r8, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 06:55:09 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x700000000000000) 06:55:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7fffffefe000) 06:55:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4000000) 06:55:09 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) [ 2048.963174] FAULT_INJECTION: forcing a failure. [ 2048.963174] name failslab, interval 1, probability 0, space 0, times 0 [ 2048.965011] CPU: 1 PID: 27655 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2048.966043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2048.967252] Call Trace: [ 2048.967654] dump_stack+0x107/0x167 [ 2048.968194] should_fail.cold+0x5/0xa [ 2048.968758] ? create_object.isra.0+0x3a/0xa20 [ 2048.969432] should_failslab+0x5/0x20 [ 2048.970016] kmem_cache_alloc+0x5b/0x310 [ 2048.970618] ? mark_held_locks+0x9e/0xe0 [ 2048.971214] create_object.isra.0+0x3a/0xa20 [ 2048.971861] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2048.972609] kmem_cache_alloc_bulk+0x168/0x320 [ 2048.973283] io_submit_sqes+0x6f76/0x85c0 [ 2048.973938] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2048.974668] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2048.975371] ? lock_downgrade+0x6d0/0x6d0 [ 2048.975981] ? find_held_lock+0x2c/0x110 [ 2048.976586] ? io_submit_sqes+0x85c0/0x85c0 [ 2048.977228] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2048.977962] ? wait_for_completion_io+0x270/0x270 [ 2048.978678] ? rcu_read_lock_any_held+0x75/0xa0 [ 2048.979349] ? vfs_write+0x354/0xa70 [ 2048.979898] ? fput_many+0x2f/0x1a0 [ 2048.980440] ? ksys_write+0x1a9/0x260 [ 2048.980998] ? __ia32_sys_read+0xb0/0xb0 [ 2048.981603] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2048.982390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2048.983149] do_syscall_64+0x33/0x40 [ 2048.983708] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2048.984455] RIP: 0033:0x7feb2fbf3b19 [ 2048.985000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2048.987666] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2048.988776] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2048.989800] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2048.990869] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2048.991908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2048.992941] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:55:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x5000000) 06:55:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x41) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) 06:55:10 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:55:10 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xc00000000000000) 06:55:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) statx(r0, &(0x7f0000000100)='./file1\x00', 0x400, 0x8, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f00000003c0)='./file1\x00', 0x84200, 0x12) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x4b9, [0x1, 0x3, 0x376, 0x5, 0x7fff, 0x4]}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) r3 = eventfd(0xce) r4 = accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10, 0x80800) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000200)=[r1, r1, r3, r4], 0x4) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:55:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24064802}, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) 06:55:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6800) 06:55:10 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 06:55:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x8000000000000) [ 2049.264448] FAULT_INJECTION: forcing a failure. [ 2049.264448] name failslab, interval 1, probability 0, space 0, times 0 [ 2049.265434] CPU: 0 PID: 28263 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2049.266027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2049.266723] Call Trace: [ 2049.266950] dump_stack+0x107/0x167 [ 2049.267269] should_fail.cold+0x5/0xa [ 2049.267595] ? create_object.isra.0+0x3a/0xa20 [ 2049.267975] should_failslab+0x5/0x20 [ 2049.268292] kmem_cache_alloc+0x5b/0x310 [ 2049.268631] ? mark_held_locks+0x9e/0xe0 [ 2049.268968] create_object.isra.0+0x3a/0xa20 [ 2049.269330] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2049.269769] kmem_cache_alloc_bulk+0x168/0x320 [ 2049.270169] io_submit_sqes+0x6f76/0x85c0 [ 2049.270527] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2049.270937] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2049.271343] ? lock_downgrade+0x6d0/0x6d0 [ 2049.271691] ? find_held_lock+0x2c/0x110 [ 2049.272030] ? io_submit_sqes+0x85c0/0x85c0 [ 2049.272420] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2049.272830] ? wait_for_completion_io+0x270/0x270 [ 2049.273230] ? rcu_read_lock_any_held+0x75/0xa0 [ 2049.273613] ? vfs_write+0x354/0xa70 [ 2049.273949] ? fput_many+0x2f/0x1a0 [ 2049.274257] ? ksys_write+0x1a9/0x260 [ 2049.274572] ? __ia32_sys_read+0xb0/0xb0 [ 2049.274916] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2049.275357] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2049.275795] do_syscall_64+0x33/0x40 [ 2049.276102] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2049.276523] RIP: 0033:0x7feb2fbf3b19 [ 2049.276835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2049.278349] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2049.278981] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2049.279571] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2049.280174] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2049.280762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2049.281337] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:55:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5262f0a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x766c8094}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33103551}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e40a9a0}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x7}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x8085) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r3, 0x401}, 0x14}}, 0x0) 06:55:25 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x1200000000000000) 06:55:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:55:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1e, &(0x7f0000000240)={0x0, 0x2a41, 0x0, 0x1}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000100)={&(0x7f00000002c0)=""/201, 0xc9}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$binfmt_elf64(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x9dc) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:55:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xe0efffff7f0000) 06:55:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c00) 06:55:25 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 06:55:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r4) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000240)={0xfffffffffffffffc, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4080) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xd8499488957a772f}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="ef018000", @ANYRES16=r2, @ANYBLOB="100027bd7000fddbdf251f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r8, 0x401, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2ea55811", @ANYRES16=r1, @ANYBLOB="010400000000000000002e000000"], 0x14}}, 0x0) 06:55:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6000000) [ 2064.522767] FAULT_INJECTION: forcing a failure. [ 2064.522767] name failslab, interval 1, probability 0, space 0, times 0 [ 2064.524764] CPU: 0 PID: 28758 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2064.525910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2064.527288] Call Trace: [ 2064.527730] dump_stack+0x107/0x167 [ 2064.528343] should_fail.cold+0x5/0xa [ 2064.528987] ? create_object.isra.0+0x3a/0xa20 [ 2064.529753] should_failslab+0x5/0x20 [ 2064.530404] kmem_cache_alloc+0x5b/0x310 [ 2064.531081] ? mark_held_locks+0x9e/0xe0 [ 2064.531761] create_object.isra.0+0x3a/0xa20 [ 2064.532499] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2064.533350] kmem_cache_alloc_bulk+0x168/0x320 [ 2064.534121] io_submit_sqes+0x6f76/0x85c0 [ 2064.534850] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2064.535677] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2064.536478] ? lock_downgrade+0x6d0/0x6d0 [ 2064.537161] ? find_held_lock+0x2c/0x110 [ 2064.537845] ? io_submit_sqes+0x85c0/0x85c0 [ 2064.538584] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2064.539399] ? wait_for_completion_io+0x270/0x270 [ 2064.540197] ? rcu_read_lock_any_held+0x75/0xa0 [ 2064.540960] ? vfs_write+0x354/0xa70 [ 2064.541584] ? fput_many+0x2f/0x1a0 [ 2064.542200] ? ksys_write+0x1a9/0x260 [ 2064.542832] ? __ia32_sys_read+0xb0/0xb0 [ 2064.543510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2064.544373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2064.545232] do_syscall_64+0x33/0x40 [ 2064.545849] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2064.546702] RIP: 0033:0x7feb2fbf3b19 [ 2064.547321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2064.550342] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2064.551601] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2064.552776] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2064.553943] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2064.555126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2064.556300] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:55:25 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x1800000000000000) 06:55:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:55:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modem_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:pam_exec_t:s0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x204, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x16c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ef4de00}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54342829}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a15215a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77801b3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b66e085}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21298a73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x287233e7}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5acba555}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x744c7e04}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f7f307b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79988aae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cbbbc50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45d42bad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x498597b5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x241a1706}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b1fc17c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cd1fb62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6619221c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f6a7580}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22ac9189}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x816c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a45}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6240f28d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11569a}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x204}, 0x1, 0x0, 0x0, 0x4000800}, 0x44100) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) 06:55:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x100000000000000) 06:55:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7000000) 06:55:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x48000000) 06:55:41 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x1e00000000000000) 06:55:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x200000000000000) 06:55:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:55:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7400) 06:55:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x83}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x80}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xb0}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40c0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r3, 0x401}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&^\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r6) 06:55:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:55:41 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) [ 2080.304285] FAULT_INJECTION: forcing a failure. [ 2080.304285] name failslab, interval 1, probability 0, space 0, times 0 [ 2080.305515] CPU: 0 PID: 29542 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2080.306218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2080.307052] Call Trace: [ 2080.307334] dump_stack+0x107/0x167 [ 2080.307711] should_fail.cold+0x5/0xa [ 2080.308101] ? create_object.isra.0+0x3a/0xa20 [ 2080.308567] should_failslab+0x5/0x20 [ 2080.308955] kmem_cache_alloc+0x5b/0x310 [ 2080.309377] create_object.isra.0+0x3a/0xa20 [ 2080.309823] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2080.310347] kmem_cache_alloc_bulk+0x168/0x320 [ 2080.310814] io_submit_sqes+0x6f76/0x85c0 [ 2080.311257] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2080.311760] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2080.312253] ? lock_downgrade+0x6d0/0x6d0 [ 2080.312674] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2080.313222] ? io_submit_sqes+0x85c0/0x85c0 [ 2080.313667] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2080.314158] ? wait_for_completion_io+0x270/0x270 [ 2080.314660] ? rcu_read_lock_any_held+0x75/0xa0 [ 2080.315129] ? vfs_write+0x354/0xa70 [ 2080.315513] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2080.315979] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2080.316525] ? ksys_write+0x1a9/0x260 [ 2080.316912] ? __ia32_sys_read+0xb0/0xb0 [ 2080.317329] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2080.317858] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2080.318393] do_syscall_64+0x33/0x40 [ 2080.318771] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2080.319290] RIP: 0033:0x7feb2fbf3b19 [ 2080.319667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2080.321489] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2080.322250] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2080.322971] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2080.323685] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2080.324398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2080.325111] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:55:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x10) 06:55:41 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x2000000000000000) 06:55:41 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) 06:55:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x300000000000000) 06:55:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 2080.597173] FAULT_INJECTION: forcing a failure. [ 2080.597173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2080.598305] CPU: 0 PID: 29989 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2080.598918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2080.599645] Call Trace: [ 2080.599888] dump_stack+0x107/0x167 [ 2080.600219] should_fail.cold+0x5/0xa [ 2080.600564] _copy_from_user+0x2e/0x1b0 [ 2080.600924] __copy_msghdr_from_user+0x91/0x4b0 [ 2080.601337] ? __ia32_sys_shutdown+0x80/0x80 [ 2080.601742] sendmsg_copy_msghdr+0xa1/0x160 [ 2080.602125] ? do_recvmmsg+0x6d0/0x6d0 [ 2080.602479] ? lock_chain_count+0x20/0x20 [ 2080.602854] ? __is_insn_slot_addr+0x123/0x290 [ 2080.603261] ? lock_downgrade+0x6d0/0x6d0 [ 2080.603634] ? unwind_next_frame+0x13ef/0x1a90 [ 2080.604043] io_sendmsg+0x62c/0x830 [ 2080.604368] ? io_setup_async_msg+0x2d0/0x2d0 [ 2080.604769] ? mark_lock+0xf5/0x2df0 [ 2080.605106] ? lock_chain_count+0x20/0x20 [ 2080.605477] ? lock_chain_count+0x20/0x20 [ 2080.605845] ? stack_trace_save+0x8c/0xc0 [ 2080.606217] ? stack_trace_consume_entry+0x160/0x160 [ 2080.606686] ? __lock_acquire+0xbb1/0x5b00 [ 2080.607066] io_issue_sqe+0x3b3/0x7700 [ 2080.607419] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2080.607881] ? lock_chain_count+0x20/0x20 [ 2080.608249] ? lock_chain_count+0x20/0x20 [ 2080.608615] ? __is_insn_slot_addr+0x14c/0x290 [ 2080.609022] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2080.609481] ? io_connect+0x610/0x610 [ 2080.609821] ? lock_acquire+0x197/0x470 [ 2080.610171] ? find_held_lock+0x2c/0x110 [ 2080.610540] ? __fget_files+0x26d/0x4c0 [ 2080.610904] __io_queue_sqe+0x90/0x9d0 [ 2080.611254] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2080.611716] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2080.612187] ? trace_hardirqs_on+0x5b/0x180 [ 2080.612571] ? io_issue_sqe+0x7700/0x7700 [ 2080.612955] io_submit_sqes+0x4461/0x85c0 [ 2080.613337] ? __mutex_lock+0x4fe/0x10b0 [ 2080.613698] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2080.614137] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2080.614569] ? lock_downgrade+0x6d0/0x6d0 [ 2080.614935] ? find_held_lock+0x2c/0x110 [ 2080.615303] ? io_submit_sqes+0x85c0/0x85c0 [ 2080.615689] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2080.616120] ? wait_for_completion_io+0x270/0x270 [ 2080.616553] ? rcu_read_lock_any_held+0x75/0xa0 [ 2080.616968] ? vfs_write+0x354/0xa70 [ 2080.617301] ? fput_many+0x2f/0x1a0 [ 2080.617621] ? ksys_write+0x1a9/0x260 [ 2080.617956] ? __ia32_sys_read+0xb0/0xb0 [ 2080.618327] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2080.618784] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2080.619245] do_syscall_64+0x33/0x40 [ 2080.619571] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2080.620019] RIP: 0033:0x7feb2fbf3b19 [ 2080.620347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2080.621931] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2080.622599] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2080.623216] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2080.623839] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2080.624450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2080.625068] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:55:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="08de29d32982f8cb6c0b771f849d569113dd7f", @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf25030000000c0009000200aaaaaaabaaaa06000800a3aa000006000800a2aa0000"], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x24000880) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000717df7b", @ANYRES16=r1, @ANYBLOB="010400000000000000002e000000"], 0x14}}, 0x0) 06:55:41 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x2400000000000000) 06:55:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x175}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:55:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c000000) 06:55:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a00) 06:55:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:55:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:55:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x80000) 06:55:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x3e4, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x158, 0xc, 0x0, 0x1, [{0x4}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x581b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19b94397}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb51b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39908b06}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e63ac9f}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a37}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fae9968}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdab4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58ac3d1d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x740cdc3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6156}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4dbf8540}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f84cdbc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11247d0e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52243983}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0f3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ae3dfa8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf024}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d55}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ec1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x562ef479}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b7fe4d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbde2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ed5ac47}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6107b9b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf641}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52f7b2e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ae0}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb26f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59c1a05b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f8fb05f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17495aa2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c83129d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bdeb03c}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78a28dfe}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b4d0b64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d0ce6b7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cb8a521}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb8, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bfd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb88a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ea6f32f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe783}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b713501}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7150}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8236}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x409278e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30de8c12}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf3a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x586d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x126771f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c37}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49f6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6add38e9}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bfc9e9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5339}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa0cd}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x12c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc07}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x654dfae6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8d68919}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x595551f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18329c33}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b1c81fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xecc0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4454}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39811c7b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x235e61ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe473}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61a34fbc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9828}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x708}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x766ac8ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefbb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3515d8cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73500d3e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8193}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c64}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75d6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68119c9e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76b7bf}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf886}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5735}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7b0}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe3a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17b74f7a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6204dfdb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfde9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2ae}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x3e4}}, 0x41) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) 06:55:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x1000000) 06:55:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x400000000000000) 06:55:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:55:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x68000000) 06:55:54 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) 06:55:54 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x2a00000000000000) 06:55:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:55:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0104000078422139476fa35ddca09bd73c0000000000002e000000"], 0x14}}, 0x0) [ 2093.337052] FAULT_INJECTION: forcing a failure. [ 2093.337052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2093.338906] CPU: 0 PID: 30826 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2093.339956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2093.341221] Call Trace: [ 2093.341621] dump_stack+0x107/0x167 [ 2093.342182] should_fail.cold+0x5/0xa [ 2093.342777] _copy_from_user+0x2e/0x1b0 [ 2093.343390] move_addr_to_kernel.part.0+0x31/0x110 [ 2093.344140] __copy_msghdr_from_user+0x3e1/0x4b0 [ 2093.344879] ? __ia32_sys_shutdown+0x80/0x80 [ 2093.345576] sendmsg_copy_msghdr+0xa1/0x160 [ 2093.346241] ? do_recvmmsg+0x6d0/0x6d0 [ 2093.346838] ? lock_chain_count+0x20/0x20 [ 2093.347476] ? __is_insn_slot_addr+0x123/0x290 [ 2093.348172] ? lock_downgrade+0x6d0/0x6d0 [ 2093.348804] ? unwind_next_frame+0x13ef/0x1a90 [ 2093.349477] io_sendmsg+0x62c/0x830 [ 2093.350026] ? io_setup_async_msg+0x2d0/0x2d0 [ 2093.350717] ? mark_lock+0xf5/0x2df0 [ 2093.351287] ? lock_chain_count+0x20/0x20 [ 2093.351928] ? stack_trace_consume_entry+0x160/0x160 [ 2093.352693] ? lock_acquire+0x197/0x470 [ 2093.353312] ? lock_acquire+0x197/0x470 [ 2093.353926] ? __lock_acquire+0xbb1/0x5b00 [ 2093.354578] io_issue_sqe+0x3b3/0x7700 [ 2093.355179] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2093.355969] ? lock_chain_count+0x20/0x20 [ 2093.356596] ? __is_insn_slot_addr+0x14c/0x290 [ 2093.357306] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2093.358096] ? io_connect+0x610/0x610 [ 2093.358685] ? lock_acquire+0x197/0x470 [ 2093.359289] ? find_held_lock+0x2c/0x110 [ 2093.359921] ? __fget_files+0x26d/0x4c0 [ 2093.360523] ? lock_downgrade+0x6d0/0x6d0 [ 2093.361171] __io_queue_sqe+0x90/0x9d0 [ 2093.361762] ? io_issue_sqe+0x7700/0x7700 [ 2093.362400] io_submit_sqes+0x4461/0x85c0 [ 2093.363064] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2093.363816] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2093.364551] ? lock_downgrade+0x6d0/0x6d0 [ 2093.365172] ? find_held_lock+0x2c/0x110 [ 2093.365788] ? io_submit_sqes+0x85c0/0x85c0 [ 2093.366455] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2093.367185] ? wait_for_completion_io+0x270/0x270 [ 2093.367911] ? rcu_read_lock_any_held+0x75/0xa0 [ 2093.368611] ? vfs_write+0x354/0xa70 [ 2093.369171] ? fput_many+0x2f/0x1a0 [ 2093.369725] ? ksys_write+0x1a9/0x260 [ 2093.370318] ? __ia32_sys_read+0xb0/0xb0 [ 2093.370943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2093.371735] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2093.372518] do_syscall_64+0x33/0x40 [ 2093.373091] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2093.373862] RIP: 0033:0x7feb2fbf3b19 [ 2093.374448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2093.377203] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2093.378347] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2093.379426] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2093.380498] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2093.381569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2093.382649] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:55:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:56:09 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3000000000000000) 06:56:09 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) 06:56:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c000000) 06:56:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x500000000000000) 06:56:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r6, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x44001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 06:56:09 executing program 1: r0 = gettid() waitid(0x1, r0, &(0x7f00000000c0), 0x20000000, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r1, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) wait4(r0, 0x0, 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:56:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x2000000) 06:56:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 2108.619562] FAULT_INJECTION: forcing a failure. [ 2108.619562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2108.621375] CPU: 1 PID: 31439 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2108.622383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2108.623571] Call Trace: [ 2108.623961] dump_stack+0x107/0x167 [ 2108.624505] should_fail.cold+0x5/0xa [ 2108.625058] _copy_from_user+0x2e/0x1b0 [ 2108.625654] iovec_from_user+0x141/0x400 [ 2108.626239] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 2108.626997] __import_iovec+0x67/0x590 [ 2108.627569] ? __ia32_sys_shutdown+0x80/0x80 [ 2108.628224] import_iovec+0x83/0xb0 [ 2108.628768] sendmsg_copy_msghdr+0x131/0x160 [ 2108.629415] ? do_recvmmsg+0x6d0/0x6d0 [ 2108.629986] ? lock_chain_count+0x20/0x20 [ 2108.630607] ? lock_downgrade+0x6d0/0x6d0 [ 2108.631214] ? unwind_next_frame+0x13ef/0x1a90 [ 2108.631888] io_sendmsg+0x62c/0x830 [ 2108.632430] ? io_setup_async_msg+0x2d0/0x2d0 [ 2108.633089] ? mark_lock+0xf5/0x2df0 [ 2108.633647] ? lock_chain_count+0x20/0x20 [ 2108.634252] ? mark_lock+0xf5/0x2df0 [ 2108.634831] ? __lock_acquire+0xbb1/0x5b00 [ 2108.635470] io_issue_sqe+0x3b3/0x7700 [ 2108.636046] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2108.636805] ? lock_chain_count+0x20/0x20 [ 2108.637418] ? lock_chain_count+0x20/0x20 [ 2108.638018] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2108.638785] ? io_connect+0x610/0x610 [ 2108.639349] ? lock_acquire+0x197/0x470 [ 2108.639931] ? find_held_lock+0x2c/0x110 [ 2108.640536] ? __fget_files+0x26d/0x4c0 [ 2108.641117] ? lock_downgrade+0x6d0/0x6d0 [ 2108.641729] __io_queue_sqe+0x90/0x9d0 [ 2108.642310] ? io_issue_sqe+0x7700/0x7700 [ 2108.642941] io_submit_sqes+0x4461/0x85c0 [ 2108.643573] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2108.644309] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2108.645012] ? lock_downgrade+0x6d0/0x6d0 [ 2108.645613] ? find_held_lock+0x2c/0x110 [ 2108.646210] ? io_submit_sqes+0x85c0/0x85c0 [ 2108.646848] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2108.647559] ? wait_for_completion_io+0x270/0x270 [ 