)="e2", 0x35000) (fail_nth: 1) [ 164.211836][ T7423] FAULT_INJECTION: forcing a failure. [ 164.211836][ T7423] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 164.224949][ T7423] CPU: 1 PID: 7423 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 164.233376][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.243429][ T7423] Call Trace: [ 164.246733][ T7423] [ 164.249748][ T7423] dump_stack_lvl+0xd6/0x122 [ 164.254421][ T7423] dump_stack+0x11/0x1b 06:54:27 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(0x0, 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:27 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(0x0, 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:27 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 164.258583][ T7423] should_fail+0x23c/0x250 [ 164.263005][ T7423] should_fail_usercopy+0x16/0x20 [ 164.268118][ T7423] _copy_from_user+0x1c/0xd0 [ 164.272789][ T7423] input_event_from_user+0x122/0x1d0 [ 164.278132][ T7423] evdev_write+0x282/0x400 [ 164.282581][ T7423] ? evdev_read+0x710/0x710 [ 164.287090][ T7423] vfs_write+0x2af/0x950 [ 164.291340][ T7423] ? __fget_light+0x219/0x260 [ 164.296093][ T7423] ksys_write+0xd9/0x190 [ 164.300380][ T7423] __x64_sys_write+0x3e/0x50 [ 164.304976][ T7423] do_syscall_64+0x44/0xd0 [ 164.309472][ T7423] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 164.315371][ T7423] RIP: 0033:0x7fdc3c0aaae9 [ 164.319782][ T7423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 164.339390][ T7423] RSP: 002b:00007fdc39e21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.347858][ T7423] RAX: ffffffffffffffda RBX: 00007fdc3c1bdf60 RCX: 00007fdc3c0aaae9 06:54:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 06:54:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:27 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 164.355880][ T7423] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 164.363930][ T7423] RBP: 00007fdc39e211d0 R08: 0000000000000000 R09: 0000000000000000 [ 164.371914][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.380040][ T7423] R13: 00007ffe9a57e78f R14: 00007fdc39e21300 R15: 0000000000022000 [ 164.388023][ T7423] 06:54:27 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, 0x0, 0x0) 06:54:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 2) 06:54:27 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:27 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) (fail_nth: 1) 06:54:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 06:54:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 164.542134][ T7449] FAULT_INJECTION: forcing a failure. [ 164.542134][ T7449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.555236][ T7449] CPU: 1 PID: 7449 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 164.563566][ T7449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.573625][ T7449] Call Trace: [ 164.573920][ T7447] FAULT_INJECTION: forcing a failure. [ 164.573920][ T7447] name failslab, interval 1, probability 0, space 0, times 1 [ 164.576934][ T7449] [ 164.576943][ T7449] dump_stack_lvl+0xd6/0x122 [ 164.597040][ T7449] dump_stack+0x11/0x1b [ 164.601195][ T7449] should_fail+0x23c/0x250 [ 164.605614][ T7449] should_fail_usercopy+0x16/0x20 [ 164.610643][ T7449] _copy_from_user+0x1c/0xd0 [ 164.615226][ T7449] input_event_from_user+0x122/0x1d0 [ 164.620505][ T7449] ? input_inject_event+0xcd/0xe0 [ 164.625525][ T7449] evdev_write+0x282/0x400 [ 164.629957][ T7449] ? evdev_read+0x710/0x710 [ 164.634470][ T7449] vfs_write+0x2af/0x950 [ 164.638763][ T7449] ? __fget_light+0x219/0x260 [ 164.643495][ T7449] ksys_write+0xd9/0x190 [ 164.647885][ T7449] __x64_sys_write+0x3e/0x50 [ 164.652467][ T7449] do_syscall_64+0x44/0xd0 [ 164.656916][ T7449] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 164.662804][ T7449] RIP: 0033:0x7fdc3c0aaae9 [ 164.667311][ T7449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 164.686981][ T7449] RSP: 002b:00007fdc39e21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.695379][ T7449] RAX: ffffffffffffffda RBX: 00007fdc3c1bdf60 RCX: 00007fdc3c0aaae9 [ 164.703468][ T7449] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 164.711688][ T7449] RBP: 00007fdc39e211d0 R08: 0000000000000000 R09: 0000000000000000 [ 164.719645][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.727683][ T7449] R13: 00007ffe9a57e78f R14: 00007fdc39e21300 R15: 0000000000022000 [ 164.735668][ T7449] 06:54:28 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, 0x0, 0x0) [ 164.738679][ T7447] CPU: 0 PID: 7447 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 164.747044][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.757108][ T7447] Call Trace: [ 164.760381][ T7447] [ 164.763390][ T7447] dump_stack_lvl+0xd6/0x122 [ 164.767993][ T7447] dump_stack+0x11/0x1b [ 164.772190][ T7447] should_fail+0x23c/0x250 [ 164.776608][ T7447] ? getname_flags+0x84/0x3f0 [ 164.781279][ T7447] __should_failslab+0x81/0x90 [ 164.786092][ T7447] should_failslab+0x5/0x20 [ 164.790616][ T7447] kmem_cache_alloc+0x4f/0x320 [ 164.795378][ T7447] getname_flags+0x84/0x3f0 [ 164.799938][ T7447] getname+0x15/0x20 [ 164.803880][ T7447] do_sys_openat2+0x6d/0x2b0 [ 164.808505][ T7447] __x64_sys_openat+0xef/0x110 [ 164.813375][ T7447] do_syscall_64+0x44/0xd0 [ 164.817839][ T7447] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 164.823732][ T7447] RIP: 0033:0x7f1c4f1eea04 [ 164.828350][ T7447] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 164.848031][ T7447] RSP: 002b:00007f1c4cfb1cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 164.856444][ T7447] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007f1c4f1eea04 [ 164.864394][ T7447] RDX: 0000000000000000 RSI: 00007f1c4cfb1d60 RDI: 00000000ffffff9c [ 164.872346][ T7447] RBP: 00007f1c4cfb1d60 R08: 0000000000000000 R09: 0000000000000000 [ 164.880315][ T7447] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 06:54:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 3) 06:54:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 06:54:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 164.888285][ T7447] R13: 00007fff1d4d495f R14: 00007f1c4cfb2300 R15: 0000000000022000 [ 164.896280][ T7447] 06:54:28 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:28 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, 0x0, 0x0) [ 165.031806][ T7461] FAULT_INJECTION: forcing a failure. [ 165.031806][ T7461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.045460][ T7461] CPU: 0 PID: 7461 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 165.046397][ T7465] FAULT_INJECTION: forcing a failure. [ 165.046397][ T7465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.053804][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.076915][ T7461] Call Trace: [ 165.080179][ T7461] [ 165.083094][ T7461] dump_stack_lvl+0xd6/0x122 [ 165.087678][ T7461] dump_stack+0x11/0x1b [ 165.091861][ T7461] should_fail+0x23c/0x250 [ 165.096294][ T7461] should_fail_usercopy+0x16/0x20 [ 165.101345][ T7461] _copy_from_user+0x1c/0xd0 [ 165.105942][ T7461] input_event_from_user+0x122/0x1d0 [ 165.111240][ T7461] ? input_inject_event+0xcd/0xe0 [ 165.116252][ T7461] evdev_write+0x282/0x400 [ 165.120779][ T7461] ? evdev_read+0x710/0x710 [ 165.125317][ T7461] vfs_write+0x2af/0x950 [ 165.129549][ T7461] ? __fget_light+0x219/0x260 [ 165.134264][ T7461] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 165.140102][ T7461] ksys_write+0xd9/0x190 [ 165.144356][ T7461] __x64_sys_write+0x3e/0x50 [ 165.148939][ T7461] do_syscall_64+0x44/0xd0 [ 165.153347][ T7461] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 165.159226][ T7461] RIP: 0033:0x7fdc3c0aaae9 [ 165.163629][ T7461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 165.183221][ T7461] RSP: 002b:00007fdc39e21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.191746][ T7461] RAX: ffffffffffffffda RBX: 00007fdc3c1bdf60 RCX: 00007fdc3c0aaae9 [ 165.199702][ T7461] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 165.207744][ T7461] RBP: 00007fdc39e211d0 R08: 0000000000000000 R09: 0000000000000000 [ 165.215706][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.223759][ T7461] R13: 00007ffe9a57e78f R14: 00007fdc39e21300 R15: 0000000000022000 06:54:28 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) (fail_nth: 2) 06:54:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, 0x0, 0x0) [ 165.231745][ T7461] [ 165.234750][ T7465] CPU: 1 PID: 7465 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 165.243125][ T7465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.253234][ T7465] Call Trace: [ 165.256573][ T7465] [ 165.259501][ T7465] dump_stack_lvl+0xd6/0x122 [ 165.264128][ T7465] dump_stack+0x11/0x1b [ 165.268287][ T7465] should_fail+0x23c/0x250 [ 165.272712][ T7465] should_fail_usercopy+0x16/0x20 [ 165.277824][ T7465] strncpy_from_user+0x21/0x250 [ 165.282852][ T7465] getname_flags+0xb8/0x3f0 [ 165.287332][ T7465] getname+0x15/0x20 [ 165.291209][ T7465] do_sys_openat2+0x6d/0x2b0 [ 165.295788][ T7465] __x64_sys_openat+0xef/0x110 [ 165.300603][ T7465] do_syscall_64+0x44/0xd0 [ 165.305003][ T7465] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 165.310873][ T7465] RIP: 0033:0x7f1c4f1eea04 [ 165.315264][ T7465] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 165.334902][ T7465] RSP: 002b:00007f1c4cfb1cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 165.343311][ T7465] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007f1c4f1eea04 [ 165.351260][ T7465] RDX: 0000000000000000 RSI: 00007f1c4cfb1d60 RDI: 00000000ffffff9c [ 165.359211][ T7465] RBP: 00007f1c4cfb1d60 R08: 0000000000000000 R09: 0000000000000000 [ 165.367170][ T7465] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 165.375252][ T7465] R13: 00007fff1d4d495f R14: 00007f1c4cfb2300 R15: 0000000000022000 06:54:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 4) [ 165.383245][ T7465] 06:54:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, 0x0, 0x0) 06:54:28 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:28 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040), 0x0) [ 165.456993][ T7476] FAULT_INJECTION: forcing a failure. [ 165.456993][ T7476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.470131][ T7476] CPU: 1 PID: 7476 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 165.478512][ T7476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.488578][ T7476] Call Trace: [ 165.491853][ T7476] [ 165.494783][ T7476] dump_stack_lvl+0xd6/0x122 [ 165.498722][ T7481] FAULT_INJECTION: forcing a failure. [ 165.498722][ T7481] name failslab, interval 1, probability 0, space 0, times 0 [ 165.499421][ T7476] dump_stack+0x11/0x1b [ 165.499442][ T7476] should_fail+0x23c/0x250 [ 165.520601][ T7476] should_fail_usercopy+0x16/0x20 [ 165.525629][ T7476] _copy_from_user+0x1c/0xd0 [ 165.530207][ T7476] input_event_from_user+0x122/0x1d0 [ 165.535551][ T7476] ? input_inject_event+0xcd/0xe0 [ 165.540562][ T7476] evdev_write+0x282/0x400 [ 165.545035][ T7476] ? evdev_read+0x710/0x710 [ 165.549530][ T7476] vfs_write+0x2af/0x950 [ 165.553807][ T7476] ? __fget_light+0x219/0x260 [ 165.558515][ T7476] ksys_write+0xd9/0x190 [ 165.562795][ T7476] __x64_sys_write+0x3e/0x50 [ 165.567374][ T7476] do_syscall_64+0x44/0xd0 [ 165.571827][ T7476] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 165.577786][ T7476] RIP: 0033:0x7fdc3c0aaae9 [ 165.582186][ T7476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:54:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, 0x0, 0x0) 06:54:28 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) (fail_nth: 3) [ 165.601779][ T7476] RSP: 002b:00007fdc39e21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.610257][ T7476] RAX: ffffffffffffffda RBX: 00007fdc3c1bdf60 RCX: 00007fdc3c0aaae9 [ 165.618266][ T7476] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 165.626245][ T7476] RBP: 00007fdc39e211d0 R08: 0000000000000000 R09: 0000000000000000 [ 165.634211][ T7476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.642264][ T7476] R13: 00007ffe9a57e78f R14: 00007fdc39e21300 R15: 0000000000022000 [ 165.650262][ T7476] [ 165.653299][ T7481] CPU: 0 PID: 7481 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 165.661657][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.671710][ T7481] Call Trace: [ 165.674993][ T7481] [ 165.678013][ T7481] dump_stack_lvl+0xd6/0x122 [ 165.682610][ T7481] dump_stack+0x11/0x1b [ 165.686768][ T7481] should_fail+0x23c/0x250 [ 165.691188][ T7481] ? __alloc_file+0x2e/0x1a0 [ 165.695813][ T7481] __should_failslab+0x81/0x90 [ 165.700575][ T7481] should_failslab+0x5/0x20 [ 165.705075][ T7481] kmem_cache_alloc+0x4f/0x320 [ 165.709904][ T7481] __alloc_file+0x2e/0x1a0 [ 165.714319][ T7481] alloc_empty_file+0xcd/0x1c0 [ 165.719077][ T7481] path_openat+0x6a/0x1eb0 [ 165.723495][ T7481] ? _kstrtoull+0x301/0x320 [ 165.728004][ T7481] do_filp_open+0x105/0x220 [ 165.732584][ T7481] do_sys_openat2+0xb5/0x2b0 [ 165.737183][ T7481] __x64_sys_openat+0xef/0x110 [ 165.741957][ T7481] do_syscall_64+0x44/0xd0 [ 165.746415][ T7481] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 165.752289][ T7481] RIP: 0033:0x7f1c4f1eea04 [ 165.756715][ T7481] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 165.776336][ T7481] RSP: 002b:00007f1c4cfb1cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 165.784746][ T7481] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007f1c4f1eea04 [ 165.792765][ T7481] RDX: 0000000000000000 RSI: 00007f1c4cfb1d60 RDI: 00000000ffffff9c [ 165.800716][ T7481] RBP: 00007f1c4cfb1d60 R08: 0000000000000000 R09: 0000000000000000 06:54:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040), 0x0) 06:54:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 5) 06:54:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 165.808717][ T7481] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 165.816730][ T7481] R13: 00007fff1d4d495f R14: 00007f1c4cfb2300 R15: 0000000000022000 [ 165.824684][ T7481] 06:54:29 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040), 0x0) 06:54:29 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:29 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) (fail_nth: 4) 06:54:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040), 0x0) [ 165.955348][ T7491] FAULT_INJECTION: forcing a failure. [ 165.955348][ T7491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.968443][ T7491] CPU: 1 PID: 7491 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 165.976822][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.986906][ T7491] Call Trace: [ 165.986879][ T7496] FAULT_INJECTION: forcing a failure. [ 165.986879][ T7496] name failslab, interval 1, probability 0, space 0, times 0 [ 165.990199][ T7491] [ 165.990208][ T7491] dump_stack_lvl+0xd6/0x122 [ 166.010288][ T7491] dump_stack+0x11/0x1b [ 166.014479][ T7491] should_fail+0x23c/0x250 [ 166.018925][ T7491] should_fail_usercopy+0x16/0x20 [ 166.023984][ T7491] _copy_from_user+0x1c/0xd0 [ 166.028581][ T7491] input_event_from_user+0x122/0x1d0 [ 166.033952][ T7491] ? input_inject_event+0xcd/0xe0 [ 166.038991][ T7491] evdev_write+0x282/0x400 [ 166.043406][ T7491] ? evdev_read+0x710/0x710 [ 166.047969][ T7491] vfs_write+0x2af/0x950 [ 166.052284][ T7491] ? __fget_light+0x219/0x260 [ 166.057060][ T7491] ksys_write+0xd9/0x190 [ 166.061640][ T7491] __x64_sys_write+0x3e/0x50 [ 166.066219][ T7491] do_syscall_64+0x44/0xd0 [ 166.070671][ T7491] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.076593][ T7491] RIP: 0033:0x7fdc3c0aaae9 [ 166.080990][ T7491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 166.100662][ T7491] RSP: 002b:00007fdc39e21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.109065][ T7491] RAX: ffffffffffffffda RBX: 00007fdc3c1bdf60 RCX: 00007fdc3c0aaae9 [ 166.117066][ T7491] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 166.125032][ T7491] RBP: 00007fdc39e211d0 R08: 0000000000000000 R09: 0000000000000000 [ 166.132995][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.141008][ T7491] R13: 00007ffe9a57e78f R14: 00007fdc39e21300 R15: 0000000000022000 [ 166.149134][ T7491] [ 166.152137][ T7496] CPU: 0 PID: 7496 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 166.160755][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.170957][ T7496] Call Trace: [ 166.174269][ T7496] [ 166.177274][ T7496] dump_stack_lvl+0xd6/0x122 [ 166.181866][ T7496] dump_stack+0x11/0x1b [ 166.186052][ T7496] should_fail+0x23c/0x250 [ 166.190593][ T7496] ? security_file_alloc+0x30/0x190 [ 166.195788][ T7496] __should_failslab+0x81/0x90 [ 166.200542][ T7496] should_failslab+0x5/0x20 [ 166.205040][ T7496] kmem_cache_alloc+0x4f/0x320 [ 166.209835][ T7496] security_file_alloc+0x30/0x190 [ 166.214922][ T7496] __alloc_file+0x83/0x1a0 [ 166.219316][ T7496] alloc_empty_file+0xcd/0x1c0 [ 166.224059][ T7496] path_openat+0x6a/0x1eb0 [ 166.228493][ T7496] ? _kstrtoull+0x301/0x320 [ 166.232980][ T7496] do_filp_open+0x105/0x220 [ 166.237486][ T7496] do_sys_openat2+0xb5/0x2b0 [ 166.242071][ T7496] __x64_sys_openat+0xef/0x110 [ 166.246903][ T7496] do_syscall_64+0x44/0xd0 [ 166.251318][ T7496] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.257259][ T7496] RIP: 0033:0x7f1c4f1eea04 [ 166.261747][ T7496] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 166.281341][ T7496] RSP: 002b:00007f1c4cfb1cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 166.289841][ T7496] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007f1c4f1eea04 [ 166.297810][ T7496] RDX: 0000000000000000 RSI: 00007f1c4cfb1d60 RDI: 00000000ffffff9c 06:54:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 6) 06:54:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040), 0x0) 06:54:29 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) (fail_nth: 5) 06:54:29 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 06:54:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 166.305873][ T7496] RBP: 00007f1c4cfb1d60 R08: 0000000000000000 R09: 0000000000000000 [ 166.313853][ T7496] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 166.321804][ T7496] R13: 00007fff1d4d495f R14: 00007f1c4cfb2300 R15: 0000000000022000 [ 166.329860][ T7496] 06:54:29 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040), 0x0) [ 166.398997][ T7601] FAULT_INJECTION: forcing a failure. [ 166.398997][ T7601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.412107][ T7601] CPU: 1 PID: 7601 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 166.420505][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.427919][ T7603] FAULT_INJECTION: forcing a failure. [ 166.427919][ T7603] name failslab, interval 1, probability 0, space 0, times 0 [ 166.430560][ T7601] Call Trace: [ 166.430567][ T7601] [ 166.430574][ T7601] dump_stack_lvl+0xd6/0x122 [ 166.430597][ T7601] dump_stack+0x11/0x1b [ 166.458019][ T7601] should_fail+0x23c/0x250 [ 166.462431][ T7601] should_fail_usercopy+0x16/0x20 [ 166.467528][ T7601] _copy_from_user+0x1c/0xd0 [ 166.472261][ T7601] input_event_from_user+0x122/0x1d0 [ 166.477536][ T7601] ? input_inject_event+0xcd/0xe0 [ 166.482544][ T7601] evdev_write+0x282/0x400 [ 166.486949][ T7601] ? evdev_read+0x710/0x710 [ 166.491480][ T7601] vfs_write+0x2af/0x950 [ 166.495726][ T7601] ? __fget_light+0x219/0x260 [ 166.500394][ T7601] ksys_write+0xd9/0x190 [ 166.504636][ T7601] __x64_sys_write+0x3e/0x50 [ 166.509268][ T7601] do_syscall_64+0x44/0xd0 [ 166.513761][ T7601] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.519644][ T7601] RIP: 0033:0x7fdc3c0aaae9 [ 166.524043][ T7601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 166.543799][ T7601] RSP: 002b:00007fdc39e21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.552232][ T7601] RAX: ffffffffffffffda RBX: 00007fdc3c1bdf60 RCX: 00007fdc3c0aaae9 [ 166.560188][ T7601] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 166.568142][ T7601] RBP: 00007fdc39e211d0 R08: 0000000000000000 R09: 0000000000000000 [ 166.576097][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.584063][ T7601] R13: 00007ffe9a57e78f R14: 00007fdc39e21300 R15: 0000000000022000 [ 166.592023][ T7601] [ 166.595037][ T7603] CPU: 0 PID: 7603 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 166.603366][ T7603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.613508][ T7603] Call Trace: [ 166.616816][ T7603] [ 166.619771][ T7603] dump_stack_lvl+0xd6/0x122 [ 166.624363][ T7603] dump_stack+0x11/0x1b [ 166.628635][ T7603] should_fail+0x23c/0x250 [ 166.633095][ T7603] __should_failslab+0x81/0x90 [ 166.637855][ T7603] should_failslab+0x5/0x20 [ 166.642463][ T7603] kmem_cache_alloc_node_trace+0x61/0x310 [ 166.648174][ T7603] ? __kmalloc_node+0x30/0x40 [ 166.652942][ T7603] __kmalloc_node+0x30/0x40 [ 166.657435][ T7603] kvmalloc_node+0x81/0x110 [ 166.661924][ T7603] evdev_open+0xa5/0x360 [ 166.666189][ T7603] chrdev_open+0x362/0x3d0 [ 166.670683][ T7603] ? cd_forget+0xe0/0xe0 [ 166.674933][ T7603] do_dentry_open+0x52c/0x860 [ 166.679595][ T7603] vfs_open+0x43/0x50 [ 166.683596][ T7603] path_openat+0x17b8/0x1eb0 [ 166.688187][ T7603] do_filp_open+0x105/0x220 [ 166.692751][ T7603] do_sys_openat2+0xb5/0x2b0 [ 166.697419][ T7603] __x64_sys_openat+0xef/0x110 [ 166.702176][ T7603] do_syscall_64+0x44/0xd0 [ 166.706624][ T7603] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.712496][ T7603] RIP: 0033:0x7f1c4f1eea04 [ 166.716889][ T7603] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 166.736496][ T7603] RSP: 002b:00007f1c4cfb1cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 06:54:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 7) 06:54:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 1) 06:54:30 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) 06:54:30 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) (fail_nth: 6) [ 166.744883][ T7603] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00007f1c4f1eea04 [ 166.752835][ T7603] RDX: 0000000000000000 RSI: 00007f1c4cfb1d60 RDI: 00000000ffffff9c [ 166.760785][ T7603] RBP: 00007f1c4cfb1d60 R08: 0000000000000000 R09: 0000000000000000 [ 166.768744][ T7603] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 166.776708][ T7603] R13: 00007fff1d4d495f R14: 00007f1c4cfb2300 R15: 0000000000022000 [ 166.784766][ T7603] [ 166.839262][ T7717] FAULT_INJECTION: forcing a failure. [ 166.839262][ T7717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.842950][ T7715] FAULT_INJECTION: forcing a failure. [ 166.842950][ T7715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.852413][ T7717] CPU: 1 PID: 7717 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 166.852485][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.852496][ T7717] Call Trace: [ 166.887149][ T7717] [ 166.890072][ T7717] dump_stack_lvl+0xd6/0x122 [ 166.894656][ T7717] dump_stack+0x11/0x1b [ 166.898874][ T7717] should_fail+0x23c/0x250 [ 166.903285][ T7717] should_fail_usercopy+0x16/0x20 [ 166.908307][ T7717] _copy_to_user+0x1c/0x90 [ 166.912852][ T7717] simple_read_from_buffer+0xab/0x120 [ 166.918223][ T7717] proc_fail_nth_read+0x10d/0x150 [ 166.923252][ T7717] ? proc_fault_inject_write+0x230/0x230 [ 166.928915][ T7717] vfs_read+0x1e6/0x750 [ 166.933068][ T7717] ? __fget_light+0x219/0x260 [ 166.937805][ T7717] ksys_read+0xd9/0x190 [ 166.941955][ T7717] __x64_sys_read+0x3e/0x50 [ 166.946473][ T7717] do_syscall_64+0x44/0xd0 [ 166.950899][ T7717] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 166.956809][ T7717] RIP: 0033:0x7f1c4f1ee69c [ 166.961216][ T7717] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 166.980875][ T7717] RSP: 002b:00007f1c4cfb2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.989284][ T7717] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f1c4f1ee69c [ 166.997248][ T7717] RDX: 000000000000000f RSI: 00007f1c4cfb21e0 RDI: 0000000000000003 [ 167.005212][ T7717] RBP: 00007f1c4cfb21d0 R08: 0000000000000000 R09: 0000000000000000 [ 167.013177][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.021148][ T7717] R13: 00007fff1d4d495f R14: 00007f1c4cfb2300 R15: 0000000000022000 [ 167.029115][ T7717] [ 167.032134][ T7715] CPU: 0 PID: 7715 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 167.040463][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.050578][ T7715] Call Trace: [ 167.053851][ T7715] [ 167.056792][ T7715] dump_stack_lvl+0xd6/0x122 [ 167.061454][ T7715] dump_stack+0x11/0x1b [ 167.065676][ T7715] should_fail+0x23c/0x250 [ 167.070176][ T7715] should_fail_usercopy+0x16/0x20 [ 167.075232][ T7715] _copy_from_user+0x1c/0xd0 [ 167.079827][ T7715] input_event_from_user+0x122/0x1d0 [ 167.080022][ T7721] FAULT_INJECTION: forcing a failure. [ 167.080022][ T7721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.085111][ T7715] evdev_write+0x282/0x400 [ 167.085199][ T7715] ? evdev_read+0x710/0x710 [ 167.085222][ T7715] vfs_write+0x2af/0x950 [ 167.085249][ T7715] ? __fdget_pos+0x3a/0xb0 [ 167.115796][ T7715] ? __tsan_read4+0x11e/0x180 [ 167.120479][ T7715] ksys_write+0xd9/0x190 [ 167.124779][ T7715] __x64_sys_write+0x3e/0x50 [ 167.129373][ T7715] do_syscall_64+0x44/0xd0 [ 167.133818][ T7715] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 167.139786][ T7715] RIP: 0033:0x7f0fdb27eae9 [ 167.144195][ T7715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 167.163807][ T7715] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.172375][ T7715] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 167.180343][ T7715] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 06:54:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:30 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 1) [ 167.188308][ T7715] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 167.196382][ T7715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.204347][ T7715] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 167.212315][ T7715] [ 167.215336][ T7721] CPU: 1 PID: 7721 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 167.223668][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.233738][ T7721] Call Trace: [ 167.237007][ T7721] [ 167.239986][ T7721] dump_stack_lvl+0xd6/0x122 [ 167.244613][ T7721] dump_stack+0x11/0x1b [ 167.248786][ T7721] should_fail+0x23c/0x250 [ 167.253206][ T7721] should_fail_usercopy+0x16/0x20 [ 167.258301][ T7721] _copy_from_user+0x1c/0xd0 [ 167.262912][ T7721] input_event_from_user+0x122/0x1d0 [ 167.268204][ T7721] evdev_write+0x282/0x400 [ 167.272669][ T7721] ? evdev_read+0x710/0x710 [ 167.277160][ T7721] vfs_write+0x2af/0x950 [ 167.281421][ T7721] ? __fget_light+0x219/0x260 [ 167.286146][ T7721] ksys_write+0xd9/0x190 [ 167.290371][ T7721] __x64_sys_write+0x3e/0x50 [ 167.294960][ T7721] do_syscall_64+0x44/0xd0 [ 167.299426][ T7721] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 167.305346][ T7721] RIP: 0033:0x7f6cf5891ae9 [ 167.309822][ T7721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 167.329422][ T7721] RSP: 002b:00007f6cf3608188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:54:30 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) 06:54:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 2) 06:54:30 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) [ 167.337819][ T7721] RAX: ffffffffffffffda RBX: 00007f6cf59a4f60 RCX: 00007f6cf5891ae9 [ 167.345827][ T7721] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 167.353819][ T7721] RBP: 00007f6cf36081d0 R08: 0000000000000000 R09: 0000000000000000 [ 167.361913][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.369860][ T7721] R13: 00007ffd307165cf R14: 00007f6cf3608300 R15: 0000000000022000 [ 167.377816][ T7721] 06:54:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:54:30 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x0) 06:54:30 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 2) 06:54:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 167.510929][ T7834] FAULT_INJECTION: forcing a failure. [ 167.510929][ T7834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.524175][ T7834] CPU: 0 PID: 7834 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 167.532500][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.542550][ T7834] Call Trace: [ 167.545885][ T7834] [ 167.548810][ T7834] dump_stack_lvl+0xd6/0x122 [ 167.553398][ T7834] dump_stack+0x11/0x1b 06:54:31 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, 0x0, 0x0) [ 167.557548][ T7834] should_fail+0x23c/0x250 [ 167.561984][ T7834] should_fail_usercopy+0x16/0x20 [ 167.567055][ T7834] _copy_from_user+0x1c/0xd0 [ 167.571642][ T7834] input_event_from_user+0x122/0x1d0 [ 167.576951][ T7834] evdev_write+0x282/0x400 [ 167.581453][ T7834] ? evdev_read+0x710/0x710 [ 167.586072][ T7834] vfs_write+0x2af/0x950 [ 167.590327][ T7834] ? __fget_light+0x219/0x260 [ 167.595079][ T7834] ksys_write+0xd9/0x190 [ 167.599386][ T7834] __x64_sys_write+0x3e/0x50 [ 167.604012][ T7834] do_syscall_64+0x44/0xd0 [ 167.604650][ T7839] FAULT_INJECTION: forcing a failure. [ 167.604650][ T7839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.608485][ T7834] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 167.608511][ T7834] RIP: 0033:0x7f0fdb27eae9 [ 167.608528][ T7834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 167.651438][ T7834] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.659849][ T7834] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 167.667856][ T7834] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 167.675822][ T7834] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 167.683790][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.691766][ T7834] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 167.699751][ T7834] [ 167.702764][ T7839] CPU: 1 PID: 7839 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 167.711169][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.721221][ T7839] Call Trace: [ 167.724499][ T7839] [ 167.727482][ T7839] dump_stack_lvl+0xd6/0x122 [ 167.732080][ T7839] dump_stack+0x11/0x1b [ 167.736237][ T7839] should_fail+0x23c/0x250 [ 167.740667][ T7839] should_fail_usercopy+0x16/0x20 [ 167.745762][ T7839] _copy_from_user+0x1c/0xd0 [ 167.750397][ T7839] input_event_from_user+0x122/0x1d0 [ 167.755690][ T7839] ? input_inject_event+0xcd/0xe0 06:54:31 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0xf, 0x0) 06:54:31 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2) [ 167.760722][ T7839] evdev_write+0x282/0x400 [ 167.765214][ T7839] ? evdev_read+0x710/0x710 [ 167.769769][ T7839] vfs_write+0x2af/0x950 [ 167.774184][ T7839] ? __fget_light+0x219/0x260 [ 167.778841][ T7839] ksys_write+0xd9/0x190 [ 167.783065][ T7839] __x64_sys_write+0x3e/0x50 [ 167.787705][ T7839] do_syscall_64+0x44/0xd0 [ 167.792210][ T7839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 167.798121][ T7839] RIP: 0033:0x7f6cf5891ae9 [ 167.802601][ T7839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 167.822299][ T7839] RSP: 002b:00007f6cf3608188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.830689][ T7839] RAX: ffffffffffffffda RBX: 00007f6cf59a4f60 RCX: 00007f6cf5891ae9 [ 167.838662][ T7839] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 167.846689][ T7839] RBP: 00007f6cf36081d0 R08: 0000000000000000 R09: 0000000000000000 [ 167.854676][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:54:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x18) 06:54:31 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, 0x0, 0x0) 06:54:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 3) [ 167.862633][ T7839] R13: 00007ffd307165cf R14: 00007f6cf3608300 R15: 0000000000022000 [ 167.870680][ T7839] [ 167.936726][ T7854] FAULT_INJECTION: forcing a failure. [ 167.936726][ T7854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.950429][ T7854] CPU: 1 PID: 7854 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 167.958831][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.968883][ T7854] Call Trace: [ 167.972152][ T7854] [ 167.975073][ T7854] dump_stack_lvl+0xd6/0x122 [ 167.979660][ T7854] dump_stack+0x11/0x1b [ 167.983807][ T7854] should_fail+0x23c/0x250 [ 167.988265][ T7854] should_fail_usercopy+0x16/0x20 [ 167.993375][ T7854] _copy_from_user+0x1c/0xd0 [ 167.997967][ T7854] input_event_from_user+0x122/0x1d0 [ 168.003277][ T7854] ? input_inject_event+0xcd/0xe0 [ 168.008332][ T7854] evdev_write+0x282/0x400 [ 168.012731][ T7854] ? evdev_read+0x710/0x710 [ 168.017227][ T7854] vfs_write+0x2af/0x950 [ 168.021618][ T7854] ? __fget_light+0x219/0x260 [ 168.026301][ T7854] ksys_write+0xd9/0x190 [ 168.030546][ T7854] __x64_sys_write+0x3e/0x50 [ 168.035198][ T7854] do_syscall_64+0x44/0xd0 [ 168.039616][ T7854] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 168.045541][ T7854] RIP: 0033:0x7f0fdb27eae9 [ 168.049935][ T7854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 168.069611][ T7854] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.078045][ T7854] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:31 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x3) 06:54:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35002) [ 168.086029][ T7854] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 168.094000][ T7854] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 168.101968][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.109999][ T7854] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 168.118016][ T7854] 06:54:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:31 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 3) 06:54:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 4) [ 168.152895][ T24] audit: type=1400 audit(1636700071.581:192): avc: denied { ioctl } for pid=7856 comm="syz-executor.3" path="/dev/input/event2" dev="devtmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 06:54:31 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, 0x0, 0x0) 06:54:31 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x4) [ 168.241345][ T7863] FAULT_INJECTION: forcing a failure. [ 168.241345][ T7863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.254769][ T7863] CPU: 1 PID: 7863 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 168.263135][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.263147][ T7863] Call Trace: [ 168.263152][ T7863] [ 168.263157][ T7863] dump_stack_lvl+0xd6/0x122 [ 168.263177][ T7863] dump_stack+0x11/0x1b [ 168.263242][ T7863] should_fail+0x23c/0x250 [ 168.263285][ T7863] should_fail_usercopy+0x16/0x20 [ 168.263308][ T7863] _copy_from_user+0x1c/0xd0 [ 168.263330][ T7863] input_event_from_user+0x122/0x1d0 [ 168.263418][ T7863] ? input_inject_event+0xcd/0xe0 [ 168.263438][ T7863] evdev_write+0x282/0x400 [ 168.263466][ T7863] ? evdev_read+0x710/0x710 [ 168.263487][ T7863] vfs_write+0x2af/0x950 [ 168.263507][ T7863] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 168.263562][ T7863] ? ksys_write+0x6d/0x190 [ 168.263585][ T7863] ksys_write+0xd9/0x190 [ 168.263692][ T7863] __x64_sys_write+0x3e/0x50 [ 168.345311][ T7863] do_syscall_64+0x44/0xd0 [ 168.349788][ T7863] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 168.351349][ T7865] FAULT_INJECTION: forcing a failure. [ 168.351349][ T7865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.355689][ T7863] RIP: 0033:0x7f0fdb27eae9 [ 168.355775][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 168.355800][ T7863] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.401250][ T7863] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 168.409217][ T7863] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 168.417181][ T7863] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 168.425192][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.433227][ T7863] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 168.441281][ T7863] [ 168.444302][ T7865] CPU: 0 PID: 7865 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0 [ 168.452752][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.462795][ T7865] Call Trace: [ 168.466178][ T7865] [ 168.469139][ T7865] dump_stack_lvl+0xd6/0x122 [ 168.474015][ T7865] dump_stack+0x11/0x1b [ 168.478231][ T7865] should_fail+0x23c/0x250 [ 168.482652][ T7865] should_fail_usercopy+0x16/0x20 [ 168.487656][ T7865] _copy_from_user+0x1c/0xd0 [ 168.492226][ T7865] input_event_from_user+0x122/0x1d0 [ 168.497494][ T7865] ? input_inject_event+0xcd/0xe0 [ 168.502516][ T7865] evdev_write+0x282/0x400 [ 168.506921][ T7865] ? evdev_read+0x710/0x710 [ 168.511405][ T7865] vfs_write+0x2af/0x950 [ 168.515675][ T7865] ? __fget_light+0x219/0x260 [ 168.520407][ T7865] ksys_write+0xd9/0x190 [ 168.524654][ T7865] __x64_sys_write+0x3e/0x50 [ 168.529469][ T7865] do_syscall_64+0x44/0xd0 [ 168.533873][ T7865] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 168.539760][ T7865] RIP: 0033:0x7f6cf5891ae9 [ 168.544149][ T7865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 168.563772][ T7865] RSP: 002b:00007f6cf3608188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.572272][ T7865] RAX: ffffffffffffffda RBX: 00007f6cf59a4f60 RCX: 00007f6cf5891ae9 [ 168.580306][ T7865] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 168.588277][ T7865] RBP: 00007f6cf36081d0 R08: 0000000000000000 R09: 0000000000000000 [ 168.596241][ T7865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.604209][ T7865] R13: 00007ffd307165cf R14: 00007f6cf3608300 R15: 0000000000022000 [ 168.612272][ T7865] 06:54:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 5) 06:54:32 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040), 0x0) 06:54:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35003) 06:54:32 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040), 0x0) 06:54:32 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 4) [ 168.782240][ T7881] FAULT_INJECTION: forcing a failure. [ 168.782240][ T7881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.795563][ T7881] CPU: 1 PID: 7881 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 168.803891][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.814159][ T7881] Call Trace: [ 168.817427][ T7881] [ 168.820346][ T7881] dump_stack_lvl+0xd6/0x122 [ 168.824975][ T7881] dump_stack+0x11/0x1b 06:54:32 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040), 0x0) [ 168.829147][ T7881] should_fail+0x23c/0x250 [ 168.833623][ T7881] should_fail_usercopy+0x16/0x20 [ 168.838707][ T7881] _copy_from_user+0x1c/0xd0 [ 168.843318][ T7881] input_event_from_user+0x122/0x1d0 [ 168.848603][ T7881] ? input_inject_event+0xcd/0xe0 [ 168.853628][ T7881] evdev_write+0x282/0x400 [ 168.858104][ T7881] ? evdev_read+0x710/0x710 [ 168.862606][ T7881] vfs_write+0x2af/0x950 [ 168.866908][ T7881] ? __fget_light+0x219/0x260 [ 168.871592][ T7881] ksys_write+0xd9/0x190 [ 168.875888][ T7881] __x64_sys_write+0x3e/0x50 06:54:32 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x18) [ 168.880483][ T7881] do_syscall_64+0x44/0xd0 [ 168.884989][ T7881] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 168.890884][ T7881] RIP: 0033:0x7f0fdb27eae9 [ 168.895295][ T7881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 168.914903][ T7881] RSP: 002b:00007f0fd8fd4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 168.923312][ T7881] RAX: ffffffffffffffda RBX: 00007f0fdb392020 RCX: 00007f0fdb27eae9 [ 168.931334][ T7881] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 168.939297][ T7881] RBP: 00007f0fd8fd41d0 R08: 0000000000000000 R09: 0000000000000000 [ 168.947243][ T7881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.955191][ T7881] R13: 00007fff6ab1e8bf R14: 00007f0fd8fd4300 R15: 0000000000022000 [ 168.963205][ T7881] 06:54:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 6) [ 169.054435][ T7892] FAULT_INJECTION: forcing a failure. [ 169.054435][ T7892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.067629][ T7892] CPU: 0 PID: 7892 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 169.075955][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.086048][ T7892] Call Trace: [ 169.089317][ T7892] [ 169.092333][ T7892] dump_stack_lvl+0xd6/0x122 [ 169.097009][ T7892] dump_stack+0x11/0x1b [ 169.101164][ T7892] should_fail+0x23c/0x250 [ 169.105610][ T7892] should_fail_usercopy+0x16/0x20 [ 169.110645][ T7892] _copy_from_user+0x1c/0xd0 [ 169.115237][ T7892] input_event_from_user+0x122/0x1d0 [ 169.120607][ T7892] ? input_inject_event+0xcd/0xe0 [ 169.125697][ T7892] evdev_write+0x282/0x400 [ 169.130136][ T7892] ? evdev_read+0x710/0x710 [ 169.134645][ T7892] vfs_write+0x2af/0x950 [ 169.138956][ T7892] ? __fget_light+0x219/0x260 [ 169.143681][ T7892] ksys_write+0xd9/0x190 [ 169.148004][ T7892] __x64_sys_write+0x3e/0x50 06:54:32 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x300) 06:54:32 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:54:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35004) 06:54:32 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 1) [ 169.152637][ T7892] do_syscall_64+0x44/0xd0 [ 169.157148][ T7892] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 169.163046][ T7892] RIP: 0033:0x7f0fdb27eae9 [ 169.167551][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 169.182656][ T7899] FAULT_INJECTION: forcing a failure. [ 169.182656][ T7899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.187157][ T7892] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.187180][ T7892] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 169.187193][ T7892] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 169.224923][ T7892] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 169.224937][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.224948][ T7892] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 169.225036][ T7892] [ 169.225043][ T7899] CPU: 1 PID: 7899 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 169.225063][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.225074][ T7899] Call Trace: [ 169.225080][ T7899] [ 169.225084][ T7899] dump_stack_lvl+0xd6/0x122 [ 169.225109][ T7899] dump_stack+0x11/0x1b 06:54:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 169.225200][ T7899] should_fail+0x23c/0x250 [ 169.225225][ T7899] should_fail_usercopy+0x16/0x20 [ 169.225273][ T7899] _copy_from_user+0x1c/0xd0 [ 169.225299][ T7899] input_event_from_user+0x122/0x1d0 [ 169.225364][ T7899] evdev_write+0x282/0x400 [ 169.225390][ T7899] ? evdev_read+0x710/0x710 [ 169.225482][ T7899] vfs_write+0x2af/0x950 [ 169.225508][ T7899] ? __fget_light+0x219/0x260 [ 169.225533][ T7899] ksys_write+0xd9/0x190 [ 169.225576][ T7899] __x64_sys_write+0x3e/0x50 [ 169.225600][ T7899] do_syscall_64+0x44/0xd0 [ 169.225714][ T7899] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 169.225736][ T7899] RIP: 0033:0x7f8c55586ae9 [ 169.225783][ T7899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 169.225802][ T7899] RSP: 002b:00007f8c532fd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.225822][ T7899] RAX: ffffffffffffffda RBX: 00007f8c55699f60 RCX: 00007f8c55586ae9 [ 169.225897][ T7899] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000003 [ 169.225910][ T7899] RBP: 00007f8c532fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 169.225924][ T7899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.225938][ T7899] R13: 00007ffc4a85250f R14: 00007f8c532fd300 R15: 0000000000022000 06:54:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 7) [ 169.225954][ T7899] 06:54:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35005) 06:54:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffff81, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:32 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 2) 06:54:32 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x1800) 06:54:32 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x18) [ 169.594314][ T7909] FAULT_INJECTION: forcing a failure. [ 169.594314][ T7909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.607697][ T7909] CPU: 1 PID: 7909 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 169.616026][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.626098][ T7909] Call Trace: [ 169.629367][ T7909] [ 169.632307][ T7909] dump_stack_lvl+0xd6/0x122 [ 169.636899][ T7909] dump_stack+0x11/0x1b [ 169.641050][ T7909] should_fail+0x23c/0x250 [ 169.645473][ T7909] should_fail_usercopy+0x16/0x20 [ 169.650499][ T7909] _copy_from_user+0x1c/0xd0 [ 169.655096][ T7909] input_event_from_user+0x122/0x1d0 [ 169.660442][ T7909] ? input_inject_event+0x3e/0xe0 [ 169.665465][ T7909] evdev_write+0x282/0x400 [ 169.669884][ T7909] ? evdev_read+0x710/0x710 [ 169.674408][ T7909] vfs_write+0x2af/0x950 [ 169.678657][ T7909] ? __fget_light+0x219/0x260 [ 169.683355][ T7909] ? ksys_write+0x136/0x190 [ 169.687900][ T7909] ksys_write+0xd9/0x190 [ 169.692281][ T7909] __x64_sys_write+0x3e/0x50 [ 169.696868][ T7909] do_syscall_64+0x44/0xd0 [ 169.701287][ T7909] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 169.707193][ T7909] RIP: 0033:0x7f0fdb27eae9 [ 169.711599][ T7909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 169.731260][ T7909] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.739700][ T7909] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 169.747663][ T7909] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 169.755621][ T7909] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 169.763590][ T7909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.771626][ T7909] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 169.779648][ T7909] 06:54:33 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000) 06:54:33 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 8) 06:54:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35007) [ 169.877498][ T8022] FAULT_INJECTION: forcing a failure. [ 169.877498][ T8022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.891353][ T8022] CPU: 1 PID: 8022 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 169.899773][ T8022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.909822][ T8022] Call Trace: [ 169.913092][ T8022] [ 169.916031][ T8022] dump_stack_lvl+0xd6/0x122 [ 169.920638][ T8022] dump_stack+0x11/0x1b [ 169.924793][ T8022] should_fail+0x23c/0x250 [ 169.929260][ T8022] should_fail_usercopy+0x16/0x20 [ 169.934288][ T8022] _copy_from_user+0x1c/0xd0 [ 169.938883][ T8022] input_event_from_user+0x122/0x1d0 [ 169.944239][ T8022] ? input_inject_event+0xcd/0xe0 [ 169.949271][ T8022] evdev_write+0x282/0x400 [ 169.953690][ T8022] ? evdev_read+0x710/0x710 [ 169.958236][ T8022] vfs_write+0x2af/0x950 [ 169.962539][ T8022] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 169.968739][ T8022] ? ksys_write+0x5b/0x190 [ 169.973198][ T8022] ksys_write+0xd9/0x190 [ 169.977443][ T8022] __x64_sys_write+0x3e/0x50 [ 169.982101][ T8022] do_syscall_64+0x44/0xd0 [ 169.986587][ T8022] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 169.992490][ T8022] RIP: 0033:0x7f0fdb27eae9 [ 169.996897][ T8022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 170.016617][ T8022] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:54:33 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35002) 06:54:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 9) [ 170.025162][ T8022] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 170.033140][ T8022] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 170.041123][ T8022] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 170.041140][ T8022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.041153][ T8022] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 170.041169][ T8022] 06:54:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 170.099596][ T8031] FAULT_INJECTION: forcing a failure. [ 170.099596][ T8031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.112840][ T8031] CPU: 1 PID: 8031 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 170.121173][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.131224][ T8031] Call Trace: [ 170.134498][ T8031] [ 170.137428][ T8031] dump_stack_lvl+0xd6/0x122 [ 170.142022][ T8031] dump_stack+0x11/0x1b [ 170.146242][ T8031] should_fail+0x23c/0x250 [ 170.150665][ T8031] should_fail_usercopy+0x16/0x20 [ 170.155697][ T8031] _copy_from_user+0x1c/0xd0 [ 170.160301][ T8031] input_event_from_user+0x122/0x1d0 [ 170.165587][ T8031] ? input_inject_event+0xcd/0xe0 [ 170.170631][ T8031] evdev_write+0x282/0x400 [ 170.175049][ T8031] ? evdev_read+0x710/0x710 [ 170.179629][ T8031] vfs_write+0x2af/0x950 [ 170.183924][ T8031] ? __fget_light+0x219/0x260 [ 170.188623][ T8031] ksys_write+0xd9/0x190 [ 170.192881][ T8031] __x64_sys_write+0x3e/0x50 06:54:33 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x18) [ 170.197541][ T8031] do_syscall_64+0x44/0xd0 [ 170.202038][ T8031] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 170.207982][ T8031] RIP: 0033:0x7f0fdb27eae9 [ 170.212423][ T8031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 170.232033][ T8031] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.240473][ T8031] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 170.248439][ T8031] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 170.256403][ T8031] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 170.264369][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.272361][ T8031] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 170.280327][ T8031] [ 170.295693][ T24] audit: type=1400 audit(1636700073.711:193): avc: denied { rename } for pid=1421 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 170.318102][ T24] audit: type=1400 audit(1636700073.711:194): avc: denied { unlink } for pid=1421 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 06:54:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35008) [ 170.340453][ T24] audit: type=1400 audit(1636700073.711:195): avc: denied { create } for pid=1421 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 06:54:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 10) 06:54:33 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x3f00) 06:54:33 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35002) [ 170.455268][ T8144] FAULT_INJECTION: forcing a failure. [ 170.455268][ T8144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.468618][ T8144] CPU: 1 PID: 8144 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 170.477023][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.487123][ T8144] Call Trace: [ 170.490408][ T8144] [ 170.490712][ T24] audit: type=1400 audit(1636700073.891:196): avc: denied { append } for pid=8148 comm="syz-executor.3" name="event2" dev="devtmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 170.493348][ T8144] dump_stack_lvl+0xd6/0x122 [ 170.493373][ T8144] dump_stack+0x11/0x1b [ 170.525705][ T8144] should_fail+0x23c/0x250 [ 170.530147][ T8144] should_fail_usercopy+0x16/0x20 [ 170.535180][ T8144] _copy_from_user+0x1c/0xd0 [ 170.539863][ T8144] input_event_from_user+0x122/0x1d0 [ 170.545181][ T8144] ? input_inject_event+0xcd/0xe0 [ 170.550233][ T8144] evdev_write+0x282/0x400 [ 170.554658][ T8144] ? evdev_read+0x710/0x710 [ 170.559214][ T8144] vfs_write+0x2af/0x950 [ 170.563445][ T8144] ? __fget_light+0x219/0x260 [ 170.568181][ T8144] ksys_write+0xd9/0x190 [ 170.572459][ T8144] __x64_sys_write+0x3e/0x50 [ 170.577124][ T8144] do_syscall_64+0x44/0xd0 [ 170.581552][ T8144] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 170.587483][ T8144] RIP: 0033:0x7f0fdb27eae9 [ 170.591894][ T8144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 170.611577][ T8144] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.619979][ T8144] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 170.627948][ T8144] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 170.635955][ T8144] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 170.643918][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:54:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 11) 06:54:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x3500c) [ 170.651939][ T8144] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 170.659937][ T8144] 06:54:34 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35003) [ 170.706576][ T8153] FAULT_INJECTION: forcing a failure. [ 170.706576][ T8153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.720019][ T8153] CPU: 1 PID: 8153 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 170.728352][ T8153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.738429][ T8153] Call Trace: [ 170.741756][ T8153] [ 170.744769][ T8153] dump_stack_lvl+0xd6/0x122 [ 170.749531][ T8153] dump_stack+0x11/0x1b 06:54:34 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x4000) [ 170.753752][ T8153] should_fail+0x23c/0x250 [ 170.758169][ T8153] should_fail_usercopy+0x16/0x20 [ 170.763253][ T8153] _copy_from_user+0x1c/0xd0 [ 170.767854][ T8153] input_event_from_user+0x122/0x1d0 [ 170.773138][ T8153] ? input_inject_event+0xcd/0xe0 [ 170.778235][ T8153] evdev_write+0x282/0x400 [ 170.782670][ T8153] ? evdev_read+0x710/0x710 [ 170.787261][ T8153] vfs_write+0x2af/0x950 [ 170.791552][ T8153] ? __fget_light+0x219/0x260 [ 170.796319][ T8153] ksys_write+0xd9/0x190 [ 170.800580][ T8153] __x64_sys_write+0x3e/0x50 06:54:34 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35003) [ 170.805182][ T8153] do_syscall_64+0x44/0xd0 [ 170.809609][ T8153] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 170.815594][ T8153] RIP: 0033:0x7f0fdb27eae9 [ 170.820009][ T8153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 170.839724][ T8153] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.848138][ T8153] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 12) [ 170.856119][ T8153] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 170.864165][ T8153] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 170.872151][ T8153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.880133][ T8153] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 170.888144][ T8153] 06:54:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 170.960860][ T8280] FAULT_INJECTION: forcing a failure. [ 170.960860][ T8280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.974054][ T8280] CPU: 0 PID: 8280 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 170.982440][ T8280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.992494][ T8280] Call Trace: [ 170.995768][ T8280] [ 170.998691][ T8280] dump_stack_lvl+0xd6/0x122 [ 171.003374][ T8280] dump_stack+0x11/0x1b [ 171.007528][ T8280] should_fail+0x23c/0x250 [ 171.011946][ T8280] should_fail_usercopy+0x16/0x20 [ 171.017020][ T8280] _copy_from_user+0x1c/0xd0 [ 171.021657][ T8280] input_event_from_user+0x122/0x1d0 [ 171.026945][ T8280] ? input_inject_event+0x3e/0xe0 [ 171.032089][ T8280] evdev_write+0x282/0x400 [ 171.036508][ T8280] ? evdev_read+0x710/0x710 [ 171.041034][ T8280] vfs_write+0x2af/0x950 [ 171.045359][ T8280] ? __fget_light+0x219/0x260 [ 171.050140][ T8280] ksys_write+0xd9/0x190 [ 171.054386][ T8280] __x64_sys_write+0x3e/0x50 06:54:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35010) 06:54:34 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x200000) 06:54:34 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x1000000) [ 171.058987][ T8280] do_syscall_64+0x44/0xd0 [ 171.063486][ T8280] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 171.069382][ T8280] RIP: 0033:0x7f0fdb27eae9 [ 171.073798][ T8280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 171.093444][ T8280] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.101859][ T8280] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:34 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35004) 06:54:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 13) 06:54:34 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35004) [ 171.109831][ T8280] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 171.117799][ T8280] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 171.125816][ T8280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.133795][ T8280] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 171.141838][ T8280] 06:54:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35011) [ 171.274949][ T8382] FAULT_INJECTION: forcing a failure. [ 171.274949][ T8382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.288177][ T8382] CPU: 1 PID: 8382 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 171.296515][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.306574][ T8382] Call Trace: [ 171.309851][ T8382] [ 171.312806][ T8382] dump_stack_lvl+0xd6/0x122 [ 171.317393][ T8382] dump_stack+0x11/0x1b [ 171.321545][ T8382] should_fail+0x23c/0x250 [ 171.326024][ T8382] should_fail_usercopy+0x16/0x20 [ 171.331106][ T8382] _copy_from_user+0x1c/0xd0 [ 171.335727][ T8382] input_event_from_user+0x122/0x1d0 [ 171.341023][ T8382] ? input_inject_event+0xcd/0xe0 [ 171.346044][ T8382] evdev_write+0x282/0x400 [ 171.350464][ T8382] ? evdev_read+0x710/0x710 [ 171.354986][ T8382] vfs_write+0x2af/0x950 [ 171.359229][ T8382] ? __fget_light+0x219/0x260 [ 171.364003][ T8382] ksys_write+0xd9/0x190 [ 171.368304][ T8382] __x64_sys_write+0x3e/0x50 [ 171.372915][ T8382] do_syscall_64+0x44/0xd0 [ 171.377376][ T8382] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 171.383267][ T8382] RIP: 0033:0x7f0fdb27eae9 [ 171.387770][ T8382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 171.407385][ T8382] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.415843][ T8382] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:34 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2000000) 06:54:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 14) 06:54:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35012) 06:54:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 171.423813][ T8382] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 171.431777][ T8382] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 171.439741][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.447706][ T8382] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 171.455694][ T8382] 06:54:35 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x3000000) 06:54:35 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35005) [ 171.542778][ T8405] FAULT_INJECTION: forcing a failure. [ 171.542778][ T8405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.556106][ T8405] CPU: 1 PID: 8405 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 171.564493][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.574665][ T8405] Call Trace: [ 171.574673][ T8405] [ 171.574679][ T8405] dump_stack_lvl+0xd6/0x122 [ 171.574701][ T8405] dump_stack+0x11/0x1b 06:54:35 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35005) [ 171.574716][ T8405] should_fail+0x23c/0x250 [ 171.574743][ T8405] should_fail_usercopy+0x16/0x20 [ 171.574766][ T8405] _copy_from_user+0x1c/0xd0 [ 171.574791][ T8405] input_event_from_user+0x122/0x1d0 [ 171.574846][ T8405] ? input_inject_event+0xcd/0xe0 [ 171.574868][ T8405] evdev_write+0x282/0x400 [ 171.618466][ T8405] ? evdev_read+0x710/0x710 [ 171.618495][ T8405] vfs_write+0x2af/0x950 [ 171.618560][ T8405] ? __fget_light+0x219/0x260 [ 171.631924][ T8405] ksys_write+0xd9/0x190 [ 171.636256][ T8405] __x64_sys_write+0x3e/0x50 [ 171.640891][ T8405] do_syscall_64+0x44/0xd0 [ 171.645371][ T8405] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 171.651274][ T8405] RIP: 0033:0x7f0fdb27eae9 [ 171.655707][ T8405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 171.675447][ T8405] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.683876][ T8405] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 15) [ 171.691874][ T8405] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 171.699928][ T8405] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 171.707931][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.715898][ T8405] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 171.723908][ T8405] [ 171.774133][ T8505] FAULT_INJECTION: forcing a failure. [ 171.774133][ T8505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.787358][ T8505] CPU: 1 PID: 8505 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 171.795684][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.805763][ T8505] Call Trace: [ 171.809035][ T8505] [ 171.811961][ T8505] dump_stack_lvl+0xd6/0x122 [ 171.816598][ T8505] dump_stack+0x11/0x1b 06:54:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 16) [ 171.820770][ T8505] should_fail+0x23c/0x250 [ 171.825196][ T8505] should_fail_usercopy+0x16/0x20 [ 171.830221][ T8505] _copy_from_user+0x1c/0xd0 [ 171.834829][ T8505] input_event_from_user+0x122/0x1d0 [ 171.834865][ T8505] ? input_inject_event+0xcd/0xe0 [ 171.834887][ T8505] evdev_write+0x282/0x400 [ 171.834935][ T8505] ? evdev_read+0x710/0x710 [ 171.834958][ T8505] vfs_write+0x2af/0x950 06:54:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35014) [ 171.834984][ T8505] ? __fget_light+0x219/0x260 06:54:35 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35007) 06:54:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 17) 06:54:35 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x4000000) 06:54:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 171.835028][ T8505] ksys_write+0xd9/0x190 [ 171.835053][ T8505] __x64_sys_write+0x3e/0x50 [ 171.835078][ T8505] do_syscall_64+0x44/0xd0 [ 171.835158][ T8505] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 171.835246][ T8505] RIP: 0033:0x7f0fdb27eae9 [ 171.835261][ T8505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 171.835280][ T8505] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.835300][ T8505] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 171.835388][ T8505] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 171.835401][ T8505] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 171.835415][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.835438][ T8505] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 171.835454][ T8505] 06:54:35 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35007) [ 171.904388][ T8607] FAULT_INJECTION: forcing a failure. [ 171.904388][ T8607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.904491][ T8607] CPU: 0 PID: 8607 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 171.904515][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.904528][ T8607] Call Trace: [ 171.904535][ T8607] [ 171.904542][ T8607] dump_stack_lvl+0xd6/0x122 [ 171.904626][ T8607] dump_stack+0x11/0x1b [ 171.904643][ T8607] should_fail+0x23c/0x250 06:54:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35015) [ 171.904758][ T8607] should_fail_usercopy+0x16/0x20 [ 171.904783][ T8607] _copy_from_user+0x1c/0xd0 [ 171.904806][ T8607] input_event_from_user+0x122/0x1d0 [ 171.904829][ T8607] ? input_inject_event+0xcd/0xe0 [ 171.904893][ T8607] evdev_write+0x282/0x400 [ 171.904994][ T8607] ? evdev_read+0x710/0x710 [ 171.905083][ T8607] vfs_write+0x2af/0x950 [ 171.905107][ T8607] ? __fget_light+0x219/0x260 [ 171.905129][ T8607] ksys_write+0xd9/0x190 [ 171.905176][ T8607] __x64_sys_write+0x3e/0x50 [ 171.905201][ T8607] do_syscall_64+0x44/0xd0 [ 171.905229][ T8607] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 171.905249][ T8607] RIP: 0033:0x7f0fdb27eae9 [ 171.905344][ T8607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 171.905363][ T8607] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.905382][ T8607] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 171.905395][ T8607] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 171.905426][ T8607] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 171.905440][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.905509][ T8607] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 171.905525][ T8607] [ 171.987649][ T8611] FAULT_INJECTION: forcing a failure. [ 171.987649][ T8611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.264448][ T8611] CPU: 1 PID: 8611 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 172.272856][ T8611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.282907][ T8611] Call Trace: [ 172.286167][ T8611] [ 172.289106][ T8611] dump_stack_lvl+0xd6/0x122 [ 172.293677][ T8611] dump_stack+0x11/0x1b [ 172.297827][ T8611] should_fail+0x23c/0x250 [ 172.302225][ T8611] should_fail_usercopy+0x16/0x20 [ 172.307305][ T8611] _copy_from_user+0x1c/0xd0 [ 172.311995][ T8611] input_event_from_user+0x122/0x1d0 [ 172.317260][ T8611] ? input_inject_event+0xcd/0xe0 [ 172.322262][ T8611] evdev_write+0x282/0x400 [ 172.326745][ T8611] ? evdev_read+0x710/0x710 [ 172.331252][ T8611] vfs_write+0x2af/0x950 [ 172.335480][ T8611] ? __fget_light+0x219/0x260 [ 172.340192][ T8611] ksys_write+0xd9/0x190 [ 172.344416][ T8611] __x64_sys_write+0x3e/0x50 [ 172.349065][ T8611] do_syscall_64+0x44/0xd0 [ 172.353495][ T8611] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 172.359400][ T8611] RIP: 0033:0x7f0fdb27eae9 [ 172.363803][ T8611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 172.383480][ T8611] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.391995][ T8611] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 172.400041][ T8611] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 172.407992][ T8611] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 06:54:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 18) 06:54:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 172.415942][ T8611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.423906][ T8611] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 172.431871][ T8611] [ 172.465928][ T8629] FAULT_INJECTION: forcing a failure. [ 172.465928][ T8629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.479414][ T8629] CPU: 1 PID: 8629 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 172.487743][ T8629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.498138][ T8629] Call Trace: [ 172.501408][ T8629] [ 172.504326][ T8629] dump_stack_lvl+0xd6/0x122 [ 172.509001][ T8629] dump_stack+0x11/0x1b [ 172.513158][ T8629] should_fail+0x23c/0x250 [ 172.517579][ T8629] should_fail_usercopy+0x16/0x20 [ 172.522608][ T8629] _copy_from_user+0x1c/0xd0 [ 172.527232][ T8629] input_event_from_user+0x122/0x1d0 [ 172.532622][ T8629] ? input_inject_event+0xcd/0xe0 [ 172.532645][ T8629] evdev_write+0x282/0x400 [ 172.532693][ T8629] ? evdev_read+0x710/0x710 [ 172.546690][ T8629] vfs_write+0x2af/0x950 [ 172.551006][ T8629] ? __fget_light+0x219/0x260 [ 172.555685][ T8629] ksys_write+0xd9/0x190 [ 172.559942][ T8629] __x64_sys_write+0x3e/0x50 06:54:36 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x18000000) [ 172.564536][ T8629] do_syscall_64+0x44/0xd0 [ 172.569007][ T8629] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 172.574913][ T8629] RIP: 0033:0x7f0fdb27eae9 [ 172.579323][ T8629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 172.599030][ T8629] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.607468][ T8629] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:36 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3500c) 06:54:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35016) 06:54:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x882, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 172.615542][ T8629] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 172.623510][ T8629] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 172.631485][ T8629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.639453][ T8629] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 172.647431][ T8629] 06:54:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 19) 06:54:36 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x3f000000) 06:54:36 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35010) 06:54:36 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35008) 06:54:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x3501e) [ 172.805962][ T8846] FAULT_INJECTION: forcing a failure. [ 172.805962][ T8846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.819288][ T8846] CPU: 0 PID: 8846 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 172.827632][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.827647][ T8846] Call Trace: [ 172.827653][ T8846] [ 172.827660][ T8846] dump_stack_lvl+0xd6/0x122 [ 172.848547][ T8846] dump_stack+0x11/0x1b [ 172.852700][ T8846] should_fail+0x23c/0x250 [ 172.857136][ T8846] should_fail_usercopy+0x16/0x20 [ 172.862219][ T8846] _copy_from_user+0x1c/0xd0 [ 172.866837][ T8846] input_event_from_user+0x122/0x1d0 [ 172.872125][ T8846] ? input_inject_event+0xcd/0xe0 [ 172.877146][ T8846] evdev_write+0x282/0x400 [ 172.881569][ T8846] ? evdev_read+0x710/0x710 [ 172.886076][ T8846] vfs_write+0x2af/0x950 [ 172.890393][ T8846] ? __fget_light+0x219/0x260 [ 172.895113][ T8846] ksys_write+0xd9/0x190 [ 172.899460][ T8846] __x64_sys_write+0x3e/0x50 [ 172.904071][ T8846] do_syscall_64+0x44/0xd0 [ 172.908533][ T8846] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 172.914445][ T8846] RIP: 0033:0x7f0fdb27eae9 [ 172.918853][ T8846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 172.938537][ T8846] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.938561][ T8846] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 20) [ 172.954975][ T8846] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 172.962976][ T8846] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 172.970948][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.978899][ T8846] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 172.986926][ T8846] [ 173.019264][ T8851] FAULT_INJECTION: forcing a failure. [ 173.019264][ T8851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.032457][ T8851] CPU: 0 PID: 8851 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 173.032481][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.032492][ T8851] Call Trace: [ 173.054232][ T8851] [ 173.057161][ T8851] dump_stack_lvl+0xd6/0x122 [ 173.061759][ T8851] dump_stack+0x11/0x1b [ 173.065918][ T8851] should_fail+0x23c/0x250 [ 173.070365][ T8851] should_fail_usercopy+0x16/0x20 [ 173.075411][ T8851] _copy_from_user+0x1c/0xd0 [ 173.080009][ T8851] input_event_from_user+0x122/0x1d0 [ 173.085294][ T8851] ? input_inject_event+0xcd/0xe0 [ 173.090319][ T8851] evdev_write+0x282/0x400 [ 173.094736][ T8851] ? evdev_read+0x710/0x710 [ 173.099239][ T8851] vfs_write+0x2af/0x950 [ 173.103508][ T8851] ? __fget_light+0x219/0x260 [ 173.108182][ T8851] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 173.114073][ T8851] ksys_write+0xd9/0x190 06:54:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:36 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x40000000) 06:54:36 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35011) [ 173.118429][ T8851] __x64_sys_write+0x3e/0x50 [ 173.123021][ T8851] do_syscall_64+0x44/0xd0 [ 173.127458][ T8851] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 173.133370][ T8851] RIP: 0033:0x7f0fdb27eae9 [ 173.137784][ T8851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 173.157389][ T8851] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:54:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 21) 06:54:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35023) 06:54:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 173.165802][ T8851] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 173.173775][ T8851] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 173.173790][ T8851] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 173.173803][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.197897][ T8851] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 173.205886][ T8851] [ 173.284347][ T8962] FAULT_INJECTION: forcing a failure. [ 173.284347][ T8962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.297670][ T8962] CPU: 1 PID: 8962 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 173.305998][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.316075][ T8962] Call Trace: [ 173.319423][ T8962] [ 173.322355][ T8962] dump_stack_lvl+0xd6/0x122 [ 173.326949][ T8962] dump_stack+0x11/0x1b [ 173.331194][ T8962] should_fail+0x23c/0x250 [ 173.335671][ T8962] should_fail_usercopy+0x16/0x20 [ 173.340736][ T8962] _copy_from_user+0x1c/0xd0 [ 173.345334][ T8962] input_event_from_user+0x122/0x1d0 [ 173.350682][ T8962] ? input_inject_event+0xcd/0xe0 [ 173.355723][ T8962] evdev_write+0x282/0x400 [ 173.360228][ T8962] ? evdev_read+0x710/0x710 [ 173.364874][ T8962] vfs_write+0x2af/0x950 [ 173.369200][ T8962] ? __fget_light+0x219/0x260 [ 173.373902][ T8962] ksys_write+0xd9/0x190 [ 173.378148][ T8962] __x64_sys_write+0x3e/0x50 06:54:36 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35012) 06:54:36 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x3500c) 06:54:36 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0xf6ffffff) [ 173.382749][ T8962] do_syscall_64+0x44/0xd0 [ 173.387174][ T8962] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 173.393120][ T8962] RIP: 0033:0x7f0fdb27eae9 [ 173.393136][ T8962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 173.417222][ T8962] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.425673][ T8962] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 22) 06:54:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 173.433669][ T8962] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 173.441638][ T8962] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 173.449633][ T8962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.457734][ T8962] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 173.465717][ T8962] [ 173.575693][ T9070] FAULT_INJECTION: forcing a failure. [ 173.575693][ T9070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.588987][ T9070] CPU: 1 PID: 9070 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 173.597380][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.607505][ T9070] Call Trace: [ 173.610822][ T9070] [ 173.613749][ T9070] dump_stack_lvl+0xd6/0x122 [ 173.618337][ T9070] dump_stack+0x11/0x1b [ 173.622489][ T9070] should_fail+0x23c/0x250 [ 173.626907][ T9070] should_fail_usercopy+0x16/0x20 [ 173.631937][ T9070] _copy_from_user+0x1c/0xd0 [ 173.636530][ T9070] input_event_from_user+0x122/0x1d0 [ 173.641948][ T9070] ? input_inject_event+0xcd/0xe0 [ 173.646968][ T9070] evdev_write+0x282/0x400 [ 173.651388][ T9070] ? evdev_read+0x710/0x710 [ 173.655995][ T9070] vfs_write+0x2af/0x950 [ 173.660303][ T9070] ? __fget_light+0x219/0x260 [ 173.664975][ T9070] ksys_write+0xd9/0x190 [ 173.669327][ T9070] __x64_sys_write+0x3e/0x50 [ 173.673927][ T9070] do_syscall_64+0x44/0xd0 [ 173.678397][ T9070] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 173.684313][ T9070] RIP: 0033:0x7f0fdb27eae9 [ 173.688725][ T9070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 173.708454][ T9070] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.716864][ T9070] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x20035040) 06:54:36 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0xfeffffff) 06:54:37 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0xfffffff6) 06:54:37 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0xfffffffe) [ 173.724831][ T9070] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 173.732820][ T9070] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 173.740785][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.748754][ T9070] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 173.756724][ T9070] 06:54:37 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x1000000000000) 06:54:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 23) 06:54:38 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35014) 06:54:38 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35010) [ 174.994715][ T9090] FAULT_INJECTION: forcing a failure. [ 174.994715][ T9090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.008019][ T9090] CPU: 1 PID: 9090 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 175.016346][ T9090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.026394][ T9090] Call Trace: [ 175.029681][ T9090] [ 175.032616][ T9090] dump_stack_lvl+0xd6/0x122 [ 175.037287][ T9090] dump_stack+0x11/0x1b [ 175.041509][ T9090] should_fail+0x23c/0x250 [ 175.045921][ T9090] should_fail_usercopy+0x16/0x20 [ 175.051020][ T9090] _copy_from_user+0x1c/0xd0 [ 175.055684][ T9090] input_event_from_user+0x122/0x1d0 [ 175.060982][ T9090] ? input_inject_event+0xcd/0xe0 [ 175.066028][ T9090] evdev_write+0x282/0x400 [ 175.071062][ T9090] ? evdev_read+0x710/0x710 [ 175.075682][ T9090] vfs_write+0x2af/0x950 [ 175.079928][ T9090] ? __fget_light+0x219/0x260 [ 175.084605][ T9090] ksys_write+0xd9/0x190 [ 175.088943][ T9090] __x64_sys_write+0x3e/0x50 [ 175.093533][ T9090] do_syscall_64+0x44/0xd0 [ 175.098031][ T9090] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 175.104084][ T9090] RIP: 0033:0x7f0fdb27eae9 [ 175.108493][ T9090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 175.128120][ T9090] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.136530][ T9090] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 175.144497][ T9090] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 175.152462][ T9090] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 175.160424][ T9090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.168390][ T9090] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 175.176355][ T9090] [ 175.240600][ C0] sched: RT throttling activated 06:54:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:39 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35011) 06:54:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 24) 06:54:39 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x20000000000000) 06:54:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x7ffff000) [ 175.874508][ T9202] FAULT_INJECTION: forcing a failure. [ 175.874508][ T9202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.888313][ T9202] CPU: 0 PID: 9202 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 175.896669][ T9202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.906807][ T9202] Call Trace: [ 175.910078][ T9202] [ 175.913001][ T9202] dump_stack_lvl+0xd6/0x122 [ 175.917631][ T9202] dump_stack+0x11/0x1b [ 175.921782][ T9202] should_fail+0x23c/0x250 [ 175.926272][ T9202] should_fail_usercopy+0x16/0x20 [ 175.931406][ T9202] _copy_from_user+0x1c/0xd0 [ 175.936019][ T9202] input_event_from_user+0x122/0x1d0 [ 175.941426][ T9202] ? input_inject_event+0xcd/0xe0 [ 175.946447][ T9202] evdev_write+0x282/0x400 [ 175.950868][ T9202] ? evdev_read+0x710/0x710 [ 175.955383][ T9202] vfs_write+0x2af/0x950 [ 175.959670][ T9202] ? __fget_light+0x219/0x260 [ 175.964349][ T9202] ksys_write+0xd9/0x190 [ 175.968602][ T9202] __x64_sys_write+0x3e/0x50 [ 175.973271][ T9202] do_syscall_64+0x44/0xd0 [ 175.977705][ T9202] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 175.983597][ T9202] RIP: 0033:0x7f0fdb27eae9 [ 175.988005][ T9202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 176.007609][ T9202] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.016015][ T9202] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 176.023988][ T9202] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 176.031957][ T9202] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 176.039932][ T9202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.047898][ T9202] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 176.055862][ T9202] 06:54:40 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35015) 06:54:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 25) 06:54:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0xffffffffffffffff) 06:54:40 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35012) [ 176.807783][ T9213] FAULT_INJECTION: forcing a failure. [ 176.807783][ T9213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.821234][ T9213] CPU: 0 PID: 9213 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 176.829565][ T9213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.839618][ T9213] Call Trace: [ 176.842897][ T9213] [ 176.845824][ T9213] dump_stack_lvl+0xd6/0x122 [ 176.850413][ T9213] dump_stack+0x11/0x1b [ 176.854562][ T9213] should_fail+0x23c/0x250 [ 176.858992][ T9213] should_fail_usercopy+0x16/0x20 [ 176.864057][ T9213] _copy_from_user+0x1c/0xd0 [ 176.868647][ T9213] input_event_from_user+0x122/0x1d0 [ 176.873964][ T9213] ? input_inject_event+0xcd/0xe0 [ 176.879014][ T9213] evdev_write+0x282/0x400 [ 176.883433][ T9213] ? evdev_read+0x710/0x710 [ 176.887941][ T9213] vfs_write+0x2af/0x950 [ 176.892277][ T9213] ? __fget_light+0x219/0x260 [ 176.897002][ T9213] ksys_write+0xd9/0x190 [ 176.901296][ T9213] __x64_sys_write+0x3e/0x50 06:54:40 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x100000000000000) [ 176.905950][ T9213] do_syscall_64+0x44/0xd0 [ 176.910377][ T9213] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 176.916285][ T9213] RIP: 0033:0x7f0fdb27eae9 [ 176.920696][ T9213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 176.940372][ T9213] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.948885][ T9213] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 26) 06:54:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x236}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 176.956834][ T9213] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 176.964783][ T9213] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 176.972738][ T9213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.980687][ T9213] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 176.988644][ T9213] [ 177.081409][ T9227] FAULT_INJECTION: forcing a failure. [ 177.081409][ T9227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.094635][ T9227] CPU: 1 PID: 9227 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 177.102967][ T9227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.113018][ T9227] Call Trace: [ 177.116287][ T9227] [ 177.119206][ T9227] dump_stack_lvl+0xd6/0x122 [ 177.123791][ T9227] dump_stack+0x11/0x1b 06:54:40 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x200000000000000) 06:54:40 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35014) 06:54:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 177.127941][ T9227] should_fail+0x23c/0x250 [ 177.132360][ T9227] should_fail_usercopy+0x16/0x20 [ 177.137382][ T9227] _copy_from_user+0x1c/0xd0 [ 177.142018][ T9227] input_event_from_user+0x122/0x1d0 [ 177.147330][ T9227] ? input_inject_event+0xcd/0xe0 [ 177.152360][ T9227] evdev_write+0x282/0x400 [ 177.156780][ T9227] ? evdev_read+0x710/0x710 [ 177.156885][ T9227] vfs_write+0x2af/0x950 06:54:40 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35016) [ 177.156953][ T9227] ? __fget_light+0x219/0x260 [ 177.156978][ T9227] ksys_write+0xd9/0x190 [ 177.157002][ T9227] __x64_sys_write+0x3e/0x50 [ 177.157123][ T9227] do_syscall_64+0x44/0xd0 [ 177.157148][ T9227] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 177.157188][ T9227] RIP: 0033:0x7f0fdb27eae9 [ 177.157202][ T9227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 177.157219][ T9227] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.157240][ T9227] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 27) 06:54:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) sched_setattr(r2, &(0x7f0000000380)={0x38, 0x3, 0x89, 0xff, 0x20, 0x8, 0x3, 0x82b, 0x5097, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x13cc}, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 177.157254][ T9227] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 177.157267][ T9227] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 177.157395][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.157407][ T9227] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 177.157454][ T9227] 06:54:40 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35015) 06:54:40 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x300000000000000) [ 177.369848][ T9339] FAULT_INJECTION: forcing a failure. [ 177.369848][ T9339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.383606][ T9339] CPU: 0 PID: 9339 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 177.391944][ T9339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.401999][ T9339] Call Trace: [ 177.405279][ T9339] [ 177.408293][ T9339] dump_stack_lvl+0xd6/0x122 [ 177.412903][ T9339] dump_stack+0x11/0x1b 06:54:40 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x3501e) [ 177.417060][ T9339] should_fail+0x23c/0x250 [ 177.421560][ T9339] should_fail_usercopy+0x16/0x20 [ 177.426607][ T9339] _copy_from_user+0x1c/0xd0 [ 177.431267][ T9339] input_event_from_user+0x122/0x1d0 [ 177.436581][ T9339] ? input_inject_event+0xcd/0xe0 [ 177.441610][ T9339] evdev_write+0x282/0x400 [ 177.446202][ T9339] ? evdev_read+0x710/0x710 [ 177.446229][ T9339] vfs_write+0x2af/0x950 [ 177.446254][ T9339] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 177.461194][ T9339] ? __fget_light+0x219/0x260 [ 177.465909][ T9339] ksys_write+0xd9/0x190 [ 177.470231][ T9339] __x64_sys_write+0x3e/0x50 [ 177.474827][ T9339] do_syscall_64+0x44/0xd0 [ 177.479316][ T9339] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 177.485205][ T9339] RIP: 0033:0x7f0fdb27eae9 [ 177.489616][ T9339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 177.509240][ T9339] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.517659][ T9339] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 177.525660][ T9339] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 177.533624][ T9339] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 177.541690][ T9339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.549781][ T9339] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 177.557755][ T9339] 06:54:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 28) 06:54:41 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x20035040) 06:54:41 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x400000000000000) [ 177.645354][ T9552] FAULT_INJECTION: forcing a failure. [ 177.645354][ T9552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.658827][ T9552] CPU: 1 PID: 9552 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 177.667158][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.677320][ T9552] Call Trace: [ 177.677328][ T9552] [ 177.677336][ T9552] dump_stack_lvl+0xd6/0x122 [ 177.688085][ T9552] dump_stack+0x11/0x1b [ 177.692337][ T9552] should_fail+0x23c/0x250 [ 177.696827][ T9552] should_fail_usercopy+0x16/0x20 [ 177.701970][ T9552] _copy_from_user+0x1c/0xd0 [ 177.706565][ T9552] input_event_from_user+0x122/0x1d0 [ 177.711945][ T9552] ? input_inject_event+0xcd/0xe0 [ 177.717017][ T9552] evdev_write+0x282/0x400 [ 177.721436][ T9552] ? evdev_read+0x710/0x710 [ 177.726123][ T9552] vfs_write+0x2af/0x950 [ 177.730367][ T9552] ? __fget_light+0x219/0x260 [ 177.735047][ T9552] ksys_write+0xd9/0x190 [ 177.739301][ T9552] __x64_sys_write+0x3e/0x50 [ 177.743934][ T9552] do_syscall_64+0x44/0xd0 [ 177.748446][ T9552] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 177.754332][ T9552] RIP: 0033:0x7f0fdb27eae9 [ 177.758738][ T9552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 177.778345][ T9552] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.786753][ T9552] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x0, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:41 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35016) 06:54:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 29) [ 177.794908][ T9552] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 177.802877][ T9552] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 177.810843][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.818820][ T9552] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 177.826867][ T9552] [ 177.888561][ T9564] FAULT_INJECTION: forcing a failure. [ 177.888561][ T9564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.902310][ T9564] CPU: 0 PID: 9564 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 177.910638][ T9564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.920682][ T9564] Call Trace: [ 177.923951][ T9564] [ 177.926876][ T9564] dump_stack_lvl+0xd6/0x122 [ 177.931483][ T9564] dump_stack+0x11/0x1b [ 177.935634][ T9564] should_fail+0x23c/0x250 [ 177.940070][ T9564] should_fail_usercopy+0x16/0x20 [ 177.945092][ T9564] _copy_from_user+0x1c/0xd0 [ 177.949758][ T9564] input_event_from_user+0x122/0x1d0 [ 177.955065][ T9564] ? input_inject_event+0xcd/0xe0 [ 177.960084][ T9564] evdev_write+0x282/0x400 [ 177.964599][ T9564] ? evdev_read+0x710/0x710 [ 177.969135][ T9564] vfs_write+0x2af/0x950 [ 177.973484][ T9564] ? __fget_light+0x219/0x260 [ 177.978164][ T9564] ksys_write+0xd9/0x190 [ 177.982418][ T9564] __x64_sys_write+0x3e/0x50 [ 177.987049][ T9564] do_syscall_64+0x44/0xd0 [ 177.991493][ T9564] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 177.997458][ T9564] RIP: 0033:0x7f0fdb27eae9 [ 178.001938][ T9564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 178.021557][ T9564] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.030399][ T9564] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 30) [ 178.038360][ T9564] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 178.046325][ T9564] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 178.054354][ T9564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.062319][ T9564] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 178.070295][ T9564] [ 178.103417][ T9568] FAULT_INJECTION: forcing a failure. [ 178.103417][ T9568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.116604][ T9568] CPU: 0 PID: 9568 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 178.125030][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.135124][ T9568] Call Trace: [ 178.138450][ T9568] [ 178.141397][ T9568] dump_stack_lvl+0xd6/0x122 [ 178.145997][ T9568] dump_stack+0x11/0x1b [ 178.150145][ T9568] should_fail+0x23c/0x250 [ 178.154630][ T9568] should_fail_usercopy+0x16/0x20 [ 178.159766][ T9568] _copy_from_user+0x1c/0xd0 [ 178.164359][ T9568] input_event_from_user+0x122/0x1d0 [ 178.169653][ T9568] ? input_inject_event+0xcd/0xe0 [ 178.174675][ T9568] evdev_write+0x282/0x400 [ 178.179141][ T9568] ? evdev_read+0x710/0x710 [ 178.183695][ T9568] vfs_write+0x2af/0x950 [ 178.188087][ T9568] ? __fget_light+0x219/0x260 [ 178.192818][ T9568] ksys_write+0xd9/0x190 [ 178.198285][ T9568] __x64_sys_write+0x3e/0x50 [ 178.202888][ T9568] do_syscall_64+0x44/0xd0 [ 178.207308][ T9568] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 178.213198][ T9568] RIP: 0033:0x7f0fdb27eae9 [ 178.217606][ T9568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 178.237208][ T9568] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.245663][ T9568] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 31) [ 178.253625][ T9568] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 178.261602][ T9568] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 178.269562][ T9568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.277562][ T9568] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 178.285529][ T9568] [ 178.315840][ T9570] FAULT_INJECTION: forcing a failure. [ 178.315840][ T9570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.329035][ T9570] CPU: 0 PID: 9570 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 178.337392][ T9570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.347443][ T9570] Call Trace: [ 178.350717][ T9570] [ 178.353718][ T9570] dump_stack_lvl+0xd6/0x122 [ 178.358312][ T9570] dump_stack+0x11/0x1b [ 178.362475][ T9570] should_fail+0x23c/0x250 [ 178.366912][ T9570] should_fail_usercopy+0x16/0x20 [ 178.371945][ T9570] _copy_from_user+0x1c/0xd0 [ 178.376540][ T9570] input_event_from_user+0x122/0x1d0 [ 178.381828][ T9570] ? input_inject_event+0xcd/0xe0 [ 178.386861][ T9570] evdev_write+0x282/0x400 [ 178.391354][ T9570] ? evdev_read+0x710/0x710 [ 178.395935][ T9570] vfs_write+0x2af/0x950 [ 178.400182][ T9570] ? __fget_light+0x219/0x260 [ 178.404887][ T9570] ksys_write+0xd9/0x190 [ 178.409131][ T9570] __x64_sys_write+0x3e/0x50 [ 178.413719][ T9570] do_syscall_64+0x44/0xd0 [ 178.418187][ T9570] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 178.424179][ T9570] RIP: 0033:0x7f0fdb27eae9 [ 178.428586][ T9570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 178.448240][ T9570] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.456655][ T9570] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 178.464688][ T9570] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 178.472659][ T9570] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 178.480652][ T9570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.488636][ T9570] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 178.496619][ T9570] 06:54:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 32) 06:54:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x20, 0x0, 0x0, 0x7f, 0x5, 0xffffffff, 0xd99, 