2108.648262] ? rcu_read_lock_any_held+0x75/0xa0 [ 2108.648944] ? vfs_write+0x354/0xa70 [ 2108.649489] ? fput_many+0x2f/0x1a0 [ 2108.650028] ? ksys_write+0x1a9/0x260 [ 2108.650586] ? __ia32_sys_read+0xb0/0xb0 [ 2108.651191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2108.651952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2108.652721] do_syscall_64+0x33/0x40 [ 2108.653261] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2108.654019] RIP: 0033:0x7feb2fbf3b19 [ 2108.654563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2108.657245] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2108.658348] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2108.659391] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2108.660423] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2108.661451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2108.662481] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:56:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x1412c0, 0x0) fcntl$dupfd(r1, 0x406, r1) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x0, 0x4, 0x1c, 0x1, "9a74e79a3f8c5f07f6ead7e5ca2de7255cdf16819f208c81d707d5760eb23891e31445b4e9591f21fa97e28291c0a6f83efd87e936f600c31826147cb25b8b66", "13891f2ad9771cc0c92edec334d2372ae0d2014aebeaa08fb7d2c8b241871d8f", [0x4, 0x400]}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:56:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x600000000000000) 06:56:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:56:09 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3600000000000000) 06:56:09 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 06:56:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3000000) 06:56:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x74000000) [ 2108.913985] FAULT_INJECTION: forcing a failure. [ 2108.913985] name failslab, interval 1, probability 0, space 0, times 0 [ 2108.914993] CPU: 0 PID: 32121 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2108.915576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2108.916257] Call Trace: [ 2108.916481] dump_stack+0x107/0x167 [ 2108.916796] should_fail.cold+0x5/0xa [ 2108.917121] ? create_object.isra.0+0x3a/0xa20 [ 2108.917510] should_failslab+0x5/0x20 [ 2108.917823] kmem_cache_alloc+0x5b/0x310 [ 2108.918163] ? mark_held_locks+0x9e/0xe0 [ 2108.918507] create_object.isra.0+0x3a/0xa20 [ 2108.918878] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2108.919321] kmem_cache_alloc_bulk+0x168/0x320 [ 2108.919701] io_submit_sqes+0x6f76/0x85c0 [ 2108.920063] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2108.920480] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2108.920878] ? lock_downgrade+0x6d0/0x6d0 [ 2108.921224] ? find_held_lock+0x2c/0x110 [ 2108.921572] ? io_submit_sqes+0x85c0/0x85c0 [ 2108.921938] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2108.922339] ? wait_for_completion_io+0x270/0x270 [ 2108.922788] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2108.923222] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2108.923676] ? trace_hardirqs_on+0x5b/0x180 [ 2108.924035] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2108.924490] ? __io_uring_cancel+0x20/0x20 [ 2108.924843] do_syscall_64+0x33/0x40 [ 2108.925148] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2108.925570] RIP: 0033:0x7feb2fbf3b19 [ 2108.925886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2108.927395] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2108.928015] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2108.928598] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2108.929178] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2108.929763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2108.930345] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:56:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6225, &(0x7f0000000240)={0x0, 0x100, 0x0, 0x2, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:56:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="5ed33bb0433a98e1e9b2ac734007e409d6e914570a1803eb796680070e30688b5b3680cf838a544ecb7736e90000000064dbe718ef68ca07367d84753291a3e484bbdfcd435cbc4bb350e48adc63b021d2e16300b1d73c19778818c809752c47502940d541bf7a4ad1649895bf74f7d262d4c16593bd2320371a9ed20bb230191aabff966762f5abf65186532777d6e1f03c5ba646ee874a448a1fb70f2a790dbdd0be7b384e8ed7f767", @ANYRES16=r1, @ANYBLOB="010400000000000000002e000000"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008f00), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x80, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:systemd_unit_file_t:s0\x00'}]}, 0x80}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) 06:56:23 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) 06:56:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a000000) 06:56:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f000001a440), 0x0) 06:56:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x700000000000000) 06:56:23 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3c00000000000000) 06:56:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0xd8, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000c00)={0x6f0, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PEERS={0x690, 0x8, 0x0, 0x1, [{0x5b0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c013d5dae1e29e13e66c8c6d3a8e6ed99a85346abd839184f9f8f04818a5b90c"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x520, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdd66}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @local, 0x5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "78b8d21c4a3801dc8955c9cd84a560b76e9f6ba199220a2de7174e22c08f5115"}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x6f0}, 0x1, 0x0, 0x0, 0x4004811}, 0x404c8c0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) 06:56:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000200)={0x2, 0x5, 0x8001, 0x101, 0x6, 0x5}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000}, 0x8000, 0x0, 0x0, 0x1, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) r3 = fcntl$getown(r1, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x8, 0xbf, 0x20, 0x0, 0xffff, 0x25920, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x2}, 0x800, 0x401, 0x9, 0x0, 0x33, 0x2, 0x6, 0x0, 0x4, 0x0, 0x7}, r3, 0x5, r4, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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"]) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:56:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4000000) [ 2122.175879] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 2 (only 16 groups) [ 2122.229370] FAULT_INJECTION: forcing a failure. [ 2122.229370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2122.231494] CPU: 1 PID: 32795 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2122.232530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2122.233736] Call Trace: [ 2122.234132] dump_stack+0x107/0x167 [ 2122.234676] should_fail.cold+0x5/0xa [ 2122.235257] _copy_from_user+0x2e/0x1b0 [ 2122.235853] __copy_msghdr_from_user+0x91/0x4b0 [ 2122.236555] ? __ia32_sys_shutdown+0x80/0x80 [ 2122.237200] ? inet_sendmsg+0xbd/0x140 [ 2122.237768] ? inet_send_prepare+0x540/0x540 [ 2122.238411] ? __sock_sendmsg+0x55/0x190 [ 2122.239027] ? ____sys_sendmsg+0x426/0x870 [ 2122.239668] sendmsg_copy_msghdr+0xa1/0x160 [ 2122.240307] ? do_recvmmsg+0x6d0/0x6d0 [ 2122.240886] ? lock_chain_count+0x20/0x20 [ 2122.241498] ? lock_downgrade+0x6d0/0x6d0 [ 2122.242133] io_sendmsg+0x62c/0x830 [ 2122.242679] ? io_setup_async_msg+0x2d0/0x2d0 [ 2122.243371] ? mark_lock+0xf5/0x2df0 [ 2122.243925] ? lock_chain_count+0x20/0x20 [ 2122.244566] ? __lock_acquire+0xbb1/0x5b00 [ 2122.245207] io_issue_sqe+0x3b3/0x7700 [ 2122.245795] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2122.246566] ? lock_chain_count+0x20/0x20 [ 2122.247181] ? lock_chain_count+0x20/0x20 [ 2122.247799] ? __is_insn_slot_addr+0x14c/0x290 [ 2122.248478] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2122.249249] ? io_connect+0x610/0x610 [ 2122.249828] ? lock_acquire+0x197/0x470 [ 2122.250420] ? find_held_lock+0x2c/0x110 [ 2122.251025] ? __fget_files+0x26d/0x4c0 [ 2122.251613] ? lock_downgrade+0x6d0/0x6d0 [ 2122.252229] __io_queue_sqe+0x90/0x9d0 [ 2122.252821] ? io_issue_sqe+0x7700/0x7700 [ 2122.253447] io_submit_sqes+0x4461/0x85c0 [ 2122.254084] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2122.254833] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2122.255551] ? lock_downgrade+0x6d0/0x6d0 [ 2122.256167] ? find_held_lock+0x2c/0x110 [ 2122.256775] ? io_submit_sqes+0x85c0/0x85c0 [ 2122.257415] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2122.258127] ? wait_for_completion_io+0x270/0x270 [ 2122.258847] ? rcu_read_lock_any_held+0x75/0xa0 [ 2122.259543] ? vfs_write+0x354/0xa70 [ 2122.260094] ? fput_many+0x2f/0x1a0 [ 2122.260642] ? ksys_write+0x1a9/0x260 [ 2122.261203] ? __ia32_sys_read+0xb0/0xb0 [ 2122.261804] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2122.262579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2122.263341] do_syscall_64+0x33/0x40 [ 2122.263901] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2122.264652] RIP: 0033:0x7feb2fbf3b19 [ 2122.265201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2122.267903] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2122.269016] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2122.270078] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2122.271142] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2122.272182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2122.273224] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:56:23 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @local}, 0x14) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}], r2}, 0x18, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) fsetxattr$security_capability(r3, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}], r4}, 0x18, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)=@updsa={0x2cc, 0x1a, 0x400, 0x70bd2d, 0x25dfdbff, {{@in=@multicast1, @in6=@remote, 0x4e22, 0x0, 0x4e20, 0x0, 0x2, 0x20, 0x0, 0xf69110c8742efa45, r0, r2}, {@in=@loopback, 0x4d3, 0x33}, @in=@broadcast, {0x3407, 0x1000, 0x6, 0x80000001, 0x80000001, 0x4, 0x50, 0x1}, {0x22, 0x3, 0x5, 0x20}, {0xfffffa37, 0x6, 0x7fff}, 0x70bd2a, 0x0, 0x2, 0x0, 0x3}, [@srcaddr={0x14, 0xd, @in=@rand_addr=0x64010101}, @policy_type={0xa, 0x10, {0x17fb5493481cc142}}, @sa={0xe4, 0x6, {{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e20, 0x4, 0x4e24, 0x0, 0x2, 0x0, 0xa449fddc00606db, 0x87, 0x0, r4}, {@in6=@private1, 0x4d3, 0x33}, @in=@rand_addr=0x64010102, {0x0, 0x100, 0x8, 0x4, 0x7f, 0x9, 0x80000001, 0x1}, {0x8000, 0x3, 0x1000, 0xa9f8}, {0x8, 0x4, 0xb3}, 0x70bd28, 0x3506, 0x2, 0x0, 0x8, 0x40}}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd26, 0x70bd2b, 0x70bd29, 0x70bd29, 0x3, [0xbac, 0xd1, 0x3, 0x4, 0x81]}}, @tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d4, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x3500, 0x1, 0x1, 0x1, 0x4, 0x6, 0x9}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in6=@empty, 0x0, 0x4, 0x0, 0x2, 0x10000, 0x7, 0x1}]}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e21, @in=@empty}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xb7d1}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40000}, 0xc044) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r6, 0x401}, 0x14}}, 0x0) [ 2122.388848] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 2 (only 16 groups) 06:56:23 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x3f00000000000000) 06:56:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f000001a440), 0x0) 06:56:23 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) 06:56:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x5000000) 06:56:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4800000000000000) 06:56:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xffffff7f) 06:56:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:56:23 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbdb9}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x51, 0x80}}}}, [@key_params=[@NL80211_ATTR_KEY_SEQ={0x11, 0xa, "92a57d0819529be1bf00b90014"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "c8f0f435fb9e163bd063e423a46aeeb6"}], @key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "de637e356881def42db28bcc0f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8b3a98b5ff"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7a0cedd4e8b9b049469ced46e8"}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "7aa944c9d2311097732a0016d9"}]}]]}, 0xcc}, 0x1, 0x0, 0x0, 0x4001000}, 0x40800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r3, 0x401}, 0x14}}, 0x0) [ 2122.644044] FAULT_INJECTION: forcing a failure. [ 2122.644044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2122.645841] CPU: 1 PID: 33423 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2122.646862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2122.648077] Call Trace: [ 2122.648477] dump_stack+0x107/0x167 [ 2122.649014] should_fail.cold+0x5/0xa [ 2122.649572] _copy_from_user+0x2e/0x1b0 [ 2122.650163] move_addr_to_kernel.part.0+0x31/0x110 [ 2122.650904] __copy_msghdr_from_user+0x3e1/0x4b0 [ 2122.651600] ? __ia32_sys_shutdown+0x80/0x80 [ 2122.652242] ? __sock_sendmsg+0x55/0x190 [ 2122.652829] ? ____sys_sendmsg+0x426/0x870 [ 2122.653468] sendmsg_copy_msghdr+0xa1/0x160 [ 2122.654112] ? do_recvmmsg+0x6d0/0x6d0 [ 2122.654686] ? lock_chain_count+0x20/0x20 [ 2122.655295] ? lock_downgrade+0x6d0/0x6d0 [ 2122.655903] io_sendmsg+0x62c/0x830 [ 2122.656431] ? io_setup_async_msg+0x2d0/0x2d0 [ 2122.657082] ? mark_lock+0xf5/0x2df0 [ 2122.657638] ? lock_chain_count+0x20/0x20 [ 2122.658280] ? __lock_acquire+0xbb1/0x5b00 [ 2122.658921] io_issue_sqe+0x3b3/0x7700 [ 2122.659528] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2122.660285] ? lock_chain_count+0x20/0x20 [ 2122.660892] ? __is_insn_slot_addr+0x14c/0x290 [ 2122.661554] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2122.662317] ? io_connect+0x610/0x610 [ 2122.662881] ? lock_acquire+0x197/0x470 [ 2122.663454] ? find_held_lock+0x2c/0x110 [ 2122.664059] ? __fget_files+0x26d/0x4c0 [ 2122.664647] ? lock_downgrade+0x6d0/0x6d0 [ 2122.665267] __io_queue_sqe+0x90/0x9d0 [ 2122.665839] ? io_issue_sqe+0x7700/0x7700 [ 2122.666454] io_submit_sqes+0x4461/0x85c0 [ 2122.667096] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2122.667825] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2122.668528] ? lock_downgrade+0x6d0/0x6d0 [ 2122.669122] ? find_held_lock+0x2c/0x110 [ 2122.669717] ? io_submit_sqes+0x85c0/0x85c0 [ 2122.670348] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2122.671069] ? wait_for_completion_io+0x270/0x270 [ 2122.671786] ? rcu_read_lock_any_held+0x75/0xa0 [ 2122.672469] ? vfs_write+0x354/0xa70 [ 2122.673012] ? fput_many+0x2f/0x1a0 [ 2122.673554] ? ksys_write+0x1a9/0x260 [ 2122.674108] ? __ia32_sys_read+0xb0/0xb0 [ 2122.674700] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2122.675480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2122.676236] do_syscall_64+0x33/0x40 [ 2122.676793] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2122.677535] RIP: 0033:0x7feb2fbf3b19 [ 2122.678085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2122.680742] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2122.681856] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2122.682920] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2122.683954] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2122.685004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2122.686046] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:56:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f000001a440), 0x0) 06:56:23 