0x7fffffff}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = gettid() rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)=ANY=[@ANYBLOB="01f4ffff0000900094734e0e0080287edd04000d2ffabc9919af768e7de4384b09af8c1ae1ddc65a6ed9a5fbdaac3708c3dd712ce13dd948fe8f2cbe746e6f073662974a814384e4571c6b5bd26d87c816f8b5e6e14bc9ea09417217ccd993dd34c5286dd31ff4f7cf44bf0bea130d431e5faf8c85d9d5cd0785096051c09889ad4939cc7e9e684d3f605406502b99241e3b97dbd55b2146923436a53179580fc5ecb2450af4bb3d906e7db6811efcbcc0257dd173c8cf5c4660950ded7389db5d3fccd866c161770584ef21ce2a4aea0d956465964854bbc900a7ca91f7cabd88eae8ffe5bee6fdb38ebd4a", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x2, 0x6, 0x3, 0x3, 0x0, 0x6, 0x80, 0xf, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x7f, 0x81}, 0x1002, 0x7, 0x8, 0x8, 0x20, 0x7fffffff, 0x7, 0x0, 0x7, 0x0, 0xc4d}, r3, 0xb, r4, 0x1) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 178.687592][ T9672] FAULT_INJECTION: forcing a failure. [ 178.687592][ T9672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.700826][ T9672] CPU: 0 PID: 9672 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 178.709152][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.719291][ T9672] Call Trace: [ 178.722566][ T9672] [ 178.725498][ T9672] dump_stack_lvl+0xd6/0x122 [ 178.730128][ T9672] dump_stack+0x11/0x1b 06:54:42 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x1800000000000000) 06:54:42 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x7ffff000) 06:54:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x0, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 178.734287][ T9672] should_fail+0x23c/0x250 [ 178.738798][ T9672] should_fail_usercopy+0x16/0x20 [ 178.743836][ T9672] _copy_from_user+0x1c/0xd0 [ 178.748460][ T9672] input_event_from_user+0x122/0x1d0 [ 178.753805][ T9672] ? input_inject_event+0xcd/0xe0 [ 178.758906][ T9672] evdev_write+0x282/0x400 [ 178.763330][ T9672] ? evdev_read+0x710/0x710 [ 178.767909][ T9672] vfs_write+0x2af/0x950 [ 178.772156][ T9672] ? __fget_light+0x219/0x260 [ 178.776890][ T9672] ksys_write+0xd9/0x190 [ 178.781136][ T9672] __x64_sys_write+0x3e/0x50 [ 178.785729][ T9672] do_syscall_64+0x44/0xd0 [ 178.790149][ T9672] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 178.796050][ T9672] RIP: 0033:0x7f0fdb27eae9 [ 178.800458][ T9672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 178.820158][ T9672] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.828568][ T9672] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 33) [ 178.836536][ T9672] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 178.844517][ T9672] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 178.852563][ T9672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.860529][ T9672] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 178.868563][ T9672] [ 178.904327][ T9683] FAULT_INJECTION: forcing a failure. [ 178.904327][ T9683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.917551][ T9683] CPU: 0 PID: 9683 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 178.925879][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.936019][ T9683] Call Trace: [ 178.939290][ T9683] [ 178.942258][ T9683] dump_stack_lvl+0xd6/0x122 [ 178.946928][ T9683] dump_stack+0x11/0x1b [ 178.951173][ T9683] should_fail+0x23c/0x250 [ 178.955595][ T9683] should_fail_usercopy+0x16/0x20 [ 178.960620][ T9683] _copy_from_user+0x1c/0xd0 [ 178.965309][ T9683] input_event_from_user+0x122/0x1d0 [ 178.970666][ T9683] ? input_inject_event+0xcd/0xe0 [ 178.975695][ T9683] evdev_write+0x282/0x400 [ 178.980183][ T9683] ? evdev_read+0x710/0x710 [ 178.984693][ T9683] vfs_write+0x2af/0x950 [ 178.988975][ T9683] ? __fget_light+0x219/0x260 [ 178.993688][ T9683] ksys_write+0xd9/0x190 [ 178.997933][ T9683] __x64_sys_write+0x3e/0x50 [ 179.002534][ T9683] do_syscall_64+0x44/0xd0 [ 179.006983][ T9683] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 179.013049][ T9683] RIP: 0033:0x7f0fdb27eae9 [ 179.017524][ T9683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 179.037191][ T9683] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.045836][ T9683] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 34) [ 179.054060][ T9683] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 179.062105][ T9683] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 179.070161][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.078175][ T9683] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 179.086159][ T9683] [ 179.129345][ T9685] FAULT_INJECTION: forcing a failure. [ 179.129345][ T9685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.142655][ T9685] CPU: 1 PID: 9685 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 179.150982][ T9685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.161057][ T9685] Call Trace: [ 179.164320][ T9685] [ 179.167357][ T9685] dump_stack_lvl+0xd6/0x122 [ 179.171946][ T9685] dump_stack+0x11/0x1b [ 179.176093][ T9685] should_fail+0x23c/0x250 [ 179.180575][ T9685] should_fail_usercopy+0x16/0x20 [ 179.185664][ T9685] _copy_from_user+0x1c/0xd0 [ 179.190261][ T9685] input_event_from_user+0x122/0x1d0 [ 179.195624][ T9685] evdev_write+0x282/0x400 [ 179.200105][ T9685] ? evdev_read+0x710/0x710 [ 179.204661][ T9685] vfs_write+0x2af/0x950 [ 179.208909][ T9685] ? __fget_light+0x219/0x260 [ 179.213584][ T9685] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 179.219390][ T9685] ksys_write+0xd9/0x190 [ 179.223638][ T9685] __x64_sys_write+0x3e/0x50 [ 179.228232][ T9685] do_syscall_64+0x44/0xd0 [ 179.232649][ T9685] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 179.238543][ T9685] RIP: 0033:0x7f0fdb27eae9 [ 179.242959][ T9685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 179.262562][ T9685] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.270965][ T9685] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 35) [ 179.278933][ T9685] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 179.286927][ T9685] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 179.294899][ T9685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.302860][ T9685] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 179.311264][ T9685] [ 179.344310][ T9687] FAULT_INJECTION: forcing a failure. [ 179.344310][ T9687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.357530][ T9687] CPU: 0 PID: 9687 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 179.365922][ T9687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.375966][ T9687] Call Trace: [ 179.379238][ T9687] [ 179.382201][ T9687] dump_stack_lvl+0xd6/0x122 [ 179.386797][ T9687] dump_stack+0x11/0x1b [ 179.390950][ T9687] should_fail+0x23c/0x250 [ 179.395378][ T9687] should_fail_usercopy+0x16/0x20 [ 179.400417][ T9687] _copy_from_user+0x1c/0xd0 [ 179.405067][ T9687] input_event_from_user+0x122/0x1d0 [ 179.410399][ T9687] ? input_inject_event+0xcd/0xe0 [ 179.415450][ T9687] evdev_write+0x282/0x400 [ 179.419872][ T9687] ? evdev_read+0x710/0x710 [ 179.424389][ T9687] vfs_write+0x2af/0x950 [ 179.428641][ T9687] ? __fget_light+0x219/0x260 [ 179.433488][ T9687] ksys_write+0xd9/0x190 [ 179.437772][ T9687] __x64_sys_write+0x3e/0x50 [ 179.442381][ T9687] do_syscall_64+0x44/0xd0 [ 179.446805][ T9687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 179.452749][ T9687] RIP: 0033:0x7f0fdb27eae9 [ 179.457159][ T9687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 179.476804][ T9687] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.485290][ T9687] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 179.493259][ T9687] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 179.501225][ T9687] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 179.509193][ T9687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.517241][ T9687] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 179.525230][ T9687] 06:54:43 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x3501e) 06:54:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 36) 06:54:43 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x3f00000000000000) 06:54:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x15, 0x47, &(0x7f0000000180)="5cce9510817beb8fb14a9f541f311d0a4c7ee95e92b6290d845093205d6e4654de9e4711aef05ea2eb8e58b843578feebc3eb2c8a3f18b93ca10c583c9900b37020b7edc90414d"}) write$evdev(r3, &(0x7f00000002c0)=[{{r4, r5/1000+60000}, 0x14, 0x799b, 0x7364}, {{0x77359400}, 0x1, 0x9, 0xfffd}, {{}, 0x0, 0x2, 0x8}, {{0x0, 0xea60}, 0x14, 0x0, 0x27e}, {{0x77359400}, 0x2, 0x4, 0x96}, {{r6, r7/1000+60000}, 0x4, 0x5}], 0x90) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:54:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x0, 0x1, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 179.772742][ T9795] FAULT_INJECTION: forcing a failure. [ 179.772742][ T9795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.785986][ T9795] CPU: 1 PID: 9795 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 179.794388][ T9795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.804438][ T9795] Call Trace: [ 179.807710][ T9795] [ 179.810634][ T9795] dump_stack_lvl+0xd6/0x122 [ 179.815223][ T9795] dump_stack+0x11/0x1b 06:54:43 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xffffffffffffffff) [ 179.819440][ T9795] should_fail+0x23c/0x250 [ 179.823923][ T9795] should_fail_usercopy+0x16/0x20 [ 179.828948][ T9795] _copy_from_user+0x1c/0xd0 [ 179.833541][ T9795] input_event_from_user+0x122/0x1d0 [ 179.838911][ T9795] ? input_inject_event+0xcd/0xe0 [ 179.838936][ T9795] evdev_write+0x282/0x400 [ 179.848372][ T9795] ? evdev_read+0x710/0x710 [ 179.852938][ T9795] vfs_write+0x2af/0x950 [ 179.857220][ T9795] ? __fget_light+0x219/0x260 [ 179.861905][ T9795] ksys_write+0xd9/0x190 [ 179.866189][ T9795] __x64_sys_write+0x3e/0x50 [ 179.870873][ T9795] do_syscall_64+0x44/0xd0 [ 179.875330][ T9795] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 179.881225][ T9795] RIP: 0033:0x7f0fdb27eae9 [ 179.885803][ T9795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 179.905466][ T9795] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.913879][ T9795] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 37) [ 179.921870][ T9795] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 179.929841][ T9795] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 179.937813][ T9795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.937833][ T9795] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 179.937852][ T9795] 06:54:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:43 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x4000000000000000) 06:54:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) fsetxattr$security_ima(r2, &(0x7f0000000000), &(0x7f0000000080)=@ng={0x4, 0x7, "9c1b741e257790d9142066e155"}, 0xf, 0x2) [ 179.988910][ T9802] FAULT_INJECTION: forcing a failure. [ 179.988910][ T9802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.002153][ T9802] CPU: 0 PID: 9802 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 180.010484][ T9802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.010540][ T9802] Call Trace: [ 180.010599][ T9802] [ 180.010613][ T9802] dump_stack_lvl+0xd6/0x122 [ 180.010638][ T9802] dump_stack+0x11/0x1b [ 180.010656][ T9802] should_fail+0x23c/0x250 [ 180.010681][ T9802] should_fail_usercopy+0x16/0x20 [ 180.010704][ T9802] _copy_from_user+0x1c/0xd0 [ 180.010796][ T9802] input_event_from_user+0x122/0x1d0 [ 180.010821][ T9802] ? input_inject_event+0xcd/0xe0 [ 180.010843][ T9802] evdev_write+0x282/0x400 06:54:43 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x4, 0xfffffffffffffff9}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 180.010933][ T9802] ? evdev_read+0x710/0x710 [ 180.010971][ T9802] vfs_write+0x2af/0x950 [ 180.011073][ T9802] ? __fget_light+0x219/0x260 [ 180.011096][ T9802] ksys_write+0xd9/0x190 [ 180.011121][ T9802] __x64_sys_write+0x3e/0x50 [ 180.011145][ T9802] do_syscall_64+0x44/0xd0 [ 180.011244][ T9802] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 180.011266][ T9802] RIP: 0033:0x7f0fdb27eae9 [ 180.011283][ T9802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 180.011358][ T9802] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.011376][ T9802] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 180.011411][ T9802] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 180.011423][ T9802] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 06:54:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 38) [ 180.011437][ T9802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.011487][ T9802] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 180.011502][ T9802] [ 180.285302][ T9914] FAULT_INJECTION: forcing a failure. [ 180.285302][ T9914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.299016][ T9914] CPU: 0 PID: 9914 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 180.307467][ T9914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.317524][ T9914] Call Trace: [ 180.320798][ T9914] [ 180.323723][ T9914] dump_stack_lvl+0xd6/0x122 [ 180.328323][ T9914] dump_stack+0x11/0x1b [ 180.332475][ T9914] should_fail+0x23c/0x250 [ 180.336939][ T9914] should_fail_usercopy+0x16/0x20 [ 180.341973][ T9914] _copy_from_user+0x1c/0xd0 [ 180.346567][ T9914] input_event_from_user+0x122/0x1d0 [ 180.351962][ T9914] ? input_inject_event+0xcd/0xe0 [ 180.356987][ T9914] evdev_write+0x282/0x400 [ 180.361409][ T9914] ? evdev_read+0x710/0x710 [ 180.365933][ T9914] vfs_write+0x2af/0x950 [ 180.370272][ T9914] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 180.376500][ T9914] ? ksys_write+0x6d/0x190 [ 180.380922][ T9914] ksys_write+0xd9/0x190 06:54:43 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35023) 06:54:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:43 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0xf6ffffff00000000) 06:54:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendto$inet(r2, &(0x7f0000000180)="734dceb9e8866640f5eb61d6a6319f1aaba61f816acecdc9a073a0126a80af5508b8be7665f81f19088dbf8eeaec19fb1042b74c7d0cfb3facb53a12fe71f43854605030e1f3e652c84f3e4edf44c31f7d8ba1c608ea3bc0e20e0755b56073b0696665d35e82e18d811759cf22ffe2be61673d31010b857ee13ca891f11507a2e48f94ca53aa0bef2f38e88050c0f338852491ec0b185658fc370725b66c31daf22c73d934a028741e06b37f6274e9b3ea597ebc331b0af1ee0288f65980cab4b170ead39076497d0c4afc97d49df7ed9b4d6cdea12ae1b4287cd016e2a0a71b58f3c97489ca", 0xe6, 0xc004, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='()\x00') recvmmsg$unix(r2, &(0x7f0000000100)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/248, 0xf8}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="efb0980000000023fffffd000000000100000001", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x88}}], 0x1, 0x0, &(0x7f0000000340)={0x77359400}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x9) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:43 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 180.385161][ T9914] __x64_sys_write+0x3e/0x50 [ 180.389759][ T9914] do_syscall_64+0x44/0xd0 [ 180.394221][ T9914] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 180.400114][ T9914] RIP: 0033:0x7f0fdb27eae9 [ 180.404563][ T9914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 180.424243][ T9914] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.432671][ T9914] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 180.440674][ T9914] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 180.448666][ T9914] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 180.456632][ T9914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.464597][ T9914] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 06:54:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 39) 06:54:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 180.472682][ T9914] 06:54:44 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0xfeffffff00000000) [ 180.566273][ T9997] FAULT_INJECTION: forcing a failure. [ 180.566273][ T9997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.579558][ T9997] CPU: 1 PID: 9997 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 180.587889][ T9997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.597945][ T9997] Call Trace: [ 180.601228][ T9997] [ 180.604160][ T9997] dump_stack_lvl+0xd6/0x122 [ 180.608765][ T9997] dump_stack+0x11/0x1b 06:54:44 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x20035040) [ 180.612976][ T9997] should_fail+0x23c/0x250 [ 180.617486][ T9997] should_fail_usercopy+0x16/0x20 [ 180.622564][ T9997] _copy_from_user+0x1c/0xd0 [ 180.627274][ T9997] input_event_from_user+0x122/0x1d0 [ 180.632563][ T9997] ? input_inject_event+0xcd/0xe0 [ 180.637587][ T9997] evdev_write+0x282/0x400 [ 180.642005][ T9997] ? evdev_read+0x710/0x710 [ 180.646542][ T9997] vfs_write+0x2af/0x950 [ 180.650790][ T9997] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 180.657022][ T9997] ? ksys_write+0x41/0x190 [ 180.661530][ T9997] ksys_write+0xd9/0x190 [ 180.665793][ T9997] __x64_sys_write+0x3e/0x50 [ 180.670388][ T9997] do_syscall_64+0x44/0xd0 [ 180.674903][ T9997] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 180.680797][ T9997] RIP: 0033:0x7f0fdb27eae9 [ 180.685248][ T9997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 180.704919][ T9997] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:54:44 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x3, 0x4, 0x2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x700, 0x80000000, 0x7fff}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 180.713337][ T9997] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 180.721310][ T9997] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 180.729300][ T9997] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 180.737270][ T9997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.745292][ T9997] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 180.753311][ T9997] 06:54:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 40) [ 180.811497][T10042] FAULT_INJECTION: forcing a failure. [ 180.811497][T10042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.824796][T10042] CPU: 0 PID: 10042 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 180.833254][T10042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.843385][T10042] Call Trace: [ 180.846654][T10042] [ 180.849575][T10042] dump_stack_lvl+0xd6/0x122 [ 180.854167][T10042] dump_stack+0x11/0x1b [ 180.858324][T10042] should_fail+0x23c/0x250 [ 180.862744][T10042] should_fail_usercopy+0x16/0x20 [ 180.867819][T10042] _copy_from_user+0x1c/0xd0 [ 180.872447][T10042] input_event_from_user+0x122/0x1d0 [ 180.877743][T10042] ? input_inject_event+0xcd/0xe0 [ 180.882803][T10042] evdev_write+0x282/0x400 [ 180.887284][T10042] ? evdev_read+0x710/0x710 [ 180.891825][T10042] vfs_write+0x2af/0x950 [ 180.896071][T10042] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 180.902257][T10042] ? __fget_light+0x219/0x260 [ 180.906948][T10042] ? ksys_write+0x29/0x190 [ 180.911376][T10042] ksys_write+0xd9/0x190 [ 180.915746][T10042] __x64_sys_write+0x3e/0x50 [ 180.920338][T10042] do_syscall_64+0x44/0xd0 [ 180.924756][T10042] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 180.930649][T10042] RIP: 0033:0x7f0fdb27eae9 [ 180.935057][T10042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:54:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 41) [ 180.954663][T10042] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.963079][T10042] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 180.971126][T10042] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 180.979172][T10042] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 180.987212][T10042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.995249][T10042] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 181.003320][T10042] [ 181.050596][T10139] FAULT_INJECTION: forcing a failure. [ 181.050596][T10139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.063821][T10139] CPU: 0 PID: 10139 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 181.072318][T10139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.082460][T10139] Call Trace: [ 181.085733][T10139] [ 181.088657][T10139] dump_stack_lvl+0xd6/0x122 [ 181.093246][T10139] dump_stack+0x11/0x1b [ 181.097395][T10139] should_fail+0x23c/0x250 [ 181.101864][T10139] should_fail_usercopy+0x16/0x20 [ 181.106888][T10139] _copy_from_user+0x1c/0xd0 [ 181.111516][T10139] input_event_from_user+0x122/0x1d0 [ 181.116804][T10139] ? input_inject_event+0xcd/0xe0 [ 181.121900][T10139] evdev_write+0x282/0x400 [ 181.126355][T10139] ? evdev_read+0x710/0x710 [ 181.130857][T10139] vfs_write+0x2af/0x950 [ 181.135108][T10139] ? __fget_light+0x219/0x260 [ 181.139840][T10139] ksys_write+0xd9/0x190 [ 181.144087][T10139] __x64_sys_write+0x3e/0x50 [ 181.148805][T10139] do_syscall_64+0x44/0xd0 [ 181.153280][T10139] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 181.159169][T10139] RIP: 0033:0x7f0fdb27eae9 [ 181.163576][T10139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 181.183240][T10139] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.191666][T10139] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:44 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="d4", 0x1) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='()\x00') write(r1, &(0x7f0000000100)="bf10daecec014fe2fd3c9c981ec2c258e96cb6b4fec56528959f858bd0a1359f3e95c8b7c5c3136a2bf27693cd557d2b0f10369d0ff0fadce39c3f6db64bf81de385082109684449c82e63c146e9e1978c359f95e7", 0x55) 06:54:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 42) [ 181.199768][T10139] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 181.207737][T10139] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 181.215706][T10139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.223673][T10139] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 181.231657][T10139] [ 181.293127][T10149] FAULT_INJECTION: forcing a failure. [ 181.293127][T10149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.307638][T10149] CPU: 1 PID: 10149 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 181.316097][T10149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.326160][T10149] Call Trace: [ 181.329469][T10149] [ 181.332962][T10149] dump_stack_lvl+0xd6/0x122 [ 181.337549][T10149] dump_stack+0x11/0x1b [ 181.341694][T10149] should_fail+0x23c/0x250 [ 181.346110][T10149] should_fail_usercopy+0x16/0x20 [ 181.351171][T10149] _copy_from_user+0x1c/0xd0 [ 181.355862][T10149] input_event_from_user+0x122/0x1d0 [ 181.361150][T10149] ? input_inject_event+0xcd/0xe0 [ 181.366236][T10149] evdev_write+0x282/0x400 [ 181.370733][T10149] ? evdev_read+0x710/0x710 [ 181.375324][T10149] vfs_write+0x2af/0x950 [ 181.379567][T10149] ? __fget_light+0x219/0x260 [ 181.384250][T10149] ksys_write+0xd9/0x190 [ 181.388499][T10149] __x64_sys_write+0x3e/0x50 [ 181.393124][T10149] do_syscall_64+0x44/0xd0 [ 181.397543][T10149] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 181.403513][T10149] RIP: 0033:0x7f0fdb27eae9 [ 181.407945][T10149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 181.427647][T10149] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.436060][T10149] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 43) [ 181.444064][T10149] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 181.452026][T10149] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 181.459999][T10149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.467962][T10149] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 181.475944][T10149] 06:54:44 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}, 0x4, 0x8001}], 0x18) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000080)='io\x00') [ 181.520145][T10252] FAULT_INJECTION: forcing a failure. [ 181.520145][T10252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.533576][T10252] CPU: 1 PID: 10252 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 181.542013][T10252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.552165][T10252] Call Trace: [ 181.555438][T10252] [ 181.558364][T10252] dump_stack_lvl+0xd6/0x122 [ 181.563065][T10252] dump_stack+0x11/0x1b [ 181.567222][T10252] should_fail+0x23c/0x250 [ 181.571644][T10252] should_fail_usercopy+0x16/0x20 [ 181.576669][T10252] _copy_from_user+0x1c/0xd0 [ 181.581265][T10252] input_event_from_user+0x122/0x1d0 [ 181.586553][T10252] ? input_inject_event+0xcd/0xe0 [ 181.591645][T10252] evdev_write+0x282/0x400 [ 181.596066][T10252] ? evdev_read+0x710/0x710 [ 181.600622][T10252] vfs_write+0x2af/0x950 [ 181.604948][T10252] ? __fget_light+0x219/0x260 [ 181.609638][T10252] ksys_write+0xd9/0x190 [ 181.613948][T10252] __x64_sys_write+0x3e/0x50 [ 181.618560][T10252] do_syscall_64+0x44/0xd0 [ 181.623037][T10252] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 181.628989][T10252] RIP: 0033:0x7f0fdb27eae9 [ 181.633456][T10252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 181.653299][T10252] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.661712][T10252] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:45 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="4bb8a4b770223b4e9fe10565b1a7f58dcb7e68258a697c8588b07db995a1258199f92e9d", 0x24, 0xb9) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 181.669777][T10252] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 181.677818][T10252] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 181.685891][T10252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.693878][T10252] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 181.701848][T10252] 06:54:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0xa748, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:45 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0xffffffff00000000) 06:54:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 44) 06:54:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) r6 = fcntl$getown(r2, 0x9) clock_gettime(0x0, &(0x7f00000039c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000000840)=""/53, 0x35}, {&(0x7f0000000c80)=""/53, 0x35}, {&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000000dc0)=""/242, 0xf2}, {&(0x7f0000000ec0)=""/143, 0x8f}, {&(0x7f0000000f80)=""/226, 0xe2}], 0x6, &(0x7f0000003900)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x1, 0x2, &(0x7f0000003a00)={r7, r8+60000000}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000010c0)={0x1348, 0x38, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@generic="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", @nested={0x1c7, 0x72, 0x0, 0x1, [@typed={0x8, 0x2e, 0x0, 0x0, @pid}, @typed={0xc, 0x4f, 0x0, 0x0, @u64=0xfff}, @typed={0x9b, 0x55, 0x0, 0x0, @binary="643d9c57b22b4e1151ac5c5ac10622ef3e9a2145a966b918e9b1e46428d490357bf448fbe63d399dfa165cb05e5fbe460e74d5a227e69bf655a1cda6c4d659fdd1a5ee6c24836e82e7b43b9814cdae6b52b5d564ed3b0cfa14d9236e28f5d3c4f0db441fb1bd130275bc94d32123fb6c27d9bf665267cfa82f23903430c1d7cc616bcebbdd667021c99e89497e2ba6c37990d967a87e51"}, @generic="b5ae3b2b33dba85782a80f96678ed42a10705db511e70d7bfe53fa4e3f2375a357c726a03c4c855ee6dc9344adbc247f82cc379a7d0d686d4b2f8188113f38f356cc4fdf2763a19259f17fba3bbe06d8b1b9e42d55bf3eb61f965dcaa1fb383319e975f2bfd2b33c7e018311afec62282b4788b238b596deb4c035e8bb72c8a59005faeea89813eac594253001592ad9279417f0cad4118b0e521746adb7112e9d9a877a1841098e16a6f878083e6934a0", @generic="bb16ef8321e5b5ae778378c49704e87b23f01ce953fc520996154518d31bac0681975a41fa9b169fb81c5ca8d81abf41efa84ab6e36c14ef538823f66c6a83138b3f745570e3", @typed={0x8, 0x4e, 0x0, 0x0, @fd=r2}, @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@empty}]}, @typed={0x8, 0x7, 0x0, 0x0, @ipv4=@remote}, @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@local}, @nested={0x101, 0x2, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="a3ac3ada2e7b6e52982534a54081e0b5a004d456148cf905d2b9e8f8ba32f0c14765e1afcca7299f4b1461ce4d51af82f9d0c7c95361a037a2b24cdfa9910426a579e57e20a6edaf971f4548db25560e1ab3b8ad729a76fe5247b9167034037a31ec7b8d5042420d374db7e212c81ad23337620bd1457fe78742839c699982a36be503eefa3d19a90997a04f7d7e977a97962cfb697bbb661f28341791cf3152dac1b5bcfa4cfa4f6a3c2801f863f8c3f2ca68a7f062567926801601c3be63edafc55befc961b7fb6bc90bfa4b538b9c53f5908d3b73dc1703b9e003eb59cf2e415a4d09e10fab05b615387adfbf4ef4f1454cc47e"]}, @nested={0x42, 0x92, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}, @generic="1bb2bb8034afee44f7ccb7e3c02c73f5347e1818cd548c139dd34b29f6d7e6926f36bb9ddf0482e2060247b76d8782d9af803cebf5a5"]}, @nested={0xc, 0x2b, 0x0, 0x1, [@typed={0x8, 0x4f, 0x0, 0x0, @uid}]}]}, 0x1348}, {&(0x7f0000002440)={0x1430, 0x32, 0x300, 0x70bd2d, 0x25dfdbfc, "", [@generic="db0239b11f064ef2d4d9f5f57dc7fc8ed8a855e22b5a02e1e53e50059dd57e07ff3df91e417da4c9e36952ebfbc382eca4d003ecc3f7653e18e0d8cab312b054b8207f57565ac827", @nested={0x1307, 0x7b, 0x0, 0x1, [@typed={0x14, 0x34, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="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", @generic="dc922ad085383dc6fddd30e48d459c2ad51f5770064b869df58e53ffe78b90fdbf902b27b2d3d4e9e9b5a9c9b6456e7e247f9d1faf9fbef50e3592c05e91c763921587b65cc17c70105eb84cca1446108901265df8aa5433b69ea8b7bb3e3b9db117cbf338df395d88a0c23f1a767bf8101f0735a072428118d963b367745cd9bc155028b2cc6ce255a9fceb077c49be5eb5dfcf2548de789a33f365c18a86fbaff63e25e3553f5aa19343a8ea21b066", @typed={0xc, 0x30, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@broadcast}, @generic="81af842662326fa6b6cdd0ed299c0b5b734d756d079f6e0890c7dd19620b219c08b2e88b4f91533d02ecaa57fe355ce7ad193627997914d46fe22e9a3742171d44a5cbddaa15538a8e72349dd5831d37d04289e14f302658dcf3da9f653be496df1d66da42552357d780a90cf4b777b3e6686fe59f02b6c7e1bb9237301de213bd36b813411413e26a928fb010653e3ff80ee1ea294b37147266eb73519c2f84065ca19f747cff96e9e6f97f5c241c39bb", @generic="6df45b33babea482abbf07eef2daa987ca23265d230b5ee0143def40518b58eb95031e2c7b44f0e4525842a66d8b0c221c9eeeb8ab61802d1c4d8b6fab027434822429bbdceb32e5b933766de6293e1c26bbc7ac05021b21822964c3bb623c95ec7dc60bb50d237fa8fd192cccd28cbc59203c2724c44fbfedfceeb868ae89bb13b7fa12e5d9216ecd397e64586e25508050ce96b9bb77ed7d8912d3d9048d4068359048574081429ce41530fade20514130f457d1f7a809a080c4f4", @generic="ee2aab602b7c431e98f60740beb7b0186a9ca6ce46779198246101a31b518434954326a1597e9567ae08816c8ac59504703e2933c2a56f267b9f784e0358f04657493d324404670b791d7bd4bbf8b1e5874e2e52edfa1d51b90a611cc96a63ea084016ee3ba334945f06723699948542f7934cbe5c681953c44ca9ae6c675c13ace45bb86534a4719f3552eefeb22d1b4e98368b9e18b5a74836e1e642d9c87ee71811c243f5c460d001524faca234fc6f88", @typed={0xc, 0xe, 0x0, 0x0, @u64=0x7f}]}, @generic="eb1f8720c5cb6cad641bdca31bde7c83dc9394935160fbd064437d7a0381047a35b53a93825d2af073d7dc4616282eabdea740887d704b28f0b039851eaf11ea15c21ccca6adba02807de86317279a1dce53eeeed8eed8b1e4b17b3d28a52cd066791ee7c11c62deaa97b12fcbb2333d3225b93dcd4e7653a0648210b67f0e8cb7830e2e21bfca88ac6c950ac5ae74ff31942fba246796848904f634a98c5581d7ec75d90022762c1d53f959cd32e4a5c545b22ea776706c42ca6130c3538da4607b2db5c909fb8829e4f2a14c"]}, 0x1430}, {&(0x7f0000000440)={0x2f4, 0x2b, 0x4, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x73, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x22, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0x18, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x63, 0x3e, 0x0, 0x1, [@typed={0x4, 0x96}, @typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x12, 0x0, 0x0, @pid}, @generic="68ceb97a8fce3d399568574cb8475cfe3e5902b24735f9a092a959784cf7ec4f5dca143be008704df5cf214856b31b", @typed={0x10, 0x2c, 0x0, 0x0, @binary="7b78d35dd4adf5330d98124d"}]}, @typed={0x8, 0x84, 0x0, 0x0, @uid=0xee00}, @generic="ad78ee35e1ed2632cf77c4ace6ae96768c07a0eacf2c1daf7f86a50f6044c55b29f70957a8414a980d835ab98c37b795e16464ae7642b423073a3c088b8f5ff97a111ae3b3abe7458927267bf2b3de3103e7d445027c1b3fb8643c0d242dec7654ee5b31f7ee860874415f3e8798265d2cf06e3695fa179d96da433b7794334f6fe547ddefa3d9f3461b2af22e7b68ac8a7441115366a58a663f34cf292ca5538ab0e8613b5a1d6e233f50e7ddcdea961eaaadb9bc71fbebe009a758cea2", @typed={0x4, 0x58}, @nested={0x190, 0x7c, 0x0, 0x1, [@generic="2466169069bd19da0418299e7128481e8117d62d721c70b039e80115bef6602cd443eeb6e4a7957312f2121730a162c9e3c013635103ee782a21721313df6f9dc63aff871219864386ae7687b02cdda04570970db15b65eea67e57d9d6795331ebf13e163cadc98af0b9304e2f2afd085cb334a8e358524844ff8979f09a73319e97e8357d4062c63b61ea63f849f4826d38954d12de18a01c7fffbb3f11b1494549c7ca8c8fa38aada7899d39e776b35d928382d3a135be39ec52fe946c947f164984a222e7677db37284e3b2a26b60b77d60e7", @generic="4a09a19555d0aca14679", @generic="5bc14fadf771ef73c5fc669c98237a5bce8b03a96a5884be62d989018e472ead0b8582d62fd875a2ca4a702cde510a5fbc411a6348731710a1ecacc44ee9e590a801ebade9ce505962773dbd2a139cf0692cdc8f13a59b6b907d984e19418a289e310c5fc61ff0945b69938a8a66f3831bce6d8e81105d820328ff3b74f365cb1a4a6db2d2ede95e4c2a60bf6ebe246a6e861b8fcca170b3c937f05b3d146d876790d0417d25ecafabc01137dd84"]}]}, 0x2f4}, {&(0x7f0000000100)={0x3c, 0x1b, 0xa18, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x29, 0x64, 0x0, 0x0, @binary="ce3bc2b6eea0236b06a76edcab4c5e6e4d657b00901b5d45ed008401e8fd0c88b2bee38d6c"}]}, 0x3c}, {&(0x7f0000000900)={0x360, 0x2c, 0x400, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x18, 0x0, 0x0, @fd}, @nested={0x2be, 0x6, 0x0, 0x1, [@typed={0x103, 0x31, 0x0, 0x0, @binary="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"}, @typed={0x4, 0x8a}, @generic="3593061db39bf757167461bdb166591c09fb00b39e5b99f0e5bdbb51bb570f966a38dbc9d9d337e375eb2d661e926a80489f4dde35ee930ed31d4b4a1ded7b1a15a67816ef97b5d01b5383956923a5e83f6560282606bfcfdf0fa89567332c8c0971f4f57824c1fc6a89acebc02366ec3f22aa564448b8c586301c3c5058198692d378f9970c0f121d3cda1249e6ef2cb79863e985ec379c152bb42d5fb9b27f415c60d3f901980630a5c4101cc21c9105cacb2be181b64b834fabebe7103aca1c5f3e0dd802309d97ce149bae5e012414fadc330a4dfdd564250d", @typed={0x8, 0x5c, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="2190a73580e69a43355731765d2a601f55b729c03dffc335bfc73be86f9e79c93c9299f72b60b3ad60e0da558f8fee3b0b552487acb3fb905f5d74b2f23a16e754bbc121080190866b9e89b63872a99f77807afed8bd74ad81203c41184ae76bdae17328d3913617d5b38f0eba79c1a7db968936c2a25dcf7866798ede53e1afb47fd72a49dd7f72cc5bd06d31019817586948b32bbc5b3e7639a440d17069522d35d70a92034fa1087201573c6a2da7bf6109c3f1fb1bd3bbe9c2a76ae71e77cfbea81c8a17e1237e3955cf3c87b7"]}, @generic="f954da6576b4f66813a9318ea0bbae657adc6ef981c8fe56e953fc90540752748068f5579a827e0df7a14c371f04478ad3c416c90887b805a14672026bdc73a90d96aca39ac55b1c4bb26f539213bb4b8cdfbfe0f6a0947939e5a1d4390bf8dda922c65b964d40484c27807d2cb1141fbc718d8c04b74d50d45a218da13e9c339978042a75f4a3bb"]}, 0x360}, {&(0x7f0000003b00)=ANY=[@ANYBLOB="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"], 0x9c}], 0x6, &(0x7f0000003a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00, r9}}}], 0x60, 0x20000010}, 0x800) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r10, &(0x7f0000000040)="e2", 0x35000) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x81, 0x9, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x10000, 0x6cee, 0x6, 0x9, 0x2, 0xfffff000, 0x1, 0x0, 0x401, 0x0, 0x3}, 0xffffffffffffffff, 0x9, r2, 0x1) 06:54:45 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000000)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000002c0)={0x0, 0x4, 0xc8, &(0x7f00000001c0)=""/200}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x3b6) r1 = io_uring_setup(0x2d51, &(0x7f0000000100)={0x0, 0xc16a, 0x8, 0x0, 0x1b3}) r2 = socket$inet(0x2, 0x6, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x88140, 0x14a) sendfile(r1, r2, &(0x7f0000000180)=0x400, 0x8) 06:54:45 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x7ffff000) [ 182.299980][T10469] FAULT_INJECTION: forcing a failure. [ 182.299980][T10469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.313733][T10469] CPU: 1 PID: 10469 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 182.322201][T10469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.332269][T10469] Call Trace: [ 182.335541][T10469] [ 182.338470][T10469] dump_stack_lvl+0xd6/0x122 [ 182.338497][T10469] dump_stack+0x11/0x1b [ 182.347224][T10469] should_fail+0x23c/0x250 [ 182.351677][T10469] should_fail_usercopy+0x16/0x20 [ 182.356706][T10469] _copy_from_user+0x1c/0xd0 [ 182.361302][T10469] input_event_from_user+0x122/0x1d0 [ 182.366632][T10469] ? input_inject_event+0xcd/0xe0 [ 182.371760][T10469] evdev_write+0x282/0x400 [ 182.376255][T10469] ? evdev_read+0x710/0x710 [ 182.380878][T10469] vfs_write+0x2af/0x950 [ 182.385126][T10469] ? __fget_light+0x219/0x260 [ 182.390096][T10469] ksys_write+0xd9/0x190 [ 182.394461][T10469] __x64_sys_write+0x3e/0x50 [ 182.399132][T10469] do_syscall_64+0x44/0xd0 [ 182.403557][T10469] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 182.409604][T10469] RIP: 0033:0x7f0fdb27eae9 [ 182.414015][T10469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 182.433662][T10469] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.442096][T10469] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) r3 = signalfd4(r2, &(0x7f0000000000)={[0x43]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa9, 0xff, 0x80, 0x7, 0x0, 0x80, 0x2001, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x7, 0x80000000}, 0x20, 0xbe, 0x1, 0x7, 0x1f, 0x5, 0x8, 0x0, 0x18, 0x0, 0x9}, 0x0, 0x9, r3, 0x0) 06:54:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 45) [ 182.450097][T10469] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 182.458064][T10469] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 182.466034][T10469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.474003][T10469] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 182.481979][T10469] [ 182.516439][T10474] FAULT_INJECTION: forcing a failure. [ 182.516439][T10474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.535694][T10474] CPU: 1 PID: 10474 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 182.544126][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.554805][T10474] Call Trace: [ 182.558079][T10474] [ 182.560998][T10474] dump_stack_lvl+0xd6/0x122 [ 182.565640][T10474] dump_stack+0x11/0x1b [ 182.569789][T10474] should_fail+0x23c/0x250 [ 182.574211][T10474] should_fail_usercopy+0x16/0x20 [ 182.579313][T10474] _copy_from_user+0x1c/0xd0 [ 182.584004][T10474] input_event_from_user+0x122/0x1d0 [ 182.589355][T10474] ? input_inject_event+0xcd/0xe0 [ 182.594398][T10474] evdev_write+0x282/0x400 [ 182.598862][T10474] ? evdev_read+0x710/0x710 [ 182.603376][T10474] vfs_write+0x2af/0x950 [ 182.607624][T10474] ? __fget_light+0x219/0x260 [ 182.612306][T10474] ksys_write+0xd9/0x190 [ 182.616593][T10474] __x64_sys_write+0x3e/0x50 [ 182.621184][T10474] do_syscall_64+0x44/0xd0 [ 182.625606][T10474] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 182.631532][T10474] RIP: 0033:0x7f0fdb27eae9 [ 182.635983][T10474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 182.655630][T10474] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:54:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 46) [ 182.664041][T10474] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 182.672007][T10474] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 182.680051][T10474] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 182.688014][T10474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.695980][T10474] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 182.704029][T10474] [ 182.737454][T10521] FAULT_INJECTION: forcing a failure. [ 182.737454][T10521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.751183][T10521] CPU: 0 PID: 10521 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 182.759615][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.769758][T10521] Call Trace: [ 182.773036][T10521] [ 182.775963][T10521] dump_stack_lvl+0xd6/0x122 [ 182.780584][T10521] dump_stack+0x11/0x1b [ 182.784743][T10521] should_fail+0x23c/0x250 [ 182.789161][T10521] should_fail_usercopy+0x16/0x20 [ 182.794283][T10521] _copy_from_user+0x1c/0xd0 [ 182.798959][T10521] input_event_from_user+0x122/0x1d0 [ 182.804243][T10521] ? input_inject_event+0xcd/0xe0 [ 182.809270][T10521] evdev_write+0x282/0x400 [ 182.813694][T10521] ? evdev_read+0x710/0x710 [ 182.818467][T10521] vfs_write+0x2af/0x950 [ 182.822716][T10521] ? __fget_light+0x219/0x260 [ 182.827411][T10521] ksys_write+0xd9/0x190 [ 182.831658][T10521] __x64_sys_write+0x3e/0x50 [ 182.836259][T10521] do_syscall_64+0x44/0xd0 [ 182.840731][T10521] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 182.846773][T10521] RIP: 0033:0x7f0fdb27eae9 [ 182.851178][T10521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 182.870888][T10521] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.879476][T10521] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 47) [ 182.887511][T10521] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 182.895561][T10521] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 182.903528][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.911497][T10521] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 182.919472][T10521] [ 182.957172][T10579] FAULT_INJECTION: forcing a failure. [ 182.957172][T10579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.970413][T10579] CPU: 1 PID: 10579 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 182.978834][T10579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.988883][T10579] Call Trace: [ 182.992154][T10579] [ 182.995074][T10579] dump_stack_lvl+0xd6/0x122 [ 182.999658][T10579] dump_stack+0x11/0x1b [ 183.003876][T10579] should_fail+0x23c/0x250 [ 183.008365][T10579] should_fail_usercopy+0x16/0x20 [ 183.013393][T10579] _copy_from_user+0x1c/0xd0 [ 183.018050][T10579] input_event_from_user+0x122/0x1d0 [ 183.023348][T10579] ? input_inject_event+0xcd/0xe0 [ 183.028367][T10579] evdev_write+0x282/0x400 [ 183.032805][T10579] ? evdev_read+0x710/0x710 [ 183.037313][T10579] vfs_write+0x2af/0x950 [ 183.041645][T10579] ? __fget_light+0x219/0x260 [ 183.046407][T10579] ksys_write+0xd9/0x190 [ 183.050706][T10579] __x64_sys_write+0x3e/0x50 [ 183.055308][T10579] do_syscall_64+0x44/0xd0 [ 183.059726][T10579] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 183.065679][T10579] RIP: 0033:0x7f0fdb27eae9 [ 183.070113][T10579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 183.089733][T10579] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.098174][T10579] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 48) [ 183.106174][T10579] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 183.114199][T10579] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 183.122265][T10579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.130231][T10579] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 183.138204][T10579] [ 183.172059][T10583] FAULT_INJECTION: forcing a failure. [ 183.172059][T10583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.185523][T10583] CPU: 0 PID: 10583 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 183.194014][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.204061][T10583] Call Trace: [ 183.207336][T10583] [ 183.210259][T10583] dump_stack_lvl+0xd6/0x122 [ 183.214853][T10583] dump_stack+0x11/0x1b [ 183.219003][T10583] should_fail+0x23c/0x250 [ 183.223475][T10583] should_fail_usercopy+0x16/0x20 [ 183.228498][T10583] _copy_from_user+0x1c/0xd0 [ 183.233092][T10583] input_event_from_user+0x122/0x1d0 [ 183.238467][T10583] ? input_inject_event+0xcd/0xe0 [ 183.243492][T10583] evdev_write+0x282/0x400 [ 183.247947][T10583] ? evdev_read+0x710/0x710 [ 183.252448][T10583] vfs_write+0x2af/0x950 [ 183.256702][T10583] ? __fget_light+0x219/0x260 [ 183.261546][T10583] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 183.267366][T10583] ksys_write+0xd9/0x190 [ 183.271609][T10583] __x64_sys_write+0x3e/0x50 [ 183.276225][T10583] do_syscall_64+0x44/0xd0 [ 183.280648][T10583] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 183.286538][T10583] RIP: 0033:0x7f0fdb27eae9 [ 183.290942][T10583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 183.310547][T10583] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:54:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 49) [ 183.318969][T10583] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 183.327073][T10583] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 183.335046][T10583] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 183.343070][T10583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.351302][T10583] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 183.359323][T10583] [ 183.395779][T10586] FAULT_INJECTION: forcing a failure. [ 183.395779][T10586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.409092][T10586] CPU: 1 PID: 10586 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 183.417502][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.427562][T10586] Call Trace: [ 183.430828][T10586] [ 183.433788][T10586] dump_stack_lvl+0xd6/0x122 [ 183.438371][T10586] dump_stack+0x11/0x1b [ 183.442533][T10586] should_fail+0x23c/0x250 [ 183.446947][T10586] should_fail_usercopy+0x16/0x20 [ 183.452056][T10586] _copy_from_user+0x1c/0xd0 [ 183.456750][T10586] input_event_from_user+0x122/0x1d0 [ 183.462037][T10586] ? input_inject_event+0xcd/0xe0 [ 183.467132][T10586] evdev_write+0x282/0x400 [ 183.471623][T10586] ? evdev_read+0x710/0x710 [ 183.476149][T10586] vfs_write+0x2af/0x950 [ 183.480418][T10586] ? __fget_light+0x219/0x260 [ 183.485094][T10586] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 183.490948][T10586] ksys_write+0xd9/0x190 [ 183.495183][T10586] __x64_sys_write+0x3e/0x50 [ 183.499848][T10586] do_syscall_64+0x44/0xd0 [ 183.504356][T10586] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 183.510248][T10586] RIP: 0033:0x7f0fdb27eae9 [ 183.514653][T10586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 183.534273][T10586] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.542680][T10586] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 183.550694][T10586] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 183.558738][T10586] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 183.566731][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.574701][T10586] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 183.582674][T10586] [ 183.586598][T10471] cgroup: fork rejected by pids controller in /syz2 06:54:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) close_range(r1, r2, 0x0) 