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4000000000000000) 06:56:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x20, 0x7f, 0x6, 0xc1, 0x0, 0xefa, 0xe1b0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x489eb7c780db8bc2}, 0x42302, 0xa, 0x5ac5ca1d, 0x5, 0x125a7909, 0x6e, 0x5, 0x0, 0x3, 0x0, 0x7}, r3, 0x6, 0xffffffffffffffff, 0x0) 06:56:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c00000000000000) 06:56:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, 0x0, 0x0) 06:56:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6000000) 06:56:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000042}, 0x4014) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0409206a82826765d0d8eb1403ce7d1600"], 0x14}}, 0x0) 06:56:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7fffffefe000) 06:56:24 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4800000000000000) 06:56:24 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, 0x0, 0x0) 06:56:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) 06:56:36 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 06:56:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}) 06:56:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, 0x0, 0x0) 06:56:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6800000000000000) 06:56:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x8000000000000) 06:56:36 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c00000000000000) 06:56:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7000000) [ 2135.719098] FAULT_INJECTION: forcing a failure. [ 2135.719098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2135.721532] CPU: 0 PID: 34479 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2135.722812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2135.724336] Call Trace: [ 2135.724835] dump_stack+0x107/0x167 [ 2135.725521] should_fail.cold+0x5/0xa [ 2135.726247] _copy_from_user+0x2e/0x1b0 [ 2135.726989] iovec_from_user+0x141/0x400 [ 2135.727746] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 2135.728695] __import_iovec+0x67/0x590 [ 2135.729420] ? __ia32_sys_shutdown+0x80/0x80 [ 2135.730247] import_iovec+0x83/0xb0 [ 2135.730803] sendmsg_copy_msghdr+0x131/0x160 [ 2135.731622] ? do_recvmmsg+0x6d0/0x6d0 [ 2135.732345] ? lock_chain_count+0x20/0x20 [ 2135.733120] ? lock_downgrade+0x6d0/0x6d0 [ 2135.733912] io_sendmsg+0x62c/0x830 [ 2135.734587] ? io_setup_async_msg+0x2d0/0x2d0 [ 2135.735422] ? mark_lock+0xf5/0x2df0 [ 2135.736110] ? lock_chain_count+0x20/0x20 [ 2135.736924] ? __lock_acquire+0xbb1/0x5b00 [ 2135.737724] io_issue_sqe+0x3b3/0x7700 [ 2135.738318] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2135.739307] ? lock_chain_count+0x20/0x20 [ 2135.740088] ? __is_insn_slot_addr+0x14c/0x290 [ 2135.740943] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2135.741914] ? io_connect+0x610/0x610 [ 2135.742628] ? lock_acquire+0x197/0x470 [ 2135.743374] ? find_held_lock+0x2c/0x110 [ 2135.744150] ? __fget_files+0x26d/0x4c0 [ 2135.744884] ? lock_downgrade+0x6d0/0x6d0 [ 2135.745651] __io_queue_sqe+0x90/0x9d0 [ 2135.746299] ? io_issue_sqe+0x7700/0x7700 [ 2135.747093] io_submit_sqes+0x4461/0x85c0 [ 2135.747876] ? __mutex_lock+0x4fe/0x10b0 [ 2135.748627] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2135.749553] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2135.750452] ? lock_downgrade+0x6d0/0x6d0 [ 2135.751229] ? find_held_lock+0x2c/0x110 [ 2135.751984] ? io_submit_sqes+0x85c0/0x85c0 [ 2135.752785] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2135.753677] ? wait_for_completion_io+0x270/0x270 [ 2135.754578] ? rcu_read_lock_any_held+0x75/0xa0 [ 2135.755344] ? vfs_write+0x354/0xa70 [ 2135.756031] ? fput_many+0x2f/0x1a0 [ 2135.756581] ? ksys_write+0x1a9/0x260 [ 2135.757150] ? __ia32_sys_read+0xb0/0xb0 [ 2135.757763] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2135.758534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2135.759310] do_syscall_64+0x33/0x40 [ 2135.759865] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2135.760623] RIP: 0033:0x7feb2fbf3b19 [ 2135.761177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2135.763855] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2135.765212] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2135.766253] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2135.767304] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2135.768348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2135.769384] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:56:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c00000000000000) 06:56:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xe0efffff7f0000) 06:56:36 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6800000000000000) 06:56:36 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5262f0a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x766c8094}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33103551}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e40a9a0}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x7}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x8085) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r3, 0x401}, 0x14}}, 0x0) 06:56:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/fscreate\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x1}, @enter_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="852a6273011000000300000000000000000000ec6bc85fced30823660000000007000000ba05b6d8f065fa6b3c0000000000000000000000002500000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB='\x00'/12], &(0x7f0000000100)={0x0, 0x18, 0x38}}, 0x40}], 0x22, 0x0, &(0x7f0000000200)="fad564b8c5a90ad98e4ab519492431ddf8f12658d027ac0040b3aa1023ff40c90552"}) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000380)={0x0, {}, 0x0, {}, 0xfff, 0xa, 0x9, 0x1, "4141c037b9aed2b707e3cebe54e80ac4633d220bf4d7323f69d206cbf875947802b45bee7ad52f438d534d4d219a7250705854c3feede6d3203d112924b46086", "23823238efbce971bc4eaa1eed5c8350fcc1cb485bc48796846f43392d0668e9", [0x1c8, 0xe7]}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/net', 0x200100, 0x80) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0x6}) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:56:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7400000000000000) 06:56:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r6) sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x44, r9, 0x1, 0x8000000, 0x200, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x40000) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4000010) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000140)={0x14, r10, 0x401, 0x4000}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x44000) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r12, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c}, 0x20008000) 06:56:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x48000000) 06:56:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:56:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x100000000000000) 06:56:49 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) 06:56:49 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c00000000000000) [ 2148.354508] FAULT_INJECTION: forcing a failure. [ 2148.354508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2148.355899] CPU: 0 PID: 35345 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2148.356530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2148.357259] Call Trace: [ 2148.357501] dump_stack+0x107/0x167 [ 2148.357830] should_fail.cold+0x5/0xa [ 2148.358176] _copy_from_iter_full+0x201/0xa60 [ 2148.358593] rawv6_sendmsg+0x20e8/0x3b20 [ 2148.358963] ? rawv6_bind+0xa40/0xa40 [ 2148.359322] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2148.359796] ? lock_acquire+0x197/0x470 [ 2148.360149] ? find_held_lock+0x2c/0x110 [ 2148.360518] ? __might_fault+0xd3/0x180 [ 2148.360878] ? lock_downgrade+0x6d0/0x6d0 [ 2148.361245] ? lock_downgrade+0x6d0/0x6d0 [ 2148.361620] ? sock_has_perm+0x1ea/0x280 [ 2148.361986] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2148.362451] ? iovec_from_user+0x104/0x400 [ 2148.362829] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 2148.363289] ? rawv6_bind+0xa40/0xa40 [ 2148.363633] inet_sendmsg+0x11d/0x140 [ 2148.363971] ? inet_send_prepare+0x540/0x540 [ 2148.364359] __sock_sendmsg+0x13c/0x190 [ 2148.364719] ____sys_sendmsg+0x70d/0x870 [ 2148.365080] ? sock_write_iter+0x3d0/0x3d0 [ 2148.365462] ? sendmsg_copy_msghdr+0xba/0x160 [ 2148.365859] ? do_recvmmsg+0x6d0/0x6d0 [ 2148.366212] ? sock_from_file+0x83/0xe0 [ 2148.366566] __sys_sendmsg_sock+0x26/0x40 [ 2148.366941] io_sendmsg+0x1e6/0x830 [ 2148.367282] ? io_setup_async_msg+0x2d0/0x2d0 [ 2148.367685] ? mark_lock+0xf5/0x2df0 [ 2148.368019] ? lock_chain_count+0x20/0x20 [ 2148.368405] ? __lock_acquire+0xbb1/0x5b00 [ 2148.368783] io_issue_sqe+0x3b3/0x7700 [ 2148.369134] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2148.369599] ? lock_chain_count+0x20/0x20 [ 2148.369968] ? __is_insn_slot_addr+0x14c/0x290 [ 2148.370376] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2148.370845] ? io_connect+0x610/0x610 [ 2148.371195] ? lock_acquire+0x197/0x470 [ 2148.371546] ? find_held_lock+0x2c/0x110 [ 2148.371912] ? __fget_files+0x26d/0x4c0 [ 2148.372267] ? lock_downgrade+0x6d0/0x6d0 [ 2148.372641] __io_queue_sqe+0x90/0x9d0 [ 2148.372996] ? io_issue_sqe+0x7700/0x7700 [ 2148.373369] io_submit_sqes+0x4461/0x85c0 [ 2148.373753] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2148.374192] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2148.374628] ? lock_downgrade+0x6d0/0x6d0 [ 2148.374994] ? find_held_lock+0x2c/0x110 [ 2148.375366] ? io_submit_sqes+0x85c0/0x85c0 [ 2148.375756] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2148.376181] ? wait_for_completion_io+0x270/0x270 [ 2148.376610] ? rcu_read_lock_any_held+0x75/0xa0 [ 2148.377024] ? vfs_write+0x354/0xa70 [ 2148.377361] ? fput_many+0x2f/0x1a0 [ 2148.377688] ? ksys_write+0x1a9/0x260 [ 2148.378025] ? __ia32_sys_read+0xb0/0xb0 [ 2148.378385] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2148.378849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2148.379319] do_syscall_64+0x33/0x40 [ 2148.379650] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2148.380103] RIP: 0033:0x7feb2fbf3b19 [ 2148.380440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2148.382060] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2148.382730] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2148.383361] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2148.383987] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2148.384619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2148.385243] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 [ 2160.738890] FAULT_INJECTION: forcing a failure. [ 2160.738890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2160.740223] CPU: 1 PID: 35851 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2160.740841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2160.741584] Call Trace: [ 2160.741826] dump_stack+0x107/0x167 [ 2160.742159] should_fail.cold+0x5/0xa [ 2160.742497] _copy_from_user+0x2e/0x1b0 [ 2160.742852] __copy_msghdr_from_user+0x91/0x4b0 [ 2160.743261] ? __ia32_sys_shutdown+0x80/0x80 [ 2160.743657] ? inet_sendmsg+0xbd/0x140 [ 2160.744006] ? inet_send_prepare+0x540/0x540 [ 2160.744397] ? __sock_sendmsg+0x55/0x190 [ 2160.744749] ? ____sys_sendmsg+0x426/0x870 [ 2160.745129] sendmsg_copy_msghdr+0xa1/0x160 [ 2160.745530] ? do_recvmmsg+0x6d0/0x6d0 [ 2160.746087] ? lock_chain_count+0x20/0x20 [ 2160.746544] ? lock_downgrade+0x6d0/0x6d0 [ 2160.747066] io_sendmsg+0x62c/0x830 [ 2160.747392] ? io_setup_async_msg+0x2d0/0x2d0 [ 2160.747786] ? mark_lock+0xf5/0x2df0 [ 2160.748120] ? lock_chain_count+0x20/0x20 [ 2160.748501] ? __lock_acquire+0xbb1/0x5b00 [ 2160.748879] io_issue_sqe+0x3b3/0x7700 [ 2160.749249] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2160.749722] ? lock_chain_count+0x20/0x20 06:57:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:01 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7400000000000000) 06:57:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) r4 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r4, 0x76d3, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x21, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_enter(r5, 0x76d3, 0x0, 0x0, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x6000, @fd=r5, 0x200, 0x4ae1, 0x1000, 0x6, 0x0, {0x0, r6}}, 0xffffffff) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a00000000000000) 06:57:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c000000) 06:57:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x200000000000000) 06:57:01 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) 06:57:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) [ 2160.750103] ? __is_insn_slot_addr+0x14c/0x290 [ 2160.750584] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2160.751094] ? io_connect+0x610/0x610 [ 2160.751427] ? lock_acquire+0x197/0x470 [ 2160.751768] ? find_held_lock+0x2c/0x110 [ 2160.752138] ? __fget_files+0x26d/0x4c0 [ 2160.752481] ? lock_downgrade+0x6d0/0x6d0 [ 2160.752845] __io_queue_sqe+0x90/0x9d0 [ 2160.753184] ? io_issue_sqe+0x7700/0x7700 [ 2160.753553] io_submit_sqes+0x4461/0x85c0 [ 2160.753922] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2160.754344] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2160.754776] ? lock_downgrade+0x6d0/0x6d0 [ 2160.755129] ? find_held_lock+0x2c/0x110 [ 2160.755504] ? io_submit_sqes+0x85c0/0x85c0 [ 2160.755906] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2160.756317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2160.756772] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2160.757244] ? trace_hardirqs_on+0x5b/0x180 [ 2160.757637] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2160.758100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2160.758554] do_syscall_64+0x33/0x40 [ 2160.758871] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2160.759334] RIP: 0033:0x7feb2fbf3b19 [ 2160.759655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2160.761206] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2160.761878] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2160.762498] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2160.763105] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2160.763726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2160.764353] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:57:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="111800000000000000002e000000"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa69}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x400) 06:57:01 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 06:57:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x68000000) 06:57:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a) [ 2160.949441] FAULT_INJECTION: forcing a failure. [ 2160.949441] name fail_usercopy, interval 1, probability 0, space 0, times 0 06:57:02 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a00000000000000) [ 2160.950652] CPU: 1 PID: 36274 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2160.951285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2160.951965] Call Trace: [ 2160.952195] dump_stack+0x107/0x167 [ 2160.952498] should_fail.cold+0x5/0xa [ 2160.952807] _copy_from_user+0x2e/0x1b0 [ 2160.953133] iovec_from_user+0x141/0x400 [ 2160.953464] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 2160.953867] __import_iovec+0x67/0x590 [ 2160.954182] ? __ia32_sys_shutdown+0x80/0x80 [ 2160.954536] import_iovec+0x83/0xb0 [ 2160.954835] sendmsg_copy_msghdr+0x131/0x160 [ 2160.955184] ? do_recvmmsg+0x6d0/0x6d0 [ 2160.955513] ? __is_insn_slot_addr+0x123/0x290 [ 2160.955877] ? lock_downgrade+0x6d0/0x6d0 [ 2160.956213] io_sendmsg+0x62c/0x830 [ 2160.956510] ? io_setup_async_msg+0x2d0/0x2d0 [ 2160.956877] ? __is_insn_slot_addr+0x14c/0x290 [ 2160.957242] ? mark_lock+0xf5/0x2df0 [ 2160.957553] ? register_lock_class+0xbb/0x17b0 [ 2160.957926] ? arch_stack_walk+0x99/0xf0 [ 2160.958257] ? lock_chain_count+0x20/0x20 [ 2160.958604] ? __lock_acquire+0xbb1/0x5b00 [ 2160.958955] io_issue_sqe+0x3b3/0x7700 [ 2160.959274] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2160.959701] ? lock_chain_count+0x20/0x20 [ 2160.960041] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2160.960466] ? io_connect+0x610/0x610 [ 2160.960782] ? lock_acquire+0x197/0x470 [ 2160.961106] ? find_held_lock+0x2c/0x110 [ 2160.961443] ? __fget_files+0x26d/0x4c0 [ 2160.961765] ? lock_downgrade+0x6d0/0x6d0 [ 2160.962104] __io_queue_sqe+0x90/0x9d0 [ 2160.962422] ? io_issue_sqe+0x7700/0x7700 [ 2160.962767] io_submit_sqes+0x4461/0x85c0 [ 2160.963117] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2160.963532] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2160.963930] ? lock_downgrade+0x6d0/0x6d0 [ 2160.964268] ? find_held_lock+0x2c/0x110 [ 2160.964605] ? io_submit_sqes+0x85c0/0x85c0 [ 2160.964961] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2160.965355] ? wait_for_completion_io+0x270/0x270 [ 2160.965748] ? rcu_read_lock_any_held+0x75/0xa0 [ 2160.966124] ? vfs_write+0x354/0xa70 [ 2160.966431] ? fput_many+0x2f/0x1a0 [ 2160.966731] ? ksys_write+0x1a9/0x260 [ 2160.967050] ? __ia32_sys_read+0xb0/0xb0 [ 2160.967392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2160.967816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2160.968246] do_syscall_64+0x33/0x40 [ 2160.968550] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2160.968963] RIP: 0033:0x7feb2fbf3b19 [ 2160.969267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2160.970741] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2160.971366] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2160.971949] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2160.972519] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2160.973093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2160.973670] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:57:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xffffff7f00000000) 06:57:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c000000) 06:57:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a00000000000000) 06:57:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x58200, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="05000000000000002e3f66696c651300"]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x6}}, './file1\x00'}) clone3(&(0x7f0000000180)={0x11040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x300000000000000) 06:57:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)={0x1c, r1, 0x401, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x1c}}, 0x0) 06:57:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xffffffff00000000) 06:57:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x28}}, 0x1) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x869, 0xc}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_PMKID={0x14, 0x55, "95bad4321575855cfd9d84fb09d04a3a"}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="28d68ce89963e60f18b91727503ef408b090a9b16ab0bda95ad0"}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010400140000000000002e000000"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 06:57:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x74) 06:57:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x74000000) 06:57:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x400000000000000) 06:57:15 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xffffff7f00000000) 06:57:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a000000) 06:57:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000008b63401c38a3f7e01f6c458e8c316454b7660ee03ea61c685b21e026d002472dbd5cb21949bb8196d757f2f7c99e1c0ecdef710d467d62e15c5e3e8a2edda37e323d4e4e45960186d74d42348219cfb04c353ff254f3b0044fadaccf5bc108d6014cf13efeb7e52bab93edf95dc6321733ab4d65618e295b6b899947eb2fc2ecca778284c35b02ff18", @ANYRES16=r6, @ANYBLOB="010400000000000000000c00000008000300", @ANYRES32=r8, @ANYBLOB="0c0006000100000001000000"], 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4010) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)={0x24, r1, 0x100, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 06:57:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x20000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x6, 0x3, 0x0, 0x8, "f73836c5715a29a5b37c52fbf1e6d4fc1d8138cee4d23639529c137e5ef678c025f3d069e17a079e946a326a69bf97f5d45251876310d26989c271933ea77d83", "66dd2b9fdcaa7c94e590669677e1d99d0afb43220f3aebe273e6c9d3522ca7f4", [0xfffffffffffffff9, 0xfffffffffffffff7]}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:15 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) [ 2174.668925] FAULT_INJECTION: forcing a failure. [ 2174.668925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2174.670203] CPU: 0 PID: 37230 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2174.670907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2174.671780] Call Trace: [ 2174.672062] dump_stack+0x107/0x167 [ 2174.672445] should_fail.cold+0x5/0xa [ 2174.672842] _copy_from_user+0x2e/0x1b0 [ 2174.673256] iovec_from_user+0x141/0x400 [ 2174.673686] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 2174.674206] __import_iovec+0x67/0x590 [ 2174.674609] ? __ia32_sys_shutdown+0x80/0x80 [ 2174.675067] import_iovec+0x83/0xb0 [ 2174.675458] sendmsg_copy_msghdr+0x131/0x160 [ 2174.675936] ? do_recvmmsg+0x6d0/0x6d0 [ 2174.676342] ? lock_chain_count+0x20/0x20 [ 2174.676771] ? lock_downgrade+0x6d0/0x6d0 [ 2174.677203] io_sendmsg+0x62c/0x830 [ 2174.677579] ? io_setup_async_msg+0x2d0/0x2d0 [ 2174.678042] ? mark_lock+0xf5/0x2df0 [ 2174.678439] ? lock_chain_count+0x20/0x20 [ 2174.678892] ? __lock_acquire+0xbb1/0x5b00 [ 2174.679339] io_issue_sqe+0x3b3/0x7700 [ 2174.679753] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2174.680297] ? lock_chain_count+0x20/0x20 [ 2174.680729] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2174.681268] ? io_connect+0x610/0x610 [ 2174.681666] ? lock_acquire+0x197/0x470 [ 2174.682079] ? find_held_lock+0x2c/0x110 [ 2174.682503] ? __fget_files+0x26d/0x4c0 [ 2174.682911] ? lock_downgrade+0x6d0/0x6d0 [ 2174.683344] __io_queue_sqe+0x90/0x9d0 [ 2174.683766] ? io_issue_sqe+0x7700/0x7700 [ 2174.684205] io_submit_sqes+0x4461/0x85c0 [ 2174.684652] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2174.685162] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2174.685666] ? lock_downgrade+0x6d0/0x6d0 [ 2174.686092] ? find_held_lock+0x2c/0x110 [ 2174.686515] ? io_submit_sqes+0x85c0/0x85c0 [ 2174.686969] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2174.687482] ? wait_for_completion_io+0x270/0x270 [ 2174.687984] ? rcu_read_lock_any_held+0x75/0xa0 [ 2174.688462] ? vfs_write+0x354/0xa70 [ 2174.688848] ? fput_many+0x2f/0x1a0 [ 2174.689223] ? ksys_write+0x1a9/0x260 [ 2174.689619] ? __ia32_sys_read+0xb0/0xb0 [ 2174.690041] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2174.690580] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2174.691111] do_syscall_64+0x33/0x40 [ 2174.691501] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2174.692019] RIP: 0033:0x7feb2fbf3b19 [ 2174.692405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2174.694263] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2174.695035] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2174.695761] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2174.696483] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2174.697204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2174.697922] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:57:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:15 executing program 6: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xc0ff7f0000) 06:57:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4800) 06:57:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xffffff7f) 06:57:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14e57ab5ec6fa9a7df5e4efffe50151cbdb08704a461c271d0e11ebd", @ANYRES16=r1, @ANYBLOB="010400000000000000002e000000"], 0x14}}, 0x0) 06:57:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7fffffefe000) 06:57:29 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xeb933383f322ea54, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)={0x5, 0x7fff, 0x5, 0x2, 0x6, [{0x80000001, 0x400, 0x1f, '\x00', 0x150f8a7232bde4d4}, {0x100000001, 0x5, 0x5, '\x00', 0x704}, {0x81, 0x7ff, 0x0, '\x00', 0x1}, {0x0, 0xfffffffffffff9fb, 0x4, '\x00', 0x102}, {0x9, 0xfffffffffffffffb, 0x200, '\x00', 0x3f02}, {0x1ff, 0x3, 0x3, '\x00', 0x200}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r2, 0x401}, 0x14}}, 0x0) 06:57:29 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) 06:57:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c) 06:57:29 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xffffffff00000000) 06:57:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)=0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r3, 0x76d3, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x80000, 0x7, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = open$dir(&(0x7f0000000100)='./file1\x00', 0x8c800, 0x101) r6 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r6, 0x76d3, 0x0, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r7, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x82f1, &(0x7f0000000180)=[r0, r3, r4, r5, 0xffffffffffffffff, r6, r7, r1], 0x8, 0x0, 0x1}, 0x4) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x500000000000000) [ 2188.060606] FAULT_INJECTION: forcing a failure. [ 2188.060606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2188.062551] CPU: 1 PID: 37862 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2188.063577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2188.064789] Call Trace: [ 2188.065172] dump_stack+0x107/0x167 [ 2188.065720] should_fail.cold+0x5/0xa [ 2188.066267] _copy_from_iter_full+0x201/0xa60 [ 2188.066952] rawv6_sendmsg+0x20e8/0x3b20 [ 2188.067542] ? rawv6_bind+0xa40/0xa40 [ 2188.068122] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2188.068869] ? lock_acquire+0x197/0x470 [ 2188.069453] ? find_held_lock+0x2c/0x110 [ 2188.070061] ? __might_fault+0xd3/0x180 [ 2188.070647] ? lock_downgrade+0x6d0/0x6d0 [ 2188.071255] ? lock_downgrade+0x6d0/0x6d0 [ 2188.071875] ? sock_has_perm+0x1ea/0x280 [ 2188.072475] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2188.073243] ? iovec_from_user+0x104/0x400 [ 2188.073869] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 2188.074616] ? rawv6_bind+0xa40/0xa40 [ 2188.075183] inet_sendmsg+0x11d/0x140 [ 2188.075750] ? inet_send_prepare+0x540/0x540 [ 2188.076397] __sock_sendmsg+0x13c/0x190 [ 2188.076960] ____sys_sendmsg+0x70d/0x870 [ 2188.077557] ? sock_write_iter+0x3d0/0x3d0 [ 2188.078181] ? sendmsg_copy_msghdr+0xba/0x160 [ 2188.078846] ? do_recvmmsg+0x6d0/0x6d0 [ 2188.079420] ? lock_chain_count+0x20/0x20 [ 2188.080037] ? lock_downgrade+0x6d0/0x6d0 [ 2188.080656] __sys_sendmsg_sock+0x26/0x40 [ 2188.081274] io_sendmsg+0x1e6/0x830 [ 2188.081817] ? io_setup_async_msg+0x2d0/0x2d0 [ 2188.082484] ? mark_lock+0xf5/0x2df0 [ 2188.083015] ? lock_chain_count+0x20/0x20 [ 2188.083665] ? __lock_acquire+0xbb1/0x5b00 [ 2188.084274] io_issue_sqe+0x3b3/0x7700 [ 2188.084837] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2188.085578] ? lock_chain_count+0x20/0x20 [ 2188.086189] ? __is_insn_slot_addr+0x14c/0x290 [ 2188.086865] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2188.087643] ? io_connect+0x610/0x610 [ 2188.088209] ? lock_acquire+0x197/0x470 [ 2188.088796] ? find_held_lock+0x2c/0x110 [ 2188.089397] ? __fget_files+0x26d/0x4c0 [ 2188.089985] ? lock_downgrade+0x6d0/0x6d0 [ 2188.090598] __io_queue_sqe+0x90/0x9d0 [ 2188.091182] ? io_issue_sqe+0x7700/0x7700 [ 2188.091823] io_submit_sqes+0x4461/0x85c0 [ 2188.092462] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2188.093197] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2188.093909] ? lock_downgrade+0x6d0/0x6d0 [ 2188.094516] ? find_held_lock+0x2c/0x110 [ 2188.095123] ? io_submit_sqes+0x85c0/0x85c0 [ 2188.095771] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2188.096486] ? wait_for_completion_io+0x270/0x270 [ 2188.097197] ? rcu_read_lock_any_held+0x75/0xa0 [ 2188.097880] ? vfs_write+0x354/0xa70 [ 2188.098433] ? fput_many+0x2f/0x1a0 [ 2188.098974] ? ksys_write+0x1a9/0x260 [ 2188.099539] ? __ia32_sys_read+0xb0/0xb0 [ 2188.100149] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2188.100918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2188.101685] do_syscall_64+0x33/0x40 [ 2188.102213] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2188.102967] RIP: 0033:0x7feb2fbf3b19 [ 2188.103513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2188.106094] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2188.107210] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2188.108217] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2188.109256] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2188.110261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2188.111307] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:57:29 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xffffffffffffffff) 06:57:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000380)={0x4, 0x9, 0x0, 0x8, 0x3f}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x840) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x82, 0x0, 0xfd, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x4340, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4609080301000000000000001002003e009c040000c40000000000000040000000000000006f03000000000000090000000000380002000300010000080400000002000000000000000000000000100000000000000500000000000000040000000000000007000000000000000000008000000000000000000000000000000000000000000400000000000000ff7f0000000000000000000000000000001000000000000006000000000000003ea68d80229326adb4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f03f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a39c1992797fa7884be29ee886b0674cd706ff3ef0145355d717e44fbbd76d38bc59dec54d134565ee0dc0b3ef42588137673bf784430e097094f9581d4c7be14f6bccc77e2be5f2859d3617"], 0x3b9) 06:57:29 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r5, 0x401}, 0x14}}, 0x0) 06:57:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x4001, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) io_uring_setup(0x4044, &(0x7f00000002c0)={0x0, 0x5ec0, 0x8, 0x0, 0x6a}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={'\x00', 0xfbff, 0x7fffffff, 0x6, 0x3af5, 0x4, r2}) 06:57:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) 06:57:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x600000000000000) 06:57:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x8000000000000) [ 2201.057095] kworker/dying (329) used greatest stack depth: 23608 bytes left 06:57:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xe0efffff7f0000) 06:57:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:42 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f00000005c0)=@v3={0x3000000, [{0x2, 0x9}, {0x5, 0xfffffff9}], r3}, 0x18, 0x0) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000001200)={{0x0, 0xee01, r4, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x1f, 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r3, r4}}, './file1\x00'}) syz_open_procfs(r2, &(0x7f00000000c0)='stack\x00') sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x80010, r0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) fstat(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x15, 