06:54:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 50) 06:54:47 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0xffffffffffffffff) 06:54:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfff, 0x4, 0x8000, 0x3, 0x0, 0x3ff, 0x1f}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3, 0xfb, 0x3, 0xe0, 0x0, 0x1, 0x20081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x2}, 0x1010, 0x8, 0x2, 0x5, 0x1, 0x0, 0x1f, 0x0, 0xd13}, 0x0, 0xb, r1, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x8, 0x0, 0x7, 0xdd, 0x0, 0x3f, 0x2060, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x8, 0x3eec0000000}, 0x40400, 0x0, 0x800, 0x9, 0x10000, 0x101, 0x3, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xd) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x35000) 06:54:47 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x208200) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x14}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 183.914456][T10688] FAULT_INJECTION: forcing a failure. [ 183.914456][T10688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.927811][T10688] CPU: 1 PID: 10688 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 183.934938][ T24] audit: type=1400 audit(1636700087.351:197): avc: denied { create } for pid=10689 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 183.936323][T10688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.956880][ T24] audit: type=1400 audit(1636700087.351:198): avc: denied { getopt } for pid=10689 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 183.966896][T10688] Call Trace: [ 183.966903][T10688] [ 183.993547][T10688] dump_stack_lvl+0xd6/0x122 [ 183.998135][T10688] dump_stack+0x11/0x1b [ 184.002342][T10688] should_fail+0x23c/0x250 [ 184.006758][T10688] should_fail_usercopy+0x16/0x20 [ 184.011862][T10688] _copy_from_user+0x1c/0xd0 [ 184.016456][T10688] input_event_from_user+0x122/0x1d0 [ 184.021810][T10688] ? input_inject_event+0xcd/0xe0 [ 184.026836][T10688] evdev_write+0x282/0x400 [ 184.031287][T10688] ? evdev_read+0x710/0x710 [ 184.035832][T10688] vfs_write+0x2af/0x950 [ 184.040095][T10688] ? __fget_light+0x219/0x260 [ 184.044773][T10688] ksys_write+0xd9/0x190 [ 184.049050][T10688] __x64_sys_write+0x3e/0x50 [ 184.049080][T10688] do_syscall_64+0x44/0xd0 [ 184.049136][T10688] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 184.049156][T10688] RIP: 0033:0x7f0fdb27eae9 [ 184.049170][T10688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 184.049187][T10688] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:54:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 51) [ 184.049206][T10688] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 184.049219][T10688] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 184.049236][T10688] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 184.049248][T10688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.049261][T10688] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 184.049277][T10688] 06:54:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:47 executing program 3: sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000ffdbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099002000100040000800060048005f0000001b003400d42cd2c9a7c0010fb1d129e7a06e211bfbbc452846621100535e09d1dd8a16e22d2c8568317513cfdece0a88d51193ce6b90966911ce5055b1c1bcc8ced1a2487b2ee63fc09d754f2cfd7ba2d7daa1201cdaee6c228d281ef78198148ba4e86cc8df9f20acccf1e732e2f63fd98b3118862977e3eb234c8d05d9"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x80) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x70, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x94}, 0x4008001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0xffffffff, 0x10001}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000007880)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000007840)={&(0x7f0000000b80)={0x6cac, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x35}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x108c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1074, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @loopback}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @loopback}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x7fff}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x8}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x24, 0x8, {0x4, 0x8, "7a921f00a77fc103deeeed8e2bfe0226823ea7aea6752bfb"}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x8}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @local}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x100c, 0x8, {0x4, 0x2, "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"}}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @loopback}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x54, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x3c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x20, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x5}}, @NL80211_ATTR_MAC={0xa}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x428, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x420, 0x4, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x7e, 0x2, "4bd19cbb75fb613b88f406532681dcf89b4591e92bc7f42401b52ff776c62e4b6769d92f84c1a0dba6d62bf19820894fa3d951cf627da07de54555b86d209265e31e4f84e82031c75f245849675e24b750973f1f040a833e197c829afbe9111fe56c61bc80deed4b81753c4720c635bd5bb4205d2a7d1a6b21f4"}, @NL80211_PKTPAT_MASK={0x2b, 0x1, "59a2ac7c3b94545d910d3b89cad98f120afd2ef607e96fb368ac51bd6f385ce5b600f3cfce8bf6"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xa6}]}, {0x360, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x9e, 0x1, "b90e6e2437ae07a879bbfcf19dedf4f9feaf9ad6466caffdf0bb5b659995fea50e6589b17a1b2c7a739c00a688740a2cc01f8401769dda8c5f20b88ee6a779ba3ac39f6a5b9628022488345daaaf0011028b983b2dd73f7e73a36e6b40e992a84b0ba34889bb4a424aee9fd34e880b3699b3d6942f66aba70a6bf0b47c127ea8ce0dd4bfd29f13bad488ec83d5f8777910ad8ad09a2c40ab0ee4"}, @NL80211_PKTPAT_MASK={0x85, 0x1, "294b9e20904e168e2a7b0264bb7a9d9148f65f036809158227952b2ebe90f1305b8db08ce352947d7a0fcb05a200b2ac2277a9ff7a4c0bbc71f42240224bbc96c94316af243bf72798e32ba73bb153adc8c1aba85967de5a7a24f2bce272ed1351bdff60880177da43357eafaf9f36280d0b3ce5b4a9b81ea9f2c8fc6ef1cf1ee8"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfff}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf0c}, @NL80211_PKTPAT_PATTERN={0x68, 0x2, "bf07fa8b5f3e7946b4275dc1e196aa0a3b4eb733ca014828948f6e91a28909e7f337ceab5d5485927791a4065828952da4ebfa2a1a47f5bee9b721c1445070aece5b5c33c741d5f8a02a9f0af971f52a3cc8a6421854557ddb8554730823b4e30762e5f1"}, @NL80211_PKTPAT_PATTERN={0x9a, 0x2, "8e7c3402ea9ac8ec5aab1d6fdc884c58423b90e0abfada81a9e8f8b1cf8f8829a9f128fec11dc6de1a41d434df80ef60f21263bf648472c293188f41c62de79b7dd31b954d6ba7806f74e7618335b32ebf35401465c6a225c273923423682837542adcf06139dca8a8ab6e06dd5c8b051ce3fb388063fa60a75e81afb7b92148fe15b0b72d52c64881e128e6a912a134fea393a42cc3"}, @NL80211_PKTPAT_MASK={0x82, 0x1, "1c8f464d5018b38f9fef273f4d70d3d170a1ad4460b698a564b2af6fe87141382680d79c38e74d9e7aa7d5e831cd5af72accff268e95c2b38e2ec3a390098fa3f870da1532955d44f6f823d9871c534c434b967bb7fe2ab100dbd2b582e106b8beb114038879fc3c815e920873e87d5d1d771d85140120a26d2a835a94a6"}, @NL80211_PKTPAT_MASK={0x9a, 0x1, "9b8c2a2fb4f982e6b8429bcf46fef633d1b35c19b33d2f4587e84ea8f4b11f021bc79a4f433a7ce93ba3c51911615928468cb76137b8ea5a0299bf85821384cabdeab1427920413fb60b69f2378b713dba7cbf071e20caced903391f92c0af1f8296f2c73d2264ad0dc9d52aae32052d056f0ad2f7509d82df4b253f96cd4e995c9786bf4b68749f5b0a316c2676f725a8cb3da54b81"}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x172c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x54, 0x12, 0x0, 0x1, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7fffffff}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1ff}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x16bc, 0x4, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6f7}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_PATTERN={0x2d, 0x2, "953ecb255143f006d687a03ca425cf37747623ea4e324b9d62db00860f5f57f7e7a57b8ea1fb00a445"}, @NL80211_PKTPAT_MASK={0xd2, 0x1, "6cc6064dca5c3d54a2ea27aebd3982bfb51a2fe27b8025e4ffe40fad3818a08121a132e655574bafe4f7c59c0b9c5896cd83002005583d9fd00df6c7aca8754afc0dcf9cacec85ee8d3712ee3e54d44fae4c4f84bb9edf282a0abfc1a60b2fbdfdbf071bdc6c7a4f74f84419a533373f2428a56a98086860311a873000f08a33aa5b93e42a9c8cdbb256bd6d8d50df62091b1e9e2979ddcff54e8e38b8ca6e403cd4aad53efa876aac12fb2b8509cfb9f0796ae3c87eaefa5dc72e0ec867cff0bb96574f20b8e394b5a5881552e6"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x5, 0x2, '['}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xbb, 0x1, "8e59fb553ad3c0ee725f6badc553104b585ea4867ddd0be9c51dfccc7f5b38ebbddfc00151650753307d7e56bf3a5a2cc37d033878f386cd8bfb2fbe552a86cd5e562ccabf843c68cc359891c899209b8ab61cfdb1be140fb8813d1127fad2a6b64d2ebcf914b9f780df260cc72e43427ce175e0458c68c90f8cd9bfa9f6030ef8e139ccdedc8056fae2198edffd81c2194453653d6c2997b03d905806e21166ac7097bdd8cc06f319a37504017a0e60efd9b4c6d787b2"}, @NL80211_PKTPAT_PATTERN={0x43, 0x2, "e448eebb0beac212655b7896ec940ed850440878a9a3e4f949ab5a44f96267479f65e175855adc2bdf0c1cc718b0bcf8e262b4bb646ea2e85ea2e9d4a4cc8a"}, @NL80211_PKTPAT_PATTERN={0x3e, 0x2, "5fbf2f519f792a3e386257a18fd69add3a4f96bc69eaf17984e0432606e1875b4f388f3f6a78137aee0ee1fde0e7d96a5e621fb6bde731ca5b01"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x20}]}, {0x248, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x2b, 0x2, "09037cfc0233fb5f531b68e32e2a7520219a1674f499648f9e5a7d3db66c01f2af515bfd29c01b"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_MASK={0x99, 0x1, "60bb4b4490b1bebe8e06b1461181bbed800f66ab512ec972d7c21ecdb69ce933c06d499d097a2f2813d9d81255e5e1bae69ca39f05296391398dfd9f44ae037523d737a2fa239d254aa40a94c73ba7c0d26d77550267e483d1945dadabe1e30821ee16f34c61c399622795e2660f8e878773f14664a48b6f4ea0d0420c44d0ab047d41134e819c7fe2adf97d20a89ffb03fb75b824"}, @NL80211_PKTPAT_PATTERN={0xbe, 0x2, "5ba3acf33f0f264cb36f277e3e0a5515aaef2b3ff42597b999cc5e82c48686f539c087b7196fb1730b055e5d5d8898c2a678efa44d42a39ace180a56c54de23f800559b6cfc2216ebfbfc92d363f75ce7fc6219351008229ac9a26fc98ee58bed16f53ac6231144b844133dcb409df186f03eedd281c2e4747744e07e8445b640773db413f29e8db9c44e3f66392724dd5eab44da847cf26cbda1aa22afbba90254111def674dd1c83c612f092d47c09df1524f390ddece6c37c"}, @NL80211_PKTPAT_MASK={0xa1, 0x1, "eccd931a84402867596f9146e10594aea101111e4f32b89f5384a468a6aac8d3057924e85a8d7a8c94bc68a6057eaf8faaf6d21b585debd886884ac181c8d0690568e2ba05577c92614c329ef352721564ff88a53cea6a6b4516d76e1ea3ebcb9b05cc571f00415ed149895664263b415aa7627016bc598517d78ff27d1e4ceefc05371ff5ecbccdd9067a61f754237c1dba54ef7239ad13e7439f0c54"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}]}, {0x178, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1c, 0x1, "4515e042df7a09e4904cb5ee50eb5a6e2124869313329a6c"}, @NL80211_PKTPAT_PATTERN={0x78, 0x2, "3b893cf704271220d8b394e7eb5ea9e60cd66e804818d00f2bee69e1803f3b9e117ba0faa040c1a3e8c67bc0434ab9544c293176753a775c9bdb9fae6e88809a93a7d3b98838041da32361653deb45dfbd7b56a9ceb4cd7c7f83db29eb5bdecef6311a92be20fadf937c4ed458fa483e2f948dd3"}, @NL80211_PKTPAT_PATTERN={0xd7, 0x2, "65314010a38d72ced195c830b57088af1fc146e291c62b005eb8a7d970d14539cd31aa9353de92f288c276d5f9a405f77d4d9e780e7493fe6cd499740fd52b18ca0ea4a53223f16174f19ea989ca940f7f20c9ad94ff998561830ec1de17aa52ccec540df3d66a761362021d6d8e806e0ff2b1e8ebe11493234a733e9f6713cb8a083c593b938ef53c3a2edc586114daec6ac13a3fa096a948fbc0325e5296a7335a097fb0a969368308a745b0bf67eabfd9352da16cb25d00e12e7cf4cb8200367fae2173d5829370a5c57c22bcb8ffe3138a"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}]}, {0x1080, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_MASK={0x56, 0x1, "52ac13b4e0a5afb2cf5b9d5b63f84c8a252b15580a8d77ba9963c2bf32c45a94e4b5da2841260f12ba04375021d36532c37fca54e25d0f7f1b9a193f475693eee1581f86442b1ddb775495a17420bad06b5f"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7f}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x168, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xdc, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xff81}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3, 0xe2}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x10000000}, @NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x1a, 0x0, @random="d37285d018f55109e79f96a327348034967adf3d693d"}, {0xc, 0x0, @random="19cc5be8cbdcea37"}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="ebadf9f74f48e6a82ffaacdcb7caf700ae15a6523c5794dd6dc4ac0879"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_SCAN_SSIDS={0x2c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x19, 0x0, @random="17736235690f8fe4de7088b9572a84e5496c649408"}]}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x7c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x7, 0x3ff, 0x6}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @rand_addr=0x64010102}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x45, 0x8, {0x3, 0x7, "528ac9261c318b28d849247d55059ee5b6a16c822013ab885c01c0fda25a6529199f4785766f396ade563b7d6a8492f03cb2120801c57d57eb"}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x7e}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x1ff, 0x2}}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xf4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x38, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x2}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x5, 0x2, 0x5}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x3ff}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x11, 0xa, "d96867bd2df9f75a70ef3209ae"}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xa8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x9a, 0xb, "d95e4e904f1ca792bb8e813d54c3d009e457288591421daeac4272c2d9e15145960b6e7819337b6308759c27c52aa1effb91b6e486c13f00410c92a4bc4a01af6d1b64ebb2f81d1875631586e5e5392b0e920beadeb325ca8c008f08d0ae081701f9ac1f067b78b913d43d9e72fcc5c9fc3eb7a3f7a571f73c930af1b90b0e6d605ed88166ae4edaf253e2f34b680bc2e4a7cdcb5e30"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xff01}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2a80, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0xf0, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2000}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}]}, @NL80211_ATTR_IE={0x91, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x9}, 0x81, 0x6, @device_a, 0x101, 0x8, 0xab}}, @random_vendor={0xdd, 0x10, "61552d778e0669114717614950ac9b49"}, @gcr_ga={0xbd, 0x6, @device_b}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x36, @ext={{0x1, 0x1, 0x1}, 0x8, 0x40, 0xc29c, @device_a, 0x1, @device_b, 0x40, 0x7a, 0x2, [{{}, @broadcast, 0xb52}, {{}, @device_b, 0x9}]}}, @link_id={0x65, 0x12, {@from_mac, @device_b}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x401}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xf5e2}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x12c8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x1004, 0x6, "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"}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xc4, 0xa, "5da627cbeb9c0dcaca564005d032e731e921bab60c321ebb9b3df9b15edb88fe59f43ba79fb34a55261351117c37cf4c7307bc9d4108369356a5c2d99a081594b4ecb6b3809ff4f57c22cbf3f1c92212352a73ebf36958dcc5f006de8fcdf0d2fdbe9ae24f6706f2401fc671474c34f13703906c3d6871138ae261b8349801a6782ba1524fb266c200524859f3f20eaa44f98c38883e0ade71f454019f4c1efaf69c51a4c045379879aba0b06d356f2c310791c8d94e7601486f3249e13819bd"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x10001, 0x8, 0x7}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xff, 0x8, {0x100, 0x40, "9488ca708c7ff3697abfa046028e504e78915ef4646926bfc5ee53651704e818ec62c00c311029c7b0bdad43f8fe18df4b5536eba1cae14a4807f7de22f5e2fe91c3395eb1c98b51cfc0f8e17f9e0c848390262e0d3f723140c78b5a2438e6c47f4a39207629368f7033b4e7e549d75d976a94092744d0d2514982fe901324927c514aff0da95bffdc5c028da1ff4ba4128e41af9decc1f9d442af924b73b8026b10db0ce5c696fd3daf12889070948acff02e465ee7f06f913d8de30c0d9c8ae2752a324874b630f011da12b64c573eb573bab0136ba4445be61218fd3d30f5dd01aba12d96ce590eeca7921a97aa3cfca13f"}}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xeb, 0xa, "84aebaf1a2466acfb3f90c841aa4802709d5b0d2e43582365d46acea546384ef5af28e7c8a5371fc7d53b1613ee1c2db46f934422f1c0ab3ee7f9263352f3b9f4a39aa99951dd2bc8a5b3432c3b90ed2c85e0d12da11ce07306c3826830c05d567d2622dbe8d9a32f11ae7f47c97720a9de082d6c26c17a5b6f7d2628bfbc7c7a2f3118e0d15c3faa5355e60674aa004387a6c204bc931c49a0ce53c065abada645a5c82dca6eb575ce367c2eefe3e30a48f239a0710fa0aa1a331b2a7a031055344c77447231429c3e5ab6929dbe139b450c30e80f990f43b51ef224e5345fee1e3d7d0512ea7"}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x16c4, 0x4, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffff068}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1f}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_PATTERN={0x27, 0x2, "88f6c86ef5bf578a04d1ba5e8723950e532cbf737f9b219488c3faf5047fa07f3a5b4d"}]}, {0x1100, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1004, 0x1, "df3b07ddbaad62c34999f6f738c1b00d23f176cea657d2a1f9b71aec87c476aed4f07e0d052c90e57e511a3c5d615e02f786beda597965c329e38c52ab8475e5ec0fa6ed61193090d62942b292a7fc179d6102495af5fef9beaec8582a7ad246d9fb8f602a7c7d8bf1a735203f05bcfeb35b81cb904443c21a5ae9371064b93b2a104ba5bb7fbecd0cf039fb2c2bbcb3e0d6331275e13e3a5f997e4d2fa2016f84d71bf54035e76b03e891d3b22e412322bcd490147d395cf9fc1a8c8cb20497228f5246b9ea1ea9c127ba4a8a408ed93b004f07bd44d20cdadfb6090c56a758ba18a4623e69821f092bfbcf60b7cc778560c503302d6b15ac32efee96afa2871e174abc36fd8cb9e8e014cb5a998d56f4828271ac6ea66e47633e771f429761df0827f805039d7e8b4d1b9edce2b7042a5e44f00a837f4247bd33dc17a35a934527a3c98e47f9f8265e13c8f1f6bd1f7f822c79a9eb7465c39ae250845a050a2a7873d1518b61361f41bbcd2e914c347398882a931c96647f6e3ea82bdce53ed475c89871463b1624a556b0feb258cac937260f9f60b41d2d743ad90065a528d32ca064d610ed237765f4382794fd5df2617e074d9d194f2ef2e6cf0456bd64be2acdce9bb6216a0ea19d4b92dff7cb0c69b267707ccfc912ea039c833f9051e7bbf9dffbf896c22f2832fc07ee397f280c474b09facf7deee409e761f08e1592140a33627f41a1993b81f2dfa541c145da0144ab9960cc83c2d917cc50c8800a715d511a8600106e1f7f8244654663ae03911dc074f95dd61652ec593a69da9a38b170b07e021b64dc45f6d70ca7da33c461ff16cf9e3afde3d228a78ef99d5b865fe7260baebeffb9911a11346728fca0471929242c5aee392e4292a53f2125f2a58e56230214b69aab9b098adfdcc593502112d70a64fab1f80234739844da70248728d0f08a466f26cd80fd7d438ad675fa5ad409acd23fbe1fb2fadad75881c2a983ca280bf6641325d4c05471bf3ff65d12df783bc5f7d8aeb04b1a21dc580f6ee62f4adcb94ce630c73ff270271acd6fc13a32f55cad76619e085ebe5644018781f166d3657fb8bb16a213b1d266a51eb19bdc3b9eb4c80ea5e43d64509821ba2ec94222f33e0c64575b2a038059791a95ec92daf024288cd8ebbe007c5366cf8743930389d2e6b2a325b1ef3b5f3ce29d1b93af4d54cadba57994c6f17e8197fca288861b11af2cc234e5ed20ddf70b56cc79f5213d30b05ca996473123984c1dc7a3b7a80ad80a2449a96a8069e2b011d5664ad1e977c23f641d2404685cde690bcf30c30d79eaf8f29317c606e9cd729d36b42529c0aa288607a7bcfda8c786bb0b29ee8d0decb0ff2f4e6fe1ab55c5192fa87a350c3e02b9fe29e788d768a44ef59de11ca8d6610816e4580267aece9a4d7851f426e7956d68c59dc77fa37faf5daa5b51e69ef59b665020d54b4e259a4094c64c4fbc11d306d1db9f3540d5d206eadc3b005aed9caf49ce03ff9237fe92550df6da90a3e7ac12be7a3974132bafc2032220307b126be70dc39f6fca57c082e792ba47a3323b440445939f62dfbd2debce47aa81e73bdaa0f2c32c305d6e0b49f4297c7d8ab4ef5e7d2e129156dde815a0c07516a20d454bc24159c1172479cefaf732458e2444a332da922e14f0cb2617df4ecfe73e51e9656772ad0745cd1495362078f18fee9e26ee10d8215b356db643d2df8faf03480317d1ebb216fa631ccf9f91f0215440156f0279c82ee54225d116c8e196c3bd37a9e940aeb3f04fda1edd4af94df0547d89907ebf2594e877c1a6e413b1f39c13c2d978895b2fe919709998cf72bfd2e27ecf194da637f9d971237d6645c611d2fc471f4d0ecce2b4e9b1a508be8ba1dd72e6c181db4ca1f327a2d09658d42d8ceafbaf45210c707a83be39d9d1c22b0e4b2160312a2602a04dd0e9b6e30daba963443b3e1b5be2b4dced8ebe4c8b73c2adf2f6737f6249565980d7a78e3549d798c4ff2431ce0d3e2c9961d5a38999b192c89c551aad4cb4ad9a58f77e5fa3e01478aec1c43e20f1f285c864ad2fd06bfd6415358e60dfc3c2f9555ddeb0cc963144dd52177c729e67a07b75d7e027e15034988f6abf043b27f4e83b5ba1be23c581d7e01200cfb9e7107ae6069a2c1a1513f410df76fec8c417cfde1114f73e4afc2db4744abda822e92decbb6df144da499584b349bdf6062198c81ee1a07e3743e848f6206c051873dd7b8f2c4ee83ba09615ebf0e88b8b4bb9bcec168d098c40800ff92c40c7dbbc0f395bf59cad306aaa0def7c5d5618795a9f2af197775d70bba1c6f173515c5ea4f088bface0e939164129f797e30eca8a3d081a8f7254e5f189c88c5924e6fd6883b94db0834cabf0aee735f02d6ea7abccbcb14d38215d1f5dd8024006fc50cd933c82a4377f77586cefb00d679b736d033f4e2293982ec18440d755083f3f830a4d3d2dfba8c39bbb3a2c1d32147e4388bb23a2683a114bbd0839bafb6e6d830c7fffd398b6f396c8ab3917af08b7f7b938f000948dc31b3addf30c34e93d085fccaf3ae64e231d89e9e101007a0179dcf003700815c6fbac7e16668d959712b91d5ef61080b10b162e38453d1ce155733f4d63f8d27b4f49053aca0768d64407ad419317990a00a6a3e1a4026ec0d0c12cf8085f86a8f3053dd996cdefb149cc5ffdd3154776be61d8bfcae475d9c5e9b69992a9280986250e0cac8194b4d348c9aaf801591667ccd66a8080c6b693c058e7d99a7efbf112ba57af74eca8817c8fe7bf9859828e4a84daa28dd6e507b0a1e72b087bbab673c8d264ea542a32b98fb210d0868ea141e78a2eaf8816e7123f9614c6bfa7e8cd89486b4acc7553e71254d53431d666666a54ed6796c664016c23dfe81064b55a06cb2a0934d01ca5e9095bfdf8a2f8a99bbdb6ce2d3f9be70f98466b2a2c7634065c8069a0f67751bc17e4c03cad55666b82528e817ed36d5bdb81bc9158911e17fef22d4d97c75c0e6c67790bc78b2ebf03038f1e38b4551ba580de13c7be74f0608ac6eb9bac8b2e1d3ce3a81c2da74ffacf9cee887967adff7c0b592fbfb48244c5e258525555150582cd4abe1f7215f69737cc4e70bf5f57b38442d92561f916325c3dd6efefb6f4940a052808e18e18adc8ed4647ac6d265f1d091523553bf72cffec7ad58f704ec8154192fcdf6b5fb572b4df673ad31f2565b577176ace40ae14acf19aa160f0196171b056cf027975d9f277420f985f8df69251333e68aa5be9b76359a183105a5f6068d0a50b1433c67da1d45bf30c9cf32bba273981f1c5f60eb149e8253d93ee2fc6e7b161238f94e7e37f32745e801fd2886a5e9f257dc0fb058b526c2e7437af27213c572eadfae54550004c0e00f43c26016821cc38edcd27978105558bcf013150a856f16005c865779c8f9f2652a9a4c9abbdb5876534004296c5a40ffcbc6546eeedc782e1c3aec695a278fd5448990724ade0fdff0d11551e01f36e4d8f4380c8439e19a01c0d971ce7bf531bb3f92e45ba25e59d793712a6a9413ca693c777fc1406dca2d8b1638c2902f8f01fc8b70bec17e14927872730e5cc217e7b1d44edd44fc174cb3fb1f288398a975c63c31126b2ee628174f4d1f757f7e679209cb7190b3831cfbf14fb88af19d51a16dc99776ffe88f0af5b630d04dc2382cdfc0ec3afa04e0df5c4887e39035396179370f9cc6e5b0a3bca91864993b2f539eed5b38c8d14866006f7754c17859c658228088138e2cb01eb3909a80cf99635d09d26d89a662c680fa7194cc1b6fb78665605d75a01fb3fb634b4736062ffff0a352d0f4409e4076e9d724760a1554d835decdff5d0788b0ad40109f1091bd3c7c728b0701c37c16770c381d182144db87028cd65043cc899c53a23a2fc37e0a07e408ac1d425f39ec0a6254c96d6537cf941d9e834f52e067891accf42ae3e3bcd01844eae979847868798506358a17e3d0406abfe4abb2e68e71c4490c065445129d47adca9c92062f8577500fc9d75d7af460a24aca54e844951c55b6717f647f82ce2b26757ea2e833369929a9a37ca4f72c44d3fa7962479989b7504ece796ea6ea660d34c4b63f0133f2503297756800e764577e0018a08d0ab77ed6d0a8e3c3b47b5849f5cdf46a69b38b4be6e528eebcea818755034e4ad3af07ce229c77a946c42e57b722a93359232ea6a5da95aabcf3f0e6f59dbcce67f10c9778ada8c99d9da16c88b56e302fd2e301d3ce993619e3d43cf426dc64e51d3b365f60f6289d32d69b465286560754ca0018b5d34c7f0f5d567896465b62209fb1d4169c1c3baace3bbc3a8f18f0017dbb663e8aeff835cbfedb6497af6e6dfa7d869c1dc1da7c70ce1d715273b37f789efabff760f72f413bc70caa335fe09c874998add8be9e3d5103178864141e4231f22e25eda760a3a8f88cffba4b1e5b0de870c1910e68f8cf19a1f5e0430f8d8c7fd0d48d9d128d4c71e42bbe8fab9469fe19162b94045048bdb8a3a22a5c68dc90681fe3ac43764df036ae323c91e05b0cc32012f3adb9ddcfecf6de801d10810532294e8f0777db00cf87326e7886cd8401136e8bf569f1567cf27e36b1c754ba0935cc47ca4db010295feeffb946300ba62c12dc7caa652765cb988044c4b19bcfbe7bc8bcf6d20e8199cc5c3754caa36b86d78d1d4fc4304fcacc65778577e7b2e48b6943338ed90c5b2e3991ceaa37d8b991e1bbb1e275d79cb4b78fa2d5f48928f4122e48fa5a71239c9376fd7296deb8938e397e7b27c16eff0cbd45c446dda64c6c0de11db88c3245584f0225eec2466ad880da2821510684c080a862e1c8c13c40f314abb59823ca294f05d1d1927e2c3b57af1f529169a30e9f756bc7790d86cddeceb530f25dbff7d0ddd8310ffaee1ed2c8f4f0e869e4db663b83d7a1ca4c67c7a8334007768085e06bdefa63e903a49c3c3c913fd0cb34ceab1e32fc11fac2d3636a19f709fd35b598a7fdadccfa47a004438e0483b9a27af53d252484d8fd6e040f6865b0af379812f74e1379053ff704adf4a7b4e2ef8aee0aa5491643db7df44561fd1e22cd620f0e15907c82290aafbc34474c7af12c93a268c11ed375c5f8b619424c81c1f2c60246faa1c626f8c98f4ce0c73af16d7716286a1b3792db8ff7117e2cd12fac6f19eae2e9e1f73a399d5847a52256c60a685479b23ea0948fa58cb90074e2cafe2f0f0f8aabb8b1c1322d181bd74991de0091c903655b7c93661bfcd4b9839b26bef46551bc14fb3fc1ccb96661de4a12c00666fda24eb28bb181e092a4f3366423f49942c8b55086c1e545f7b980136cebbfdee1762621e8be20bcee6076c928a9375927a60f231c2112bda93449ae9239001d81793dbdfdf47a2c36b04b82d601f045477886b74bc3ec6f4440cc581918397751f80ca7d2057d8bea235b7648621bb8a79239357f4ac2546b54e484b6c9074b5cc44c76babfe594264c24475c9f4884e3fb50202b202be4daccd696b461c205667a731dcac810e6ad236246282a71bf419844e2afc046dc4a8248b51456cccf7e43252ab912a9a365deb4256032411e0ba3fa6286f58d296db80495a0f2b83803acc9f1bc2bb350a4bf5e471464df5a5c91aec9f7cb378aebe166d96f6d8caab1cdc9f618e85dfefebeb0e06001924cd1c63328daad1288655325aba945fcc5d593cbda0c3c5a090010f895e53e7e2e0b1cddc5313b4f9a6fecffec34e01234dfe574cdd84d23607d910"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xd6ac}, @NL80211_PKTPAT_PATTERN={0x74, 0x2, "6adb3ca91af303efa9bdb62efda212827037c128b069448e463454e571ee206848b6e2db37a65ac9f8941dc41a10a7d2cb476c445946440ba38b4794dd8c7297471c3dd6dd169542f9385ec841254e99e02853b1aa67187bbcf7fd5d98cae4050cd6387f31d06492801bd550f07e457b"}, @NL80211_PKTPAT_PATTERN={0x79, 0x2, "dc4d6fd59e62e66fb57c7d9036fe17169f3189037d9ab2fbada97e7ed6a0e2a959381090c8a8b961cd55d4cdeea91ff6d2ec10939546c1b8dd5f34a50769ca8f7f393713003215574bb48c47b448b726ab2de675612fd582e23caa85577618e558d1c394465e049b2c696870781935699613b5d282"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}]}, {0x2a4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x7c, 0x1, "d3a36ad4a42d7a834cf6f8904488aab0b46f683570fc6f0dfd1c31c7fed9e03e6e26d98a1287cf7052023aecde81aafcbe485d3b2ad81ddb246eb009b5f9cb63cc1f84d735252352464fb39895b9d2b74c71b55f498a5281c02da2d406a7e01c779e733274e439d295b5a093502f6b26c761b1a3c427593f"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x99}, @NL80211_PKTPAT_PATTERN={0x50, 0x2, "c81702252be57e7005de76b31a195134475129671b66f3c59fd53e48148605ba1ffa9adfdec44ffcefc1072e6e21cff17e573d6b4c0922cc019cec9c1c3b1063d2495e1e57ae4ed99d276e88"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_MASK={0x9, 0x1, "9243b8001a"}, @NL80211_PKTPAT_PATTERN={0xec, 0x2, "0c73b75e164133220812c62e81415caccf78427d40731caeb099cfda3f538933c4b2979ca0c0ce0632d74babd34c2aebfe1d097d11c8a5f311c035ae8e1d41505d2cc8214ed8a666669a8469f8010aeaa2d0ac200b47b588075cef122c48c15b2d67fff37cd98997a05310208761d5010624adf3f68ba96238330f37ee2a44e7891718de9f4edc76032b6d277a278eb3b9772209a39858fd8d20ed5c6a7d9b460b95f977ecae871dec8413935df58e97c32d9baedcbc8c495c13899210924fb6b5471c18507fa5609042fdb87c9365c3e4d026356ff2d89200a1eac6ce47bcb0c73cc14196b66179"}, @NL80211_PKTPAT_PATTERN={0x34, 0x2, "ced3d32bdf109c3f84278fd81f0353be385dc75b703fcfe83b9cf111aa54a159f3203ee040a5073538060e19a65c7442"}, @NL80211_PKTPAT_PATTERN={0x4d, 0x2, "e70b029ce8e7adcf0c55abd4e850f94be458e77933194daddba8ce0d28a9a261f32aadfdc4d4557c0d93b96ebac69d403a83413c7a1c6c07af373a8c545566025f1b96c0d102ac58b0"}, @NL80211_PKTPAT_PATTERN={0x3e, 0x2, "a35e507db71223a0071818a55dabb7d81d5c2bfca5d146312c69b6291dc7c7863eb729606445747d70626706105eb5356b67dec2301a68455c0c"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xe9}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x6e, 0x1, "7b7a0c633b05169bddd3b734e598f696d1beba8c82f48a9963d7b2580fe3942f0b9887e712b600ec40474d516d808763d2e416816f974201b673fe045a5bb3524431be8650599e78c320702dbbda9f508dfa457d17fcc1a2ac30a5ef8138b7703ad002ad35a359d6ff97"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x349}]}, {0x238, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x25, 0x1, "b96cb63695b9d259ea8cc7aafe90d8a8f337e3ae1750cef40e607cc5e27124b381"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_PATTERN={0xd7, 0x2, "a7757cca465aa0dcecac3985cb257142db632c57b08f5dcf73544303a47ab534eae6011e0d6606f5bf4aaa06864a8fe8d4175d90c7fecadd76716c52a8e00ad541b21c66ca8d0a7a71a5cdcf5ffc1162dff2855b8500516052c41cf7916c186f70980d9e3e4aaa14c2e179cc210eaeaf5e0868f9f7b5068a52d9e6c29c0c51153b1f3f104421da9cb2caedb48b1c5d4ad1c4088c84c6154ad0f392f21ee1edf20e7b1299b6b1025631027c718fe66da64bc423778d049f64ac3855441c88976f3ff486c8a4fac0c66645569056401d1a9c7197"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7f}, @NL80211_PKTPAT_PATTERN={0x42, 0x2, "94460fb4bc261822e98f066fcfa7912fd4d5bfc2a5704e0181baa522172be8ba75b463f59cc0304144f10d23dfbab27818b22e076fe941570d6e1c1ebd26"}, @NL80211_PKTPAT_PATTERN={0xe0, 0x2, "0bab1c22502b4e1d16281593ffe3e2bb8202530319c14ce7cf2358589a0ae36bd18dadacf9a6fd470d355c48dd37cc39622ac3ac41a90537b4c130703d6da9a059796b6a7aa3494435cb9c94b370847bd77e780a9693e994ed678768cd3f6b3377edb9e0f7215242bc7c1ae26f2bad6636a926fd83c5fa7f764695a9b5cdc4927991c67edb5c9a5bfa564a8128349385b98a169b730761a52732ceb8ae11f0dc52bcbc1ce97428211e5652ab86b4e4420e18d4c6ddf42825339b0b08d9fe485c91514983ae50c3b6c159dbbbdd0c093024e9e1f2c23a1c00b44dbe8d"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1364, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1354, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7f}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x3a}, {0x8, 0x0, 0x5}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0x4}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x80000001}, {0x8, 0x0, 0x2f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x5}]}, @NL80211_ATTR_IE={0x193, 0x2a, [@tim={0x5, 0xe3, {0x5, 0xcb, 0x0, "3e9663f0a78e81f4d8068851fa5173f6f8a4988da013932c84e43ba28f3eb6c43c6b75718e0f5f6127655282a8a7c34b7970361bf516e59ca0ea35a3418964b51a4a2a310e0c7a61398d311485bde4af4fad3b6c9e584ad72697126d36330396a1b5272f91f0ffc24e172172d3be8cce573a34cd02d9d920fe92e4896d1e499c830b06b205dfe8ee895bdc84c3221c8ba0fbc9d9be3f4892676571b69385d86e46639511eba9d6242fcf0e9b5d126fa644afcc9e84d5f97c8e244240ddc8f3f5c15d5f231337dad6579553b2851f385ce0b876b8793697539b88b89f62b78b1e"}}, @erp={0x2a, 0x1}, @ssid={0x0, 0x6, @default_ibss_ssid}, @measure_req={0x26, 0x9d, {0x3f, 0x9, 0x1f, "a00b3882b97720068e9d0dc52a1ad6894e4c7ac8b98ba1596552328c25f303bf973cea390d0fbd94a90513c9ea78c3d95ae34ecef519321e470bd268a158bdd4a9cb62a8bb08c6d1df16501a9336ff6b253daaf180ba588639b4fae99c21a9466231edf45c715c933439c114e9a441da5b8ed473d98de52baa4ff2416f11854bd77ee3430efe101f526600d31f8f48a07d4ed60032c97bb18ed7"}}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1140, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xeb, 0x2, "9dc54f0130e5d15587dfcb5c129d5e5784d879063df2e4d234858adf5eed3d734e634487bfff496f4190f46ee94b52ef560dbb0e0747ad91225ca6b6e3ff1ebba9c9a30c17fad6295069255cbfb71db9d7bac7a222c930cfbe2ad84f3e377b9a797fa93da3c8340f653f77c3f59472cb33bcf152f7cc03c3c5e5a2a110320925a9da31867ccf0f847717cad3b113060d45b6cc71f77d0789ad5b64ed5b805a11f451fe91e1e3825f87009444d776ca6f08bfe6526bb6796e9744f399bf516677b0a1e92553e6274d48276e815c4cd6a1e8b230c7e6cd224399233c4ff6c48202511fed4ac40021"}, @NL80211_BAND_60GHZ={0x4b, 0x2, "298d61e3995e5928412d5ee1620cacc05d263a33854fdf04e750e6227e647cb9c34dd4ea346605296076c1554a2ee37d85701ce4532fb33a0af4bdab54841dc4e75b5cbcebe650"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "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"}]}]}]}]}, 0x6cac}, 0x1, 0x0, 0x0, 0x40815}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x3, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 06:54:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:54:47 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x54, 0x0, 0x0, {0x0, 0x100}, {0x12, 0x2}, @ramp={0x0, 0xfffc, {0x0, 0x0, 0x81}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 184.234626][T10789] FAULT_INJECTION: forcing a failure. [ 184.234626][T10789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.248349][T10789] CPU: 1 PID: 10789 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 184.256824][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.266953][T10789] Call Trace: [ 184.270226][T10789] [ 184.273153][T10789] dump_stack_lvl+0xd6/0x122 [ 184.277820][T10789] dump_stack+0x11/0x1b [ 184.282042][T10789] should_fail+0x23c/0x250 [ 184.286563][T10789] should_fail_usercopy+0x16/0x20 [ 184.291672][T10789] _copy_from_user+0x1c/0xd0 [ 184.296255][T10789] input_event_from_user+0x122/0x1d0 [ 184.301603][T10789] ? input_inject_event+0xcd/0xe0 [ 184.306691][T10789] evdev_write+0x282/0x400 [ 184.311218][T10789] ? evdev_read+0x710/0x710 [ 184.315786][T10789] vfs_write+0x2af/0x950 [ 184.320066][T10789] ? __fget_light+0x219/0x260 [ 184.324833][T10789] ? __this_cpu_preempt_check+0x18/0x20 [ 184.330416][T10789] ksys_write+0xd9/0x190 [ 184.334755][T10789] __x64_sys_write+0x3e/0x50 [ 184.339362][T10789] do_syscall_64+0x44/0xd0 [ 184.343871][T10789] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 184.349795][T10789] RIP: 0033:0x7f0fdb27eae9 [ 184.354266][T10789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 184.373880][T10789] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:54:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 52) [ 184.382292][T10789] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 184.390265][T10789] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 184.398234][T10789] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 184.406201][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.414214][T10789] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 184.422243][T10789] 06:54:47 executing program 3: prctl$PR_GET_THP_DISABLE(0x2a) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x115002, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)) 06:54:47 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000066c0)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004640)={&(0x7f0000006300)=@flushsa={0x3b8, 0x1c, 0x400, 0x70bd27, 0x25dfdbfc, {0x3c}, [@sa={0xe4, 0x6, {{@in=@remote, @in6=@loopback, 0x4e22, 0xfffa, 0x4e23, 0x3, 0xa, 0x20, 0x1e0, 0x87, 0x0, r2}, {@in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4d4}, @in6=@mcast2, {0x8d2a, 0x0, 0x3, 0x1a, 0x7, 0x1, 0x6, 0x28ba6898}, {0x0, 0xfffffffffffff8d2, 0x9, 0x9}, {0x80, 0x2, 0xff}, 0x70bd2b, 0x0, 0xa, 0x1, 0x2, 0xc0}}, @algo_auth={0xbd, 0x1, {{'crc32c-intel\x00'}, 0x3a8, "4e2701483a9655aaa6ac098f7cbae3f73a67f815143a78ec248a26c3529d756ce736944e07256a3f0fec0e8f6f25451d6cb9de92c960abebcd8ff6e6bda71e05852b0f9767653f173ae464c1719f6bb4af8dd3bcbb4e03aec8831ca872a37ba2bd420951e9137ee580fac014962c113c485a8ac358"}}, @tfcpad={0x8, 0x16, 0x8bed4628}, @coaddr={0x14, 0xe, @in6=@mcast2}, @coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @sa={0xe4, 0x6, {{@in=@remote, @in6=@private0, 0x4e20, 0x200, 0x4e21, 0x6, 0xa, 0x20, 0x80, 0x1d, 0x0, r4}, {@in=@rand_addr=0x64010101, 0x4d6, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, {0x722, 0x1, 0x6, 0x4, 0x7ff, 0x5, 0x9963, 0x5}, {0x60, 0x470, 0xcc80, 0xb717}, {0x4, 0x314, 0x8001}, 0x70bd28, 0x3507, 0x0, 0x4, 0x3, 0x50}}, @algo_auth_trunc={0xdb, 0x14, {{'hmac(sha1)\x00'}, 0x478, 0x60, "57962a4835c2840c5b30ca247d44cae198eee42cb6aae65f2562dc537176297c380d32a8ac3e956d294556c97ed434ca481920321ff0425f671e32eeacf8dcf0839cf8309d8049479d53e69f0ade0504a0f4cdf3d5c2a1c3e57378e03e4cbabf57d9807f45bc25d42c4ffeffc4b612fa4d614566b13a03ad671eeae24ab409ac8f4bd4ceac1e78ddb31ab54cfe07f3"}}, @proto={0x5, 0x19, 0x6c}, @proto={0x5, 0x19, 0x2b}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x8020}, 0x2048000) sendmmsg(r1, &(0x7f0000006140)=[{{&(0x7f0000000440)=@generic={0x11, "8cd270990587e08d4e38cdd778ada38e18a485b66a2f9e94d338284491dad44b781b330bc5227cd6bd89700ca06fa06cdfcbb3a61c21c2bfc2634f844ec6303a9e5b39a4375f11e55457d2672353a09babbca569ef184d5fd86721cace81212abfd0a587e29c8c2a87b36e6688968b695b1624b316e76e7f46213fbcc3c6"}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)="b0c9cc7254c0f08d66b9ccd403686199c709420be9a3561b47f8825458621e7e0089907dd659bd855dcdf88ef5bca115ca16766978ccded4a112502a28c699d304813fe25beb9ca280e22f404ccb93278c7249819692ea0d72c0b004a52bd7705e8ca04a3a4a1a49bd25df818bbeef16759555b74a7021c0c7ae8536c1509660e2e98722c0ac356380ea5cd2bb73698ca75ef29c7789681ae7ac2c9ae7682bff8399029b843652fea9f719abcea7cb6c32edad00ad1d3fcc4fddb5696ae9236641f88e1d438ba05d3eacbc0ddf35fa52ace44a3dd4f94fe98f50ca7df4a092144c0a2d1437c3d8838872cebd4c63", 0xee}, {&(0x7f00000005c0)="85d9e30f7f19aaeb98d8b3f36d35064a66abb7bcdaea03b097cad16f5b78", 0x1e}, {&(0x7f0000000600)="4124d92852e62dde5c643cc1dda162fe95df12e9ab66efed81ea93bf6ddc3b8b8eaf41fab637b8f5908766ba887cdc1effd546143f8fd8690447386b4afe0258ced6b194f4b7e82fe625800359f04cea34ee2ceb1a763f31223bd332c6ed1b3586a0dca22623a5179508647014b8e9c9fa0bf331cd4eb5ce9635cdaeef4ade4584fd5cd533916b09d2c987e803c13c17a7646753b37298fceeb4d20098a9e87565dde649966c02ab746b9b00a514", 0xae}, {&(0x7f00000006c0)="cc271c1a6612ed65323dfb2a818951d3ad761d238bfa5e31739ab2a5935733c4d88b0cc727623df359969825487e7ba9c2e76feb1d156346193568972d404002afa098ef254b5b394593bf21dc236c286a7a20296f5177c8056fcb951d", 0x5d}], 0x4, &(0x7f0000000780)=[{0xa0, 0x0, 0x5f88, "7b4cf4b77a0b7634700eaca96365f4bfd817b837f4691dc04e81fae37dde3b93c38d7e1b6854fb529e4d0e2b5859fbc7cfcb2397a2215a70b403e98ee19c20f98ef61e928206626fc2857a9ef2b1c677abb25dfa992883f09ea58ac40585dfcf603272d7d2056e6105f8befb6681f3cb1e27e0e9f978b3739a4a1e951b0f903485983df751612633490194dfa971f735"}, {0x40, 0x118, 0x9, "ff2a8a161ba90224a73d49dde21597232682d45b0c6b1074935aab81a4755731ede7033f4cf24acf3b62f427ae"}], 0xe0}}, {{&(0x7f0000000880)=@in={0x2, 0x4e23, @multicast1}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000900)="95142e0e14c101d4ca1aed40afcce0653f0200c5a32eb72562d4b18a6cf51b7d681b0e85a83a691d4101932d9420c81b890ad4fd7397a10db451be8f83b790fe94e8022e5b0fcbde837a98bb2638509e55b598027568188429a13e7b4958066b04931d6fbd6aa36ae9a908f3a44b", 0x6e}, {&(0x7f0000000980)="39cc1940ab6b82ff1f8f6e08083de9f64ff0ac19390bceed51055bf358b0d0e17981250b444d8261fece3578861761ddd8664d31294664844b99f4d974ddb060e259c0ca21ee0b5b7b6974c42812", 0x4e}, {&(0x7f0000000a00)="5584d4c7a6978c2cbc299c424e24386b27ea916f3e4300e4a30d17d90a9792b1acccf1d5721e3a51ef0ed0698d3cecad4821b8d5ebc57b6399af378f1667c0aac243aadc5a6b801f475efd7790a67040899aaa14671680", 0x57}, {&(0x7f0000000a80)="68cbe747772c6732039f5838afb4a85f008919a678c74d811f5adffd7574c56cb9a1e7f07ec6fe2e940cbdea8b2ffb8177f3a3ad13f72e1c64c3a7f81ec47c485cbf2876e9b1eede963489f4a796caa8f56a8275bc7c5c23df89ffc0b2d9692f6bd545a493cfb9c4283913b2137a6c83268313b41e665d9d567c9f008ec569be93e8c1cd9030fa7c0889238815248b4c50e0db13b47c2674788a83412c5316bd8c7c96382115e6434fabbe0f05ea728706472f743763ddcf22c6", 0xba}, {&(0x7f0000000b40)="38de1a24356bd115d610b1af97f5", 0xe}], 0x5}}, {{&(0x7f0000000c00)=@isdn={0x22, 0x3f, 0x6, 0x5, 0x8}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c80)="f767b6d3e47bf901fbd7a688f13c9a09ab5723544e52a109dfe787fd0ae438526e88c4352b82bf825a20f7b1a9ca5d0f508eb5d7fb65a3c0283cb9ac0abe1ccff83b6922992cf0c04400ceaec995c40d9edaf056a466cc0c46297ab16138c2420642de659771120c052c153d256778e976920d4d5aebc95820369e10e7eb91ca01055e49a640c1", 0x87}, {&(0x7f0000000d40)="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", 0xfd}, {&(0x7f0000000e40)="bfb7b660b2de4c20603d471cb586b2c19f37246f96ad97613918b4d2f6ff5482e3", 0x21}], 0x3}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000ec0)="7d541979e6f76fde501f5971c87208c9a56e15b4e3f4fc953f28cc085c04f6cc6cdedda7475464b2914e1a99b42cb15761016c42399b187ffea3f84f8c21c66673a82e232b28d227ba34a3977d451303a61a842f7ba82de7707710003977d45e661751e92fc841d9cedb0e9b580b4d976e47b4e42a69e97c082f2c88f671c0b0479636f9135e7757b195a738196011eb96ed228b8c7e79755cd97a42d42674a599ba8ce18e3063c6c38788997f63cba683f5d0e0168b6115038121af92ecde749d049d622e64fbf241aaef9023e7d4a1e582c73b9b03abbd1ea1c8e2ace46fd1512dcb2acac8ae71cdca76d32faa1ab642fa6937dcf987816f", 0xf9}, {&(0x7f00000010c0)="7c358787b7de7f81df3d28cf34441725d6a50d1b5f14c52c85eb23841b7586d25a3e041517ff5adf0d042a9ba527135dd35d095415131f9fed4e51b4e6821ec90281590d21a7c87015448b53357f4a957021db7388cecba94aadb8c90b424b26c1b0b6f824b368ae831b7ed33dbc57b7d2265ab37b5a853c1e76844950d4c0818987323c519c05e47883e479c03954f0b10767c9deddfcf50ca830ea2cb8e3f2cf147d08e7b0443e6c220e1572a796cba2ba0108b456963e65db83a89b3dcaaca4c726544c6235c8428b4c61ce5514b6a0206dfc3e88df1dc061e025c864ed3ff060e7cca55eae2e", 0xe8}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f0000000fc0)="5fbd287e6cce8c6ccb71f0cec5bb7369614d6366658d50e1fb55f6f5ee4537219abbfda4372a787fc80097d2a2d0c24a4a9debf89c77d0716b379a92161df612c643492f087c5dc023baa48883fe2032e97be773a8700f024b810877e96b9626b34ae33457d5d60c710c2809c0dfed99067676f7bf7ae78e51a18afcd6a95d822c470c92f5433bfb86f0a2adbae5884aa3968b8093", 0x95}], 0x4, &(0x7f0000006700)=ANY=[@ANYBLOB="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"], 0x2170}}, {{&(0x7f0000004380)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x7f}}, 0x80, &(0x7f00000058c0)=[{&(0x7f0000004400)}, {&(0x7f0000004440)="d10f5482f9c1b328919043497ed687dbb684b445f8561eed151f662c2c6415a3d8276ebdbcf110e8200a665411fcb0e7", 0x30}, {&(0x7f0000004480)="4b7057960efd59ed1136f4a9aed78b3cfb18f2658cc0f8d5ed9889ba504c77979b442727e3d1c245b32e77ed4a68eabcbb0204c6477666c9133b0ba0007f2c5b85053dcefd051e924e3daff5124c3766fe4052d371368a8e03ad6e3c32a75b607bd8f3097668b0d2eb28d0c1b3c7580c301810cbed5b0ea14f72fcefd6ccfea79520c53a5dc886a15036e1b72cdf4e6322f3dc5dd5de0028e32fb2bf6a03851340f64d565a01f47ca571a8d4ae4191affcef37d32c581f75edd7383225e4c6aea69ff91828649e3f80da4655c98def6adec0bf66798bda08d43031b1e7a84a9274b417eef84244cb", 0xe8}, {&(0x7f0000004580)="7040bd8d387c8bf87ec022fd018796679c322417ef5700c762f95066f538b6a83f036f2868e3937143cb83d58c99f4368ad4d21c3b732f4e28e17ef07468a237df9499dad5b5869eaffb86699b4c1d8d400fd3a211fdfc43ef5a4066a94fb9b700a88ce79f349612b142cd8473e7bdcc078a979a639598434ca46bafcf0faeb18e89a2", 0x83}, {&(0x7f0000004640)}, {&(0x7f0000004680)="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", 0x1000}, {&(0x7f0000005680)="75e62c2be8d225c21be9d9701295e4aa8c3614c8c465d40f2d8320439c33fc08ded91d1e7de93d0923a7bb08a1a5c0dd1e16e36405", 0x35}, {&(0x7f00000056c0)="8782b00064de97e7e4539b5839fba3ba8eb7c3a19a805b60", 0x18}, {&(0x7f0000005700)="0975c483e66d4f9296a0a8563cd0d20a65e5e41f127ea2e20d26a731d02b7da7282ec982ce912f609f2281f187bb9dab7bf24b55ad4f6dd67de7827f9f1db346ad568b4509570433f531be98939a159a7d497a4af801def6b3fbe753e483a0842f43fab2761c92e849d6a16e207b33f0b7e022ff073edbd855235918cb603a5c238d741e3da1f4fce3fa8372c29b0b292b4923cd796626efd74ec7636769c3c2fa40c7dc2efe80d73cfe192794a376f8f33f911f9b049117e36cac5c577c477f94f77b1c778ba9bc14c395e604e9878e8d726249ec6f4aec1420fa94237a1bbf4a0340", 0xe3}, {&(0x7f0000005800)="b4fe3e2196bbfce10a12cfdea522b99775546ef939c0a5ac027fcfff4e5a7fa03dcb23b78bf4ad869f0fd3d41b8cf2b73ade902cafd7beaa569a11c1de99fcc3f85d2c751d36c31cda43ef29591850b7637e478b77bae4ce971e030d8be20483ac993f3a2c9d6157c8262e67e9427d07e4f3e135caf19e0d92fc8f5a8f92cdc63538d7f58304619c2496741fe599fa67949ad0a422d6fd822adf257b0d65cf", 0x9f}], 0xa, &(0x7f0000005980)=[{0x70, 0x114, 0x92, "65feaf2ba6c75eb40f0facef370440a159892499be29b3dfef6a3e9f7a5e643baf3640d13b4bfeb8e8c9f98a2790eb93e252e6c52fc07ee8324a48ab38cd5028d5bbfc9bf72052c6ad496e79e5df0a8a4b8b06920f01b518eef68db5a0"}, {0x68, 0x88, 0x0, "3f32496d12d770ac2ff847328cbb97be6f358bd92e67a1241176697aaddeb99b3681e49b68d339a82aba75d77d7bc328b7b698c77418faffe8bca47f01fed136fa54d9003f4949ad72a0d36864e225225f9e"}, {0x58, 0x1, 0x3, "4d33c0968c92e63bd19bf2eacfb0cc997a93898b07c27018f7e27379a21170a8425e7f27532fde444dc53ea1b42b2ac833bc5295aa929a2ea5d270d1bab53c6adf854e8f9df5cc"}, {0xa8, 0xe1, 0x7ff, "a57d986290ef6ee37511db58421e89a7dcb91e331cbab06a498ff2d1bd2a3ce889d84a486da76c38adeb8ecac9b8e0967a921562b8729ac209ad84f1717adee0d7651c81b2b988f5677923523cf0b15c82d7e6e3a8416152698f48338a5e15f867f416eb7c0a6d25e3be9c9c1f258e71739f9f20087328da3682959a0461ec9e75584c32d15712785869cb8771a2bd23958c32dc5e"}], 0x1d8}}, {{&(0x7f0000005b80)=@nfc={0x27, 0x0, 0x2, 0x6}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005c00)="886a04bfb5431331f60fa6b67fdc86eaab29a7436149b1180b29b9c00c766509cdd4b87bb5ea700a2233771f56f16b8ea80fbf340d7a782ab932b35e53d63e61d5aa19b1ecf1f5bdf28d0f4ff5d7e0995d13da2756feffe1213884c9441cffd87157cd18aade348726638dc80f0c42ecdcef2ecab3b7a15dfcdf2c78af5e86325bf64ce761f262437dcd81080a508c7af55ea8f52fa1240ea8aa9e03ab070d150a380894b75487c05133e759a329", 0xae}], 0x1, &(0x7f0000005d00)=[{0x110, 0x88, 0x81, "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"}, {0x90, 0x6, 0x7fffffff, "6ddc6b8d9eb38030cd30c5563816afc1989507a061f12605d55d1079529740d99c045b284561b569b33f9a7f7749537010f8fb477b5f2890fe62d4ae2b8c445cb767beaac32ccf1351ee0c529b4a623276985e52f50399b055efbeeecddac23f153f9bd77400cbe47b3eb34b069c451c2de9398b067b8d8430"}, {0x20, 0x102, 0x7, "b98a948a731af0b2c8"}], 0x1c0}}, {{&(0x7f0000005ec0)=@phonet={0x23, 0x9, 0xae, 0x4}, 0x80, &(0x7f0000006100)=[{&(0x7f0000005f40)="b875d15f597cd34c8bdedce4dfab4c0bf820e7c9de1ae0cd503eee6f0a01b62da3d470c5709b2b9232ce7b14b14efb3474b4c15918d1fa7a1a07e65fe806bdaba1093c27b0e4bab8886460a10bdabbfdb80478e848684a80bc6e1acbd84aba1662dfb7008bbca31f78a124dc12d42269fc77924f526f2247c6e1fdabac06c7480dbc77c94ad3870b00a8f8d04a2f2ed50351ea917100aa86c6040d949a279b012841ae6c3e9a28129a8a92aac0a18d6b0f2d09eeabdb9c91140f29a4c2f4df5ac198041c", 0xc4}, {&(0x7f0000006040)="5a2b8c5fec70313a7328b3692d09c70fa535f19c9cd9728032774b3ad7aecf186c3237fd831d8bf51e725a2dead0801452be561aff4b988a84", 0x39}, {&(0x7f0000006080)="05f876908b2f16905abf9d654c6e818fb66b2522c2c295a14c2e4a28709cefe5bbbc6950c160fcf1d0", 0x29}, {&(0x7f00000060c0)="19d16967f6747a06dbcfb1a7ada43fcef5531a583b6d0a6e5fa93376fe38ecb2bc16f695e44280bbaf246221d976f77cea79f3", 0x33}], 0x4}}], 0x7, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) r7 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r7, 0x208200) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r6, @ANYBLOB="003aa500f6fffff90305080003000000"], &(0x7f0000000240)='GPL\x00', 0x800, 