0x100, &(0x7f0000000180)="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"}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00'/14], 0x14}}, 0x0) 06:57:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x700000000000000) 06:57:42 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 06:57:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01040000000000679642c49a0e767a0000002e090000"], 0x14}}, 0x0) 06:57:42 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)=0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x2, 0x2, &(0x7f0000000080)="369ffd7b6b26ba5931d33057a57c78a1264e3a4d111011f081f462939fa4f6f0a04498e4aafe2bcaba489cd506bde851e554ea44c87b3c8c6c2fb4b72c5b02da21ed906dbfd2df8d5be4c8cdfdb768e9df9ec76a6b4e2005e716bf58b1078b92a768bd2bdbced658", 0x7, 0x0, 0x1, {0x1, r2}}, 0x1ff) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:42 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 06:57:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4800000000000000) 06:57:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000380)={0x4, 0x9, 0x0, 0x8, 0x3f}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x840) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0104fefffff6000000002e009900"], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) [ 2201.483901] FAULT_INJECTION: forcing a failure. [ 2201.483901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2201.483923] CPU: 1 PID: 39029 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2201.483933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2201.483939] Call Trace: [ 2201.483962] dump_stack+0x107/0x167 [ 2201.483985] should_fail.cold+0x5/0xa [ 2201.484010] _copy_from_user+0x2e/0x1b0 06:57:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x100000000000000) [ 2201.484035] __copy_msghdr_from_user+0x91/0x4b0 [ 2201.484055] ? __ia32_sys_shutdown+0x80/0x80 [ 2201.484074] ? inet_sendmsg+0xbd/0x140 [ 2201.484091] ? inet_send_prepare+0x540/0x540 [ 2201.484107] ? __sock_sendmsg+0x55/0x190 [ 2201.484126] ? ____sys_sendmsg+0x426/0x870 [ 2201.484157] sendmsg_copy_msghdr+0xa1/0x160 [ 2201.484176] ? do_recvmmsg+0x6d0/0x6d0 [ 2201.484193] ? lock_chain_count+0x20/0x20 [ 2201.484215] ? lock_downgrade+0x6d0/0x6d0 [ 2201.484244] io_sendmsg+0x62c/0x830 [ 2201.484264] ? io_setup_async_msg+0x2d0/0x2d0 [ 2201.484290] ? mark_lock+0xf5/0x2df0 [ 2201.484314] ? lock_chain_count+0x20/0x20 [ 2201.484364] ? __lock_acquire+0xbb1/0x5b00 [ 2201.484389] io_issue_sqe+0x3b3/0x7700 [ 2201.484415] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2201.484436] ? lock_chain_count+0x20/0x20 [ 2201.484455] ? __is_insn_slot_addr+0x14c/0x290 [ 2201.484475] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2201.484492] ? io_connect+0x610/0x610 [ 2201.484514] ? lock_acquire+0x197/0x470 [ 2201.484531] ? find_held_lock+0x2c/0x110 [ 2201.484555] ? __fget_files+0x26d/0x4c0 [ 2201.484573] ? lock_downgrade+0x6d0/0x6d0 [ 2201.484598] __io_queue_sqe+0x90/0x9d0 [ 2201.484622] ? io_issue_sqe+0x7700/0x7700 [ 2201.484655] io_submit_sqes+0x4461/0x85c0 [ 2201.484702] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2201.484719] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2201.484742] ? lock_downgrade+0x6d0/0x6d0 [ 2201.484757] ? find_held_lock+0x2c/0x110 [ 2201.484780] ? io_submit_sqes+0x85c0/0x85c0 [ 2201.484808] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2201.484831] ? wait_for_completion_io+0x270/0x270 [ 2201.484853] ? rcu_read_lock_any_held+0x75/0xa0 [ 2201.484869] ? vfs_write+0x354/0xa70 [ 2201.484891] ? fput_many+0x2f/0x1a0 [ 2201.484911] ? ksys_write+0x1a9/0x260 [ 2201.484930] ? __ia32_sys_read+0xb0/0xb0 [ 2201.484953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2201.484970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2201.484995] do_syscall_64+0x33/0x40 [ 2201.485012] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2201.485024] RIP: 0033:0x7feb2fbf3b19 [ 2201.485041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2201.485051] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2201.485071] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2201.485082] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2201.485092] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2201.485103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2201.485114] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 [ 2201.889952] FAULT_INJECTION: forcing a failure. [ 2201.889952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2201.889974] CPU: 0 PID: 39483 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2201.889984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2201.889990] Call Trace: [ 2201.890013] dump_stack+0x107/0x167 [ 2201.890036] should_fail.cold+0x5/0xa [ 2201.890060] _copy_from_user+0x2e/0x1b0 [ 2201.890084] move_addr_to_kernel.part.0+0x31/0x110 [ 2201.890105] __copy_msghdr_from_user+0x3e1/0x4b0 [ 2201.890124] ? __ia32_sys_shutdown+0x80/0x80 [ 2201.890152] ? __sock_sendmsg+0x55/0x190 [ 2201.890170] ? ____sys_sendmsg+0x426/0x870 [ 2201.890197] sendmsg_copy_msghdr+0xa1/0x160 [ 2201.890214] ? do_recvmmsg+0x6d0/0x6d0 [ 2201.890232] ? lock_chain_count+0x20/0x20 [ 2201.890252] ? lock_downgrade+0x6d0/0x6d0 [ 2201.890281] io_sendmsg+0x62c/0x830 [ 2201.890300] ? io_setup_async_msg+0x2d0/0x2d0 [ 2201.890324] ? mark_lock+0xf5/0x2df0 [ 2201.890348] ? lock_chain_count+0x20/0x20 [ 2201.890397] ? __lock_acquire+0xbb1/0x5b00 [ 2201.890420] io_issue_sqe+0x3b3/0x7700 [ 2201.890445] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2201.890465] ? lock_chain_count+0x20/0x20 [ 2201.890486] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2201.890502] ? io_connect+0x610/0x610 [ 2201.890523] ? lock_acquire+0x197/0x470 [ 2201.890539] ? find_held_lock+0x2c/0x110 [ 2201.890562] ? __fget_files+0x26d/0x4c0 [ 2201.890579] ? lock_downgrade+0x6d0/0x6d0 [ 2201.890603] __io_queue_sqe+0x90/0x9d0 [ 2201.890625] ? io_issue_sqe+0x7700/0x7700 [ 2201.890658] io_submit_sqes+0x4461/0x85c0 [ 2201.890702] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2201.890719] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2201.890740] ? lock_downgrade+0x6d0/0x6d0 [ 2201.890754] ? find_held_lock+0x2c/0x110 [ 2201.890776] ? io_submit_sqes+0x85c0/0x85c0 [ 2201.890802] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2201.890824] ? wait_for_completion_io+0x270/0x270 [ 2201.890844] ? rcu_read_lock_any_held+0x75/0xa0 [ 2201.890860] ? vfs_write+0x354/0xa70 [ 2201.890881] ? fput_many+0x2f/0x1a0 [ 2201.890905] ? ksys_write+0x1a9/0x260 [ 2201.947653] ? __ia32_sys_read+0xb0/0xb0 [ 2201.948265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2201.949017] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2201.949768] do_syscall_64+0x33/0x40 [ 2201.950303] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2201.951037] RIP: 0033:0x7feb2fbf3b19 [ 2201.951574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2201.954200] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2201.955295] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2201.956333] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2201.957350] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2201.958379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2201.959396] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:57:56 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 06:57:56 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r0 = syz_io_uring_setup(0x26, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(r0, 0xe438, 0x4, 0x4) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) pidfd_getfd(r1, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) pidfd_getfd(r3, r0, 0x0) 06:57:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x200000000000000) 06:57:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x24004050) 06:57:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x3, 0x14, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) r3 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r3, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f0000000380)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='(#+@!\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='!$\x11/^\x00'], 0x0) 06:57:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x301002, 0x4) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4c00000000000000) 06:57:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c00) 06:57:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000180)=0x6, 0x4) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) fallocate(r0, 0x5, 0x9, 0x7fffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x6, 0x0, 0x19, 0x8, "86c92dc9e10eb076e3e1e4b2d041a9f208374520ebb56702217ead249458203dcf882bfd297da37ab0aa39e9f793c2903d89b1644e121e601d92ca77bcd2ffbb", "8f49ce2562c5ba8ad7a1e53586a190b556d3cb1e76b2788d1c0e8601ef3c877e", [0x7, 0x4]}) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, r2}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 2215.423905] FAULT_INJECTION: forcing a failure. [ 2215.423905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2215.426604] CPU: 0 PID: 39868 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2215.427699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2215.428991] Call Trace: [ 2215.429411] dump_stack+0x107/0x167 [ 2215.429986] should_fail.cold+0x5/0xa [ 2215.430589] _copy_from_user+0x2e/0x1b0 [ 2215.431214] iovec_from_user+0x141/0x400 [ 2215.431848] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 2215.432656] __import_iovec+0x67/0x590 [ 2215.433263] ? __ia32_sys_shutdown+0x80/0x80 [ 2215.433959] import_iovec+0x83/0xb0 [ 2215.434532] sendmsg_copy_msghdr+0x131/0x160 [ 2215.435216] ? do_recvmmsg+0x6d0/0x6d0 [ 2215.435825] ? lock_chain_count+0x20/0x20 [ 2215.436508] ? lock_downgrade+0x6d0/0x6d0 [ 2215.437165] io_sendmsg+0x62c/0x830 [ 2215.437751] ? io_setup_async_msg+0x2d0/0x2d0 [ 2215.438453] ? mark_lock+0xf5/0x2df0 [ 2215.439058] ? lock_chain_count+0x20/0x20 [ 2215.439738] ? __lock_acquire+0xbb1/0x5b00 [ 2215.440428] io_issue_sqe+0x3b3/0x7700 [ 2215.441046] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2215.441887] ? lock_chain_count+0x20/0x20 [ 2215.442542] ? __is_insn_slot_addr+0x14c/0x290 [ 2215.443281] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2215.444103] ? io_connect+0x610/0x610 [ 2215.444716] ? lock_acquire+0x197/0x470 [ 2215.445335] ? find_held_lock+0x2c/0x110 [ 2215.445990] ? __fget_files+0x26d/0x4c0 [ 2215.446611] ? lock_downgrade+0x6d0/0x6d0 [ 2215.447285] __io_queue_sqe+0x90/0x9d0 [ 2215.447905] ? io_issue_sqe+0x7700/0x7700 [ 2215.448589] io_submit_sqes+0x4461/0x85c0 [ 2215.449265] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2215.450071] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2215.450825] ? lock_downgrade+0x6d0/0x6d0 [ 2215.451484] ? find_held_lock+0x2c/0x110 [ 2215.452123] ? io_submit_sqes+0x85c0/0x85c0 [ 2215.452820] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2215.453567] ? wait_for_completion_io+0x270/0x270 [ 2215.454337] ? rcu_read_lock_any_held+0x75/0xa0 [ 2215.455052] ? vfs_write+0x354/0xa70 [ 2215.455651] ? fput_many+0x2f/0x1a0 [ 2215.456230] ? ksys_write+0x1a9/0x260 [ 2215.456840] ? __ia32_sys_read+0xb0/0xb0 [ 2215.457481] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2215.458311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2215.459110] do_syscall_64+0x33/0x40 [ 2215.459706] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2215.460511] RIP: 0033:0x7feb2fbf3b19 [ 2215.461109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2215.463930] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2215.465138] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2215.466263] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2215.467381] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2215.468508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2215.469642] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:57:56 executing program 6: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6000000) 06:57:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5e, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0xaf3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x40009, &(0x7f0000000040)}, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f00000000c0)=0x80, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x80000}, 0x2) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:56 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x24004050) 06:57:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/dev_snmp6\x00') sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000c00)={0x1944, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x17f0, 0x4, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, [@limit={{0xa}, @void}, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}, @ct={{0x7}, @void}, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}]}, {0x58, 0x1, 0x0, 0x1, [@osf={{0x8}, @val={0x4}}, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}]}}, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}]}}, @quota={{0xa}, @void}]}, {0x1728, 0x1, 0x0, 0x1, [@immediate={{0xe}, @val={0x2dc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "636ddc732b877e468626cd1b72559f304743a41400c8b0a0b3074e1aaa156b164a0600bce860fa59baa66b930def7788641c"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x39, 0x1, "2d3f954c659c435cd805ef84ce4914fd53d3bad8d616634b8f0e315dbdf74ae1031b46b023c01a81ecb8448bbc7104641337cf8a01"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x58, 0x1, "5090e139893fcade3f3670ddaeaa31cf7d211ed7f58ba6ba045c74d8814dae3afc83a0139c262273a490f9a4c8ed21cc2404f7a4a498e743369f4f165609fcca41db55e5762125ce635e443063a4d131c3a7b10a"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7fffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DATA={0x134, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x57, 0x1, "d1116c5a9c705979a607cdc10211ba435aec129b271445580918e1948ee607b4eec3cc931de05a5456632cc6f1a81df1b233cde92ab585b4779c2e654e7ae2afc542382aad5d626393668f6d5ad0c4da5def12"}, @NFTA_DATA_VALUE={0xd5, 0x1, "4b7078295caf4366cc7e7a7d9473c1d88e0216b4f788de321d7ae3cae83e184162f339e40e42a86acb0a89616311dbd4f3070a5c368bda5d0923395e15d3611aa7d6383187b0f24b009a676528546da9d2ff269b2e827329aeecfda8e3aa2faf7763ba1c4828c899fbf00eb4f627e9a39e3982efc4293294a02b2b3450ff0b8c8158db723c25294f209fb8aaa0a759dc3c71f4f03605fc0b846caf73f18695872177b7ecd8720d7664b924b1d0a08f742f58b20d8ed0dd1c82b22062ea8b048e111e18c703cda2a35446cc4292a7524781"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}, @cmp={{0x8}, @val={0x1430, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0x1398, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "cbe0b5490895585ef2319cae12aee5c546fc65b441dfdbf6fe59488a75ef7c31aa95e9c998d3ef897e24d6887e5563cfe9b0de3eba89abe268561135b427c48e71220e0bf622f836"}, @NFTA_DATA_VALUE={0x29, 0x1, "2617c2962f334733c086b9742efbf89e0e3fba20bf71123b574d486f6a46977633f69e83bb"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xad, 0x1, "d911bc5bbad887f8ef58922811f924c6a0f1542e0243005b66a33fb2f3a6b1046d0533364c4467985d78a271972897d64c81012cd5096461b07264929c95ab49639d5ef032261a3e2f1d327d3effda80949ff8af58fbe9a836db19424986bab040e7c60fc46a07e4155ffd96a35decbb8bb82244cb046018922f271b39f656782564a8c36d24b4be6ad443472bfc665519eb7fa74d58b252e2a72e6a14fe5af753e07f6de4f88e900d"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0xb1, 0x1, "2f7c9d358605415a71c335a838d716edb8d45cbb72b8439e40f85aa1f84d56747cc27cce2cb9d2b36e330d1af671778e6f2bdb4af73641bceef8159b5aa63564a942dda2bee1b6299e4f4aa05b6ca52110c7d3edde8ca21771e8b31d449255a82b387cc918fb8cf105a90d1906bdde24e04da399f7b9e30aabe0427dc4d378f4622de998fecfd16a650b3e50c0a448e6a000450c946815d21832348cd336d3766e7fc9f27689db0e1ced13cb6d"}, @NFTA_DATA_VALUE={0x75, 0x1, "66c4480832f5827891162e082eddf3db683f7d5605e12eb611539ba03b4085bde4f4f041be24569bd515490ba170c3e58246271bc7bade324a33e1a551c84b49eba227d7179486f4f7c8562457e44468e3321fb2b4cc5f54f5e2d55c9e94f68b619f8dea56b96e5ad9052592a2a5db1928"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x7c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}]}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x80}]}, @NFTA_RULE_USERDATA={0xf3, 0x7, 0x1, 0x0, "b0d654fd68a630f71d56d0c6c8daff193a41f78d9367cf4ed0c6db1f764a53e7ce627b299744443610e5fa2675120802162316699ab134b5d2b98d04b12325cb5f64e20f7c2bb3f2ed113a72f549265f1f95770cf7181d2ff1583b33a99296f6a4ac3841bd5c1a80e34e1ce493d8aa12799e6ff3586eacf0ea7d64056c526d00205b7ce1d8ad577f924ade2c94ca09ce0a685131f912c6d050fbe63e21fb884da11085b0ced4eacc7c87f2a6280cbbad2113b3145675953c5ab8bd33889b207f144213ac45e2f28380ba6f4a30864f6fc605fda4e64f583d2d31a6e100a72a49a8f2e2e374248b138e5d5451ba9d19"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}]}, 0x1944}, 0x1, 0x0, 0x0, 0x4040850}, 0x84004) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r5) sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0d000000000000000800090003000000130000000000c72e2999e1f7bd4310b6eecf02c8585c485821ba4e116ec80f0730b199e1496ae0e9732ae703bf916fd393ce9a16a70f42336269a5a31b0b254954a7c07e17fd7320cb343f77cfd626"], 0x1c}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r9) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r10, 0x104, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) 06:57:56 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) fcntl$dupfd(r0, 0x0, r0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x1ff) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:57:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x300000000000000) 06:57:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd5f, &(0x7f0000000bc0)={0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, r0}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 2215.700666] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2215.739514] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 06:58:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x30008084) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r1, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat$incfs(r1, &(0x7f00000000c0)='.log\x00', 0x280400, 0x40) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6800000000000000) 06:58:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x400000000000000) 06:58:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401, 0x0, 0x10000}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}}, 0x24004800) 06:58:08 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 06:58:08 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x90e6, 0x2, 0x1e, 0x11, "90a2dacdd2cbdc183bcb0f33d5acbf900d319122fe9a5d6a9facf7b3a14f9f0960e1fa0dc4bb2a24359a729b7fb9c2f5804c2554276e9a9d691195370545475c", "82b17f43171d9ee8473155809fd15b20605280ba0bcb9240a06e62c1a1d08374", [0xffffffffffffffff, 0x7d]}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 2227.980761] FAULT_INJECTION: forcing a failure. [ 2227.980761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2227.982576] CPU: 1 PID: 40933 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2227.983587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2227.984799] Call Trace: [ 2227.985194] dump_stack+0x107/0x167 [ 2227.985738] should_fail.cold+0x5/0xa [ 2227.986306] _copy_from_iter_full+0x201/0xa60 [ 2227.986982] rawv6_sendmsg+0x20e8/0x3b20 [ 2227.987594] ? rawv6_bind+0xa40/0xa40 [ 2227.988162] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2227.988934] ? lock_acquire+0x197/0x470 [ 2227.989513] ? find_held_lock+0x2c/0x110 [ 2227.990116] ? __might_fault+0xd3/0x180 [ 2227.990710] ? lock_downgrade+0x6d0/0x6d0 [ 2227.991316] ? lock_downgrade+0x6d0/0x6d0 [ 2227.991934] ? sock_has_perm+0x1ea/0x280 [ 2227.992535] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2227.993311] ? iovec_from_user+0x104/0x400 [ 2227.993926] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 2227.994675] ? rawv6_bind+0xa40/0xa40 [ 2227.995238] inet_sendmsg+0x11d/0x140 [ 2227.995800] ? inet_send_prepare+0x540/0x540 [ 2227.996452] __sock_sendmsg+0x13c/0x190 [ 2227.997040] ____sys_sendmsg+0x70d/0x870 [ 2227.997637] ? sock_write_iter+0x3d0/0x3d0 [ 2227.998258] ? sendmsg_copy_msghdr+0xba/0x160 [ 2227.998910] ? do_recvmmsg+0x6d0/0x6d0 [ 2227.999484] ? lock_chain_count+0x20/0x20 [ 2228.000105] ? lock_downgrade+0x6d0/0x6d0 [ 2228.000726] __sys_sendmsg_sock+0x26/0x40 [ 2228.001330] io_sendmsg+0x1e6/0x830 [ 2228.001872] ? io_setup_async_msg+0x2d0/0x2d0 [ 2228.002534] ? mark_lock+0xf5/0x2df0 [ 2228.003093] ? lock_chain_count+0x20/0x20 [ 2228.003731] ? __lock_acquire+0xbb1/0x5b00 [ 2228.004609] io_issue_sqe+0x3b3/0x7700 [ 2228.005309] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 06:58:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8, 0x2) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 2228.006213] ? lock_chain_count+0x20/0x20 [ 2228.007060] ? __is_insn_slot_addr+0x14c/0x290 [ 2228.007717] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2228.008477] ? io_connect+0x610/0x610 [ 2228.009043] ? lock_acquire+0x197/0x470 [ 2228.009613] ? find_held_lock+0x2c/0x110 [ 2228.010214] ? __fget_files+0x26d/0x4c0 [ 2228.010780] ? lock_downgrade+0x6d0/0x6d0 [ 2228.011392] __io_queue_sqe+0x90/0x9d0 [ 2228.011958] ? io_issue_sqe+0x7700/0x7700 [ 2228.012590] io_submit_sqes+0x4461/0x85c0 [ 2228.013214] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2228.013953] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2228.014645] ? lock_downgrade+0x6d0/0x6d0 [ 2228.015248] ? find_held_lock+0x2c/0x110 [ 2228.015831] ? io_submit_sqes+0x85c0/0x85c0 [ 2228.016478] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2228.017172] ? wait_for_completion_io+0x270/0x270 [ 2228.017887] ? rcu_read_lock_any_held+0x75/0xa0 [ 2228.018553] ? vfs_write+0x354/0xa70 [ 2228.019099] ? fput_many+0x2f/0x1a0 [ 2228.019623] ? ksys_write+0x1a9/0x260 [ 2228.020166] ? __ia32_sys_read+0xb0/0xb0 [ 2228.020758] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2228.021503] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2228.022244] do_syscall_64+0x33/0x40 [ 2228.022770] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2228.023502] RIP: 0033:0x7feb2fbf3b19 [ 2228.024069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2228.026671] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2228.027787] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2228.028806] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2228.029861] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2228.030875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2228.031912] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:58:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) recvfrom(r0, &(0x7f0000000380)=""/122, 0x9a, 0x1121, &(0x7f00000002c0)=@can, 0x80) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x600001, 0x8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x4002, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000340)={0x8, 0x8000, 0x5, 0x119, 0x9, 0xfa09}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x7e27, 0x0, 0x2, 0x4, "decfd7e01266e5a7ce90e65ded77098f01824b9b1c31def41c43df6c490045a8f833d43b29b3137c884bd823a0913d4ae9bff1aecfe69ac0673b4bc66535c0b4", "e8f5e4e148c8ede22b843e92911e9cb5b6d178b3910e20f119e14ece99f39736", [0x5, 0x2]}) execveat(r1, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f0000000580)=[&(0x7f00000005c0)='O\x00\x00', &(0x7f0000000400)=':]\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\x0e-\x00', &(0x7f00000004c0)='@]##n\x90\x00', &(0x7f0000000500)='/dev/random\x00', &(0x7f0000000540)='/\'\x00'], 0x0) 06:58:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) r3 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r3, 0x76d3, 0xeb17, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000100)=[r1, r3, r1]}, 0x3) r4 = fork() kcmp(0x0, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) kcmp(0x0, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r5 = fork() kcmp(r5, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) kcmp(r5, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x3f, 0x20, 0x7f, 0x1, 0x0, 0x390, 0x2000, 0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x2, 0x5}, 0x4002, 0xfffffffffffffff9, 0x3, 0x4, 0x1, 0x3, 0x0, 0x0, 0x4, 0x0, 0xa5f0}, r5, 0x1, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r4) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040029bd7063e8d70fa7f7f21600fedbdf252d0000000c0005000201aaaaaaaaaaaa"], 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) 06:58:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x6c00000000000000) 06:58:09 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 06:58:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x500000000000000) 06:58:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) [ 2228.283868] FAULT_INJECTION: forcing a failure. [ 2228.283868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2228.285694] CPU: 1 PID: 41659 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2228.286675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2228.287841] Call Trace: [ 2228.288236] dump_stack+0x107/0x167 [ 2228.288772] should_fail.cold+0x5/0xa [ 2228.289325] _copy_from_user+0x2e/0x1b0 [ 2228.289892] __copy_msghdr_from_user+0x91/0x4b0 [ 2228.290555] ? __ia32_sys_shutdown+0x80/0x80 [ 2228.291185] ? inet_sendmsg+0xbd/0x140 [ 2228.291730] ? inet_send_prepare+0x540/0x540 [ 2228.292362] ? __sock_sendmsg+0x55/0x190 [ 2228.292926] ? ____sys_sendmsg+0x426/0x870 [ 2228.293527] sendmsg_copy_msghdr+0xa1/0x160 [ 2228.294144] ? do_recvmmsg+0x6d0/0x6d0 [ 2228.294695] ? lock_chain_count+0x20/0x20 [ 2228.295297] ? lock_downgrade+0x6d0/0x6d0 [ 2228.295896] io_sendmsg+0x62c/0x830 [ 2228.296429] ? io_setup_async_msg+0x2d0/0x2d0 [ 2228.297066] ? mark_lock+0xf5/0x2df0 [ 2228.297611] ? lock_chain_count+0x20/0x20 [ 2228.298231] ? __lock_acquire+0xbb1/0x5b00 [ 2228.298841] io_issue_sqe+0x3b3/0x7700 [ 2228.299399] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2228.300157] ? lock_chain_count+0x20/0x20 [ 2228.300743] ? __is_insn_slot_addr+0x14c/0x290 [ 2228.301400] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2228.302132] ? io_connect+0x610/0x610 [ 2228.302681] ? lock_acquire+0x197/0x470 [ 2228.303241] ? find_held_lock+0x2c/0x110 [ 2228.303828] ? __fget_files+0x26d/0x4c0 [ 2228.304399] ? lock_downgrade+0x6d0/0x6d0 [ 2228.305004] __io_queue_sqe+0x90/0x9d0 [ 2228.305564] ? io_issue_sqe+0x7700/0x7700 [ 2228.306173] io_submit_sqes+0x4461/0x85c0 [ 2228.306929] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2228.307657] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2228.308366] ? lock_downgrade+0x6d0/0x6d0 [ 2228.308969] ? find_held_lock+0x2c/0x110 [ 2228.309559] ? io_submit_sqes+0x85c0/0x85c0 [ 2228.310204] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2228.310905] ? wait_for_completion_io+0x270/0x270 [ 2228.311628] ? rcu_read_lock_any_held+0x75/0xa0 [ 2228.312311] ? vfs_write+0x354/0xa70 [ 2228.312869] ? fput_many+0x2f/0x1a0 [ 2228.313400] ? ksys_write+0x1a9/0x260 [ 2228.313965] ? __ia32_sys_read+0xb0/0xb0 [ 2228.314563] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2228.315339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2228.316094] do_syscall_64+0x33/0x40 [ 2228.316644] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2228.317380] RIP: 0033:0x7feb2fbf3b19 [ 2228.317929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2228.320536] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2228.321654] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2228.322669] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2228.323707] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2228.324737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2228.325780] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:58:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:22 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @broadcast}, 0x1, 0x1, 0x2, 0x3}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)="f67444946baf41903170dce6ccbb67394ac1fd7f2f8be7cd8d5170f1b25bea0e1ca5a598f2103b8da3684fefdb2b962ef86c55f241a3262ee708b7e714ccebddd7c3dfc97b37ef300f2f321aaff8fe31a52778188ebe5b5a0679569982014997f28197b261f3a4de5e0a3dd096ae11273e0f960d9f9a8d277aea6ac00c520fbac84c55a025fe4263a408c522e8d342b0cb879a4e22eba4a3fb74922a53201c4d4ceee97f2aff3eab05179ed27ec64dd3841f4f7f8b8975f190b9d094349907bd73509e3ea0dd2735996da165f82907cba7e72dc3c9c94249c209bda06c8fc9e980ed7962f800d028753fcc", 0xeb}, {&(0x7f0000000180)="c9e3e0d466060fe5eadfb14dde92a36febf4a0394ab0ae8364d51db3f19f2da113b2fc5d511a6fa41fc15106340e04aa2e23a5f2bd023f17a8b81a33586c4338e2cc676b723b921d4b91c3740f32bac5f5aa7c9ee88e41f325c6ada464932144fd8146e1da655e8a29b31985fe32f903e4c5e21d2ba9669b892dd0c3e098f6a0441aaee02fb04cf8e8a8cf57e4718f273224d6", 0x93}, {&(0x7f00000003c0)="4ffc3c18a58622911ebdfb9779001fc8e22fd54a8f574d7d45241d8d9a0a3ed1aaeb35e083e39c74ba1421f3665326319d46c99c61d22c7b4f7a840d3c24720c341fe0", 0x43}], 0x3, &(0x7f0000000440)=[{0x38, 0x110, 0x4, "f7f2723c7bc450a31c5887cc662f44b207af272adc5cca21efa908cfc8ae10ffbea7491f23cd1053"}, {0x20, 0x101, 0x3, "0ebc7fd5acaf5f7b0b71f1"}, {0x70, 0x113, 0x56, "85a34ae77ce65fffe53aed05d37878363d28c1b6ed416092594dff68501c278894362200e9aac7030672ad54510b8ff95363d23d6da209245ac979284245c7d29530f4f68a764514a01b5b24f66ccaed613c2f87e09c5a344d68167f40b5"}, {0x98, 0x11, 0x10001, "8b101f47bf9c26562b912c8047e6752b23215c6d365e0a9bd25b58ca9a00d25fe579c172fc764455c3b51322cc8f05463b5ad97c1f7504ab1474fe068725412428a69ea2c22961a2c31cd33111a6c2475a5f12b666625467cdebab09f5273a56164540e638775f095254017d669dab52229e6f871e420cf654bdb22d3bfefd534f36c19f8e"}, {0x110, 0x116, 0x4, "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"}], 0x270}, 0x0, 0x4000000, 0x1, {0x0, r3}}, 0x9) 06:58:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x600000000000000) 06:58:22 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 06:58:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=""/105) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x1000, 0x12, 0x8, 0x0, "aa6d80b5107cee23f06f20ed981e5431a9496bebdc62bf56efec3c2b2e8b267464bc21e8cb0b31b6df2e883b4ac1337f12136aac068dff87fa78ce15f424d12f", "126ea6cef4fe12bb6476e9d746fcebe744d640736e8f6e2e205f056f24d4768d", [0x3, 0x6]}) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x7, 0x3, 0x6, 0x8, "7c1d524c539c090a5e9cf2ea4e18bf970d31fc7e669ef31e6801cde3208b9305940e56638504f74933a4329c3981b408a04380a194b9180b3fe1897c8c2f618c", "e5f9949111fd531cbbb393cefc9acc121fe182dfa2f03e2c425917732f51c50e", [0x9, 0x3]}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7400000000000000) 06:58:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) [ 2241.674133] FAULT_INJECTION: forcing a failure. [ 2241.674133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2241.675984] CPU: 0 PID: 41976 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2241.676991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2241.678182] Call Trace: [ 2241.678574] dump_stack+0x107/0x167 [ 2241.679107] should_fail.cold+0x5/0xa [ 2241.679660] _copy_from_user+0x2e/0x1b0 [ 2241.680249] move_addr_to_kernel.part.0+0x31/0x110 [ 2241.680956] __copy_msghdr_from_user+0x3e1/0x4b0 [ 2241.681641] ? __ia32_sys_shutdown+0x80/0x80 [ 2241.682281] ? __sock_sendmsg+0x55/0x190 [ 2241.682867] ? ____sys_sendmsg+0x426/0x870 [ 2241.683487] sendmsg_copy_msghdr+0xa1/0x160 [ 2241.684108] ? do_recvmmsg+0x6d0/0x6d0 [ 2241.684674] ? lock_chain_count+0x20/0x20 [ 2241.685277] ? lock_downgrade+0x6d0/0x6d0 [ 2241.685886] io_sendmsg+0x62c/0x830 [ 2241.686415] ? io_setup_async_msg+0x2d0/0x2d0 [ 