0x83, &(0x7f0000000280)=""/131, 0x40f00, 0x2, '\x00', 0x0, 0x1d, r7, 0x8, &(0x7f0000000340)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x5, 0x4, 0x7f}, 0x10}, 0x78) write$char_usb(r5, &(0x7f0000000040)="e2", 0x35000) [ 184.476788][T10817] FAULT_INJECTION: forcing a failure. [ 184.476788][T10817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.490421][T10817] CPU: 1 PID: 10817 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 184.498841][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.508943][T10817] Call Trace: [ 184.512214][T10817] [ 184.515138][T10817] dump_stack_lvl+0xd6/0x122 [ 184.519773][T10817] dump_stack+0x11/0x1b 06:54:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 184.523919][T10817] should_fail+0x23c/0x250 [ 184.528358][T10817] should_fail_usercopy+0x16/0x20 [ 184.533452][T10817] _copy_from_user+0x1c/0xd0 [ 184.538082][T10817] input_event_from_user+0x122/0x1d0 [ 184.543401][T10817] evdev_write+0x282/0x400 [ 184.547821][T10817] ? evdev_read+0x710/0x710 [ 184.552327][T10817] vfs_write+0x2af/0x950 [ 184.556574][T10817] ? __fget_light+0x219/0x260 [ 184.561253][T10817] ksys_write+0xd9/0x190 [ 184.565556][T10817] __x64_sys_write+0x3e/0x50 [ 184.570200][T10817] do_syscall_64+0x44/0xd0 [ 184.574699][T10817] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 184.580627][T10817] RIP: 0033:0x7f0fdb27eae9 [ 184.581415][ T24] audit: type=1400 audit(1636700087.921:199): avc: denied { bind } for pid=10820 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.585061][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 184.585083][T10817] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.585103][T10817] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 184.585117][T10817] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 184.585133][T10817] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 184.585145][T10817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.665305][T10817] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 184.673278][T10817] 06:54:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 53) 06:54:48 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:54:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) setrlimit(0x4, &(0x7f0000000080)={0x3, 0x8001}) setrlimit(0x3, &(0x7f0000000000)={0x40, 0x8}) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:54:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 184.761335][T10927] FAULT_INJECTION: forcing a failure. [ 184.761335][T10927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.774570][T10927] CPU: 1 PID: 10927 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 184.782983][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.793031][T10927] Call Trace: [ 184.796397][T10927] [ 184.799752][T10927] dump_stack_lvl+0xd6/0x122 [ 184.804339][T10927] dump_stack+0x11/0x1b [ 184.808487][T10927] should_fail+0x23c/0x250 [ 184.812935][T10927] should_fail_usercopy+0x16/0x20 [ 184.818075][T10927] _copy_from_user+0x1c/0xd0 [ 184.822661][T10927] input_event_from_user+0x122/0x1d0 [ 184.827983][T10927] ? input_inject_event+0xcd/0xe0 [ 184.833008][T10927] evdev_write+0x282/0x400 [ 184.837452][T10927] ? evdev_read+0x710/0x710 [ 184.842014][T10927] vfs_write+0x2af/0x950 [ 184.846325][T10927] ? __fget_light+0x219/0x260 [ 184.851024][T10927] ksys_write+0xd9/0x190 [ 184.855398][T10927] __x64_sys_write+0x3e/0x50 [ 184.859996][T10927] do_syscall_64+0x44/0xd0 [ 184.864413][T10927] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 184.870348][T10927] RIP: 0033:0x7f0fdb27eae9 [ 184.874754][T10927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 184.894375][T10927] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.902784][T10927] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:48 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x2, 0x8001, 0x0, 0x8}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) 06:54:48 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x2000) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 54) 06:54:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 184.910843][T10927] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 184.918812][T10927] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 184.926777][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.934847][T10927] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 184.942821][T10927] 06:54:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='()\x00') r1 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x1f8aa95307716fd8, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x4}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x8, 0x80, 0x81, 0x47, 0x0, 0x3, 0x200, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x200, 0xb4e9, 0x24e1, 0x9, 0xffffffff, 0x6, 0x2, 0x0, 0x7, 0x0, 0x401}, 0x0, 0x0, r3, 0x9) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) close(0xffffffffffffffff) r4 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) syz_io_uring_setup(0x42bd, &(0x7f0000000300)={0x0, 0xb0b0, 0x2, 0x2, 0x3a9, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000000380), &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x8, 0x2, 0xff, 0x0, 0x8000000, 0xe0220, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xe55, 0x1, @perf_config_ext={0xfffffffffffffff9, 0x401}, 0x40, 0x9, 0x6, 0x7, 0x5067, 0x401, 0x5, 0x0, 0xffffff01, 0x0, 0x1}, 0xffffffffffffffff, 0x6, r1, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x8001, {0x0, 0xfffe}, {0x12, 0x2}, @const={0xfff, {0x7ff, 0x0, 0x8, 0x7}}}) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x35000) 06:54:48 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x0, 0xffffffff, 0x5b32a60b, 0x401, 0xffffffff, 0x7, 0x5, 0x8}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="06000000060000300000000000000000"]) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x7) dup3(0xffffffffffffffff, r2, 0x80000) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x35000) [ 185.022491][T10941] FAULT_INJECTION: forcing a failure. [ 185.022491][T10941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.036606][T10941] CPU: 0 PID: 10941 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 185.045120][T10941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.055165][T10941] Call Trace: [ 185.058436][T10941] [ 185.061358][T10941] dump_stack_lvl+0xd6/0x122 [ 185.065948][T10941] dump_stack+0x11/0x1b [ 185.070155][T10941] should_fail+0x23c/0x250 [ 185.074637][T10941] should_fail_usercopy+0x16/0x20 [ 185.079709][T10941] _copy_from_user+0x1c/0xd0 [ 185.084371][T10941] input_event_from_user+0x122/0x1d0 [ 185.089659][T10941] evdev_write+0x282/0x400 [ 185.094082][T10941] ? evdev_read+0x710/0x710 [ 185.098587][T10941] vfs_write+0x2af/0x950 [ 185.102834][T10941] ? __fget_light+0x219/0x260 [ 185.107517][T10941] ksys_write+0xd9/0x190 [ 185.111767][T10941] __x64_sys_write+0x3e/0x50 [ 185.116431][T10941] do_syscall_64+0x44/0xd0 06:54:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/141) [ 185.120891][T10941] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 185.126787][T10941] RIP: 0033:0x7f0fdb27eae9 [ 185.131227][ T24] audit: type=1400 audit(1636700088.531:200): avc: denied { sqpoll } for pid=10942 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 185.131231][T10941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 185.131253][T10941] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.131306][T10941] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 185.131319][T10941] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 185.131331][T10941] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 185.131345][T10941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.210714][T10941] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 185.210739][T10941] 06:54:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 55) 06:54:48 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x3, 0x0, {0x0, 0xc000}, {0x12, 0x2}, @cond=[{0x81, 0x0, 0x7fff, 0x8001, 0x1, 0x3}, {0x7, 0x3ff, 0x200, 0x4, 0xfff6, 0x3}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x5}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000080)=""/30) 06:54:48 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0xa, &(0x7f0000000240)={0xfffffffffffffbbd, 0xe18e}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x4, 0x40, 0x6, 0x2, 0x0, 0x3, 0x30008, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xff, 0x1, @perf_bp={&(0x7f00000002c0), 0x6}, 0x3810, 0x81, 0x6, 0x8, 0xfffffffffffffff8, 0x8, 0x200, 0x0, 0x6, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x4, r2, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='()\x00') perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x81, 0x6, 0x3, 0x0, 0x3, 0x8439, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp, 0x2048, 0x10000, 0xcd8c, 0x6, 0x0, 0x800, 0x0, 0x0, 0x8, 0x0, 0x401}, 0xffffffffffffffff, 0x1, r2, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000000100)=""/31) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r4) 06:54:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000000)={0x80, 0x2}, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000180)=""/190) 06:54:48 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000, 0x115840) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x900, 0x5]) [ 185.362129][T11260] FAULT_INJECTION: forcing a failure. [ 185.362129][T11260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.375289][T11260] CPU: 1 PID: 11260 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 185.383707][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.393760][T11260] Call Trace: [ 185.397035][T11260] [ 185.400052][T11260] dump_stack_lvl+0xd6/0x122 [ 185.404642][T11260] dump_stack+0x11/0x1b [ 185.408802][T11260] should_fail+0x23c/0x250 [ 185.413344][T11260] should_fail_usercopy+0x16/0x20 [ 185.418471][T11260] _copy_from_user+0x1c/0xd0 [ 185.423074][T11260] input_event_from_user+0x122/0x1d0 [ 185.428414][T11260] ? input_inject_event+0xcd/0xe0 [ 185.433436][T11260] evdev_write+0x282/0x400 [ 185.437878][T11260] ? evdev_read+0x710/0x710 [ 185.442391][T11260] vfs_write+0x2af/0x950 [ 185.446646][T11260] ? __fget_light+0x219/0x260 [ 185.451379][T11260] ksys_write+0xd9/0x190 [ 185.451407][T11260] __x64_sys_write+0x3e/0x50 [ 185.460269][T11260] do_syscall_64+0x44/0xd0 [ 185.464709][T11260] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 185.470608][T11260] RIP: 0033:0x7f0fdb27eae9 [ 185.475058][T11260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 185.494667][T11260] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.503074][T11260] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:48 executing program 0: mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/69) [ 185.511043][T11260] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 185.519010][T11260] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 185.526976][T11260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.534981][T11260] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 185.542955][T11260] [ 185.549340][ T24] audit: type=1400 audit(1636700088.971:201): avc: denied { read } for pid=1424 comm="acpid" name="event6" dev="devtmpfs" ino=459 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 185.571003][ T24] audit: type=1400 audit(1636700088.971:202): avc: denied { open } for pid=1424 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=459 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 06:54:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 56) [ 185.593773][ T24] audit: type=1400 audit(1636700088.971:203): avc: denied { ioctl } for pid=1424 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=459 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 185.647737][T11274] FAULT_INJECTION: forcing a failure. [ 185.647737][T11274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.661048][T11274] CPU: 1 PID: 11274 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 185.669457][T11274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.679604][T11274] Call Trace: [ 185.682872][T11274] [ 185.685791][T11274] dump_stack_lvl+0xd6/0x122 [ 185.690378][T11274] dump_stack+0x11/0x1b [ 185.694532][T11274] should_fail+0x23c/0x250 [ 185.699006][T11274] should_fail_usercopy+0x16/0x20 [ 185.704066][T11274] _copy_from_user+0x1c/0xd0 [ 185.708676][T11274] input_event_from_user+0x122/0x1d0 [ 185.714018][T11274] ? input_inject_event+0xcd/0xe0 [ 185.719065][T11274] evdev_write+0x282/0x400 [ 185.723553][T11274] ? evdev_read+0x710/0x710 [ 185.728060][T11274] vfs_write+0x2af/0x950 [ 185.732309][T11274] ? __fget_light+0x219/0x260 [ 185.737000][T11274] ksys_write+0xd9/0x190 [ 185.741253][T11274] __x64_sys_write+0x3e/0x50 [ 185.745850][T11274] do_syscall_64+0x44/0xd0 [ 185.750272][T11274] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 185.756163][T11274] RIP: 0033:0x7f0fdb27eae9 [ 185.760597][T11274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 185.780224][T11274] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.788637][T11274] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 57) 06:54:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 185.796610][T11274] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 185.804582][T11274] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 185.812551][T11274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.820518][T11274] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 185.828497][T11274] [ 185.875857][T11378] FAULT_INJECTION: forcing a failure. [ 185.875857][T11378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.889081][T11378] CPU: 1 PID: 11378 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 185.897491][T11378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.907578][T11378] Call Trace: [ 185.910848][T11378] [ 185.913773][T11378] dump_stack_lvl+0xd6/0x122 [ 185.918366][T11378] dump_stack+0x11/0x1b [ 185.922528][T11378] should_fail+0x23c/0x250 [ 185.926990][T11378] should_fail_usercopy+0x16/0x20 [ 185.932017][T11378] _copy_from_user+0x1c/0xd0 [ 185.936603][T11378] input_event_from_user+0x122/0x1d0 [ 185.941886][T11378] ? input_inject_event+0xcd/0xe0 [ 185.946920][T11378] evdev_write+0x282/0x400 [ 185.951366][T11378] ? evdev_read+0x710/0x710 [ 185.955868][T11378] vfs_write+0x2af/0x950 [ 185.960121][T11378] ? __fget_light+0x219/0x260 [ 185.964792][T11378] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 185.970592][T11378] ksys_write+0xd9/0x190 [ 185.974937][T11378] __x64_sys_write+0x3e/0x50 [ 185.979523][T11378] do_syscall_64+0x44/0xd0 [ 185.984018][T11378] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 185.989908][T11378] RIP: 0033:0x7f0fdb27eae9 [ 185.994316][T11378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 186.013920][T11378] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:54:49 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@bridge_delvlan={0x84, 0x71, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x10000}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x25}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48080}, 0xc040) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:54:49 executing program 3: syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) 06:54:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 186.022355][T11378] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 186.030335][T11378] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 186.038377][T11378] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 186.046411][T11378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.054400][T11378] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 186.062382][T11378] 06:54:49 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x68, 0x10000000, 0x0, 0x4, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = gettid() ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000180)) rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000010c0)={0x1050, 0x1b, 0x4, 0x70bd29, 0x25dfdbfd, {0x4}, [@typed={0x8, 0x2a, 0x0, 0x0, @pid=r2}, @generic="3b14a728a9f5bff55cb9848e2cbc07683973c589c201e11833523e8e80d89474ecdb99984fc45344d9e056e9eddb60b8897684ea", @generic="bb31b0a22c6b7cebc40b5f22926c09c77d043965c3b32bd2d3fa962495ef8506aade7f7aecd0847fece33d641d8c772a8279d532b9016e85c219cc33c32bbc9ad71131f3c4dcc0bff87e33fb7cb4b2ebcc6babaf490f0cdd5cf5da1f0ac1acd9dab552bbda0438d5ae8cb220b299efb78b4a63cdff881151f7bfdac90028bb81415e958e8d13796f196171751ff64d7ebccc2d41837b80d6e4b4079d668a4b3630ac1806641c16db9dfe1f8a191badc2a00f62316bd808b1f7edf63fdb10e75f9a7fae98b43d12f18c995523baff39708e97efa688b0697707c52b3ce641bce3120bd1efc055c38f194572941eef15049ec43ca1ee28211f5782e65b2d3efe077ec8634b960cdb3a9abee9800005b7ae92ae411749aa1c42b7f00158dddba6f4537a2f6bffc07d9ef55148286cefb66cd4043a417f22d45590d3b051aaef2e131b3c7db194546f484ff9e8d3cd287aa6c398ba5c909ef7af432cbc361768e7fe2a9d8add77333db32ef7ca5f52d909511908f684de8f25d41db1db10d05024da8ecdbd6821f99441fb0e143c5e4f1600c9baea7aac6043e0c14535cf9c3a5d08594097ffb58a2ff56f94d9a02838a36ae7787529474a8dd9fb6b997f6fd32972d5f1bc88aca90815db11c6a15d0c4a0618705fcb9a9248a65bf72ed03fb3df9aa7b13f846b496f1195bbbb8546d62cccc087d6a98a7438d979c3a5c1a4b3e1fcf79d9040663069e026117b194a59ae17677aa26d5c287c84c549356e5138adf6071834660e973d517dcb982901d29b9c510dfebe97bcc8e5d76816d1ea6dd0cf9f2642c8c257b749416b6c48a06f4273edfc92679e6fb528d2c57dd38c1bf635d7743be6c70d8abbbaa24f4ea22030640263034e90a30611adc41c604fd7e0b4309883e355620f12b85b16f89d477ba75463ff77698f7e575ac742d7681ae9ee11faaeaf566d203b5ff541b2844f26297304efe00fc1688bea4ab3e461d4117d2039334f2d7f1f3c66ad8b4c185e8ab5bc39bebc11bdfb00d5b6dbc7c9198e8b64aefeecde14026108cc6d4dc68d319c66d5f3c2ffec2053c69c58220f920c5c78d88e3bc6a150d6d8994ebedc5275820c5acefb196ee260ce1d50562a31b94996151357ab6e1a091e1a6def6d8ba93c8df6bfbc16770e4516a9087e6bbeb6ada722fdbe135b4be12b49fd35c1ff716e93dcc730f0e3770ecc28c79a879f76c03b5047297479a950e7bb467ed843c989e3188b8591e45042acbbfb2c2a491584df32cf020e0e41fb63f5ec884f0644b4b86ad902052ab8a0e569adc1e8cb5a96e3d11494ccd9d8cd51439b0fffe2c0ad87cc563f4e4e1c64681b2b581b6b4d50c7fee167134d749682b5a906bd6a262b8516bd12df53543dee41be5c9c3d3919827aa1dfb5a6fef70fe9f23916e01a57464f29ab4d21f5c4a63d9c0a8823958bdcfdd4a94d2ee290e79f3d805ab2fcf4d4ee01d585547a4b417118bd9206c54a73c9e37aa52283be7295bfae637437d2b9f5e0ade9f31576004debaca34d2550edcc7b2b068689a300d22e4f54978a77357ecc87334b35c5a5d00ba1e8a2fc690b241c2d615ac49d1f474111f436b6de3bdebea352f1fe6f991c2a97b6863ad0a2187f9a1cce36ce0e44e5fcffc5e56691ddf066bed7f419647ac7d7f51fd5e3dafb329c5abc73fa0b51b14e302a3e47927639b3048202aa93cf16272af6189822c3b31e4cd80ad707b76ace784bd050b4ca4c720a195e225a9e15f8dd9e1f56c309f91375ef650d98053a5ba317e48d7d82f10a6f33fd59be51c05a5400cf2b52f4fe80186e5d54b9e7f0215aaf4d0990cbdee46ab5b9cdda9b849e556c301d2d083d2f55a590e1f8cdbd311c1cbb82833285f438a12358744d5c88c8f1ff9c80b8e2bec2eb551d426d9bb139d4e98b25e18f7a1826d94f4058f43ee161f40350c3b9922983220e5ef38ee7f45e2509c3da20369c43bb93bb709e6b43ad804cf44e356a126dfa1d89070b982360c2c8c761d495122a134c7717c250bbb6738c898f9c04c20ab91f6361b088d6678e69bfa12b237fd1ca3f22d2ec39eda7eb7a98d9a0ad2daed2e966da4eef6af47ffcb0ad4844039c1bb69302e494178ecfaf8383cd5b814c15c118472764ff2252d7c19d0bff3d2d8f4a7645c62226feaec75f9116bee448014e9c5961c03d15ae57f8a9334cce35d2c570e5400b8ca8ff15077132f131df4b3c8283a142097c97b633eb1a1d83aae27f23b6295a6f56363dfc25123a9b3698324266877269e24946ebaa6430e0b7b0fb5bdf7824d5cf60c689fa8adca9fab6c1ef7dd94ef1de55c8f152993ee6a4ce638077b120eeb9a999d2a655c65820012d287a1f01e07b803a42d4fc1f5d27e3fa6a74b3afe548b0b095428cda1b9bce131ea56617e7452da80b5517cf4ff7cf5eef6e03992bd3d09a8edccf8d7e446fea8664e4e070a3862659577df29e2b1d6c0591720575a5c522142f486412396a29fa78ffe35afdf4618c74ea8b3275667a3cdf1e1d84d5052cd2f43965bbb0289a9c2893f74d6546403d98451b40e6f3951eb3818cb655add01aabc88025d80cda7ddbb4b9565df8b4e054e43d0b8f01a6db987c7fe029d35abf2dfe900ce9b77b845d11cc7253e3b3c0ee2f816e9890568402c1dc73390e9b3be92a7c9e3e0c69e34b00d2d322d8f09167def49262c8905c741c2fbb21fb83d12f82efe47785c7313da9ce3da93c2dcb589b8d677b79757b8403e7f2df1700f22593be0bb24526680626ed84cfd4d69124bda400f5eb0e6c13e44879db487d6bc4e8405272062e517e56f8f751dd9475ae126cd039d72a5b24d0288ef0ef7a748ec18f609949a77311299565376d8d83e8c55a8f2586e140bcc8ba99cd8a7ef02978ac95eb94c9dcec68f584123ec5cefe17b93785f04b6d8861809e38e0de1add4672c912d05a6f6ca2ec8136515e7d62efcb1c418f9fdc6170cb47260c7c37adb0658a215119ed02fc7ba1320094f8ca2c3bbe9b342ec14a8038ca201b4345d6ac14ca6fe72cb0e6c2fef1219006456e36f9b271047d4f24578d7ad337df62c45910d4dd9f4b14fdb626ab52d82f6eec4c0599c6f6a97d5a98182474e73852dd9336c4ffadbbdc03f76dc93b2602ab57557476bbaea006e12afbbce4955dd01b01669fb7b6db8b4661d626cfa43acf0503cee521d686a6039f45b1a0eaaf3aca746a8cd26700a57a26b0a30e2a324e71ad1fb64394b31c27c00fdd15e702cf10c3e1f65d39a587a7d4b000c77595d407f8c8a4644a8438e08594c955adcca29e8c96fda67077b05269d124245f393697d0e59de67fd6ebe17117914658658dc6c70105876a8918dc45cac83c8799f02138e2dbf09c8ef90b1f8150a75fd3883130e8ece636d1565541ce9e106058dc8af2edfbbd0505e0317279549ff1aab10def5bd2bf4b815803ddadea73871834470265a0d5847be3907d964f7ead975d6d7c59ef51427a068f270a6c0827a727825f01ce545632be9edf6aa6d8d761ecd5d4f4b2832592ec07b3fd1e94d427c5af1093c96848134fa8751df82252766951f4e7456be807c44fd1ddeeedcdb508d558dbe60648e384a9621890ba0f1d58e22fb8d2fc6afdb9421544dfb2ec79268cb5c4d6e26ca6b86cef4d8c4945e159bc484a3aaa939c038fd87de5a6e9227bb40a5dcfd4d1cb9b807af8c2149ed4c8f827307ee68df2e81577d64ffed3dc4e522056278b69ab46e097de9853ba77c268cdcece6fb9787a6100a4938f6c2ed2a0ea686edc32a45ab8d6e0077fef7b3623fcbbffcb177472821df3b0a5fd6f0da1d80b9c615f28e2c8cf24d3f7efbec5e4ad8c86f2ee717ddf0c1ec95013a5628aa93af5237f03c487c8f12a874b6c7ed4962971b6810718819cd18c37de1ccf22cf8665b60074b643942ed0567437ec1fbfe47168b35c1106ce2170d051c163b5578eae3b1465615c68f551d5261f929b0c1dda94c124e67c162c54b6bdba74ad56a673819c70dee43ed1297510bc9428f3557b8dbdf8ed1a42161d318315e75c8a2d6c1030399fa2d48a1dcf5624ecf01f972f37d47746c2311d06ec46ed457518de74129aa91aa82455ec3600a3ed113416b46130f1531b9097a60ee88e7fba30723318f3f25800f6c9f9415c0ecd5e36e70ede53e2f7c389fa0566b9261207089aa27fa10256e39aaf3a090b8b35d4a3de9307eb7704289298615b90dfdffec7887c2380e77d9d615cc529239cd7937296212bf5d559065666028be028f770c192e676bc62398bfaf1707ee1902abf7ea145b138587893f17fa1586ea87eef8460baf5e396ed8e9d1d9f1d68ae2fdf0e46dff0b61bf58966d4fd797d4ea1f29cdb7231c680c3c6e7bd042c17a99048a2092a9914887792e15c66fe9cd56ca5bbbcbdc3a00da062373a386fa7ec66db44d0985417f4887080c278eb855efa45cb059d771a5920a8dac1d816099ed0752eeadade0f54ec2fed0307d8af2730a3d50af82108e95d42681de0ebf0414bc7056a1cc6b5f781317ddb70e363d7c3d7bc06bce0aaef6371bc4b0ea43b811e393887812f718a17cdb9e9ad0ee55ade562bca69fdb332589c072beb1cd35247adcc96f7369bfb497e42f4ec3257f63cc2fbe07353d04f8e2fe75de6f206174bf42bc15dfeeb2ee4577eab976eedef3102cb1b03a5d91b2147b8c5769116338d2b7b0b52a9666176f9ac676db3c3ca38d81a036a5ff47ba2bd7a915b49e5fb22381b0e91f338df01609773f4e249e7cc5fce07bf2a0dcacc0cc0b2b3da3589f42c8a2c247020b1146e84a70a89310aa2be69f20cacba7951f166d1989e0a18f90662a69a5f9c01d636d42f7896d07d4c261ba26c764eee382b0116781794445023f85198b619f5039f58854e6300d79ed5f5717b4c00549955bb9aabc60750c7e26feb3d9157f0b1948fc238559280f73718ac9a1cd98c323c22a520aeb1d36c126de02c9aee064de833ad39d3ab520d781f00afeb28f4fb3f483b364841245573a90abec636c713172aecc49f18191e548ecd40ff0041117f06b9b4a2f923c3d4e05e22ef1cde43b4df19200770f63154b3f82ed291e4ffd7567290914f9b5eaa6f3c2f5f354e81f9247d1c3c72dd6be4ca02844e55716afc5108f2d67273a64a0114b9f783855ebd8b620a2183b378798c442108060d3fb18c24c5723860eab00549e3c2c7af02b7c5644a16edac0a96e1d4d760e060c8bdf4d85c8f4060c6ee2f453b80ffc6801a87671415ed01ea0bdfb51538c4b9583ada91f5f65067b2e2a68dc6934188c51a1833853024019593e80d6357eb77988c5568d941f462f52522f28aa970c6bb203f2a7ed0d6e176421c660134834b49b60614992914f61a12e33cc764e2a925781bb81e992004fc117966ea69b69938cf633991ff21375356db10fdb289180ecb69b3c79afdd77aef9f4a5bd621747a4adfca36f359b8a4feebab2fcacdda6241cb42a4e8888c5d598be290ffaec37d69560b702353bdd197a62800707c3ac8e9a7e876e0c5a476716504b99213a4cc178202f3215510def484deee88697c07ec19f9d7893d713905b470a8d73d6a6d7d4821ae301110e426a473c8103fe1c06031e8bba5760cc094f6ef70484bcbd240cd3b424a9fe22d7438042636ead828dce2e41a2600f2251cd4b33a800d92792bebb1d290481d07f73a826d0059c1ae6dbccefea9bf408911c88e69d997a9f1bc37b842131526046e93b41d1a2986eba23c54789900b3cb0f845e88c7b97cffe013c77e26e9e8"]}, 0x1050}, 0x1, 0x0, 0x0, 0xc001}, 0x4014) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 58) 06:54:49 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x292001) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffe) r2 = add_key$fscrypt_provisioning(&(0x7f0000001a80), &(0x7f0000001ac0)={'syz', 0x1}, &(0x7f0000001b00)={0x0, 0x0, @a}, 0x48, 0xfffffffffffffff9) r3 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x0) keyctl$chown(0xf, r3, 0x0, 0x0) keyctl$search(0xa, r2, &(0x7f0000001b80)='id_resolver\x00', &(0x7f0000001bc0)={'syz', 0x2}, r3) keyctl$setperm(0x5, r1, 0x0) keyctl$chown(0xf, r1, 0x0, 0x0) r4 = add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=ANY=[@ANYBLOB="010000080000000102030405060708090a0b0c0d0e0f101112131415161718191a1bf71d1e1f202122232405262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40"], 0x48, r1) keyctl$read(0xb, r4, &(0x7f0000000280)=""/64, 0x40) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x1) request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\'[,\x00', r0) r5 = request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='\x01\x02\x03\x04\x05\x06\a\b\t\n\v\f\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&\'()*+,-./0123456789:;<=>?@', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r5, &(0x7f00000019c0)=[{&(0x7f0000000380)="0f10d222f49673ded6d0f2212dd84ec87f376dd98769e32ab92cc757d0835f9bb63486076ae91e34d16d7ae8222c8f1d4b76977fd389aeca1b7d28d8994aedad21", 0x41}, {&(0x7f0000000400)="ea191a53989be5efc89ada714d0b4f196f1393ed9038fce6be27352671545ac61efa3f254843d3048f5cd8b3ba09ba4a48a8e5fcdc47e351d223b83a8a791c1e8c618ac24dce88dd86721b5519b568c35835525e27b67fe70e322daf90bbe2dd24319ecb0b3e3dd21d4d86de56474491da845c54f56240174b5c593fbf3bc19189302e80e55fbd624d86532281e84381ab9519646388ee65a9ff74c73b497b9fa0c927a241f0b395268171a6904acb4d673f9f6d3186758ba7aa3ba237e0dbeae5e7e31c76c17ccda36c5982377bbbaea87b0a60a5b7ac240d", 0xd9}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="d77323ceac6747463a9a830ec916693facb730c0701ebfed385356d2a3dac0403e484120a68b68fbe4c0dadfb17b3bd907f1920d6e11813df5e4046336c106a629dc5ddfad4158a9b422259fb7fea9f330d855714adda95b118e16aff5ea787555de3963cdaa92e3084e4c03e056a63480b55e63fea45d04920c851c3ec70e81ac7408ca", 0x84}, {&(0x7f00000015c0)="7f0640501356ac178f6384e74ca6f4bc7dc3c72828d26544214d6e56ca2009895eb015e61d020d188f830656bfb52e069b14d039ae1079c2919180f5bd86dcc41edb7fa046a0e28c3b02af54cdc6bc127fdaa8c18f57b26563534e79939bbd961d12dc93dbe438ad53c50681157bc5442f97c7a831f9075169bf36e5e9fe5af9241c1117b0482a9fb8897587f5f1736083e98c75163b", 0x96}, {&(0x7f0000001680)="edc7edf7cc4a2e8607531fbaa6fbe67410b89dfdb5c431b53e616703099f98e7c9fb11bdd7d097497899200f3fd497b08c3d4c14fc556a342cd52873ca609b75417eab7ede0064993412e265114560a76d3546e787b9f43e511424decdbc86930ca7ea394b79390d1d9e04c6bfb3a489500fea2a078e1d24c0564e6c35f87c5d359654f4e6b6b4e1812b85f5cfeb241a166ad0a867592dbe038a186f5dfae4d8269081afec620ca2afc2ae5a2e4e48d96cffde5caa39a16f81bf6b3c46079590657b48cdd46db4307ecef36ee557cf3505eac825012743b33de13c43e9a00d", 0xdf}, {&(0x7f0000001780)="a974c72e11de58f4ae909196c00793079c69c38edd57c177ac1b41fb2c24e88b288bdf925d9b16ffd458423a6f185b1b8324f106e017b8636c023868997cd7ed1433b01f0a603d6f5a016ef8d35968bf06f45695c7bb47a6ce1a8590586f23b00cf97b439ba4cfb0e3f18933a0482c713e1b9d9eee9dec8ae5853fd2859eefaf55ec73efb5d9ff2bf3d55a09958e859fb5594acdb72ff121023a88c5", 0x9c}, {&(0x7f0000001840)="aeef986b5f38d146e6f5056adfebad358b079ed28f12c56f98db7ae047617af94fce9d52fa3c360c4f8ef9c5042e648d84f47f534a679eae34dfed213dd0f54e75c9d34b41b9a8afd1d2c1e95d97f9144dc7eec191ea77f7a7f7c5d32a791da45cb4e82f8b", 0x65}, {&(0x7f00000018c0)="23fe3f5101309190bf5b5ea2cdc925af91a3be095328518888c4234687acb8d761be4cfece372fd43c59ee48f2123744d88f2c0aa89ec366d5ae1ee28824f3f44c3f513be6bc5f8358038ff9f44ea128e6a05309bf62928f4da9054f4fbae3cc5e5716452449e2e4aaa5fd6cdbc6843145c61e06c1138d0f1a690b66cb24f5f00c458c81264696578dad0ab0a4a5f33a662efc74f3f05f89965c8c29e1172fc81230420f1f76e50bb1c2ebedd69464a66f59bf6505552d2be109e69e372846d852fdedc040efcfb0", 0xc8}], 0x9, r0) 06:54:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:49 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x53, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp={0x0, 0x0, {0x0, 0x4}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 186.215314][T11490] FAULT_INJECTION: forcing a failure. [ 186.215314][T11490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.228559][T11490] CPU: 1 PID: 11490 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 186.236998][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.247127][T11490] Call Trace: [ 186.250399][T11490] [ 186.253324][T11490] dump_stack_lvl+0xd6/0x122 [ 186.257912][T11490] dump_stack+0x11/0x1b [ 186.262056][T11490] should_fail+0x23c/0x250 [ 186.266511][T11490] should_fail_usercopy+0x16/0x20 [ 186.271583][T11490] _copy_from_user+0x1c/0xd0 [ 186.276173][T11490] input_event_from_user+0x122/0x1d0 [ 186.281456][T11490] ? input_inject_event+0xcd/0xe0 [ 186.286501][T11490] evdev_write+0x282/0x400 [ 186.290929][T11490] ? evdev_read+0x710/0x710 [ 186.295428][T11490] vfs_write+0x2af/0x950 [ 186.299670][T11490] ? __fget_light+0x219/0x260 [ 186.304343][T11490] ksys_write+0xd9/0x190 [ 186.308625][T11490] __x64_sys_write+0x3e/0x50 06:54:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='()\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r4 = socket(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) connect$pppoe(r4, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000018c0)={'ip6gre0\x00', &(0x7f0000001840)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x0, 0x100, 0x22, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x10, 0x400000, 0xdd24}}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="080027bd7000fbdbdf254900000008000300", @ANYRES32=r5, @ANYBLOB="0c0099003f00000037000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x26e8, 0x23}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}]}, 0x2c}}, 0x840) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:49 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000080)) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x1ff, 0x7ff, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_io_uring_complete(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000100)=@raw=[@generic={0xff, 0x5, 0x5, 0x8001, 0x7}, @call={0x85, 0x0, 0x0, 0x46}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000180)='GPL\x00', 0xf649, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x5, 0x1f, 0x8}, 0x10, 0xf82b, r3}, 0x78) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x35000) [ 186.313278][T11490] do_syscall_64+0x44/0xd0 [ 186.317700][T11490] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 186.323596][T11490] RIP: 0033:0x7f0fdb27eae9 [ 186.328007][T11490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 186.347614][T11490] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.356028][T11490] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 186.364025][T11490] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 186.364041][T11490] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 186.379962][T11490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.387926][T11490] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 186.395916][T11490] 06:54:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/157) 06:54:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 59) [ 186.399943][ T24] audit: type=1400 audit(1636700089.651:204): avc: denied { write } for pid=11491 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 186.419424][ T24] audit: type=1400 audit(1636700089.651:205): avc: denied { ioctl } for pid=11500 comm="syz-executor.5" path="socket:[27494]" dev="sockfs" ino=27494 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 06:54:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 186.476754][T11553] FAULT_INJECTION: forcing a failure. [ 186.476754][T11553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.490068][T11553] CPU: 1 PID: 11553 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 186.498542][T11553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.508662][T11553] Call Trace: [ 186.511939][T11553] [ 186.514867][T11553] dump_stack_lvl+0xd6/0x122 [ 186.519517][T11553] dump_stack+0x11/0x1b [ 186.523722][T11553] should_fail+0x23c/0x250 [ 186.528209][T11553] should_fail_usercopy+0x16/0x20 [ 186.533300][T11553] _copy_from_user+0x1c/0xd0 [ 186.537893][T11553] input_event_from_user+0x122/0x1d0 [ 186.543177][T11553] ? input_inject_event+0xcd/0xe0 [ 186.548199][T11553] evdev_write+0x282/0x400 [ 186.552664][T11553] ? evdev_read+0x710/0x710 [ 186.557168][T11553] vfs_write+0x2af/0x950 [ 186.561423][T11553] ? __fget_light+0x219/0x260 [ 186.566105][T11553] ksys_write+0xd9/0x190 [ 186.570347][T11553] __x64_sys_write+0x3e/0x50 [ 186.574972][T11553] do_syscall_64+0x44/0xd0 [ 186.579463][T11553] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 186.585363][T11553] RIP: 0033:0x7f0fdb27eae9 [ 186.589790][T11553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 186.609442][T11553] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.617858][T11553] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 60) 06:54:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 186.625857][T11553] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 186.625874][T11553] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 186.625888][T11553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.649752][T11553] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 186.657724][T11553] [ 186.716406][T11617] FAULT_INJECTION: forcing a failure. [ 186.716406][T11617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.729625][T11617] CPU: 0 PID: 11617 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 186.738036][T11617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.748090][T11617] Call Trace: [ 186.751360][T11617] [ 186.754289][T11617] dump_stack_lvl+0xd6/0x122 [ 186.758884][T11617] dump_stack+0x11/0x1b 06:54:50 executing program 3: keyctl$read(0xb, 0x0, &(0x7f0000000000)=""/71, 0x47) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) 06:54:50 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x40, 0xfa, 0x4, 0x0, 0x0, 0x802, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={&(0x7f0000000000), 0x4}, 0x6006, 0x100000000, 0x80000001, 0x6, 0x3, 0x8, 0xbe, 0x0, 0x8, 0x0, 0x81}, r2, 0xb, r0, 0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9, 0xeb, 0x4, 0xeb, 0x0, 0x80000000, 0x2, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x400, 0x4, @perf_config_ext={0x9, 0x8}, 0x42098, 0xc1e, 0x1, 0x0, 0x6, 0x7, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r1, 0x3) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 186.763079][T11617] should_fail+0x23c/0x250 [ 186.767500][T11617] should_fail_usercopy+0x16/0x20 [ 186.772574][T11617] _copy_from_user+0x1c/0xd0 [ 186.777170][T11617] input_event_from_user+0x122/0x1d0 [ 186.782519][T11617] ? input_inject_event+0xcd/0xe0 [ 186.787536][T11617] evdev_write+0x282/0x400 [ 186.791986][T11617] ? evdev_read+0x710/0x710 [ 186.796571][T11617] vfs_write+0x2af/0x950 [ 186.800896][T11617] ? __fget_light+0x219/0x260 [ 186.805623][T11617] ksys_write+0xd9/0x190 [ 186.809871][T11617] __x64_sys_write+0x3e/0x50 06:54:50 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x1000, 0x1}, {0x12, 0x2}, @ramp}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010200001800000074630f5866fe9414d1d7ebf5fea4ddea33a7278b2a915e8cf73fa45d5262b55be293a4b9939b4a8754c65be10bea45", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000100000000002e2f66696c653000"]) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x1f, 0x0, 0x8, 0x800, 0x40}, 0xc) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x2, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r2, 0x1, 0x7, 0x1f, 0x0, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x11, @usage=0xb43d, 0x0, 0x0, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={r2, 0x8, 0x1, [0x7f, 0x0, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0x0, 0xb14, 0x8, 0x1000000000, 0x4, 0x0, 0x0, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x0, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x0, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x0, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0x0, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x0, 0x100000001, 0x1000000009]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000500)={{}, 0x0, 0x10, @unused=[0x8, 0x3, 0xce5f, 0x9], @devid=r2}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000010c0)={{r1}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000280)={0x1, 0x5, 0x7, 0x8000, {0x38, 0x7, 0x100000000, 0xfffffffffffffff8, 0x8073}, [0xfffffffffffffff8, 0x80, 0xfff, 0xffff, 0xa038]}}, @devid=r2}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/112, 0x70}], 0x1, 0x80000001, 0x2) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = socket$inet6(0xa, 0x401000000001, 0x0) close(r3) r4 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) write$char_usb(r4, &(0x7f0000000300)="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", 0x13e) [ 186.814467][T11617] do_syscall_64+0x44/0xd0 [ 186.818955][T11617] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 186.824843][T11617] RIP: 0033:0x7f0fdb27eae9 [ 186.829253][T11617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 186.848943][T11617] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.857359][T11617] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 61) [ 186.865377][T11617] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 186.873432][T11617] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 186.881479][T11617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.889454][T11617] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 186.897500][T11617] [ 186.941062][T11733] FAULT_INJECTION: forcing a failure. [ 186.941062][T11733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.954332][T11733] CPU: 0 PID: 11733 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 186.954361][T11733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.972828][T11733] Call Trace: [ 186.976116][T11733] [ 186.979040][T11733] dump_stack_lvl+0xd6/0x122 [ 186.983628][T11733] dump_stack+0x11/0x1b 06:54:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000002c0)={0x40080000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)=0x0, {0x16}, &(0x7f00000010c0)=""/4096, 0x1000, &(0x7f0000000180)=""/124, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0xfffffff7, 0x6, 0x0, 0x3, 0x0, 0x93}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='()\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000440)=""/214, 0xd6}, {&(0x7f0000000540)=""/184, 0xb8}], 0x2, 0x9, 0x10000) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x35000) [ 186.987844][T11733] should_fail+0x23c/0x250 [ 186.992265][T11733] should_fail_usercopy+0x16/0x20 [ 186.997345][T11733] _copy_from_user+0x1c/0xd0 [ 187.002003][T11733] input_event_from_user+0x122/0x1d0 [ 187.007369][T11733] ? input_inject_event+0xcd/0xe0 [ 187.012416][T11733] evdev_write+0x282/0x400 [ 187.016833][T11733] ? evdev_read+0x710/0x710 [ 187.021375][T11733] vfs_write+0x2af/0x950 [ 187.025624][T11733] ? __fdget_pos+0x3a/0xb0 [ 187.030080][T11733] ? __tsan_read4+0xf4/0x180 [ 187.034746][T11733] ksys_write+0xd9/0x190 [ 187.039031][T11733] __x64_sys_write+0x3e/0x50 [ 187.043633][T11733] do_syscall_64+0x44/0xd0 [ 187.048058][T11733] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 187.053968][T11733] RIP: 0033:0x7f0fdb27eae9 [ 187.058376][T11733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 187.078048][T11733] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.086573][T11733] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 187.094544][T11733] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 187.102558][T11733] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 187.110544][T11733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.118505][T11733] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 187.126469][T11733] 06:54:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 62) 06:54:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000080)=[0xba8, 0x4]) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/224) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x55, 0x0, 0x304, {0x4, 0xff62}, {0x2, 0x1}, @ramp={0x1, 0xd28a, {0x19, 0x2, 0x0, 0x2}}}) syz_open_dev$evdev(&(0x7f0000000040), 0x100000000, 0x101040) [ 187.199519][T11838] FAULT_INJECTION: forcing a failure. [ 187.199519][T11838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.214516][T11838] CPU: 0 PID: 11838 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 187.222946][T11838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.233017][T11838] Call Trace: [ 187.236293][T11838] [ 187.239307][T11838] dump_stack_lvl+0xd6/0x122 [ 187.243903][T11838] dump_stack+0x11/0x1b [ 187.248052][T11838] should_fail+0x23c/0x250 [ 187.252538][T11838] should_fail_usercopy+0x16/0x20 [ 187.257565][T11838] _copy_from_user+0x1c/0xd0 [ 187.262161][T11838] input_event_from_user+0x122/0x1d0 [ 187.267477][T11838] ? input_inject_event+0xcd/0xe0 [ 187.272506][T11838] evdev_write+0x282/0x400 [ 187.276925][T11838] ? evdev_read+0x710/0x710 [ 187.281502][T11838] vfs_write+0x2af/0x950 [ 187.285757][T11838] ? __fget_light+0x219/0x260 [ 187.290438][T11838] ksys_write+0xd9/0x190 [ 187.294680][T11838] __x64_sys_write+0x3e/0x50 06:54:50 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x54, 0x0, 0x4, {0x0, 0x1}, {0x12, 0x2}, @ramp={0xcb, 0x0, {0x0, 0x0, 0x0, 0x487}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 187.299311][T11838] do_syscall_64+0x44/0xd0 [ 187.303749][T11838] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 187.309642][T11838] RIP: 0033:0x7f0fdb27eae9 [ 187.314059][T11838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 187.333667][T11838] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.342148][T11838] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 187.350115][T11838] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 187.358157][T11838] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 187.358173][T11838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.358186][T11838] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 187.382054][T11838] 06:54:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 63) 06:54:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getrlimit(0x1, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) r1 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:50 executing program 5: prlimit64(0x0, 0xf, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x10000001, 0x3f, 0x0, 0x401, 0x6d0, 0x5, 0x2ed4, 0x2}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 187.454398][T11850] FAULT_INJECTION: forcing a failure. [ 187.454398][T11850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.454467][T11850] CPU: 0 PID: 11850 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 187.454491][T11850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.454502][T11850] Call Trace: [ 187.454508][T11850] [ 187.454513][T11850] dump_stack_lvl+0xd6/0x122 [ 187.454534][T11850] dump_stack+0x11/0x1b [ 187.454628][T11850] should_fail+0x23c/0x250 [ 187.454654][T11850] should_fail_usercopy+0x16/0x20 [ 187.454680][T11850] _copy_from_user+0x1c/0xd0 [ 187.454766][T11850] input_event_from_user+0x122/0x1d0 [ 187.454806][T11850] ? input_inject_event+0xcd/0xe0 [ 187.454826][T11850] evdev_write+0x282/0x400 [ 187.454907][T11850] ? evdev_read+0x710/0x710 [ 187.454931][T11850] vfs_write+0x2af/0x950 [ 187.454955][T11850] ? __fget_light+0x219/0x260 [ 187.454980][T11850] ksys_write+0xd9/0x190 [ 187.455032][T11850] __x64_sys_write+0x3e/0x50 [ 187.455058][T11850] do_syscall_64+0x44/0xd0 [ 187.455084][T11850] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 187.455105][T11850] RIP: 0033:0x7f0fdb27eae9 06:54:51 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x8b, &(0x7f0000000200)=""/139, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 187.455169][T11850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 187.455188][T11850] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.455209][T11850] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 187.455223][T11850] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 187.455236][T11850] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 06:54:51 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x11) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x4, 0x96, &(0x7f0000000100)="c99ada87b099ac9fdc9e3dc94f6118294f1728a5078254b816ff40f9e6b1c01c68ceddc79a8c313a77e8b79f05bb34aed5fdbab476ce35a0a47bff6b33dd8d8a3b62ea313c1dafb6b55ffa217448c551586b226c9751eeecb22c371228c9d1dbc5958f5f39309d303ed91ab5c79760300f46d196de3a36a0aa0e735eb0f721734e276109c5957cce1b596d78365a94a5082fcbe99f8f"}) 06:54:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 64) 06:54:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 187.455250][T11850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.455335][T11850] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 187.455351][T11850] [ 187.655477][ T24] audit: type=1400 audit(1636700091.081:206): avc: denied { getopt } for pid=11954 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 06:54:51 executing program 3: syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) [ 187.764178][T12062] FAULT_INJECTION: forcing a failure. [ 187.764178][T12062] name fail_usercopy, interval 1, probability 0, space 0, times 0 06:54:51 executing program 0: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) setrlimit(0x9, &(0x7f0000000100)={0x10000, 0x200}) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000, 0x20) [ 187.777393][T12062] CPU: 0 PID: 12062 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 187.777419][T12062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.777431][T12062] Call Trace: [ 187.777437][T12062] [ 187.777444][T12062] dump_stack_lvl+0xd6/0x122 06:54:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 65) 06:54:51 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) prlimit64(r3, 0xc, &(0x7f0000000100)={0x2, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000500bbbbbbbbbbbb8e982ce11fc1aaaab7aaaa4143ffffffffffffffffffffffc59853d52cc3ae43d607daa14377ff"]) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x35000) syz_open_procfs(r3, &(0x7f00000001c0)='net/ip_vs_stats\x00') 06:54:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 187.777467][T12062] dump_stack+0x11/0x1b [ 187.777485][T12062] should_fail+0x23c/0x250 [ 187.777543][T12062] should_fail_usercopy+0x16/0x20 [ 187.777608][T12062] _copy_from_user+0x1c/0xd0 [ 187.777663][T12062] input_event_from_user+0x122/0x1d0 [ 187.777688][T12062] evdev_write+0x282/0x400 [ 187.777715][T12062] ? evdev_read+0x710/0x710 [ 187.777757][T12062] vfs_write+0x2af/0x950 [ 187.777782][T12062] ? __fget_light+0x219/0x260 [ 187.777806][T12062] ksys_write+0xd9/0x190 [ 187.777835][T12062] __x64_sys_write+0x3e/0x50 [ 187.777900][T12062] do_syscall_64+0x44/0xd0 [ 187.777940][T12062] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 187.777963][T12062] RIP: 0033:0x7f0fdb27eae9 [ 187.777977][T12062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 187.777997][T12062] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.778018][T12062] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 187.778032][T12062] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 187.778067][T12062] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 187.778080][T12062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.778093][T12062] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 187.778109][T12062] [ 187.915376][T12167] FAULT_INJECTION: forcing a failure. [ 187.915376][T12167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.915415][T12167] CPU: 1 PID: 12167 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 187.915442][T12167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.915502][T12167] Call Trace: [ 187.915508][T12167] [ 187.915514][T12167] dump_stack_lvl+0xd6/0x122 [ 187.915536][T12167] dump_stack+0x11/0x1b [ 187.915599][T12167] should_fail+0x23c/0x250 [ 187.915624][T12167] should_fail_usercopy+0x16/0x20 [ 187.915648][T12167] _copy_from_user+0x1c/0xd0 [ 187.915734][T12167] input_event_from_user+0x122/0x1d0 [ 187.915758][T12167] ? input_inject_event+0xcd/0xe0 [ 187.915838][T12167] evdev_write+0x282/0x400 [ 187.915904][T12167] ? evdev_read+0x710/0x710 [ 187.915926][T12167] vfs_write+0x2af/0x950 [ 187.915951][T12167] ? __fget_light+0x219/0x260 [ 187.915975][T12167] ksys_write+0xd9/0x190 [ 187.916071][T12167] __x64_sys_write+0x3e/0x50 [ 187.916096][T12167] do_syscall_64+0x44/0xd0 [ 187.916127][T12167] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 187.916149][T12167] RIP: 0033:0x7f0fdb27eae9 [ 187.916164][T12167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:54:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 187.916183][T12167] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.916203][T12167] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 187.916217][T12167] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 187.916230][T12167] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 187.916246][T12167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.916258][T12167] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 187.916275][T12167] 06:54:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 66) 06:54:51 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) move_pages(0x0, 0x5, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000080)=[0xf266], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) 06:54:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x1, 0x3f, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) r3 = gettid() rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xe0040, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r4, 0x0, 0x12, &(0x7f0000000080)='/dev/input/event#\x00'}, 0x30) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 06:54:51 executing program 3: sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000011400012bbd7000fddbdf250800010002000000565b750dbbc83d6708000140000000000800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) [ 188.424024][T12284] FAULT_INJECTION: forcing a failure. [ 188.424024][T12284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.437314][T12284] CPU: 1 PID: 12284 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 188.445731][T12284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.455780][T12284] Call Trace: [ 188.459051][T12284] [ 188.461976][T12284] dump_stack_lvl+0xd6/0x122 [ 188.466576][T12284] dump_stack+0x11/0x1b 06:54:51 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x3ff, 0x2, 0x33c}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/94) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xc000000000002, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x6a70, 0x5, 0x0, 0xf0d9, 0x0, 0x5}, {0x4, 0x1, 0x81, 0x7ff, 0x100, 0x6}], ['\x00']}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:54:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000100)=""/4096) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0x2]) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x3) [ 188.470728][T12284] should_fail+0x23c/0x250 [ 188.475200][T12284] should_fail_usercopy+0x16/0x20 [ 188.480227][T12284] _copy_from_user+0x1c/0xd0 [ 188.484925][T12284] input_event_from_user+0x122/0x1d0 [ 188.490257][T12284] evdev_write+0x282/0x400 [ 188.494684][T12284] ? evdev_read+0x710/0x710 [ 188.499226][T12284] vfs_write+0x2af/0x950 [ 188.503474][T12284] ? __fget_light+0x219/0x260 [ 188.508270][T12284] ksys_write+0xd9/0x190 [ 188.512536][T12284] __x64_sys_write+0x3e/0x50 [ 188.517147][T12284] do_syscall_64+0x44/0xd0 06:54:51 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x4c, 0x21, 0x200, 0x70bd2b, 0x25dfdbfe, {0xa, 0x80, 0x20, 0x0, 0x81, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x4}, @FRA_DST={0x14, 0x1, @mcast2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20005800) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 188.521587][T12284] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 188.527481][T12284] RIP: 0033:0x7f0fdb27eae9 [ 188.531932][T12284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 188.551570][T12284] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.559992][T12284] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 67) 06:54:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x3, 0xa, 0x590e, 0x2, 0x100000000, 0x525c, 0x4, 0x4, 0x8}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 188.568006][T12284] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 188.575978][T12284] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 188.583939][T12284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.591905][T12284] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 188.599944][T12284] 06:54:52 executing program 3: io_pgetevents(0x0, 0x3, 0x1, &(0x7f0000000000)=[{}], 0x0, &(0x7f0000000080)={&(0x7f0000000040)={[0x20]}, 0x8}) io_destroy(0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x405, 0x80100) [ 188.660075][T12419] FAULT_INJECTION: forcing a failure. [ 188.660075][T12419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.673456][T12419] CPU: 0 PID: 12419 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 188.673484][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:54:52 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) [ 188.673496][T12419] Call Trace: [ 188.673503][T12419] [ 188.673510][T12419] dump_stack_lvl+0xd6/0x122 [ 188.673608][T12419] dump_stack+0x11/0x1b [ 188.673627][T12419] should_fail+0x23c/0x250 06:54:52 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0x7) [ 188.673650][T12419] should_fail_usercopy+0x16/0x20 [ 188.673676][T12419] _copy_from_user+0x1c/0xd0 [ 188.673725][T12419] input_event_from_user+0x122/0x1d0 [ 188.673750][T12419] ? input_inject_event+0xcd/0xe0 [ 188.673772][T12419] evdev_write+0x282/0x400 [ 188.673819][T12419] ? evdev_read+0x710/0x710 [ 188.673841][T12419] vfs_write+0x2af/0x950 [ 188.673884][T12419] ? __fget_light+0x219/0x260 [ 188.673907][T12419] ksys_write+0xd9/0x190 [ 188.673933][T12419] __x64_sys_write+0x3e/0x50 [ 188.673990][T12419] do_syscall_64+0x44/0xd0 [ 188.674155][T12419] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 188.674177][T12419] RIP: 0033:0x7f0fdb27eae9 [ 188.674193][T12419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 188.674313][T12419] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.674333][T12419] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 188.674346][T12419] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 188.674359][T12419] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 06:54:52 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80040, 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r1, 0x0) 06:54:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 68) 06:54:52 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="00bfdf000000000058330c040000006aabfac3715daf88c2dd939fea948f101ed100"/49], 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x41, 0x80000003}}}, 0x10) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) sendmsg$tipc(r2, &(0x7f0000000300)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x26, 0xffff, 0x200, 0x9, 0x4, 0x5, 0x4, 0x9}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='()\x00') perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x7f, 0x81, 0x5, 0x2, 0x0, 0x101, 0x40928, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={&(0x7f0000000100), 0xf}, 0x6c11, 0x7fff, 0x5, 0xf, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x2, r4, 0x0) 06:54:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x10, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:52 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x282000) [ 188.674373][T12419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.674387][T12419] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 188.674404][T12419] 06:54:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000180)=""/93, 0x5d) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x3, 0x2, 0x3, 0x4, 0x5, 0x5f, 0x8001, 0x882, 0x1077}, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 188.973144][T12511] FAULT_INJECTION: forcing a failure. [ 188.973144][T12511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.986389][T12511] CPU: 1 PID: 12511 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 188.994807][T12511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.004854][T12511] Call Trace: [ 189.008181][T12511] [ 189.011108][T12511] dump_stack_lvl+0xd6/0x122 [ 189.015702][T12511] dump_stack+0x11/0x1b [ 189.019855][T12511] should_fail+0x23c/0x250 [ 189.024282][T12511] should_fail_usercopy+0x16/0x20 [ 189.029308][T12511] _copy_from_user+0x1c/0xd0 [ 189.033902][T12511] input_event_from_user+0x122/0x1d0 [ 189.039189][T12511] ? input_inject_event+0xcd/0xe0 [ 189.044252][T12511] evdev_write+0x282/0x400 [ 189.048781][T12511] ? evdev_read+0x710/0x710 [ 189.053356][T12511] vfs_write+0x2af/0x950 [ 189.057596][T12511] ? __fget_light+0x219/0x260 [ 189.062303][T12511] ksys_write+0xd9/0x190 [ 189.066647][T12511] __x64_sys_write+0x3e/0x50 06:54:52 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffa) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000040)={0x16, 0x1000, &(0x7f0000000100)="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"}) syz_open_dev$evdev(&(0x7f0000000000), 0x2000000000242, 0x480000) [ 189.071373][T12511] do_syscall_64+0x44/0xd0 [ 189.075846][T12511] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 189.081753][T12511] RIP: 0033:0x7f0fdb27eae9 [ 189.086164][T12511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 189.105809][T12511] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.114219][T12511] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 189.122192][T12511] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 189.130166][T12511] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 189.138137][T12511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.138154][T12511] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 189.138171][T12511] 06:54:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 69) [ 189.138822][ T24] audit: type=1400 audit(1636700092.411:207): avc: denied { bind } for pid=12514 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.176867][ T24] audit: type=1400 audit(1636700092.411:208): avc: denied { setopt } for pid=12514 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 06:54:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 189.227197][T12529] FAULT_INJECTION: forcing a failure. [ 189.227197][T12529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.240502][T12529] CPU: 1 PID: 12529 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 189.248917][T12529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.258970][T12529] Call Trace: [ 189.262252][T12529] [ 189.265179][T12529] dump_stack_lvl+0xd6/0x122 [ 189.269782][T12529] dump_stack+0x11/0x1b [ 189.273939][T12529] should_fail+0x23c/0x250 [ 189.278387][T12529] should_fail_usercopy+0x16/0x20 [ 189.283416][T12529] _copy_from_user+0x1c/0xd0 [ 189.288011][T12529] input_event_from_user+0x122/0x1d0 [ 189.293428][T12529] ? input_inject_event+0xcd/0xe0 [ 189.298459][T12529] evdev_write+0x282/0x400 [ 189.302884][T12529] ? evdev_read+0x710/0x710 [ 189.307464][T12529] vfs_write+0x2af/0x950 [ 189.311707][T12529] ? __fdget_pos+0x4a/0xb0 [ 189.316159][T12529] ? __fdget_pos+0x54/0xb0 [ 189.320616][T12529] ? __fdget_pos+0x3a/0xb0 [ 189.325034][T12529] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 189.330498][T12529] ksys_write+0xd9/0x190 [ 189.334828][T12529] __x64_sys_write+0x3e/0x50 [ 189.339426][T12529] do_syscall_64+0x44/0xd0 [ 189.343885][T12529] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 189.349763][T12529] RIP: 0033:0x7f0fdb27eae9 [ 189.354267][T12529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 189.373899][T12529] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.382286][T12529] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 189.390240][T12529] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 189.398194][T12529] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 189.406321][T12529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.414272][T12529] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 189.422303][T12529] 06:54:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 70) 06:54:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:52 executing program 0: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x2008045) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec0150000e", @ANYRES16=0x0, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x8810}, 0x40810) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x2, 0x2}, @ramp={0x0, 0x0, {0xfc01}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x83aa01) write$char_usb(r1, &(0x7f0000000000)="03", 0x9) syz_io_uring_setup(0x228c, &(0x7f00000001c0)={0x0, 0x7fab, 0x8, 0x0, 0x314}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1b}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) flistxattr(0xffffffffffffffff, &(0x7f00000010c0)=""/4096, 0x1000) 06:54:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f00000002c0)=""/250, 0xfa}, {&(0x7f0000000000)=""/24, 0x18}], 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 189.493127][T12635] FAULT_INJECTION: forcing a failure. [ 189.493127][T12635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.506451][T12635] CPU: 0 PID: 12635 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 189.514950][T12635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.524999][T12635] Call Trace: [ 189.528267][T12635] [ 189.531453][T12635] dump_stack_lvl+0xd6/0x122 [ 189.536046][T12635] dump_stack+0x11/0x1b [ 189.540191][T12635] should_fail+0x23c/0x250 [ 189.544640][T12635] should_fail_usercopy+0x16/0x20 [ 189.549702][T12635] _copy_from_user+0x1c/0xd0 [ 189.554302][T12635] input_event_from_user+0x122/0x1d0 [ 189.559592][T12635] ? input_inject_event+0xcd/0xe0 [ 189.564664][T12635] evdev_write+0x282/0x400 [ 189.569083][T12635] ? evdev_read+0x710/0x710 [ 189.573581][T12635] vfs_write+0x2af/0x950 [ 189.577831][T12635] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 189.583989][T12635] ? __fget_light+0x219/0x260 [ 189.588804][T12635] ? ksys_write+0x94/0x190 06:54:53 executing program 3: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000100)=ANY=[@ANYBLOB="070000009a0000009319967358c28f8bd3c44b6811699a96ffb114fff700c324d6cfeea10883cfd5cda2e4781aaa7e02fc384060406afbfa29359ef9e109204ee12873e4d91793cd92acad5aa025a2caf8816b67ae17800aaf423156613837babb26ce8429f8f844b57acc6a5c69bc47d09e0d7f37ce5729953732271e900bc4803ab491a146dca813e6553e3381ed21000000000000fae8cf357f486290689295a7"]) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x608480) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x140) [ 189.593252][T12635] ksys_write+0xd9/0x190 [ 189.597564][T12635] __x64_sys_write+0x3e/0x50 [ 189.602158][T12635] do_syscall_64+0x44/0xd0 [ 189.606580][T12635] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 189.606648][T12635] RIP: 0033:0x7f0fdb27eae9 [ 189.616925][T12635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:54:53 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000001380)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/220, 0xdc}, {&(0x7f0000001200)=""/114, 0x72}, {&(0x7f0000001280)=""/114, 0x72}, {&(0x7f0000001300)=""/124, 0x7c}], 0x5, &(0x7f0000000080)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001400), 0x6e, &(0x7f0000002880)=[{&(0x7f0000001480)=""/67, 0x43}, {&(0x7f0000001500)=""/78, 0x4e}, {&(0x7f0000001580)=""/158, 0x9e}, {&(0x7f0000001640)=""/72, 0x48}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/157, 0x9d}, {&(0x7f0000002780)=""/245, 0xf5}], 0x7, &(0x7f0000002900)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002940), 0x6e, &(0x7f0000003dc0)=[{&(0x7f00000029c0)=""/37, 0x25}, {&(0x7f0000002a00)=""/126, 0x7e}, {&(0x7f0000002a80)=""/194, 0xc2}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/255, 0xff}, {&(0x7f0000003c80)=""/30, 0x1e}, {&(0x7f0000003cc0)=""/236, 0xec}], 0x7, &(0x7f0000003e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x3, 0x100, &(0x7f0000003f80)={0x77359400}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000003fc0)=""/16) 06:54:53 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x0, 0xffbe, 0x0, {0x0, 0x1}, {0x12, 0x2}, @period={0x5b, 0x20, 0x6, 0x4, 0xfffc, {0x200, 0x8001, 0x0, 0x304}, 0x1, &(0x7f0000000080)=[0xe54e]}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 71) 06:54:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 189.636550][T12635] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.644961][T12635] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 189.652933][T12635] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 189.660903][T12635] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 189.668867][T12635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.676836][T12635] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 189.684808][T12635] 06:54:53 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) prlimit64(r0, 0xc, &(0x7f0000000280)={0x5, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r1 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 189.769096][T12752] FAULT_INJECTION: forcing a failure. [ 189.769096][T12752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.782656][T12752] CPU: 1 PID: 12752 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 189.791155][T12752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.801229][T12752] Call Trace: [ 189.804499][T12752] [ 189.807424][T12752] dump_stack_lvl+0xd6/0x122 [ 189.812027][T12752] dump_stack+0x11/0x1b [ 189.816213][T12752] should_fail+0x23c/0x250 [ 189.820630][T12752] should_fail_usercopy+0x16/0x20 [ 189.825667][T12752] _copy_from_user+0x1c/0xd0 [ 189.830292][T12752] input_event_from_user+0x122/0x1d0 [ 189.835582][T12752] ? input_inject_event+0xcd/0xe0 [ 189.840608][T12752] evdev_write+0x282/0x400 [ 189.845120][T12752] ? evdev_read+0x710/0x710 [ 189.849659][T12752] vfs_write+0x2af/0x950 [ 189.854016][T12752] ? __fget_light+0x219/0x260 [ 189.858713][T12752] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 189.864575][T12752] ksys_write+0xd9/0x190 [ 189.868922][T12752] __x64_sys_write+0x3e/0x50 [ 189.873515][T12752] do_syscall_64+0x44/0xd0 [ 189.877936][T12752] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 189.883839][T12752] RIP: 0033:0x7f0fdb27eae9 [ 189.888248][T12752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 189.907848][T12752] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:54:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x53, 0x7ff, 0x7, {0x7fff, 0x9}, {0x200, 0x7813}, @ramp={0x9, 0x4, {0x6, 0x4, 0x1, 0xdad2}}}) 06:54:53 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x10000040, 0x457, 0x8, 0x7, 0x96e1, 0x1000, 0x52bd0693, 0x8000}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x2, 0x8, 0x2, 0x0, 0x101, 0x40200, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x1, 0x5}, 0x208, 0x3, 0xcc9, 0x0, 0x3, 0x400, 0x3ff, 0x0, 0x80000001, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:54:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x9, &(0x7f00000001c0)={0x9c0f, 0x7}) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./bus\x00', 0x1) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x200) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_io_uring_setup(0x5ba6, &(0x7f00000002c0)={0x0, 0x4896, 0x10, 0x3, 0x11b}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='()\x00') fcntl$setflags(r4, 0x2, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 189.916288][T12752] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 189.924327][T12752] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 189.932305][T12752] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 189.940279][T12752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.948315][T12752] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 189.956350][T12752] 06:54:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 72) [ 190.071470][T12805] FAULT_INJECTION: forcing a failure. [ 190.071470][T12805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.084834][T12805] CPU: 1 PID: 12805 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 190.093250][T12805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.103307][T12805] Call Trace: [ 190.106583][T12805] [ 190.109510][T12805] dump_stack_lvl+0xd6/0x122 [ 190.114104][T12805] dump_stack+0x11/0x1b 06:54:53 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) r1 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x418101, 0x1, 0x8}, 0x18) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x56, 0x100, 0xca92, {0xf001, 0x28cc}, {0x6, 0x8001}, @const={0x1, {0x3, 0x6, 0xeeb, 0xffff}}}) ftruncate(r0, 0x208200) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)) [ 190.118259][T12805] should_fail+0x23c/0x250 [ 190.122695][T12805] should_fail_usercopy+0x16/0x20 [ 190.127827][T12805] _copy_from_user+0x1c/0xd0 [ 190.132440][T12805] input_event_from_user+0x122/0x1d0 [ 190.137806][T12805] ? input_inject_event+0xcd/0xe0 [ 190.142910][T12805] evdev_write+0x282/0x400 [ 190.147402][T12805] ? evdev_read+0x710/0x710 [ 190.151915][T12805] vfs_write+0x2af/0x950 [ 190.156205][T12805] ? __fget_light+0x219/0x260 [ 190.160933][T12805] ksys_write+0xd9/0x190 [ 190.165177][T12805] __x64_sys_write+0x3e/0x50 [ 190.169768][T12805] do_syscall_64+0x44/0xd0 [ 190.174238][T12805] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 190.180130][T12805] RIP: 0033:0x7f0fdb27eae9 [ 190.184537][T12805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 190.204155][T12805] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.212609][T12805] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = signalfd4(r0, &(0x7f0000000000)={[0x9]}, 0x8, 0x800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000180)={0x2, 0x80, 0xff, 0x7, 0xc4, 0x0, 0x0, 0x1f, 0x0, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4a, 0x0, @perf_config_ext={0xffffffffffffff00, 0x6}, 0x0, 0x5, 0x3, 0x9, 0x4, 0x7, 0xfffa, 0x0, 0xffff, 0x0, 0x7fffffff}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x0, 0x28, 0x8, 0x20, 0x8, 0x4000000, 0x80000001, 0x0, 0x20}, 0x0) [ 190.220581][T12805] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 190.228582][T12805] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 190.236560][T12805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.244607][T12805] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 190.252580][T12805] 06:54:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:54:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:53 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x51, 0xfffb, 0x1, {0x0, 0x4}, {0x15, 0x4800}, @ramp={0x7, 0x2, {0x0, 0x8, 0x5, 0x3}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:53 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x81, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x80002, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:54:53 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xfb, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='()\x00') r2 = dup3(r1, r0, 0x80000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000040)={0x55, 0x1f, 0x180, {0x2, 0x81}, {0x80, 0x1b6}, @rumble={0x0, 0xffff}}) 06:54:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 73) [ 190.498410][T12882] FAULT_INJECTION: forcing a failure. [ 190.498410][T12882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.511724][T12882] CPU: 1 PID: 12882 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 190.520199][T12882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.530251][T12882] Call Trace: [ 190.533527][T12882] [ 190.536450][T12882] dump_stack_lvl+0xd6/0x122 [ 190.541047][T12882] dump_stack+0x11/0x1b [ 190.545203][T12882] should_fail+0x23c/0x250 [ 190.549668][T12882] should_fail_usercopy+0x16/0x20 [ 190.554771][T12882] _copy_from_user+0x1c/0xd0 [ 190.559396][T12882] input_event_from_user+0x122/0x1d0 [ 190.564726][T12882] ? input_inject_event+0xcd/0xe0 [ 190.569860][T12882] evdev_write+0x282/0x400 [ 190.574407][T12882] ? evdev_read+0x710/0x710 [ 190.578975][T12882] vfs_write+0x2af/0x950 [ 190.583248][T12882] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 190.589595][T12882] ? __fget_light+0x219/0x260 [ 190.594288][T12882] ? ksys_write+0x29/0x190 [ 190.598826][T12882] ksys_write+0xd9/0x190 [ 190.603064][T12882] __x64_sys_write+0x3e/0x50 [ 190.607689][T12882] do_syscall_64+0x44/0xd0 [ 190.612109][T12882] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 190.618023][T12882] RIP: 0033:0x7f0fdb27eae9 [ 190.622435][T12882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:54:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 74) [ 190.642029][T12882] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.650491][T12882] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 190.658445][T12882] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 190.666402][T12882] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 190.674363][T12882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.682318][T12882] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 190.690285][T12882] [ 190.727687][T12887] FAULT_INJECTION: forcing a failure. [ 190.727687][T12887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.740947][T12887] CPU: 0 PID: 12887 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 190.749470][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.759531][T12887] Call Trace: [ 190.762803][T12887] [ 190.765766][T12887] dump_stack_lvl+0xd6/0x122 [ 190.770454][T12887] dump_stack+0x11/0x1b [ 190.774625][T12887] should_fail+0x23c/0x250 [ 190.779054][T12887] should_fail_usercopy+0x16/0x20 [ 190.784123][T12887] _copy_from_user+0x1c/0xd0 [ 190.788762][T12887] input_event_from_user+0x122/0x1d0 [ 190.794051][T12887] ? input_inject_event+0xcd/0xe0 [ 190.799081][T12887] evdev_write+0x282/0x400 [ 190.803556][T12887] ? evdev_read+0x710/0x710 [ 190.808095][T12887] vfs_write+0x2af/0x950 [ 190.812340][T12887] ? __fget_light+0x219/0x260 [ 190.817019][T12887] ksys_write+0xd9/0x190 [ 190.821286][T12887] __x64_sys_write+0x3e/0x50 [ 190.825935][T12887] do_syscall_64+0x44/0xd0 [ 190.830425][T12887] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 190.836433][T12887] RIP: 0033:0x7f0fdb27eae9 [ 190.840844][T12887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 190.860447][T12887] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.868945][T12887] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:54 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="75e50dbe8ee851e2000000000000000000", 0x11) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x109100, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/44) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x1, 0x1, 0x3, 0x0, 0x0, [{{r1}, 0xfff}, {{r2}, 0x800}, {{r3}, 0x8000}]}) [ 190.876915][T12887] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 190.884885][T12887] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 190.892861][T12887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.900834][T12887] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 190.908921][T12887] 06:54:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 75) 06:54:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/108) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x52, 0x81, 0x101, {0x5, 0x6}, {0x5, 0x2}, @ramp={0xff, 0x7b, {0x1, 0x70, 0x1f, 0x7}}}) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x1f, 0xc1, 0x7, 0x6, 0x0, 0x6, 0x5, 0x1b2, 0x38, 0x237, 0xa9e, 0x7, 0x20, 0x2, 0x3, 0x0, 0x7}, [{0x7, 0x9c2, 0xf3, 0xffffffff, 0xe1, 0xff, 0x9, 0x9}, {0x4, 0xfffffffd, 0xffffffff, 0x9, 0x2, 0x1, 0x3f, 0x7f}], "16f7c4c3cd8a6e2314930c13c3544b8d69ccdb5ec7209d2048054605c50f2f0e61a79163fe5224ebced8b74542484bb719e02dc63f40c22f4b267e50cffeb03e5e0ab8444e23d4776f9da97d0c2bf5b1dbbba7e081ee7d9b99390946ac95b7f43bcd684feea81bd86c2b0d7d800fd7c6fe8adb74fd9f664e08db3838adcbaa12b796f8db2258", ['\x00', '\x00', '\x00']}, 0x3fe) 06:54:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:54 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xfffffe0000000003, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 191.002308][T12995] FAULT_INJECTION: forcing a failure. [ 191.002308][T12995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.015653][T12995] CPU: 0 PID: 12995 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 191.024071][T12995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.034299][T12995] Call Trace: [ 191.037572][T12995] [ 191.040573][T12995] dump_stack_lvl+0xd6/0x122 [ 191.045232][T12995] dump_stack+0x11/0x1b [ 191.049389][T12995] should_fail+0x23c/0x250 [ 191.053809][T12995] should_fail_usercopy+0x16/0x20 [ 191.058916][T12995] _copy_from_user+0x1c/0xd0 [ 191.063507][T12995] input_event_from_user+0x122/0x1d0 [ 191.068823][T12995] ? input_inject_event+0xcd/0xe0 [ 191.073844][T12995] evdev_write+0x282/0x400 [ 191.078259][T12995] ? evdev_read+0x710/0x710 [ 191.082793][T12995] vfs_write+0x2af/0x950 [ 191.087109][T12995] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 191.093261][T12995] ? __fget_light+0x219/0x260 [ 191.097970][T12995] ksys_write+0xd9/0x190 [ 191.102217][T12995] __x64_sys_write+0x3e/0x50 [ 191.106803][T12995] do_syscall_64+0x44/0xd0 [ 191.111330][T12995] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 191.117291][T12995] RIP: 0033:0x7f0fdb27eae9 [ 191.121704][T12995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 191.141375][T12995] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.149804][T12995] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 191.157776][T12995] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 191.165744][T12995] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 191.165762][T12995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.165775][T12995] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 191.165794][T12995] 06:54:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x15401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:54 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0xec2, 0x8000, {0x196a, 0x801}, {0x12, 0x2}, @cond=[{0x3ff, 0x800, 0x6, 0x7, 0x81, 0x69}, {0xfff, 0x2, 0x4, 0x5, 0x2, 0x1800}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x7) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000100)={0x8, 0xf, 0x0, 0x3f1d, "4540e7b21ebd34876cce0ac5454a7f179a5caec2c83bff4c90f32b740f58bed9"}) 06:54:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 76) 06:54:54 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000003480)={0x18, r2, 0x307, 0x0, 0x0, {0x17}, [@HEADER={0x4}]}, 0x18}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0xf1, 0x7, 0x9e, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x700, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb8, r2, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10044011}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x101080) r5 = memfd_secret(0x0) write$evdev(r5, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x17, 0x100}, {{0x77359400}, 0x16, 0x1, 0x1}, {{0x0, 0xea60}, 0x14, 0x20, 0x9}], 0x48) 06:54:54 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x100) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) getrlimit(0x3, &(0x7f0000000000)) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='()\x00') ftruncate(r3, 0x0) [ 191.300526][T13108] FAULT_INJECTION: forcing a failure. [ 191.300526][T13108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.314441][T13108] CPU: 1 PID: 13108 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 191.322889][T13108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.332939][T13108] Call Trace: [ 191.336251][T13108] [ 191.339178][T13108] dump_stack_lvl+0xd6/0x122 [ 191.343842][T13108] dump_stack+0x11/0x1b [ 191.348000][T13108] should_fail+0x23c/0x250 [ 191.352505][T13108] should_fail_usercopy+0x16/0x20 [ 191.357539][T13108] _copy_from_user+0x1c/0xd0 [ 191.362232][T13108] input_event_from_user+0x122/0x1d0 [ 191.367521][T13108] ? input_inject_event+0xcd/0xe0 [ 191.372599][T13108] evdev_write+0x282/0x400 [ 191.377016][T13108] ? evdev_read+0x710/0x710 [ 191.381554][T13108] vfs_write+0x2af/0x950 [ 191.385798][T13108] ? __fget_light+0x219/0x260 [ 191.390498][T13108] ksys_write+0xd9/0x190 [ 191.394743][T13108] __x64_sys_write+0x3e/0x50 [ 191.399380][T13108] do_syscall_64+0x44/0xd0 [ 191.403810][T13108] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 191.409792][T13108] RIP: 0033:0x7f0fdb27eae9 [ 191.414200][T13108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 191.433872][T13108] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.442342][T13108] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 191.450313][T13108] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 191.458399][T13108] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 191.466390][T13108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.474357][T13108] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 191.482445][T13108] 06:54:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 77) 06:54:55 executing program 3: syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x44c401) r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8001, 0x84) ftruncate(r0, 0x208200) open(&(0x7f00000000c0)='./bus\x00', 0x101400, 0x10) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)) write$P9_RXATTRCREATE(r1, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) [ 191.572197][T13130] FAULT_INJECTION: forcing a failure. [ 191.572197][T13130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.585530][T13130] CPU: 1 PID: 13130 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 191.593945][T13130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.594028][T13130] Call Trace: [ 191.594035][T13130] 06:54:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 78) 06:54:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x738, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x1, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xf2bb, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x1}, 0x0, 0x0, &(0x7f0000000340)={0x5, 0xb, 0x8, 0x7ff}, &(0x7f0000000380)=0x10000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0xeec}}, 0x10) r6 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r6, 0x208200) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x8, &(0x7f0000000100)=@raw=[@generic={0x0, 0x1, 0x3, 0x1, 0x8}, @map={0x18, 0x6, 0x1, 0x0, r4}, @alu={0x4, 0x1, 0xa, 0x6, 0x0, 0x50, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x3, 0x6, 0x0, 0x2}], &(0x7f0000000180)='GPL\x00', 0xffff, 0xd, &(0x7f00000001c0)=""/13, 0x41000, 0x11, '\x00', 0x0, 0x8, r2, 0x8, &(0x7f0000000200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x6, 0x1f, 0x45}, 0x10, r5, r6}, 0x78) [ 191.594041][T13130] dump_stack_lvl+0xd6/0x122 [ 191.594065][T13130] dump_stack+0x11/0x1b [ 191.594084][T13130] should_fail+0x23c/0x250 [ 191.594184][T13130] should_fail_usercopy+0x16/0x20 06:54:55 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r0, 0x208200) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x10) [ 191.594207][T13130] _copy_from_user+0x1c/0xd0 06:54:55 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @cond=[{0x5, 0x2, 0x80, 0x3, 0x7, 0x1f}, {0xdf, 0x1, 0x6, 0x9, 0x7fff, 0x4}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:55 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xcc, 0xa, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xd41}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}]}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffff9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1f}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffffff7f}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x86}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x200488c4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 191.594279][T13130] input_event_from_user+0x122/0x1d0 [ 191.594301][T13130] ? input_inject_event+0xcd/0xe0 [ 191.594322][T13130] evdev_write+0x282/0x400 [ 191.594420][T13130] ? evdev_read+0x710/0x710 [ 191.594441][T13130] vfs_write+0x2af/0x950 [ 191.594512][T13130] ? __fget_light+0x219/0x260 [ 191.594534][T13130] ksys_write+0xd9/0x190 [ 191.594561][T13130] __x64_sys_write+0x3e/0x50 [ 191.594587][T13130] do_syscall_64+0x44/0xd0 [ 191.594614][T13130] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 191.594636][T13130] RIP: 0033:0x7f0fdb27eae9 [ 191.594691][T13130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 191.594712][T13130] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.594733][T13130] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 191.594746][T13130] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 191.594824][T13130] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 191.594838][T13130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.594921][T13130] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 191.594938][T13130] [ 191.698403][T13217] FAULT_INJECTION: forcing a failure. [ 191.698403][T13217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.698471][T13217] CPU: 0 PID: 13217 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 191.698497][T13217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.698510][T13217] Call Trace: [ 191.698517][T13217] [ 191.698524][T13217] dump_stack_lvl+0xd6/0x122 [ 191.698545][T13217] dump_stack+0x11/0x1b [ 191.698582][T13217] should_fail+0x23c/0x250 [ 191.698606][T13217] should_fail_usercopy+0x16/0x20 [ 191.698695][T13217] _copy_from_user+0x1c/0xd0 [ 191.698720][T13217] input_event_from_user+0x122/0x1d0 [ 191.698745][T13217] ? input_inject_event+0xcd/0xe0 [ 191.698779][T13217] evdev_write+0x282/0x400 [ 191.698804][T13217] ? evdev_read+0x710/0x710 [ 191.698839][T13217] vfs_write+0x2af/0x950 [ 191.698865][T13217] ? __fdget_pos+0x3a/0xb0 [ 191.698962][T13217] ? __tsan_read4+0x46/0x180 [ 191.698986][T13217] ksys_write+0xd9/0x190 [ 191.699012][T13217] __x64_sys_write+0x3e/0x50 [ 191.699073][T13217] do_syscall_64+0x44/0xd0 [ 191.699101][T13217] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 191.699143][T13217] RIP: 0033:0x7f0fdb27eae9 [ 191.699156][T13217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 191.699176][T13217] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.699198][T13217] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 191.699213][T13217] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 06:54:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 79) [ 191.699227][T13217] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 191.699242][T13217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.699258][T13217] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 191.699273][T13217] 06:54:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) getrlimit(0xa, &(0x7f0000000000)) [ 192.091423][T13277] FAULT_INJECTION: forcing a failure. [ 192.091423][T13277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.104638][T13277] CPU: 1 PID: 13277 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 192.113052][T13277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.123106][T13277] Call Trace: [ 192.126383][T13277] [ 192.129313][T13277] dump_stack_lvl+0xd6/0x122 [ 192.133955][T13277] dump_stack+0x11/0x1b [ 192.138157][T13277] should_fail+0x23c/0x250 [ 192.142606][T13277] should_fail_usercopy+0x16/0x20 [ 192.147634][T13277] _copy_from_user+0x1c/0xd0 [ 192.152282][T13277] input_event_from_user+0x122/0x1d0 [ 192.157649][T13277] ? input_inject_event+0xcd/0xe0 [ 192.162767][T13277] evdev_write+0x282/0x400 [ 192.167184][T13277] ? evdev_read+0x710/0x710 [ 192.171723][T13277] vfs_write+0x2af/0x950 [ 192.175976][T13277] ? __fdget_pos+0x4a/0xb0 [ 192.180397][T13277] ? __fdget_pos+0x54/0xb0 [ 192.184873][T13277] ? __sanitizer_cov_trace_pc+0x51/0x60 06:54:55 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x200000) [ 192.190457][T13277] ksys_write+0xd9/0x190 [ 192.194782][T13277] __x64_sys_write+0x3e/0x50 [ 192.199383][T13277] do_syscall_64+0x44/0xd0 [ 192.199416][T13277] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 192.199436][T13277] RIP: 0033:0x7f0fdb27eae9 [ 192.199452][T13277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 192.199471][T13277] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:54:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 192.242285][T13277] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 192.250253][T13277] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 192.258225][T13277] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 192.266289][T13277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.274300][T13277] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 192.282331][T13277] 06:54:55 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x81, 0x0, 0x0, 0x2, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc41, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x8402, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='()\x00') read(r2, &(0x7f0000000180)=""/225, 0xe1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) 06:54:55 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000280)=""/148, 0x94}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/41, 0x29}], 0x6, &(0x7f0000000540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1a8}, 0x102) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000740)=""/41, 0x29}, {&(0x7f0000000780)=""/186, 0xba}, {&(0x7f0000000840)=""/41, 0x29}, {&(0x7f0000000880)=""/161, 0xa1}], 0x4, 0x80, 0x1f) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x3}, {0x12, 0x2}, @ramp}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x70) write$evdev(r2, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x12, 0x5, 0x400}], 0x18) r3 = socket$inet6(0xa, 0x401000000001, 0x0) close(r3) r4 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x35000) 06:54:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 80) [ 192.384463][T13350] FAULT_INJECTION: forcing a failure. [ 192.384463][T13350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.397672][T13350] CPU: 0 PID: 13350 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 192.406091][T13350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.416175][T13350] Call Trace: [ 192.419446][T13350] [ 192.422369][T13350] dump_stack_lvl+0xd6/0x122 [ 192.427018][T13350] dump_stack+0x11/0x1b [ 192.431172][T13350] should_fail+0x23c/0x250 [ 192.435594][T13350] should_fail_usercopy+0x16/0x20 [ 192.440619][T13350] _copy_from_user+0x1c/0xd0 [ 192.445216][T13350] input_event_from_user+0x122/0x1d0 [ 192.450510][T13350] ? input_inject_event+0xcd/0xe0 [ 192.455538][T13350] evdev_write+0x282/0x400 [ 192.460080][T13350] ? evdev_read+0x710/0x710 [ 192.464649][T13350] vfs_write+0x2af/0x950 [ 192.468937][T13350] ? __fget_light+0x219/0x260 [ 192.473647][T13350] ksys_write+0xd9/0x190 [ 192.478004][T13350] __x64_sys_write+0x3e/0x50 06:54:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000004280)=[{{&(0x7f0000001140), 0x6e, &(0x7f0000002680)=[{&(0x7f00000011c0)=""/110, 0x6e}, {&(0x7f0000001240)=""/177, 0xb1}, {&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000001400)=""/97, 0x61}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f0000000040)=""/15, 0xf}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/133, 0x85}, {&(0x7f0000002640)=""/41, 0x29}], 0x9, &(0x7f0000002740)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002780)=@abs, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002800)=""/241, 0xf1}, {&(0x7f0000002900)=""/210, 0xd2}, {&(0x7f0000002a00)=""/173, 0xad}, {&(0x7f0000002ac0)=""/125, 0x7d}], 0x4, &(0x7f0000002b80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000004180)=[{&(0x7f0000002cc0)=""/200, 0xc8}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/156, 0x9c}, {&(0x7f0000003e80)=""/208, 0xd0}, {&(0x7f0000003f80)=""/109, 0x6d}, {&(0x7f0000004000)=""/218, 0xda}, {&(0x7f0000004100)=""/94, 0x5e}], 0x7, &(0x7f0000004200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x3, 0x12000, &(0x7f0000004340)={0x0, 0x3938700}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004580)={r1, 0xc0, &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)=0x9, 0x0, 0x0, 0x0, &(0x7f00000043c0)={0x5, 0x2}, 0x0, 0x0, &(0x7f0000004400)={0x4, 0x5, 0x5, 0x61e}, &(0x7f0000004440)=0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)=0x100000000}}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='()\x00') write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file0', [{0x20, '\'-.