2241.687070] ? mark_lock+0xf5/0x2df0 [ 2241.687615] ? lock_chain_count+0x20/0x20 [ 2241.688250] ? __lock_acquire+0xbb1/0x5b00 [ 2241.688866] io_issue_sqe+0x3b3/0x7700 [ 2241.689435] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2241.690186] ? lock_chain_count+0x20/0x20 [ 2241.690787] ? __is_insn_slot_addr+0x14c/0x290 [ 2241.691442] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2241.692205] ? io_connect+0x610/0x610 [ 2241.692767] ? lock_acquire+0x197/0x470 [ 2241.693342] ? find_held_lock+0x2c/0x110 [ 2241.693934] ? __fget_files+0x26d/0x4c0 [ 2241.694512] ? lock_downgrade+0x6d0/0x6d0 [ 2241.695116] __io_queue_sqe+0x90/0x9d0 06:58:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x7a00000000000000) [ 2241.695686] ? io_issue_sqe+0x7700/0x7700 [ 2241.696480] io_submit_sqes+0x4461/0x85c0 [ 2241.697104] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2241.697820] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2241.698518] ? lock_downgrade+0x6d0/0x6d0 [ 2241.699113] ? find_held_lock+0x2c/0x110 [ 2241.699707] ? io_submit_sqes+0x85c0/0x85c0 [ 2241.700336] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2241.701087] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2241.701859] ? trace_hardirqs_on+0x5b/0x180 [ 2241.702480] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2241.703275] ? fput_many+0x2f/0x1a0 [ 2241.703803] ? ksys_write+0x1a9/0x260 [ 2241.704360] ? __ia32_sys_read+0xb0/0xb0 [ 2241.704953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2241.705704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2241.706452] do_syscall_64+0x33/0x40 [ 2241.706990] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2241.707722] RIP: 0033:0x7feb2fbf3b19 [ 2241.708261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2241.710870] RSP: 002b:00007feb2d169188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2241.711958] RAX: ffffffffffffffda RBX: 00007feb2fd06f60 RCX: 00007feb2fbf3b19 [ 2241.712981] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2241.713992] RBP: 00007feb2d1691d0 R08: 0000000000000000 R09: 0000000000000000 [ 2241.715008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2241.716020] R13: 00007fff88b9069f R14: 00007feb2d169300 R15: 0000000000022000 06:58:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(0xffffffffffffffff, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x4, 0x70bd25, 0x70, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000d83cac05ffdfa94f253b3196a0617b9d125", @ANYRES16=r1, @ANYBLOB="8fa2c8905b01044c"], 0x14}}, 0x0) 06:58:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r0, &(0x7f0000019340)=""/102400, 0x19000) semop(0x0, &(0x7f0000000040), 0x2aaaaaaaaaaaab85) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x324, 0x27, 0x10, 0x70bd25, 0x25dfdbfc, {0x1}, [@nested={0x40, 0x41, 0x0, 0x1, [@generic="138623298ce27c7c22a06b4a73146ed237db851df551c43d9eb0b9afd5791d953bbe48144bf6e5c7", @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @generic="5dd63c7795c2acb06bc856af51eee6c0f185e281a3201d176c4133135676fe7b73e73595204239ed70574ed4da220f2c52bd934b421e7b33b0724e9991849b2f99f82ec1bbe3e96501bfb0b17ce2c35633c9a690d0ec7155e18b10e309", @generic="940d6442f42564cfa8f6001b41499ad996ae2b78ecfd4de31be8ab91a9eed5b777f9a119e3e8d6eda0d66fac8db7d7d6f6b41f311c558639f19f8a38895348aa0c111cee52de3f2aeafa029df397b43872d9e586c1479c79cf96d67c7879b8ca511c01d1a2cc5a358a08e460554e202f8f14515659d634", @generic="7d6b1e06f16e4bc0025d4cc23014059d54cf0885b32160b174ce201e12687f3e05c12795d0fe5d349772eb479a202a7586743d04a0f6d516b4ee7d938a182a696402581db2e0eb4e98ce3c50bd2e4ae96c56a2b9394b27c7911f115514e1e4c5b7d0a52ab9804eee6a540985dc183d2a1e6d2823d37464da3b6993e0ab25c75b807902ba06d1ed2c6e065fcb1b518af8487cc0d0ab9ab4ca0dc4ba249ca761a03ee1a51fe7", @typed={0xaf, 0x3d, 0x0, 0x0, @binary="7eec4a44773226107984e87b119f9d754090dbfa2b1c036152e155191cc1cc41f5c9addffe592d8d9129c389a88f8191738ae3a48dc828b23e0f8a86bc043ced78c42705a0e2a3478f91d2cf10c8ed5d2b47b5bec9eaeb2ff96a8dda3a75e8270b9d2a8479fda3e983075545cf5181ee492ccc696f4697f2af3421306ae0da0dfd558f71e50aee8f358debfd6589719e99fa602d2dd95192d68fe8defe2c983b9bdddd3ba731b08b377ef6"}, @generic="14eacd84410c8e43c8fbdb7f261c66641b29e0b03ffa788b411b265e43584e165e0581304ba051d02c409017ed1d0bd268e97bf757d0ad12277de38892bd0c9ef3be4b1e81ea5f2e06f4110dffaf741804b54c3a1f505cc07f83a86877f8233c02887add6f60e8cb5d6e4d7dd14f4ef22253312ef5c294323f53aafba7d1af4b648924740cbd6f81b78d92329f8f9cd3bc25bc3a3cf3a19f3b5c6ea1a4b0ce966799df7c9a83bd"]}, 0x324}}, 0x4000) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:22 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) r0 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a4b, 0x48ae, 0x0, &(0x7f0000000080)={[0xf31]}, 0x8) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x700000000000000) 06:58:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x20) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000004a6a4f6de0993a7565320813fefd0c713820", @ANYRES16=r3, @ANYBLOB="010400000000000000002e000000"], 0x14}}, 0x0) 06:58:33 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x10000000}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x0, 0x3) clone3(&(0x7f0000000000)={0x11048500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:33 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) 06:58:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(0xffffffffffffffff, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) openat(r1, &(0x7f0000000100)='./file1\x00', 0x2000, 0x50) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x4800000000000000) 06:58:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x4, 0x12, 0x19, 0x5, "76543422d58cbaef99c3f5c7490ab1e411cfb82d898ea2a71e86d32725d959d6de87f143ef293d6132629ac982cb1ce24259a9315526944b37b200bbe4e4bb95", "b1f210f849cbd08d52a59fcd7a18198113fb1cf5b6d0193cb6d16b7c20c7466b", [0x666, 0x5499]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c62312f66107c595cad"]) lseek(r2, 0x0, 0x1) read(r0, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000002a40)=0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_io_uring_setup(0x72e0, &(0x7f00000000c0)={0x0, 0x8617, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000003c0)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd=r5, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x20080, 0x4a}, &(0x7f0000000100)='./file1\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0x1) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0xb06, &(0x7f0000000080)={0x0, 0x4336, 0x4, 0x3, 0x236}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(r1, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r1, 0x401}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) 06:58:33 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r2, 0x76d3, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0xffffff7f00000000) 06:58:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x1200, 0xc, 0x0, "4cbb66a69173a58703d1e4de362afd07995d59623983ea908cfd5f9817cbb28d3a3e80871f8a9c367a4cf7d9709ff7f2b307770f53c86ed53d0dfff007e16ac8", "57d91397e4ffec9f5b2c108c0016a4a78e0dd0e285657924e5edafc67698b188"}) read(0xffffffffffffffff, &(0x7f0000019340)=""/102400, 0x19000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) syz_io_uring_setup(0x21, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) sync_file_range(0xffffffffffffffff, 0xe438, 0x7, 0x3) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 06:58:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000, 0x2f7}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) sync_file_range(r1, 0xe438, 0x7, 0x3) close(r1) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000480)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='\xe2\x00', &(0x7f0000000200)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='-:(:)^\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\xe2\x00', &(0x7f0000000400)='*--\x00', &(0x7f0000000440)='d]/-\x00'], 0x0) [ 2255.399795] Failed to initialize the IGMP autojoin socket (err -2) [ 2256.059468] Failed to initialize the IGMP autojoin socket (err -2) [ 2256.166930] Failed to initialize the IGMP autojoin socket (err -2) [ 2256.483267] Failed to initialize the IGMP autojoin socket (err -2) [ 2256.543392] Failed to initialize the IGMP autojoin socket (err -2) [ 2256.567094] Failed to initialize the IGMP autojoin socket (err -2) [ 2256.651964] Failed to initialize the IGMP autojoin socket (err -2) [ 2256.732279] Failed to initialize the IGMP autojoin socket (err -2) [ 2257.295192] Bluetooth: hci0: command 0x0409 tx timeout [ 2259.317667] Failed to initialize the IGMP autojoin socket (err -2) [ 2259.343629] Bluetooth: hci0: command 0x041b tx timeout [ 2259.731635] Failed to initialize the IGMP autojoin socket (err -2) [ 2259.931128] Failed to initialize the IGMP autojoin socket (err -2) [ 2259.961247] Failed to initialize the IGMP autojoin socket (err -2) [ 2260.008521] Failed to initialize the IGMP autojoin socket (err -2) [ 2260.099759] Failed to initialize the IGMP autojoin socket (err -2) [ 2260.105867] Failed to initialize the IGMP autojoin socket (err -2) [ 2261.395176] Bluetooth: hci0: command 0x040f tx timeout [ 2262.658134] Failed to initialize the IGMP autojoin socket (err -2) [ 2263.275605] Failed to initialize the IGMP autojoin socket (err -2) [ 2263.392427] Failed to initialize the IGMP autojoin socket (err -2) [ 2263.463115] Failed to initialize the IGMP autojoin socket (err -2) [ 2263.493223] Failed to initialize the IGMP autojoin socket (err -2) [ 2263.534756] Failed to initialize the IGMP autojoin socket (err -2) [ 2263.578622] Failed to initialize the IGMP autojoin socket (err -2) [ 2264.527279] Bluetooth: hci0: command 0x0409 tx timeout [ 2264.947596] Failed to initialize the IGMP autojoin socket (err -2) [ 2266.293908] Failed to initialize the IGMP autojoin socket (err -2) [ 2266.575196] Bluetooth: hci0: command 0x041b tx timeout [ 2266.831439] Failed to initialize the IGMP autojoin socket (err -2) [ 2266.899761] Failed to initialize the IGMP autojoin socket (err -2) [ 2267.089983] Failed to initialize the IGMP autojoin socket (err -2) [ 2267.265743] Failed to initialize the IGMP autojoin socket (err -2) [ 2267.308861] Failed to initialize the IGMP autojoin socket (err -2) [ 2268.625171] Bluetooth: hci0: command 0x040f tx timeout [ 2268.666243] Failed to initialize the IGMP autojoin socket (err -2) [ 2269.847991] Failed to initialize the IGMP autojoin socket (err -2) [ 2270.289288] Failed to initialize the IGMP autojoin socket (err -2) [ 2270.422078] Failed to initialize the IGMP autojoin socket (err -2) [ 2270.496396] Failed to initialize the IGMP autojoin socket (err -2) [ 2270.724303] Failed to initialize the IGMP autojoin socket (err -2) [ 2270.732738] Failed to initialize the IGMP autojoin socket (err -2) [ 2271.921191] Failed to initialize the IGMP autojoin socket (err -2) [ 2272.143174] Bluetooth: hci1: command 0x0409 tx timeout [ 2272.495871] Failed to initialize the IGMP autojoin socket (err -2) [ 2273.178054] Failed to initialize the IGMP autojoin socket (err -2) [ 2273.999409] Failed to initialize the IGMP autojoin socket (err -2) [ 2274.096808] Failed to initialize the IGMP autojoin socket (err -2) [ 2274.100814] Failed to initialize the IGMP autojoin socket (err -2) [ 2274.127034] Failed to initialize the IGMP autojoin socket (err -2) [ 2274.193610] Bluetooth: hci1: command 0x041b tx timeout [ 2275.239704] Failed to initialize the IGMP autojoin socket (err -2) [ 2275.271890] Failed to initialize the IGMP autojoin socket (err -2) [ 2275.876861] Failed to initialize the IGMP autojoin socket (err -2) [ 2276.239185] Bluetooth: hci1: command 0x040f tx timeout [ 2276.718522] Failed to initialize the IGMP autojoin socket (err -2) [ 2276.954829] Failed to initialize the IGMP autojoin socket (err -2) [ 2277.108244] Failed to initialize the IGMP autojoin socket (err -2) [ 2277.149956] Failed to initialize the IGMP autojoin socket (err -2) [ 2277.811353] Failed to initialize the IGMP autojoin socket (err -2) [ 2278.182594] Failed to initialize the IGMP autojoin socket (err -2) [ 2278.594568] Failed to initialize the IGMP autojoin socket (err -2) [ 2278.671206] Bluetooth: hci0: command 0x0409 tx timeout [ 2278.858261] Failed to initialize the IGMP autojoin socket (err -2) [ 2279.680261] Failed to initialize the IGMP autojoin socket (err -2) [ 2279.763423] Failed to initialize the IGMP autojoin socket (err -2) [ 2279.784550] Failed to initialize the IGMP autojoin socket (err -2) [ 2280.280958] Failed to initialize the IGMP autojoin socket (err -2) [ 2280.630030] Failed to initialize the IGMP autojoin socket (err -2) [ 2280.719168] Bluetooth: hci0: command 0x041b tx timeout [ 2281.307279] Failed to initialize the IGMP autojoin socket (err -2) [ 2281.418490] Failed to initialize the IGMP autojoin socket (err -2) [ 2282.175756] Failed to initialize the IGMP autojoin socket (err -2) [ 2282.542765] Failed to initialize the IGMP autojoin socket (err -2) [ 2282.579170] Failed to initialize the IGMP autojoin socket (err -2) [ 2282.915643] Failed to initialize the IGMP autojoin socket (err -2) [ 2283.165603] Failed to initialize the IGMP autojoin socket (err -2) [ 2283.983315] Failed to initialize the IGMP autojoin socket (err -2) [ 2284.116675] Bluetooth: hci0: command 0x0409 tx timeout [ 2284.398830] Failed to initialize the IGMP autojoin socket (err -2) [ 2284.485687] Failed to initialize the IGMP autojoin socket (err -2) [ 2285.100351] Failed to initialize the IGMP autojoin socket (err -2) [ 2285.727575] Failed to initialize the IGMP autojoin socket (err -2) [ 2285.939963] Failed to initialize the IGMP autojoin socket (err -2) [ 2285.956558] Failed to initialize the IGMP autojoin socket (err -2) 2024/02/04 06:59:07 executor 7 failed 11 times: executor 7: exit status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 16: Device or resource busy) loop exited with status 67 [ 2286.159211] Bluetooth: hci0: command 0x041b tx timeout [ 2286.683194] Failed to initialize the IGMP autojoin socket (err -2) [ 2287.220469] Failed to initialize the IGMP autojoin socket (err -2) [ 2288.591189] Bluetooth: hci0: command 0x0409 tx timeout [ 2290.639182] Bluetooth: hci0: command 0x041b tx timeout VM DIAGNOSIS: 06:59:07 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff11007583f86 RCX=ffffffff81746ed4 RDX=ffff8880483d8000 RSI=ffffffff8174c191 RDI=0000000000000005 RBP=ffff88803ac1fc50 RSP=ffff88803ac1fc28 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88800e827900 R13=ffff88803ac1fdf8 R14=0000000000000001 R15=00000000ffffff9c RIP=ffffffff81408c84 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1e50291269 CR3=000000004a97c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffffffffffff RBX=ffff88801f4ac000 RCX=000000000000001f RDX=0000000000000000 RSI=00000000000000ff RDI=ffffed1003e95908 RBP=ffffea00007d2b00 RSP=ffff888044cb75c0 R8 =0000000000000000 R9 =ffffed1003e95800 R10=fffff940000fa566 R11=0000000000000001 R12=ffffffff84c86660 R13=ffffffff84c86670 R14=fffffbfff0990ccc R15=ffffea00007d2ac0 RIP=ffffffff82022fa4 RFL=00000a13 [-O--A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbae050efb8 CR3=0000000004e26000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=636578650a3a73656d69742031312064 XMM02=6174732074697865203a3720726f7475 XMM03=203a4c4941465a59530a373620737574 XMM04=45534e5554286c74636f69203a6e7574 XMM05=6528200a64656c696166202946464954 XMM06=20656369766544203a3631206f6e7272 XMM07=7973756220656372756f73657220726f XMM08=2074697865203a3720726f7475636578 XMM09=4941465a59530a373620737574617473 XMM10=5554286c74636f69203a6e7574203a4c XMM11=0a64656c69616620294646495445534e XMM12=69766544203a3631206f6e7272652820 XMM13=6220656372756f73657220726f206563 XMM14=64657469786520706f6f6c0a29797375 XMM15=0a373620737574617473206874697720