['}, {}, {0x20, '+-'}, {}, {0x20, '(\xe4\\-'}], 0xa, "a7831d8f683c43eb748fdbfd363aa9c776c9c205025354af4919e98dfbb2978d72a9995ba0b2125359900b1575f2eb1f25e7e459bd88588ece7a00a9ae3d5647db70d617a7f63568848c3c9802a0d4dde83e6165e4e701da7e76dceb47acc19dfb0daae7fe90d4628e52980d71a115e78763d5bbd4697c308f9f9f2d7e8d191e9e7c0db802125372d01e1925f3dc1ab6e5e78e660431ab8b3a5e8953149050e4e144eccd6b2eb0bca35bb25b3fc1344bd8269a2d24fe51136418ac6707b9f6bab60fbd9140f28db366a2b9a5599c05da35c8b550d6f3f0a812c89b45216085f07748c5985495807855c1be0e5b9441bdbfbfce929bdba3502ba67c59e65ebe1da7ee0d89c043527089d00bc7073c2d0bd4293e773a9158a3bcca96667009f6c6bb2d4fae71285bb0bd1a8053a48d8ee7869629cd89c5843a658bc1dce4892eebf945ea858e8b279e288cfe05cc4e118d8feecc565f7ce05317ce4ae6075fd785e96a56c93d5130de508dc18d486ff1b64cc2ae05eacf15fb6de3c94011d19967341c657aaeb1a8b14e7562d243f40363bdd7882def93c5201ea36b73e59e263338b7f8ca3089611942850539e0f69bd873da7b2981d6b2a92028e5e61152c7674304f769ed9de777dc9744ddc6b3933dab894e7344002d07d6b854ce322bf9da8623eb36ab0d491c4feccc9a59efd773f3eaa5aefe4acf8d799654dcca5644e7b239a7562dcee8ed7a3f585bb27745e0c75ae60c57fe8168af5013e3a750a9deb1f922c40762a281fca49fb08f30973c46904f8b17be1be0825cb4024c0c85b0aa22339b17bfce417d2c0f4bbb180b1ffa0432e269248ef44484cdd1f7ba93b911ad7d3593a36754e2f3cc8121b1274e4fac6f581c920079f73a1bbc40dffd6360e51d4eb7fc226e8c79f93f33fcf1bf4f187622030640762c4f1f1010993bded494ee302325fc49ac5a3c6d13b97c0f729a1cdcb23164df901f704de5a29497e51dc279b9553841fcb8355688273a4ecb19c0cbd369cd77167bc5c26bdfd132bab94250869772fd25efdd48aa4de1dec1158aef685698837ad840e12ba9d4b8b8e0b711ddae0673e82cf1939effa21d0d4c67cc557ee24d0626a75f14a832fcef84eb26fee4b1e80a69f56d7fac2adea7674af8b7f80bb44997e9c11015200e840b28a321983771a1416b0f978ec9446f79b5cf76bb10f9e7f986f5a97a36b20d088ef225bb9417c44f4cd40d24c567e24f24b8c6ec46241e79593d8b1777e27b9e5ae0817842be94788ebf49cfc783fa89b3a7143c3788fa4e55ddc862e8eb04399d04ad2ba569032a54eb5f2127cbcda0ea4eac03781418f74044cdeb3e6679c863592de310b56d51acb8bcd758e0599323ac48ce51a525c6f94728218e6e6b30946f7d7c1b1cec794e08b66e428f0942e631e44bb790a19063c2e6d1811995bae0ba79c970db09801221d7c7814793330939e79057279bcd1203e66567e62105b654693cf6bee54a046d12a8e5dd863ef82f262bec88a05e3828987886b102929ef50600145aa1163243b0e88814f92aba26edf025b007f61e3666dc757b7e17cfe29d5fa88b394054386cef5afe0cf314e5f1a7234467d832f325b703776005142c1a686e43c8be2ae96d2254bd72ca2a729f9d58c51b497bdbccce7f71a62d24cb67e27db5b50a9911f6d481e3ef371b07293b1fe9edd0fb4ba5f2da38784ad57ef113575a08e47961f5f4398d12e82180eb2e5d08f0890ded98b93bb9c677e2daa96a3dde1f1f052d4319e0dd86e1529775bdf3476b0b8a5ea2f14d1623f8730956e19563eaddfe767c62e0f3b4b29692ecdda900fb79cdf7c36b5e676555acc38e1fd253dfd1249b2a20b432ffe2d08abd37b30c3aaa0c6f4de4db9f97c88e7ec6992912777ea6e3757a5748c68c81064c9f848f33e1f75eec84a041f4b13b97d5f4640eddf889bc3609f983c8e5e425617fadaeb1e1a069e19fec4a82f71a13caa38f2dae5c45b2a04f96abdeaafdcb24251cb7dbb27f3bfe8e30d9c99b6d4b0ad60efa07875912699513efea5bfc9b8777dc65ae3bff438c2c868feb7e2a41c2be53e43939a509706b5abd889d039b6a373876d4612104796dd7b42b6dc9a2f92eedf1807e4957bc5f3d35427a1ef617e1f3372c75fcce8f2c05e51724e600c31b26f671bff7ea80cabd1ab70e461f0dcef5ad5b2b21cc62bac859bb180bc476fd921651a73189cf1c4cb8fb8802f492e0c5f719d9184cbcb98e1f6293514e06d953a08689b3c3de8f74e5e27dfa73ca7d2acaa2db418db5f693ed03a747fbcfbc7b8d0f4503cf256ecc3374feea23282d1bffdceffc70229df01b887f3a4e62573e92f9b64fb212c67d72887b26403fb72b2f8ce684de2b2600993d7da004cc3880bece0df5302387a3290383c25b3b308715f025bdbfefdf119206ba3e9afb2f0216a603746c32e62b938200641be8e603babc6c2dcac174e2bbc29cc91e04d87b0034fe4b8f26cd2a4a7f55df693f51f3083bfc5915263bd0e363674685d99596a841c686f3a2110ff41c322c0f3ce30414c66d0b9ddc5b0335658d8d37336529fd92d48d16c09b47db42dc98f7f3d305829f5f95ca430ad5132fde62ab5fcfbee4161f065b669d971500b52bc70bf920beac10e856b52ba698dd558750545fe115a7a152bdef95e9489f9a3a33d878bc7607dc3dc63b84d6318921c17842fa81fbd0008a2791d6cfeffe5909f8851564783d06269c97ed66143a17f9edd968c9a3ae33cafa58826fc725bf83eca451c7b39fc56ce2b5c4c898da3f1a97509f3e640e7ae1f4c9e862da77ebdfa01aa8deb4f7466c550b1e30ad8b9c132fbe7714b117021ecd1a581fc165c068ed44219056b3b439491e57a6f4e5eca0e9404d4cfa90940ec3aa3a2bbb3f6002cdfdb6fb44e44109122029a0fb734673eecd8fc73e4e6c777c0837188bd26829f76f6bdbfe5fb4d80683985073480c7e9225e1c58601e8b651298140178d4ed57a8d5307eb5913ee96876b82ae3ae7b6efe231ef927ea3fa682172465ea72375941f4a0d3c40c96db477b8efa560ab5eb0306b8f0e1e38660ce3873cd1b98b15545908f19bd4e84d47e01ff632834fa70fd1d8b6ea01f1c9042c0bd24891358bc36b03336c7eefc07ff0ec70726e6cba53a81fdfd7f8a395915181f83c97c46243c46c9f1a540beb0391b904eb59b13941f8583ad76a47f87f1c8891b928b2dd53e6eaa7a0989ce049f41af15d3e06c43526c4df5e64a9e55dd0c280aa77a748dc1ac8633c1f4e54fea2bccc32757efafdfcffcda14758ae3cf94bbc23fbd7625cd5d14a84aa7b3639f0eaf2db289b872dd0ea6c10fdab44fed4aee2cfc92776bee319ea00825bfddc8dfa64a37ed3d4ae0f23fb49b2e00690a797609fe166f6f2d2e746b6ff8a40d7c424a8aceb345ba9fa49489f10cddf2e4fbf943281f9a2528336ed2f6db303aa16b89b6caf1c37752418ec08bada44b3e47735f7e8af17b308f19762fbea487e30d2a4af9e1985e0234d18da0dd0acaf15da34100ca8a093cc6595e6b43669d01527b2815d583da53d4567701bdf327cda61a9024562a9be575cd178dd91e3906c829dccd1229fb7bcaf8d55d3629639cc64e2161cc2f36986ed787f24d08c9a21985a5bea923f987c582d71b701421de60596431d551e14a6dbb4c5e7b4aeba5b2af947c00f0620d4e9826186c849509110ab589b9189cb4e604120c537f462557ba2c8bc6911b60b30147a94901ea816b8b5a40481a0d1650a68df8bbbf327b94892d3e65555c482992594227606490eddb07b14142ccb15d648a854e9d463c6a033dc3f008bc83348bcef1724042c2b56d028bb8496c4c82b04461ca871cc1f672670de9e9efae5f8831606f65269f176304bd313aea52a308959a37b842468057f95bb6b59d1fe5b73b41f1a424d5852f96c0d73ad97ae2ee03c586927129cd0932c52ec727b970e47d36aa7950f9c3fcb2f015ce60bbbef1c0c4593e187263cd65183d7159c8865c57122ba62dd1c19d5f2204cd503051b73817ca205d3d7ebf1f0f55696166de1b31e0ce033ca42ece321f99d63ec0a7b891bfe67113e6b826dea5e60c6af8f2ebfa5c9aa94c525d6251a6f04462b7e6e6d34c8e98fc165e2ea2b22ff7f9dd132abaf3839f8ec72766c8eaa48b12a95cc1ed01058aff73300b8d8179c41fcb581e6455398e8a811a96ffc04b5be6fe21e483e4a1500922790fa4ffc9033a6e7c475b62723391963800707d7d59170e22bae83a047ce178e99221c7f2fbca8ef73d09a2683a9d4e3fc38018e5ebedc07ec8ae16722c55805f3bfa98844e9d1af9b379b179d1d0c8ad1c77cdb69a07b6c2f7043bdb225c5e240ef6948873c0958d4ca2adcf243f7615b4ce3fa246ae1011e4c79a78c8a7705cf9a324b5ef212496c8b8f61ae1edf3480ed36539f14ee733e5990b0ef70a04de0b9b44499551f9c98d15d7d95a1dda24d998aac51c94d9d08ade4765545b55d80320facaf9dc284abe024350a0776c7fc2607804114257985f79264e7f353176bbe2c9eb0698514182ea49859a94107df585369a067905cf7a1ab7c47fb3e23b4712b66156cca9ff698ddcf69be174bdc34ffd19d6299b04fa400711a4af361f653ee5c2c99130a08bfd0faa690ddf43e143730abfad17e371b2484fae6707517d877021927f224c4dba2056c4ff0afd61c7a2e1f08b1fdb3e1534388693c73b142a51a7a638573f045773a0f1b173c138bc27df62d6639e22d6ea56116abfce1f0084f53f6693d75d26b93e9d9e2cafe3ba7a6f8f6a04129a9e4f888c1bab0c8ad3f23c51aacfcbb11c33745fe0cdf180fba112aa4100eb8a417f15f1cc71a799f1d61c2ed52b36279d09ed83361ce3372535c81b2a2def72d5cc73adede61b8ec1c5e175781062ca4037298b23640fa8db7ca019d74019e332c0caa9715c375c9b7b43050f7bf1c9d6b56100c201449cee130ac40eb390c2a61c65e2b23fa350857fe503b33cc5cffdd3a6a07bc69ce85fe360e572fe028d8cf29aa9ec4ddad172cd371a7b053657c6ebd6ca3f81ae413dd2dc08909106d0226b706fe7681aa26180a62c5f076726a09777ca1cdbc7bb8197aabea46b02174e5be0827a9b05f2f0bf23a9e1cd90a7d54f14f36faa834e27e660d2ffd55c856398d5942dfd689a8c4ec8fc9a63c79c4c08215944c8c774489a9c34087db6dfece765d0be14cce8257424d33fce4d9e2810934567e22665c9941cca3ef70ffdb205c285038316965bdb24f94fb0f69878f0be61a135e4eee3fbb7205cac060bc54f3e338ff16faafd1512020390cd3fbb1c2ad8739635cff76087d7dedff6c0013c19bc56aa047597a90cd6fc49719315f6ccdd4f21f213d88981375b4b9c4ef64c42dbe1e2727fb23afa0946b480ecd7029d3eba5a4360081cc3b0204a7f511f9b6b8aac6ac8c1079f29a8b28ffa94bd18f761d4953b6aaf7b66cfb76401a73dc24c16f03c41069144514bef44e70f26e8c4fe51be8c5965fb7ec0c1d54f52f014fd8c0ac1181ace4988dff54c1316a5ca6dc49f2b5f203d7e3f541c6591ecc0849ec5208fdce1d5e030d49b47820e438de917547f4d891ff4d6fb46ddf124787e21fe0525f126eabec3735e164436a6f09350b1a376c110cb5a8f0d525b84e7f18cda1cadb0c8e1205d61f0186d123f49af2ef181826b4c1fbf5302ff1b0eaec10de75a2b202796138f6cf304f783d9eecf4fc949d129bb5fc43704dbcc576f89a4aac35ab0b3d9b"}, 0x101a) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) 06:54:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x1, 0x80, 0xff, 0x4, 0x6, 0x6, 0x0, 0x1f, 0x920, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffff34, 0x0, @perf_config_ext={0x4, 0x8}, 0x242, 0x5, 0x6, 0x0, 0x8, 0x39086173, 0xc24, 0x0, 0xffff, 0x0, 0x100}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x1, 0x12, 0x8, 0x5, 0x3ff, 0x1, 0x2, 0x1, 0x3}, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 192.482610][T13350] do_syscall_64+0x44/0xd0 [ 192.487039][T13350] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 192.492935][T13350] RIP: 0033:0x7f0fdb27eae9 [ 192.497396][T13350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 192.517163][T13350] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.525658][T13350] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 81) [ 192.533629][T13350] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 192.541668][T13350] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 192.549688][T13350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.557655][T13350] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 192.565645][T13350] 06:54:56 executing program 3: splice(0xffffffffffffffff, &(0x7f0000000000)=0x1000, 0xffffffffffffffff, &(0x7f0000000040)=0x8, 0x60f5, 0xb) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) [ 192.601540][T13363] FAULT_INJECTION: forcing a failure. [ 192.601540][T13363] name fail_usercopy, interval 1, probability 0, space 0, times 0 06:54:56 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100)={0x33, 0xa, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x5, 0x4, [0x8001, 0x7, 0x1, 0x7, 0x0, 0x4307]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0xb, 0x2}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x60) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:54:56 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x3, 0x40, 0x50, 0x80000000, 0x767, 0x8001, 0x3, 0x1e6, 0x8}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0xfff, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x6, 0x20, 0x101, 0x6, 0x3, 0xfffffffffffffffd, 0x400, 0x0, 0xfff}, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 192.614986][T13363] CPU: 0 PID: 13363 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 192.615015][T13363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.615027][T13363] Call Trace: [ 192.615033][T13363] [ 192.615039][T13363] dump_stack_lvl+0xd6/0x122 [ 192.615071][T13363] dump_stack+0x11/0x1b [ 192.615089][T13363] should_fail+0x23c/0x250 [ 192.615113][T13363] should_fail_usercopy+0x16/0x20 [ 192.615139][T13363] _copy_from_user+0x1c/0xd0 [ 192.615219][T13363] input_event_from_user+0x122/0x1d0 [ 192.615244][T13363] ? input_inject_event+0xcd/0xe0 [ 192.615269][T13363] evdev_write+0x282/0x400 [ 192.615296][T13363] ? evdev_read+0x710/0x710 [ 192.615320][T13363] vfs_write+0x2af/0x950 [ 192.615363][T13363] ? __fget_light+0x219/0x260 [ 192.615388][T13363] ksys_write+0xd9/0x190 [ 192.615493][T13363] __x64_sys_write+0x3e/0x50 [ 192.615518][T13363] do_syscall_64+0x44/0xd0 [ 192.615544][T13363] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 192.615565][T13363] RIP: 0033:0x7f0fdb27eae9 [ 192.615580][T13363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 192.615780][T13363] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.615800][T13363] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 192.615813][T13363] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 192.615827][T13363] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 192.615864][T13363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.615931][T13363] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 06:54:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 82) 06:54:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 192.615948][T13363] 06:54:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x610d00, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000200)=0xcca) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = gettid() rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) sched_setattr(r3, &(0x7f0000000080)={0x38, 0x1, 0x58, 0x9, 0x81, 0x2, 0x9cc, 0x1ff, 0x5, 0x7f}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x189) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f00000002c0)={0x0, 0x9}) ftruncate(r4, 0x208200) r5 = fork() sched_setattr(r5, &(0x7f0000000000)={0x38, 0x5, 0x17, 0x7ff, 0x8a, 0x61412c14, 0x5217, 0x800, 0x1, 0xfffffff9}, 0x0) write$char_usb(r4, &(0x7f0000000180)="82a8e2fc6636b7588f3c4e042fd359d8cde69812d34ae62d5abbfc890806ae3381783c8e9e0ea6145ee0f7291750c60bfd0a60798562ca9a3b988e3b8be95d60a22f8b0ef06e4ede9f05c2d2a869c8348c010100002db6b6962dc5f6567765", 0x5f) [ 192.906711][T13473] FAULT_INJECTION: forcing a failure. [ 192.906711][T13473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.920045][T13473] CPU: 1 PID: 13473 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 192.928459][T13473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.938509][T13473] Call Trace: [ 192.941804][T13473] [ 192.944741][T13473] dump_stack_lvl+0xd6/0x122 [ 192.949359][T13473] dump_stack+0x11/0x1b [ 192.953512][T13473] should_fail+0x23c/0x250 [ 192.957996][T13473] should_fail_usercopy+0x16/0x20 [ 192.963020][T13473] _copy_from_user+0x1c/0xd0 [ 192.967662][T13473] input_event_from_user+0x122/0x1d0 [ 192.972943][T13473] ? input_inject_event+0xcd/0xe0 [ 192.978019][T13473] evdev_write+0x282/0x400 [ 192.982436][T13473] ? evdev_read+0x710/0x710 [ 192.987131][T13473] vfs_write+0x2af/0x950 [ 192.991446][T13473] ? __fget_light+0x219/0x260 [ 192.996147][T13473] ksys_write+0xd9/0x190 [ 193.000414][T13473] __x64_sys_write+0x3e/0x50 06:54:56 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x8000, 0x1]) 06:54:56 executing program 0: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 193.005060][T13473] do_syscall_64+0x44/0xd0 [ 193.009485][T13473] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 193.015421][T13473] RIP: 0033:0x7f0fdb27eae9 [ 193.019831][T13473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 193.039459][T13473] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.047876][T13473] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x3, 0x41, 0x2, 0x1, 0xdd, 0x4, 0x81, 0x8e2, 0x100}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x3, 0x18, 0x9, 0x6, 0x1000, 0x80000000, 0x6, 0x4, 0x53}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) setrlimit(0x7, &(0x7f0000000240)={0xacb, 0x7fff}) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='()\x00') perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x7, 0xd9, 0x7, 0x0, 0x14, 0x20000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3c2, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x13050, 0xe3, 0x4, 0x1, 0x6e7, 0x0, 0xac, 0x0, 0x0, 0x0, 0x7}, r2, 0xe, r3, 0x4) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000180)=""/120) r5 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x20, 0x5, 0x8, 0x4, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4e2, 0x4, @perf_config_ext={0x2400000000000, 0x2}, 0x808, 0x3, 0x8000000, 0x9, 0x400, 0x800, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffa}, r5, 0x5, r3, 0x2) write$char_usb(r4, &(0x7f0000000040)="e2", 0x35000) [ 193.055920][T13473] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 193.063907][T13473] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 193.071878][T13473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.079895][T13473] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 193.087887][T13473] 06:54:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 83) 06:54:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8001, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 193.160345][T13591] FAULT_INJECTION: forcing a failure. [ 193.160345][T13591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.173729][T13591] CPU: 1 PID: 13591 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 193.182270][T13591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.192318][T13591] Call Trace: [ 193.195628][T13591] [ 193.198603][T13591] dump_stack_lvl+0xd6/0x122 [ 193.203234][T13591] dump_stack+0x11/0x1b 06:54:56 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 193.207468][T13591] should_fail+0x23c/0x250 [ 193.211885][T13591] should_fail_usercopy+0x16/0x20 [ 193.217604][T13591] _copy_from_user+0x1c/0xd0 [ 193.222198][T13591] input_event_from_user+0x122/0x1d0 [ 193.227583][T13591] ? input_inject_event+0xcd/0xe0 [ 193.232608][T13591] evdev_write+0x282/0x400 [ 193.232636][T13591] ? evdev_read+0x710/0x710 [ 193.232688][T13591] vfs_write+0x2af/0x950 [ 193.232714][T13591] ? __fget_light+0x219/0x260 [ 193.232814][T13591] ksys_write+0xd9/0x190 [ 193.232839][T13591] __x64_sys_write+0x3e/0x50 [ 193.232861][T13591] do_syscall_64+0x44/0xd0 [ 193.232891][T13591] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 193.232935][T13591] RIP: 0033:0x7f0fdb27eae9 [ 193.232950][T13591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 193.232970][T13591] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.233061][T13591] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 193.233075][T13591] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 193.233089][T13591] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 06:54:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 84) [ 193.233102][T13591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.233115][T13591] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 193.233132][T13591] 06:54:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 193.412791][T13633] FAULT_INJECTION: forcing a failure. [ 193.412791][T13633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.426545][T13633] CPU: 0 PID: 13633 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 193.434969][T13633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.445019][T13633] Call Trace: [ 193.448293][T13633] [ 193.451235][T13633] dump_stack_lvl+0xd6/0x122 [ 193.455819][T13633] dump_stack+0x11/0x1b 06:54:56 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x3759, 0xcb}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 193.460041][T13633] should_fail+0x23c/0x250 [ 193.464504][T13633] should_fail_usercopy+0x16/0x20 [ 193.469580][T13633] _copy_from_user+0x1c/0xd0 [ 193.474174][T13633] input_event_from_user+0x122/0x1d0 [ 193.479509][T13633] ? input_inject_event+0xcd/0xe0 [ 193.484555][T13633] evdev_write+0x282/0x400 [ 193.488986][T13633] ? evdev_read+0x710/0x710 [ 193.493488][T13633] vfs_write+0x2af/0x950 [ 193.497775][T13633] ? __fget_light+0x219/0x260 [ 193.502554][T13633] ksys_write+0xd9/0x190 [ 193.506919][T13633] __x64_sys_write+0x3e/0x50 [ 193.511522][T13633] do_syscall_64+0x44/0xd0 [ 193.515981][T13633] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 193.521874][T13633] RIP: 0033:0x7f0fdb27eae9 [ 193.526290][T13633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 193.526312][T13633] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.526333][T13633] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 85) 06:54:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$FIONCLEX(r1, 0x5450) syz_open_dev$evdev(&(0x7f0000000040), 0xa32, 0x240800) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x2) [ 193.562281][T13633] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 193.570255][T13633] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 193.578452][T13633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.586501][T13633] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 193.594483][T13633] 06:54:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x10, 0x0, 0x20, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x0, &(0x7f0000000180)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x903c}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x10282, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) setrlimit(0x2, &(0x7f0000000100)={0x2, 0x6}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) sched_setattr(r2, &(0x7f0000000080)={0x38, 0x1, 0x10, 0x2, 0x80000001, 0x4, 0x8, 0x1, 0x9, 0x1}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 193.678400][T13708] FAULT_INJECTION: forcing a failure. [ 193.678400][T13708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.691952][T13708] CPU: 1 PID: 13708 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 193.700412][T13708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.710467][T13708] Call Trace: [ 193.713745][T13708] [ 193.716664][T13708] dump_stack_lvl+0xd6/0x122 [ 193.721299][T13708] dump_stack+0x11/0x1b [ 193.725451][T13708] should_fail+0x23c/0x250 [ 193.729868][T13708] should_fail_usercopy+0x16/0x20 [ 193.734949][T13708] _copy_from_user+0x1c/0xd0 [ 193.739606][T13708] input_event_from_user+0x122/0x1d0 [ 193.744893][T13708] ? input_inject_event+0xcd/0xe0 [ 193.749915][T13708] evdev_write+0x282/0x400 [ 193.754398][T13708] ? evdev_read+0x710/0x710 [ 193.758903][T13708] vfs_write+0x2af/0x950 [ 193.763200][T13708] ? __fget_light+0x219/0x260 [ 193.767928][T13708] ksys_write+0xd9/0x190 [ 193.772233][T13708] __x64_sys_write+0x3e/0x50 [ 193.776906][T13708] do_syscall_64+0x44/0xd0 [ 193.781522][T13708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 193.787444][T13708] RIP: 0033:0x7f0fdb27eae9 [ 193.791851][T13708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 193.811513][T13708] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.819943][T13708] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:57 executing program 0: r0 = socket$inet(0x2, 0x80000, 0x7f) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000500)=ANY=[@ANYBLOB="8b010000000100000018000000", @ANYRES32=r0, @ANYBLOB="08000000000000002e2f66696c6530e6ae977d650397ca94c8cb7f3484861f3fefcfd9620e4ca4fb4198077a8e9992cf203c25559033d81b34d5204b721e5d60b35ccbfc5972219f29c871e50d0c5f"]) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e20, @remote}], 0x20) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x56, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x9}, @ramp={0x0, 0x0, {0x2, 0x0, 0xffff}}}) syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x38000) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendto$inet(r3, &(0x7f0000000100)="310d5dbd8b97574767cf8dbd411e5c8516242075c73a76b5074686947582afd1adad2166469e85f7d107745e5c60e645c37b0fd4a2ae15d3aa567e37f665bcd716bf803106e8134c59b4a06c00f3083ec47ddfbd915a186f54eab30b9a6f8d5c898ad9750468795a5fec0cfbd18cbbcc9bb7c8fbd24a9dc51d49fdac802c27f41daa66000f364708307c0c49c6180834e43e20cfdb", 0x95, 0x8000, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) write$char_usb(r4, &(0x7f0000000040)="e2", 0x35000) listen(r3, 0xf6) r5 = socket$inet6(0xa, 0x401000000001, 0x0) close(r5) r6 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x8001, 0x7c, 0x40, 0x7ff}, {0x3f, 0x5, 0xf8, 0x5}, {0x756, 0x1, 0xf8, 0x401}]}, 0x10) 06:54:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x2, 0x7, 0x3, 0x0, 0x100000001, 0x44, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_config_ext={0x5826, 0x3}, 0x1103, 0x1e, 0x5, 0x6, 0x4, 0x1, 0x5, 0x0, 0x5f2f, 0x0, 0x4000000000000000}, r2, 0x2, r1, 0xb) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='()\x00') mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x10, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x3c, &(0x7f0000000040)) rt_sigqueueinfo(r4, 0x25, &(0x7f0000000340)={0xa, 0x10000, 0x4}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x35000) 06:54:57 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) setrlimit(0xa, &(0x7f0000000100)={0x4, 0x3}) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0xff, 0x3ff, 0x0, 0x3f, 0x7, 0x8, 0x80000001}, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x2710}, 0xe, 0x101, 0x3f}], 0x18) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x101000, 0xd5) 06:54:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 193.828069][T13708] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 193.836128][T13708] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 193.844170][T13708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.852141][T13708] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 193.860119][T13708] 06:54:57 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x32, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='()\x00') fchmod(r2, 0x40) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000100)=0x200) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x4082816, r0, 0xec9ee000) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x8, 0x6, 0x2, 0x0, 0x5, 0x4, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x4408, 0x83, 0x4, 0x9, 0x1, 0xcd, 0x8ce, 0x0, 0x7, 0x0, 0x91a6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:57 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x100) 06:54:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 86) 06:54:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:54:57 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x9, 0x3, 0x7, 0x7, 0x4, 0x2}) [ 193.976609][T13893] FAULT_INJECTION: forcing a failure. [ 193.976609][T13893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.989862][T13893] CPU: 1 PID: 13893 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 193.998284][T13893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.008332][T13893] Call Trace: [ 194.011650][T13893] [ 194.014583][T13893] dump_stack_lvl+0xd6/0x122 [ 194.019179][T13893] dump_stack+0x11/0x1b [ 194.023358][T13893] should_fail+0x23c/0x250 [ 194.027832][T13893] should_fail_usercopy+0x16/0x20 [ 194.032931][T13893] _copy_from_user+0x1c/0xd0 [ 194.037530][T13893] input_event_from_user+0x122/0x1d0 [ 194.042932][T13893] ? input_inject_event+0xcd/0xe0 [ 194.048022][T13893] evdev_write+0x282/0x400 [ 194.052445][T13893] ? evdev_read+0x710/0x710 [ 194.057022][T13893] vfs_write+0x2af/0x950 [ 194.061313][T13893] ? __fget_light+0x219/0x260 [ 194.066036][T13893] ksys_write+0xd9/0x190 [ 194.070380][T13893] __x64_sys_write+0x3e/0x50 06:54:57 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000390000082abd7000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10) [ 194.075035][T13893] do_syscall_64+0x44/0xd0 [ 194.079452][T13893] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 194.085341][T13893] RIP: 0033:0x7f0fdb27eae9 [ 194.089752][T13893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 194.109517][T13893] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.117930][T13893] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 194.125981][T13893] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 194.133956][T13893] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 194.141969][T13893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.149931][T13893] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 194.157940][T13893] 06:54:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 87) [ 194.171109][ T24] audit: type=1400 audit(1636700097.601:209): avc: denied { create } for pid=13905 comm="syz-executor.3" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 194.191510][ T24] audit: type=1400 audit(1636700097.601:210): avc: denied { associate } for pid=13905 comm="syz-executor.3" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 194.218645][T13940] FAULT_INJECTION: forcing a failure. [ 194.218645][T13940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.232035][T13940] CPU: 0 PID: 13940 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 194.240481][T13940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.250530][T13940] Call Trace: [ 194.253884][T13940] [ 194.256842][T13940] dump_stack_lvl+0xd6/0x122 [ 194.261465][T13940] dump_stack+0x11/0x1b [ 194.265617][T13940] should_fail+0x23c/0x250 [ 194.270063][T13940] should_fail_usercopy+0x16/0x20 [ 194.275094][T13940] _copy_from_user+0x1c/0xd0 [ 194.279732][T13940] input_event_from_user+0x122/0x1d0 [ 194.285050][T13940] ? input_inject_event+0xcd/0xe0 [ 194.290073][T13940] evdev_write+0x282/0x400 [ 194.294499][T13940] ? evdev_read+0x710/0x710 [ 194.299004][T13940] vfs_write+0x2af/0x950 [ 194.303245][T13940] ? __fget_light+0x219/0x260 [ 194.307975][T13940] ksys_write+0xd9/0x190 [ 194.312219][T13940] __x64_sys_write+0x3e/0x50 [ 194.316815][T13940] do_syscall_64+0x44/0xd0 [ 194.321231][T13940] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 194.327144][T13940] RIP: 0033:0x7f0fdb27eae9 [ 194.331549][T13940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 194.351152][T13940] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.359571][T13940] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 194.367552][T13940] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 06:54:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 194.375551][T13940] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 194.383519][T13940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.391488][T13940] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 194.399452][T13940] 06:54:57 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f00000010c0)={{r2}, "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"}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x215bf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='()\x00') perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x1, 0xa0, 0x5, 0x0, 0x8, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0x418}, 0x4402, 0x6, 0x4, 0x0, 0x1, 0x200, 0xfff7, 0x0, 0x7fffffff, 0x0, 0x7}, 0xffffffffffffffff, 0x1, r2, 0x3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 88) 06:54:57 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/96) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000040)=0xca) [ 194.520644][T14052] FAULT_INJECTION: forcing a failure. [ 194.520644][T14052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.533907][T14052] CPU: 1 PID: 14052 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 194.542389][T14052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.552533][T14052] Call Trace: [ 194.555803][T14052] [ 194.558764][T14052] dump_stack_lvl+0xd6/0x122 [ 194.563358][T14052] dump_stack+0x11/0x1b [ 194.567508][T14052] should_fail+0x23c/0x250 [ 194.571960][T14052] should_fail_usercopy+0x16/0x20 [ 194.577066][T14052] _copy_from_user+0x1c/0xd0 [ 194.581661][T14052] input_event_from_user+0x122/0x1d0 [ 194.586954][T14052] ? input_inject_event+0xd6/0xe0 [ 194.592033][T14052] evdev_write+0x282/0x400 [ 194.596511][T14052] ? evdev_read+0x710/0x710 [ 194.601016][T14052] vfs_write+0x2af/0x950 [ 194.605308][T14052] ? __fget_light+0x219/0x260 [ 194.609993][T14052] ksys_write+0xd9/0x190 [ 194.614316][T14052] __x64_sys_write+0x3e/0x50 06:54:58 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x61808, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x951, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x50024, 0x401, 0x0, 0x2, 0x3}, 0x0, 0x20000000000001, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 194.618917][T14052] do_syscall_64+0x44/0xd0 [ 194.623391][T14052] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 194.629286][T14052] RIP: 0033:0x7f0fdb27eae9 [ 194.633695][T14052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 194.653352][T14052] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.661753][T14052] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 194.669707][T14052] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 194.677681][T14052] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 194.685675][T14052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.693642][T14052] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 194.701635][T14052] 06:54:58 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x600880) 06:54:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 89) 06:54:58 executing program 0: mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/dev0nullb0\x00'], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='minix\x00', 0x4008, &(0x7f0000000140)='/dev/input/event#\x00') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x800) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) umount2(&(0x7f0000000180)='./file0\x00', 0xc) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 194.864649][T14163] FAULT_INJECTION: forcing a failure. [ 194.864649][T14163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.877962][T14163] CPU: 0 PID: 14163 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 194.886381][T14163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.896443][T14163] Call Trace: [ 194.899770][T14163] [ 194.902697][T14163] dump_stack_lvl+0xd6/0x122 [ 194.907293][T14163] dump_stack+0x11/0x1b 06:54:58 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x0) 06:54:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x68002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x855, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd2a, 0x25dfdbfc, {0x2, 0x10, 0x20, 0x1, 0x5, 0x0, 0x0, 0x7, 0x10000}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4811) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = eventfd2(0xd2a3, 0x0) dup(r3) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x10000008, 0x7, 0xffff, 0x0, 0x7, 0x3, 0x3, 0x3151}, 0x0) [ 194.911550][T14163] should_fail+0x23c/0x250 [ 194.915977][T14163] should_fail_usercopy+0x16/0x20 [ 194.921055][T14163] _copy_from_user+0x1c/0xd0 [ 194.925727][T14163] input_event_from_user+0x122/0x1d0 [ 194.931103][T14163] ? input_inject_event+0xcd/0xe0 [ 194.936208][T14163] evdev_write+0x282/0x400 [ 194.940634][T14163] ? evdev_read+0x710/0x710 [ 194.945187][T14163] vfs_write+0x2af/0x950 [ 194.949504][T14163] ? __fget_light+0x219/0x260 [ 194.954189][T14163] ksys_write+0xd9/0x190 [ 194.958480][T14163] __x64_sys_write+0x3e/0x50 06:54:58 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x6e) syz_io_uring_setup(0x70c1, &(0x7f0000000140)={0x0, 0x5e1f, 0x20, 0x3, 0x29b}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)={0x77359400}, 0x1, 0x1, 0x1}, 0x7) dup3(r0, r1, 0x80000) [ 194.963083][T14163] do_syscall_64+0x44/0xd0 [ 194.967589][T14163] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 194.973522][T14163] RIP: 0033:0x7f0fdb27eae9 [ 194.977937][T14163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 194.997551][T14163] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.005974][T14163] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:54:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 90) 06:54:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x6}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setregs(0xf, 0x0, 0xffffffffffff8001, &(0x7f0000000180)="00c25e6744a03eba598da05d2fe01405c4a3f6ee85c4625899268fbb8d9d168fa7d7942b88328113b7d787f07221b41c53fcdccdcce2795ca212159ffe952dbed67d3bdbdbea9dc516cd40f50caeb24046615060") mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 195.014009][T14163] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 195.022006][T14163] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 195.030055][T14163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.038062][T14163] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 195.046019][T14163] [ 195.196162][T14280] FAULT_INJECTION: forcing a failure. [ 195.196162][T14280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.209377][T14280] CPU: 1 PID: 14280 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 195.217821][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.227959][T14280] Call Trace: [ 195.227966][T14280] [ 195.227973][T14280] dump_stack_lvl+0xd6/0x122 [ 195.228044][T14280] dump_stack+0x11/0x1b 06:54:58 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) r1 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x8010, r1, 0x97eb4000) 06:54:58 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x3, 0x10, 0x1f, 0x9, 0x6, 0x0, 0xa32e, 0x0, 0x8}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100), 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='/dev/input/event#\x00') [ 195.228062][T14280] should_fail+0x23c/0x250 [ 195.228135][T14280] should_fail_usercopy+0x16/0x20 [ 195.228158][T14280] _copy_from_user+0x1c/0xd0 [ 195.228184][T14280] input_event_from_user+0x122/0x1d0 [ 195.228274][T14280] ? input_inject_event+0xcd/0xe0 [ 195.228293][T14280] evdev_write+0x282/0x400 [ 195.228324][T14280] ? evdev_read+0x710/0x710 [ 195.228345][T14280] vfs_write+0x2af/0x950 [ 195.228380][T14280] ? __fget_light+0x219/0x260 [ 195.228404][T14280] ksys_write+0xd9/0x190 [ 195.228427][T14280] __x64_sys_write+0x3e/0x50 [ 195.281472][ T24] audit: type=1400 audit(1636700098.641:211): avc: denied { map } for pid=14281 comm="syz-executor.0" path="socket:[29116]" dev="sockfs" ino=29116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 195.285333][T14280] do_syscall_64+0x44/0xd0 [ 195.322788][T14280] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 195.322870][T14280] RIP: 0033:0x7f0fdb27eae9 [ 195.322884][T14280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 195.322903][T14280] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.352912][T14280] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 195.352927][T14280] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 195.352940][T14280] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 195.352953][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.393327][T14280] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 195.401347][T14280] 06:54:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/95) 06:54:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 91) 06:54:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r2, 0x208200) syz_io_uring_setup(0x435, &(0x7f0000000180)={0x0, 0x777, 0x10, 0x0, 0x221, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000001, 0x71, 0x80000001, 0x5d6, 0x9, 0xd86, 0x663, 0x1}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) [ 195.482358][T14306] FAULT_INJECTION: forcing a failure. [ 195.482358][T14306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.495592][T14306] CPU: 0 PID: 14306 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 195.504010][T14306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.514064][T14306] Call Trace: [ 195.517413][T14306] [ 195.520355][T14306] dump_stack_lvl+0xd6/0x122 [ 195.525021][T14306] dump_stack+0x11/0x1b [ 195.529181][T14306] should_fail+0x23c/0x250 [ 195.533674][T14306] should_fail_usercopy+0x16/0x20 [ 195.538715][T14306] _copy_from_user+0x1c/0xd0 [ 195.543348][T14306] input_event_from_user+0x122/0x1d0 [ 195.548632][T14306] ? input_inject_event+0xcd/0xe0 [ 195.553689][T14306] evdev_write+0x282/0x400 [ 195.558139][T14306] ? evdev_read+0x710/0x710 [ 195.562723][T14306] vfs_write+0x2af/0x950 [ 195.567022][T14306] ? __fget_light+0x219/0x260 [ 195.571714][T14306] ksys_write+0xd9/0x190 [ 195.575991][T14306] __x64_sys_write+0x3e/0x50 06:54:59 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000240)={0x8001, 0x76, 0x6, 0x3, 0x9, 0x6}) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/33, 0x21}], 0x6, 0x7a, 0x80000) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r2, 0x208200) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) write$char_usb(r1, &(0x7f0000000040)="e2", 0x35000) [ 195.580587][T14306] do_syscall_64+0x44/0xd0 [ 195.585023][T14306] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 195.590925][T14306] RIP: 0033:0x7f0fdb27eae9 [ 195.590968][T14306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 195.590986][T14306] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.591007][T14306] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 195.591023][T14306] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 195.591052][T14306] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 195.591064][T14306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.591077][T14306] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 06:54:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:54:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 92) [ 195.591094][T14306] [ 195.754997][T14400] FAULT_INJECTION: forcing a failure. [ 195.754997][T14400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.768215][T14400] CPU: 1 PID: 14400 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 195.776685][T14400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.786735][T14400] Call Trace: [ 195.790009][T14400] [ 195.792937][T14400] dump_stack_lvl+0xd6/0x122 [ 195.797528][T14400] dump_stack+0x11/0x1b [ 195.801769][T14400] should_fail+0x23c/0x250 [ 195.806219][T14400] should_fail_usercopy+0x16/0x20 [ 195.811273][T14400] _copy_from_user+0x1c/0xd0 [ 195.815881][T14400] input_event_from_user+0x122/0x1d0 [ 195.821234][T14400] ? input_inject_event+0x3e/0xe0 [ 195.826345][T14400] evdev_write+0x282/0x400 [ 195.830917][T14400] ? evdev_read+0x710/0x710 [ 195.835428][T14400] vfs_write+0x2af/0x950 [ 195.839703][T14400] ? __fget_light+0x219/0x260 [ 195.844377][T14400] ksys_write+0xd9/0x190 [ 195.848658][T14400] __x64_sys_write+0x3e/0x50 06:54:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0xf, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x75f, 0x107b82) set_mempolicy(0x2, &(0x7f0000000080)=0x1, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100c0000100000018000000fce5c467028bb1b7e86998bdb175a6231e22ffe62d01cc435764a6f485e3b839a214b2b7640340e2a90abc9e507a52eb4b7bf83a1ed9d3c9f09540048771424819428ac987266f95d8d5eb9d9c2c5cf717549f5b8ec37953ee0ca64f97b0993449682163a794526d49a7081121e2d8a12ac1d7a7a89fa2d5a4ce2670e7ed61773a026f52cb7b65326e671c82ed3b76bacd84496499490701db49784dc91ea3ecd42d87b78f648648d917578f38e288309bc952d0bfaf2104", @ANYRES32=r1, @ANYBLOB="04000000000000002e2f66696c653000"]) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x6, 0x0, @buffer={0x0, 0xa4, &(0x7f00000000c0)=""/164}, &(0x7f0000000180)="5fb3da571ed6", 0x0, 0x3, 0x10031, 0x2, &(0x7f0000000240)}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x7f, 0x442701) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000005a80)={{0x1, 0x1, 0x18, r3, {0xd4}}, './file0\x00'}) 06:54:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x9, 0x4081) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x3f, 0x10, 0x18, 0x5, "df6a4e1b6d0d75e1e2dd57192961f1859299d72dd2b8f0bb5f3dec989eed0ac5"}) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x7, 0xdf]) 06:54:59 executing program 0: getsockname(0xffffffffffffffff, &(0x7f0000000100)=@ax25={{0x3, @default}, [@netrom, @default, @default, @bcast, @remote, @null, @rose, @null]}, &(0x7f0000000000)=0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xf6131000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:54:59 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000100)=[@exit_looper, @acquire={0x40046305, 0x1}], 0x8b, 0x0, &(0x7f00000001c0)="adccd76d122578f1195be530d789345195f7de59830b88777f5193322282df8d57bb49e19406930563e276bd8dbc28198939f8b9643f2d8a3d9bc3268d83a8661a1327bf98e655f91a85ae2d6a80c4c12f1302d451286c635bbccc27b8305af4f652caaf7ee6e58070f1acd600157b1b11bfa156f04a5056c079fd1a8023dc410e5dbe4349804f8f6498d5"}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x35000) [ 195.853348][T14400] do_syscall_64+0x44/0xd0 [ 195.857782][T14400] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 195.863677][T14400] RIP: 0033:0x7f0fdb27eae9 [ 195.868095][T14400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 195.887805][T14400] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.896257][T14400] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 195.904237][T14400] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 195.904253][T14400] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 06:54:59 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(r0, r0, 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0x8) 06:54:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 195.904267][T14400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.904303][T14400] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 195.904320][T14400] [ 195.924543][ C0] sd 0:0:1:0: tag#5602 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 06:54:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 93) 06:54:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 195.924569][ C0] sd 0:0:1:0: tag#5602 CDB: opcode=0xe5 (vendor) [ 195.924612][ C0] sd 0:0:1:0: tag#5602 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 195.924643][ C0] sd 0:0:1:0: tag#5602 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 195.924661][ C0] sd 0:0:1:0: tag#5602 CDB[20]: ba 06:54:59 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='()\x00') lseek(r1, 0x7ff, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000010c0)={{r2}, 0x0, 0x6, @unused=[0x0, 0x3f, 0x9b, 0x1], @subvolid=0x101}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x607, 0x7fff, 0x20, 0x9878, 0x10001, 0xd8d}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) [ 196.109558][T14594] ================================================================== [ 196.117646][T14594] BUG: KCSAN: data-race in event_sched_in / perf_mmap [ 196.124401][T14594] [ 196.126700][T14594] write to 0xffff88813dd584d8 of 8 bytes by task 14507 on cpu 0: [ 196.134386][T14594] perf_mmap+0xc36/0xe80 [ 196.138605][T14594] mmap_region+0xb00/0x10a0 [ 196.143085][T14594] do_mmap+0x781/0xc20 [ 196.147146][T14594] vm_mmap_pgoff+0x117/0x1f0 [ 196.151712][T14594] ksys_mmap_pgoff+0x265/0x320 [ 196.156455][T14594] do_syscall_64+0x44/0xd0 [ 196.160851][T14594] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 196.166719][T14594] [ 196.169021][T14594] write to 0xffff88813dd584d8 of 8 bytes by task 14594 on cpu 1: [ 196.176723][T14594] event_sched_in+0x520/0xe90 [ 196.181376][T14594] visit_groups_merge+0x943/0x1aa0 [ 196.186465][T14594] ctx_sched_in+0x1e4/0x200 [ 196.190944][T14594] __perf_event_task_sched_in+0x37c/0x8d0 [ 196.196642][T14594] finish_task_switch+0x1ef/0x280 [ 196.201639][T14594] __schedule+0x44a/0x6a0 [ 196.205946][T14594] schedule+0x81/0xb0 [ 196.209906][T14594] futex_wait_queue+0xd1/0x170 [ 196.214647][T14594] futex_wait+0x126/0x350 [ 196.218952][T14594] do_futex+0x28d/0x370 [ 196.223083][T14594] __se_sys_futex+0xe8/0x370 [ 196.227648][T14594] __x64_sys_futex+0x74/0x80 [ 196.232216][T14594] do_syscall_64+0x44/0xd0 [ 196.236611][T14594] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 196.242492][T14594] [ 196.244798][T14594] value changed: 0xffffffd256f9377a -> 0xffffffd256f7df95 [ 196.251877][T14594] [ 196.254174][T14594] Reported by Kernel Concurrency Sanitizer on: [ 196.260309][T14594] CPU: 1 PID: 14594 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 196.268696][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.278725][T14594] ================================================================== [ 196.291196][ C1] blk_print_req_error: 39 callbacks suppressed [ 196.291209][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 06:54:59 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = creat(&(0x7f0000000280)='./bus\x00', 0xa) ftruncate(r0, 0x208200) syz_open_dev$evdev(&(0x7f0000000040), 0x100, 0x101000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x8) 06:54:59 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) r5 = perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x5, 0x0, 0x0, 0x2, 0x0, 0xa85, 0x411bf7213fc295ac, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0x800}, 0x2003, 0x7, 0x5, 0x0, 0x6, 0xcd9, 0x800, 0x0, 0x4, 0x0, 0x634}, r3, 0xe, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x80, 0x6, 0xff, 0xff, 0x0, 0xccc, 0x4104, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x8000, 0xfffffffffffffff9, 0x0, 0x4, 0x1ff, 0x40, 0x100, 0x0, 0x3ff}, r4, 0xf, r5, 0x2) sendfile(r2, r3, 0x0, 0x8000fffffffe) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x0, 0x7f, 0x80, 0x0, 0x1000, 0x1694, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x9, 0x9}, 0x40, 0x0, 0x4, 0x1, 0x8, 0x7, 0x0, 0x0, 0x9, 0x0, 0x3}, r3, 0x2, 0xffffffffffffffff, 0xd) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='()\x00') mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x100010, 0xffffffffffffffff, 0xb51fd000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x35000) [ 196.306519][ C1] buffer_io_error: 36 callbacks suppressed [ 196.306556][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.320388][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.329543][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.337708][ T1439] loop7: unable to read partition table [ 196.348231][T14620] FAULT_INJECTION: forcing a failure. 06:54:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 196.348231][T14620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.361475][T14620] CPU: 0 PID: 14620 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 196.369953][T14620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.380038][T14620] Call Trace: [ 196.380051][T14620] [ 196.380057][T14620] dump_stack_lvl+0xd6/0x122 [ 196.380078][T14620] dump_stack+0x11/0x1b [ 196.395050][T14620] should_fail+0x23c/0x250 [ 196.399545][T14620] should_fail_usercopy+0x16/0x20 [ 196.404580][T14620] _copy_from_user+0x1c/0xd0 [ 196.409204][T14620] input_event_from_user+0x122/0x1d0 [ 196.414497][T14620] ? input_inject_event+0xcd/0xe0 [ 196.419536][T14620] evdev_write+0x282/0x400 [ 196.423961][T14620] ? evdev_read+0x710/0x710 [ 196.428513][T14620] vfs_write+0x2af/0x950 [ 196.432763][T14620] ? __fget_light+0x219/0x260 [ 196.437453][T14620] ksys_write+0xd9/0x190 [ 196.441705][T14620] __x64_sys_write+0x3e/0x50 [ 196.446312][T14620] do_syscall_64+0x44/0xd0 [ 196.450740][T14620] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 196.456698][T14620] RIP: 0033:0x7f0fdb27eae9 [ 196.461111][T14620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 196.481261][T14620] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.489692][T14620] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 196.497738][T14620] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 196.505708][T14620] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 196.513671][T14620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.521636][T14620] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 196.529614][T14620] 06:54:59 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x101400, 0x92) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="24040000f30310002bbd7000fbdbdf25060000000000000016000000070000006cbc0000000000805e0c000001000000d7000000fcffffff090000000900000008000000b3e700008100000009000000020000000101000000100000e7050000020000000300000000000000ffffff7f01010000000000000600000020000000070000000800000000020000ffffff7f020000005799ee6f060000000000010006000000000000000800000001040000ff0f0000900000002200000004000000000000007f0500000000000040000000ff0300003f00000009000000a304000007000000008000001f0000000700000006000000a89a000006000000070000000600000002000000689b0000040000005f00000002000000f9ffffff0101000005000000090000006100000000000000030000005700000003000000020000000700000003000000ffff000005000000080000009b0000000400000006000000060000000800000006000000e20c000000000000040000000600000006000000010000000700000004000000090000000100010080000000cf0c00000900000000000000000000005b1200000100000000000000e1060000ff7f00000000000000010000030000001d04000001000000040000001a0b0000faffffffffffffff0700000000000000400000009cf60000ff030000070000000000000005000000040b0000080000000000000007000000ffffffffff7f000000000100ff0100000300000000000002b6220000bb0000003d00000000090000ff010000030000000500000003000000090000000100000081000000ffffffff40000000090000000100000009000000010000000900000045510000ff03000007000000c20000001f00000002000000080000000100008060020000ff0f000009000000080000000000000004000000010000000800000006000000ff010000090000000300000006000000ffffffff02000000040000000000000004000000e80000000000000001800000060000007a05000007000000810000000400000005000000080000000100000000000000020000003f000000030000000000008003000000a80f000003000000180000004000000014000000010001000200000002000000010000000400000006000000bd1400008100000006000000f7ffffff030000000020000007000000feffffff06000000090000002f00000004000000f8ffffff0100000000000000090000000000008054040000e50000000972000007000000050000000000000005000000ffffff7f00000000050000003f00000000100000000800000000000001000080070000008100000002920000ad14000004000000f09b0000090000007f000000ffffffff000000800400120007000000e8ee0000ffffffff15ffffff00000100220b0000ff0300000400000005000000070000000100000000000000"], 0x424}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e80), r1) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f0000002e40), 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", ""]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "56fa08115b0535407c5b61e1ac"}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_SSID={0xb, 0x34, @random="5697ade51aa432"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002f80)={0x0, 0x0, "545aa6fdf94c84893a8a275f446cb85996f3d4235a307301f5d5945e0955f1e5e7cd464a6cfc31c8437c2b362be4ca75acc065bc19729326415738d6b7da59c89d84762b9cf19ad95aea7ce52d15c49f1e0f3bb9b2315508b75c67a406b7ec30be790b72307ae95f10130df08e06d686bcc5a57c52c01c26c160b187b67d7a924adf33b8b2353a49d8cc028b50ffe1cf0287b1abdcd89baef9aec898064927cd3311ec067e74dad5d044c17f8435c883a21e00208ec4696125ba66eccd14a0b30f110646b11eb5b0e4a728829322f05b3cc6084384d5858a1f96285021aad11c37f84015e7bbd7f9b0b33b6c3daee441d8d5b0887ec9cffa2efaed3afcddade8", "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"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000080)='()\x00') perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x7, 0x9, 0x65, 0x42, 0x0, 0x1, 0x40000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc6, 0x2, @perf_config_ext={0x7, 0x7}, 0x10080, 0x100000000, 0x4, 0x5, 0x0, 0x7d35, 0xbc, 0x0, 0x1ff, 0x0, 0x100000001}, 0x0, 0x1, r5, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x35000) 06:54:59 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x12, 0x2}, @ramp={0x0, 0x4}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x3ff, 0x1f, 0x80000001, 0x6f4, 0x4, 0x3}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 06:55:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x408000) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0xe3) 06:55:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:55:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 94) 06:55:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:55:00 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x11520}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x40) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x35000) 06:55:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x9, &(0x7f0000000000)={0x5, 0x40}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 196.634947][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 196.665367][T14888] FAULT_INJECTION: forcing a failure. [ 196.665367][T14888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.678607][T14888] CPU: 0 PID: 14888 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 196.687068][T14888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.688119][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.697121][T14888] Call Trace: [ 196.697130][T14888] [ 196.697136][T14888] dump_stack_lvl+0xd6/0x122 [ 196.706262][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.709506][T14888] dump_stack+0x11/0x1b [ 196.728904][T14888] should_fail+0x23c/0x250 06:55:00 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x1135000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x51, 0x0, 0x0, {0x0, 0x1}, {0x6, 0x2}, @ramp={0x0, 0x0, {0x0, 0x0, 0x4}}}) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x1) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x42241, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000240)={0x12, 0x4b, &(0x7f00000001c0)="77a7753c9048a27dbc0b6af52532b68c3ea1ca3b245a5f5ff16de04e731b635462cbdfbd4404fa7424a470e7b5469e7c68bcc36e331df674f29717059cfbca1b0f4a8535bfd19cabcf35d1"}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x35000) [ 196.733387][T14888] should_fail_usercopy+0x16/0x20 [ 196.738418][T14888] _copy_from_user+0x1c/0xd0 [ 196.743042][T14888] input_event_from_user+0x122/0x1d0 [ 196.743089][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.748331][T14888] ? input_inject_event+0xcd/0xe0 [ 196.748355][T14888] evdev_write+0x282/0x400 [ 196.748382][T14888] ? evdev_read+0x710/0x710 [ 196.757558][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.762587][T14888] vfs_write+0x2af/0x950 06:55:00 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2) prlimit64(0xffffffffffffffff, 0xd, &(0x7f0000000000)={0x3, 0x5}, 0x0) [ 196.762616][T14888] ? __fget_light+0x219/0x260 [ 196.762654][T14888] ksys_write+0xd9/0x190 [ 196.762679][T14888] __x64_sys_write+0x3e/0x50 [ 196.762705][T14888] do_syscall_64+0x44/0xd0 [ 196.800648][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.801506][T14888] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 196.810619][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.816457][T14888] RIP: 0033:0x7f0fdb27eae9 [ 196.816473][T14888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 196.848251][T14888] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.848279][T14888] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 196.848293][T14888] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 196.848308][T14888] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 196.848322][T14888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.848334][T14888] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 196.848351][T14888] 06:55:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 196.908967][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.909011][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.909188][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.909213][ C0] Buffer I/O error on dev loop7, logical block 0, async page read 06:55:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x12, 0x800000, 0x8, 0x8000000000, 0x5, 0x1, 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x2, 0x80, 0x70, 0x0, 0x6, 0x380, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080)}, 0x2480, 0x101, 0xe99, 0x0, 0x5, 0x8, 0x7, 0x0, 0x4c, 0x0, 0xc0f}, 0x0, 0xd, r0, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0xfffffffffffffbff, 0x2}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:55:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 95) [ 196.910528][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.910569][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.911080][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.911114][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 196.911365][ C1] Buffer I/O error on dev loop7, logical block 0, async page read 06:55:00 executing program 3: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) fcntl$getown(r2, 0x9) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xffffff01, 0x1, 0xce88, 0x7fff, 0x15, "78b01cbd030d93d54060ecd691fc61c6397a1b"}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) 06:55:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:55:00 executing program 0: sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x600, 0x3443bac4, 0x0, 0x7, 0x7]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7f, 0x4]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='()\x00') writev(r0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="c72f966ca47eb21dad5c9aad73ad96e4e33676e6796b522483b27ffb9e6818e32fab59810f8b31604ab4603d4937f3fd5e51a74f349fbd6e6c8282d980154b71c16746c5d0df8baedc1818bf680c8a69934130ac178488c9eb8076fc02f314675269c9f18ef47c1e65a4effed56f90b61eff32f0a6ec3a7d0b2d9944176f1cb6cd47f6ae8ed11feaa08c75945b1cc0206bde21d0", 0x94}, {&(0x7f0000000780)="7df35a32e4ebe04ba12a4d4d19b2bad24c37624f1fcf39aaaef960b407151fce493d512459aef910f59c3fafde11714323caeba5bdfd04cf064ad339aef0d432a0633f8b6911ad4fb80b531924734a31d92fb35185bb20369afaf7cc6ec3c71bf769a98af3dd2081c5cc0305f0ab6541bae5efa7d0df11d768676107bd4337c3a713e78d2bd5663cdbbac83a9c2804c150c08308ed251e88a17b6cc5322fb51e4d52ae1325dca651a3eb393f025a0f0872b0c1babf57", 0xb6}, {&(0x7f0000000840)="8d832b66eb8aa6cf01c34f294a65ee73893b0e5ccf5e01255d340b76405899a8911c3108cad70d9213be77810c526bca4c5c158f922d2e16a93a", 0x3a}, {&(0x7f0000000880)="a2c960ffebb03635a1b44fb429563c9370745a197a0cc4342669bd61344f13a0454f53835636c1845a31eea7d63d7e7266aa79c00b1f4d856f3fdc8fe9fac29b08ad49556955f60200bf42c98067d565b6f13560b68af9167a7274ee0a4cae6b249370e205bf65ac1089d7796609959cb47228a15e276640e181fb7c7e5639f3c0ce09b3e5ca24fefa5a3d245b6dc0c342cb98c2770f071e121dc4e901b6e423710432b04a52869d0c628b4f8d1a62c07330666a69bc8c002cfad1f903663257740fb0c349489d47", 0xc8}, {&(0x7f0000000980)="667a41af5d35366f6923efcfe59ea7542c9b71c2d6e04ad1aaff2287c8228285d7dc2faade593cc853eb9e4093fc37584673fbc0b9ff50ca1cf4ac4a2f509b9a992b13e34113148ac845b08115c14f9067cce9bf491eda079c4a272348bdef553dd8315107b5aca1bc4c48c5b50179979396d513ee031cc879f3fc", 0x7b}], 0x5) r1 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r6, 0x208200) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000080)='()\x00') io_submit(0x0, 0x4, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x2, r3, &(0x7f0000000100)="7c3851e907096bd6cf1ab6c6300415d65d96ea700229a1e08eb3876b5c0f1bc9183e81ec7ec9d86bbdd98d8e1e3e2a22954fe8608272f76ce1b59eb94804b33deddfdaef03f92b44d50b4b8650390d107466e3279c7a363d02ebc281c476a741eae04fe6727959682c347b0d0ee3b0fd22c0eb6ceef083ee199e2a442cf42ce6c816f1af5d063ae1eacbce844433d437a2b691d48da93d0fa47234bd2fe4ff6d33e07f2f30d842e870eecce83cee87de525e63e99d509b475c0f675fd786b972d2da7d8fd34da45dc11a09348878a19c8f72b0e6373c0564b05b8faa303a91cf13607d97614868fca80a1e10280ff1f656", 0xf1, 0xf18, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x400, 0xffffffffffffffff, &(0x7f0000000240)="aa70c57cb092913280acb82c210bb6145bf90b979026e94770dc85327ffd822e75c2b307319cc61e1c4b0addeafdb32c233cbb365d92b24cd59fd3741a8570db7bd2d5816526cda7716360661713bf944a4bbc45f418b6aed4fad97e832bc78de7b6e9b1cfb1371878d8d530d94c2a0db82ba84878fd1bb10d42a0012b6a547a3cc37ee5e440f328b41b8a7d4133fa905017702d9be6265547ea9c68fdfb8e79b60d01ba0d9a9c1d0ec4a1753498bff9a0805212690ad01a96c8f2019647b812ce", 0xc1, 0x10000, 0x0, 0x2, r4}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, &(0x7f00000010c0)="eb9eafd97d3cb327a843b7c6ffb9d5ce58820eea471bdf98118a17ff3b6633f1d10ca702c77db7dfd7bc2d83217b7f49f0d3c00ed23383195d6e52ebe800de4ae186d5c71177955c4a53a30aee3d72479972f533c61c0cc5038c794752a2f0372b56d2bc48c0f7508716e9362bd970cc5f75c5c99e1317ff70aa91655373c33f5dd076439b6e251939ce9c04250c5de7314620654a2f80db1b6d4ea681998a316b902d36c590f06168cf74c78e195bf01cab9dfd89d47cb8e36e08d21e3a36351aa880ce0ce76161a086af7d8e99f03dad36c4477d9008f346a5bf4db0ac8f040649330eaf5774c19fe4f8cfd970adc636117a94f1a695c217f5990b4083dfe44a02a763b1187f7bf86c4b41a81414bc23c325694c501730b67b915b23c0d4df02e0fab086d78d907e48c71d64ebc2c39c014738d2dbde347639059580ca869e5a19e3b2042819f975dbc7bd56b59356f61751d3ddb7dae7390e29fe35c990b82547579dbbe0e9b80ac437ea0ccf5283c95ed67f7574e102079c71e242c26a96b5a6e6a24fd09215829e1f53195ba55f067bedc14e785823cc66f2d9c05b6aef997d1bc038bf4a054cf7e9217c02ffb0ff130190972ba80421fd1ac083d30e74a6cb8098d70857a87f7155bfbcd00ae86d332158a33cc1ae8bad3fdb25d611ee595f4406e87ebc7348c0e282cb9691cff72ffe4f982d98a8bc2f35103f070c94ec8b58643059a3915190aba70dfb907a8068116c04274c183bf20ccc93bb7e1e8c3e5aee5b4de65fe9c949521f5a42d9df3d58af6eb6a2e4de10129358f664a3583085b9ed16c4a3f540901886972c4c5737eda8d31c37e8f41b3c7fc1ab797ff5a6f1cf1091df822bf0d429b70b97e93a34319fb89a79fb4322c4725140c1239071609efc2c54b9bf3520925ec10c5b6a76b5b8d5d2eaf084d5890853f7a586e6db43fe38e4d4a3766f71e01732a204628fb0e2dc45844d92c53e3cc36c3a2a06d1cf4a518e7c2f1a0a34459af4a06eea6b941eabee08c85310d7a932800f67b9e377bcc7c955fb7c28b264e883be433579c48e36685ad8e19667631c56c7fc602565c3e0898e007731f6c4299bf728408a88e239ad1187ff5a63cae24430aa2200361d546689ec9eeb709b6584f92b555186d77f64412c04a816fafeae5f4922124b0706e27741c9d7dfec0306bc9ab5d3c4775f83d8db988f4bd19b657b764fff9a9ec053983054405ce594d5679d421b0f3e1f27c195febd4bf8ea8bea99ca35e4b776462af7440a3f295e13035d25d7a93379da61cbf2c4caa05de46067754d28b9e1eecc60cb4c92e0bde64e9c9e38af21b613cc0db1a06da6a9a7ebc84bb92d6cc2c6fd8f12c9b04a0c15ef0489dd5045be339083cc8bed7608048a5614d10de4ef3e048a667264f104d7e016e3a6a5c53420ec21616e0272bf527258c15039fd4d816ea6cfcbb8e4661c06c61062b5fcef888db0fe91f17a9838109df3c1225fea905691f95519209aec2c9edd4359da5915141499ddc696717773528b99586f563bd889ede62be2908f7d56782161e4349e8b3471ffe71ff30f9ba9260d38f5d003152a6c433659cc2cdffcdf606c9fc60d6bd423610cf0a012f4f4dc9c096b8c0686ab5f470f6b522d65c9d722e5526e182b0908569e9720c2b75c8eab9097493d7e570b83dd50378931b79e62f6fbd618d6c17b07cb548b376544429007bfb29596f7fe85ca25b1419025fd7c58e6073bc141b1d63b018acd397f75ea7b4c7113ec4fb8ec1e4c381560f5ccc98ae2b6d92e8860f07ab7e9a95ec7f127a5dea908c36391d24f19a56257d4e771331642d2ce006c0e077b51a0460d97e0ac068a6bb8a8bb33d78c6f38a6fa0988dfcd4ef258a9a2d0fe4ba1aa54e581550021a3ae10903d4b41ae1930baa8cc4f288fd8b014b920554a4738578cde7bdde4416ec39f026567c411bbeb38db33aef071a2e28a1484d00d199dfdd702fd167dc1054ff909bf93fc72749a3d4945637388d0cd338b5376410e19b27688dc232aeb35e65af4e0e843a19ddd5d6c2f5322f01a221916e6575479b6b3ff81b73901b74f6f482b01d8ed5f29f3d5a85f52ce26e6742b94b44a7eb4b19cdb5a5be234cf2c3133054bf0009a158e2a5e571f1df527d3dedf14838c7b30987dd543f5836bd18339fad4f2d0389e3846fdffa0485cf175167404ff79f9c0902ba28e14def5dc4061e0c91d58139141a5d0ebe8256b3a1aef8433a8aae090f98ebacc166dcf0b537dbf1b06c2022381c1388c261a344190d072ff3fbe01018c887bf9064d76104657e384d839b0633f1d9c4031d9d3cafc749e9457e25c49cb882c9c550eda02f974846a9df1a805ca9bb54657f0d7d7196493e7852a6ee9e7ecc9e39dd2c9c4a85721717e59d29d9708eea93d075f8ac01acbf4c80737b13886837a6848f3f42f4c865a1db020a596afdfe124d8c7c4ba436c8d0ec88e721de7b14468be5a2d6d1f8bdcc4b5d1e21666b27d4035a2e8573b3c5ce988205dcceab909e7b66733a52aea62f1d4c40462501b3739f15a84a844b502a0465c6f047c888d0660faf1876d14face242b3b51b6281fe7fbe5319e8113b7051ee3e1cac11aba6635977e266aa77052f4e2f5f1ef5b8456f923a93adbddaf96bdabac8248b25f3104c43d04f362444f58646458616fed2c1c8f48de46c3f28c548b51aa4cb57dec38643f82a42fd16be35194efc691b57c235dcd5ba2165469e992535aaf1d0a47789486e7aaa1df2934449ea490b9180b2caa7ad8627776bcc692292a7584cc8e7f76232ac38033b8d9c222ea14ba326ad9ebd57e44d05768364e1e7c99adf55fe6de16bec303ff89803c28b0672d14b8f08e2860f872011ed2ce83589e42d5a82c6a88424c1c24a08b25fdba391a0c2bd8d0894cbc1041b66a8b7704e3085538f140cacdd3468def00704f44acdbda5c2d476f1d1b225e7982d5c716ac120b53b6271765a4cd03b79f34710c281839d85c5c6a5d057e2bfdce257b72c6325108c1cba7e234b0d080ce5be3f27f4853a88df6395479f761be4919f58ffbef84cc22f9d0aabe0fe14ba0e5ccf67b379da257727f2e06d8d87b4b744b23aa92a8224c2fb04a1abe1c176b0d1414923b44247cba24575aaae09e2b35d0261f89bf65813cf1d1bce750b06c2ad147c7b6b6a662497297c958d71514228daa17b1104145dce44902af6e48113c18b931e004e636bdf87b52ab882af8692415794acae781b4377f816af15bf070658c474880dd08b72ba30d40e42bd73d5e843eb482541ecc00d5d3162df2d70f2227e4c52d2d00b5fa0e396054557d728d37f6f14499b75ab48ea8f8e6134a64ec2ec92a5240f69f7e52a100b68bd7fc015cc53100f03f8f029447686f00c1d388cc8efe6c42634573ec98365116dd3e60607b0d4eb3a37f7ea76874c586e9846aabb81ad77fb1549751bd7515002e81b08d11359ed23ad699ead6772bcc5e41653b7f2ee8a246f5698c28ca54d9c318905dc7f26c49e8b9be18b99ffa39028f8e31960db5dbf5ca1b3895ae74a43bbed51efc44a2ef0aa1cc17c79bc4bb67a911533ccc2e339e12378660571857db6496c8d73b277d7abda5a31c31d4bc6e960db4ce9255f792fc8d9af6f826b7ed199bdb1113d600532be1ef2341f8bdeef928733e701f5c3ff44b45a62a7e6441f58cbbd5d924130c1774be1139ead592a522f4640ba93428dfbbad01aa16b9e2cebd8a709ed27eaa7fe1ca6ec5a142b1d5b73a76d15dd8c0c8dcbfa5891fda8b39d86bd5e3375e822e124732252551872c830c3c566a7cfa129c9ac9c7ed485bb19b17bdc36e8ea7c8b93c1ec12db434a08dd8a54a0dfb2fa4349f680274f9f2dab42c6ed037aa6dedd89e3df84b2335a70b10a51a9afa40220e38101b5d4352f71f89211bd9d8d4c574d94776f9158a07b450569ae7fa618ad0d2ef9f171030b3cdbbe6e4ef7a634f5d51457c6f8465f07928031b60a3379f14ff4dfdcf00f23fbd2d3d8df8d73483cd498146a893e1bf606291c7ba3949c6c3ab47fb560ddf7ca43f244eb16438243e4ef415728fa059afbe9bd9bf5bd00492c66a9a63e33eb6ba9b3f2ff22be95f5e3c17f205062a475a05d3f07cda35d622ef0b52f17880105af5eef8267ca5c19eafd5d37bf7eaad60bc31021138147d3c4ca8877aa2c4146479fd80ef21d7afa14592b0da38ad47df64411003652d251b5b3cd54d05b035fd530aa53a4c8b32387b07d80236cd7aa6422bda129befe1d970d58e0f28619507861df4ce3d79bec976acd6a146c8bda3d7a4f99a8a2c6c17324f5c7628963a94c585f46d21d1fb74a6491b6b755196ee4ceace86356fcddb851c9956329cf54d411a7065495df6b8ce9e4836d28f8070543bf369eda24fbb63f7f6ebe451b6dd5da734b7c5da15dd8a460bb6beb7f1d0e00c52824f7770aa9ea60c6d4ef4362287fac2573a1875a7aef83f56d1794c6a892e9527842776fa55343ea9f21fc5236c18aaf0cf0617c545300410e072a88398650d556670f00644da5437bced7668359656151d4f883b4e85925c0c48e709c884a7b51700925da2efa86abc066bd24f03138faee40ff08921de18feda67707324687dfb1568f1dd0427b28d6fa5e67b25623895c902280c95fae09655e4a243dd8770c9501658933e991efcf864d4619b12874153e6a836f37d11abc924133a1093f09cc6059adda8be145e5005c25c1c2278f423486b187e67bc8bd9a805f25cb56ba56c6b2ec8e9fc8b89caae09926f14cc3eb3172903daf10b75eb060633f88e2f184fabe8cd295d1be77184acb6c5fbcde59ed4c1ef1b1590d23e6e5f25a35a668fd92d74f5acc73f4810377aa816266c5b07f5c07b9cddd18bb18027b434d2e33a96c9c20d408711f05c16e8a8e716728e8aaf3ffb5a4ce4d7169c35040f55b1e522e14ea6e8e8759bc3038349f876d29e775fce7495f5ae94046170a6407feec48406fefbdc1256990f345c5e6c4be422bdb318c7b1801e9d3ad062177e369a4d12064fd093109da5abb95da0c3cda94779f25cea4318d1cc44d7c816729e77b5676e42e50c4082c2e0c6771edf4be07bcfff81a1b5aaf4e2d9f747ee372fbd68d5fdb841a68d901e21e02e23e72af3e46335e2db9e8a4354466e86ad8c0a9ff9aacb4979605019a2b080cc8c2865b00013c35232e895d36c7d5fd097844c313db37a59de8971472dc88baf799608a4c38691fb133de29acec9818bb59c80130fabc358b87287c123418fddcee9eb97be5073540918f745c9e12cf7f4fb6966e9fe354de508c79bd90e38242fc76790ca5bca9047e53ebaefe72e8cb1de1ffaf91571b503b33fe8ce5928cd8950314ff5dc4a4b2f00edf2c94193cdc26cc1b25413c4f8f21be83c0b14a306f86e9354ead54e54d463f01de68cb582e14778e4aad9d6954c92aed5d7381727cc2a014d5bc458f863c3253f5d2950399c865d47f5e3c0dd86c968386487bf736d5170c4866bfe094e3c8723e502c4240cab57f443fbbcc92074bd863bb81bd021c0134cf3df53013df671fbe3c6c3badc1f18027606aea1faf0fdf424723fbcecb9fd4054851f92d74546fc21d5cd7e0b2e01ad102eb45ae40fc96b647dd214fac969bec726d5c632a97dfdad2a48c3d55d1804e76938417e6734deb74d8de3bdf0c84f05bdc02568fb9899d9476d5ec78a2df669f8d0bf3d0f2487cb2762d7a3d74a7b02eed6ed51e085ca9a4e81dc015c336ce6bf9f578cb612dd4fe02a3bb5d9df", 0x1000, 0x367a, 0x0, 0x3, r6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x400, r7, &(0x7f0000000400)="5975e0e41fffa970c6e43f9f3d8fe02cbdcbc4e8988ba3906bc5056f60fbaff1161759093f0fa78ff8dcde172207afba3e1e26853baeafb251f27ab510c668305867ad8447e7ae05e5d6f5ce9ec5a1c4f8aafb25a9ad8cc501bbebb109ecc5959deb5fd48e45d5ec436fd1c63d88ed3b485c3c64db934e55731fb80faa2f6fe5feaa8b12cfcb6a5e008429c99bf05c6fbf75183fa02e6d8bab6ace0215ad09b58eff428f32086f3bd7ecd3971733477714f8d3b0a162fa3eba053aad10d085ae46746f6c08d8d0b23ed08eff6c4d037d41446d8ccdc2b09e3d2e895f3eb2e62b03701ac8734f7f5d7e83a0d2598361e27f53a55a92", 0xf5, 0x5, 0x0, 0x3, r1}]) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 197.090378][T15066] FAULT_INJECTION: forcing a failure. [ 197.090378][T15066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.104111][T15066] CPU: 1 PID: 15066 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 197.112584][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.122697][T15066] Call Trace: [ 197.125967][T15066] [ 197.128888][T15066] dump_stack_lvl+0xd6/0x122 [ 197.133504][T15066] dump_stack+0x11/0x1b [ 197.137669][T15066] should_fail+0x23c/0x250 [ 197.142101][T15066] should_fail_usercopy+0x16/0x20 [ 197.147127][T15066] _copy_from_user+0x1c/0xd0 [ 197.151736][T15066] input_event_from_user+0x122/0x1d0 [ 197.157021][T15066] ? input_inject_event+0xcd/0xe0 [ 197.162044][T15066] evdev_write+0x282/0x400 [ 197.166462][T15066] ? evdev_read+0x710/0x710 [ 197.171087][T15066] vfs_write+0x2af/0x950 [ 197.175405][T15066] ? __fget_light+0x219/0x260 [ 197.180104][T15066] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 197.180132][T15066] ksys_write+0xd9/0x190 [ 197.180156][T15066] __x64_sys_write+0x3e/0x50 [ 197.180215][T15066] do_syscall_64+0x44/0xd0 [ 197.180274][T15066] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 197.180295][T15066] RIP: 0033:0x7f0fdb27eae9 [ 197.180311][T15066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:55:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) timer_create(0x6, &(0x7f0000000080)={0x0, 0x2f, 0x4, @thr={&(0x7f0000000180)="23dd19e30a1ab3c4ab614590fc2ac6b65d94f0dce81fa4ff68ce8c11fa2a0b5fd10cfbad84f777d0aa89bd0f13bb577febce03ab2947c938513061638618bb8c9ef5a395ff0939e1c3ea500b765e9457bde5ac9c4faf927e13923157d2ae4d59701984af62cb8ee2e94b", &(0x7f00000002c0)="9b5a3dc65226b8621cca328f54e957b33a0cb987624f4ffce5553c5ae3fc60c0b7bd204ef69eff5804c2fc16cd115b71a8e6ab293cb24326f75d533c63c8930b76ba9e65a62b4c48bfe612f14f275f3c171d4eb9bb88b6976bc37968533a0db417981ec1557238a3c1d38b6465a9a379a0d4c7acea547518f5a391f83b6a15bf15db55ae432524b07c03861f85181af6c693a54798c8abd3e849a60d5fbf6b881c36db13c2a3bed267"}}, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)) open(&(0x7f0000000000)='./file0\x00', 0xa340, 0x18) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x240, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000240)=0xe3) 06:55:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 96) [ 197.180329][T15066] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.180430][T15066] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 197.180443][T15066] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 197.180457][T15066] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 197.180470][T15066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.180483][T15066] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 197.180506][T15066] 06:55:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 197.180630][ T24] audit: type=1400 audit(1636700100.531:212): avc: denied { create } for pid=15067 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 197.195527][ T24] audit: type=1400 audit(1636700100.621:213): avc: denied { read } for pid=15067 comm="syz-executor.3" path="socket:[28553]" dev="sockfs" ino=28553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 06:55:00 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = gettid() wait4(r0, 0x0, 0x0, &(0x7f00000002c0)) getrlimit(0x6, &(0x7f0000000200)) rt_sigqueueinfo(r0, 0x3c, &(0x7f0000000040)) gettid() rt_sigqueueinfo(0x0, 0x3d, &(0x7f0000000040)={0x0, 0x0, 0x3}) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x12, 0x7ff, 0x0, 0xffffffffffff6463, 0x1, 0xe6ee0003, 0x1003, 0x1d50}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r1 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) process_vm_writev(r3, &(0x7f0000000180)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/25, 0x19}], 0x2, &(0x7f00000001c0)=[{&(0x7f00000020c0)=""/4092, 0xffc}], 0x1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x35000) [ 197.338836][ T24] audit: type=1400 audit(1636700100.621:214): avc: denied { write } for pid=15067 comm="syz-executor.3" path="socket:[28553]" dev="sockfs" ino=28553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 197.338863][ T24] audit: type=1400 audit(1636700100.631:215): avc: denied { ioctl } for pid=15067 comm="syz-executor.3" path="socket:[28553]" dev="sockfs" ino=28553 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 197.346863][T15082] FAULT_INJECTION: forcing a failure. 06:55:00 executing program 3: syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x7d) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x1, 0x80]) 06:55:00 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) setrlimit(0x1, &(0x7f0000000000)={0x7ff, 0x1}) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 197.346863][T15082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.402223][T15082] CPU: 0 PID: 15082 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 197.402255][T15082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.402268][T15082] Call Trace: [ 197.402275][T15082] [ 197.402281][T15082] dump_stack_lvl+0xd6/0x122 [ 197.402306][T15082] dump_stack+0x11/0x1b [ 197.402380][T15082] should_fail+0x23c/0x250 [ 197.402406][T15082] should_fail_usercopy+0x16/0x20 [ 197.445305][T15082] _copy_from_user+0x1c/0xd0 [ 197.445352][T15082] input_event_from_user+0x122/0x1d0 [ 197.445381][T15082] ? input_inject_event+0xcd/0xe0 [ 197.445400][T15082] evdev_write+0x282/0x400 [ 197.445448][T15082] ? evdev_read+0x710/0x710 [ 197.445473][T15082] vfs_write+0x2af/0x950 [ 197.473468][T15082] ? __fget_light+0x219/0x260 [ 197.473581][T15082] ksys_write+0xd9/0x190 [ 197.482468][T15082] __x64_sys_write+0x3e/0x50 [ 197.487122][T15082] do_syscall_64+0x44/0xd0 [ 197.491574][T15082] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 197.497527][T15082] RIP: 0033:0x7f0fdb27eae9 [ 197.501931][T15082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 197.521538][T15082] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.521564][T15082] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:55:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 97) [ 197.521580][T15082] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 197.521595][T15082] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 197.521669][T15082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.521683][T15082] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 197.521701][T15082] [ 197.582209][T15192] FAULT_INJECTION: forcing a failure. [ 197.582209][T15192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.611695][T15192] CPU: 0 PID: 15192 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 197.620119][T15192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.620133][T15192] Call Trace: [ 197.620139][T15192] [ 197.620147][T15192] dump_stack_lvl+0xd6/0x122 [ 197.640969][T15192] dump_stack+0x11/0x1b 06:55:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 197.645125][T15192] should_fail+0x23c/0x250 [ 197.649606][T15192] should_fail_usercopy+0x16/0x20 [ 197.654613][T15192] _copy_from_user+0x1c/0xd0 [ 197.659223][T15192] input_event_from_user+0x122/0x1d0 [ 197.664621][T15192] ? input_inject_event+0xcd/0xe0 [ 197.669646][T15192] evdev_write+0x282/0x400 [ 197.674059][T15192] ? evdev_read+0x710/0x710 [ 197.678554][T15192] vfs_write+0x2af/0x950 [ 197.682781][T15192] ? __fget_light+0x219/0x260 [ 197.687484][T15192] ? __this_cpu_preempt_check+0x18/0x20 [ 197.693061][T15192] ksys_write+0xd9/0x190 [ 197.697286][T15192] __x64_sys_write+0x3e/0x50 [ 197.701914][T15192] do_syscall_64+0x44/0xd0 [ 197.706320][T15192] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 197.712199][T15192] RIP: 0033:0x7f0fdb27eae9 [ 197.716768][T15192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 197.736405][T15192] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:55:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:55:01 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000080)) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 197.744797][T15192] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 197.752813][T15192] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 197.760862][T15192] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 197.768892][T15192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.776920][T15192] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 197.784940][T15192] 06:55:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='()\x00') r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0xffffffffffffffff, 0x0, r2, 0x0) setrlimit(0x3, &(0x7f0000000000)={0x10000, 0x858}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x35000) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x9, 0xf6, 0x5e, 0x7, 0x0, 0x1, 0x20810, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x1000, 0x748df94, 0x1, 0x9, 0x101, 0x4, 0x1ff, 0x0, 0x3, 0x0, 0x10000}, 0x0, 0x8, r3, 0xa) 06:55:01 executing program 2: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100000001}}, './file0\x00'}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast2}, {0x2, 0x0, 0xfff7ffbc, @loopback}, r2}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x35000) 06:55:01 executing program 3: ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000080)=0x1) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=user,access=client,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c63616368653d6e6f6e652c667363616368652c6163636573733d636c69656e742c63616368653d6c6f6f73652c76657273696f6e3d3970323030302e4c2c7065726d69745f646972656374696f2c61707072616973655f747970653d696de17369672c61707072616973655f747970653d696d617369672c7569643c981b32206e72abb969ea7a1d74044235e88646ff78c85f5d1a7891a119", @ANYRESDEC=0xee00, @ANYBLOB=',permit_directio,fowner>', @ANYRESDEC, @ANYBLOB="935424e62b9603bd6f856b8f08daf541e578252a438d91d009e17442e7a9d3122c48eff1a488f99349a602662e196f7a63c43b19b8369a71d4d644ea74e38d34e60490e52e50b387e2c3bc5dc23ed7d2423f401d69a4916e92f342c1393d19a025f4b0d1fa29aae2eb37f4be42a5f748ba2dd0486ea40cb4a5c79e3af3c08db93f8e36d6c88631d99d5e2808ffd9e826d6647cf8f2761524ce6ede616fd21fb6", @ANYRES16]) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000001800), 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x74, &(0x7f0000000300)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0x7d9, @mcast1, 0xdd}, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}]}, &(0x7f00000003c0)=0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='()\x00') copy_file_range(r1, &(0x7f0000001840)=0x4, r2, &(0x7f0000001880)=0x3, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) 06:55:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:55:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 98) 06:55:01 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 197.949006][ T24] audit: type=1400 audit(1636700101.331:216): avc: denied { read write } for pid=15257 comm="syz-executor.2" name="rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.972714][ T24] audit: type=1400 audit(1636700101.331:217): avc: denied { open } for pid=15257 comm="syz-executor.2" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 06:55:01 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0x1636d000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x52, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0xc22b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x5, 0x7fff, 0x401, 0x0, 0x4, "0003ffffff00"}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 06:55:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 197.997159][ T24] audit: type=1400 audit(1636700101.341:218): avc: denied { create } for pid=15255 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.043155][T15314] FAULT_INJECTION: forcing a failure. [ 198.043155][T15314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.057000][T15314] CPU: 1 PID: 15314 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 198.065416][T15314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.075464][T15314] Call Trace: [ 198.078732][T15314] [ 198.081714][T15314] dump_stack_lvl+0xd6/0x122 [ 198.086447][T15314] dump_stack+0x11/0x1b [ 198.090665][T15314] should_fail+0x23c/0x250 [ 198.095159][T15314] should_fail_usercopy+0x16/0x20 [ 198.100192][T15314] _copy_from_user+0x1c/0xd0 [ 198.104866][T15314] input_event_from_user+0x122/0x1d0 [ 198.110301][T15314] ? input_inject_event+0xcd/0xe0 [ 198.115377][T15314] evdev_write+0x282/0x400 [ 198.119876][T15314] ? evdev_read+0x710/0x710 [ 198.124388][T15314] vfs_write+0x2af/0x950 [ 198.128633][T15314] ? __fget_light+0x219/0x260 [ 198.133400][T15314] ksys_write+0xd9/0x190 [ 198.137645][T15314] __x64_sys_write+0x3e/0x50 [ 198.142238][T15314] do_syscall_64+0x44/0xd0 [ 198.146657][T15314] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 198.152548][T15314] RIP: 0033:0x7f0fdb27eae9 [ 198.156964][T15314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 198.176626][T15314] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.185031][T15314] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:55:01 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='()\x00') ftruncate(r1, 0x10001) 06:55:01 executing program 3: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) 06:55:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:55:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 99) [ 198.193005][T15314] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 198.200982][T15314] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 198.208951][T15314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.216920][T15314] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 198.224890][T15314] 06:55:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x142}], 0x1, &(0x7f0000000100)={r3, r4+60000000}, &(0x7f0000000180)={[0x9]}, 0x8) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 198.299186][T15491] FAULT_INJECTION: forcing a failure. [ 198.299186][T15491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.312439][T15491] CPU: 0 PID: 15491 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 198.320909][T15491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.330966][T15491] Call Trace: [ 198.334300][T15491] [ 198.337224][T15491] dump_stack_lvl+0xd6/0x122 [ 198.341816][T15491] dump_stack+0x11/0x1b [ 198.345985][T15491] should_fail+0x23c/0x250 [ 198.350440][T15491] should_fail_usercopy+0x16/0x20 [ 198.355467][T15491] _copy_from_user+0x1c/0xd0 [ 198.360062][T15491] input_event_from_user+0x122/0x1d0 [ 198.365420][T15491] ? input_inject_event+0xcd/0xe0 [ 198.370447][T15491] evdev_write+0x282/0x400 [ 198.374878][T15491] ? evdev_read+0x710/0x710 [ 198.379452][T15491] vfs_write+0x2af/0x950 [ 198.383704][T15491] ? __fget_light+0x219/0x260 [ 198.388427][T15491] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 198.394243][T15491] ksys_write+0xd9/0x190 [ 198.398545][T15491] __x64_sys_write+0x3e/0x50 [ 198.403141][T15491] do_syscall_64+0x44/0xd0 [ 198.407633][T15491] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 198.413524][T15491] RIP: 0033:0x7f0fdb27eae9 [ 198.417938][T15491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 198.437695][T15491] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 06:55:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:55:01 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp={0x86, 0x0, {0x0, 0xffff}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = eventfd(0x5) write$binfmt_misc(r1, &(0x7f0000000000)={'syz0'}, 0x4) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 198.446170][T15491] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 [ 198.454135][T15491] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 198.462105][T15491] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 198.470106][T15491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.478072][T15491] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 198.486107][T15491] 06:55:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) (fail_nth: 100) 06:55:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(0x0, 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 198.566076][T15540] FAULT_INJECTION: forcing a failure. [ 198.566076][T15540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.579339][T15540] CPU: 0 PID: 15540 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 198.587754][T15540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.597885][T15540] Call Trace: [ 198.601161][T15540] [ 198.604104][T15540] dump_stack_lvl+0xd6/0x122 [ 198.608688][T15540] dump_stack+0x11/0x1b [ 198.612838][T15540] should_fail+0x23c/0x250 [ 198.617302][T15540] should_fail_usercopy+0x16/0x20 [ 198.622367][T15540] _copy_from_user+0x1c/0xd0 [ 198.627024][T15540] input_event_from_user+0x122/0x1d0 [ 198.632313][T15540] ? input_inject_event+0xcd/0xe0 [ 198.637343][T15540] evdev_write+0x282/0x400 [ 198.641769][T15540] ? evdev_read+0x710/0x710 [ 198.646339][T15540] vfs_write+0x2af/0x950 [ 198.650703][T15540] ? __fget_light+0x219/0x260 [ 198.655385][T15540] ksys_write+0xd9/0x190 [ 198.659684][T15540] __x64_sys_write+0x3e/0x50 [ 198.664280][T15540] do_syscall_64+0x44/0xd0 [ 198.668702][T15540] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 198.674598][T15540] RIP: 0033:0x7f0fdb27eae9 [ 198.679058][T15540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 198.698668][T15540] RSP: 002b:00007f0fd8ff5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.707081][T15540] RAX: ffffffffffffffda RBX: 00007f0fdb391f60 RCX: 00007f0fdb27eae9 06:55:02 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x12, 0x2}, @ramp}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x5, 0x1ff}) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r2, 0x208200) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000001c0)=""/207) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/148) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1) 06:55:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) [ 198.715106][T15540] RDX: 0000000000035000 RSI: 0000000020000040 RDI: 0000000000000006 [ 198.723077][T15540] RBP: 00007f0fd8ff51d0 R08: 0000000000000000 R09: 0000000000000000 [ 198.731058][T15540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 198.739044][T15540] R13: 00007fff6ab1e8bf R14: 00007f0fd8ff5300 R15: 0000000000022000 [ 198.747019][T15540] 06:55:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(0x0, 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:55:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(0x0, 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:55:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1ff, 0x9}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = perf_event_open(&(0x7f0000000880)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x214bd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x40, 0x5b, 0x9, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1a9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x35000) 06:55:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000002, 0x80000) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/31) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x20, 0x14, 0x1000, 0x101, "46d800084b4029b4f0f4c759124688a3359652b13d820000000000001000"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x80, @usage=0x2, 0x0, 0x9, 0x36dd, 0x0, 0x7, 0x1, 0x500, @usage=0x3, 0x5, 0x0, [0x3, 0x8, 0x8, 0x2]}, {0x1f, @struct, 0x0, 0x9, 0xc48, 0x0, 0x8, 0x10001, 0x20, @usage=0x9, 0xa7, 0x0, [0x0, 0x0, 0x80000000, 0x3, 0x0, 0x3fe000000]}, {0x1, @struct={0x4, 0x7}, 0x0, 0x6fe3, 0x6, 0x7f, 0x0, 0x0, 0x40, @usage=0x8, 0x0, 0x0, [0xffffffff, 0x3, 0x1ff, 0x3ff, 0x101, 0xd781]}, {0x0, 0x7, 0x8}}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='()\x00') ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001180)={0x0, 0x9, 0x0, [0x9, 0x8, 0x8, 0x2, 0x5], [0x6, 0xeb9, 0x20, 0x1, 0x905a, 0x401, 0x200, 0x9, 0x5, 0x6, 0x7, 0x2, 0x80000001, 0x1, 0x2, 0xf30, 0x791000000000, 0x1000, 0x5, 0x2, 0x3, 0xaa10, 0x101, 0xec37ecf, 0x401, 0x4438, 0x18, 0x10001, 0x5, 0x3, 0x400, 0x1000, 0xff, 0x8, 0x7, 0x2, 0x8, 0x30, 0x1ff, 0x6, 0x10001, 0x1, 0xfffffffffffffffc, 0xffffffffffff0000, 0x5, 0xc9bb, 0x9, 0x6a, 0xff, 0x2, 0x7f, 0x80000001, 0xc1, 0x6, 0x9, 0x3, 0x5, 0x0, 0x716, 0x7f23, 0xfffffffffffffffe, 0xc5, 0x80000000, 0xd2, 0x9, 0x8, 0x3, 0xfffffffffffffffb, 0x6, 0x3b7, 0x8, 0x5fd, 0x7, 0x100000001, 0x6, 0x2, 0x100000001, 0x0, 0x8, 0x800, 0x1b, 0x680, 0x4, 0x200, 0xff7, 0x5, 0xfff, 0xc42a, 0x1, 0x4, 0xbc22, 0x20, 0xfff, 0x5, 0x6, 0x100000001, 0x1, 0x9b7, 0x2, 0xa9e, 0x3738, 0x3, 0x200, 0x1000, 0x200, 0x8, 0x2, 0x2, 0x5, 0xec4, 0x8, 0xfffffffffffffff8, 0x0, 0x3dfd864a, 0x5, 0x7fffffff, 0x2, 0x0, 0x1, 0x80, 0xfffffffffffeffff]}) r3 =