0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x80010, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) io_uring_enter(r2, 0x58ab, 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r2, 0x1ff, 0x0, 0x7fffffff, 0x2, 0x1}, 0x7) 10:17:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x74}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:17:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x59}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:17:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:17:21 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:17:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x5a}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:17:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x75}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:17:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:17:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1600, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:17:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x6}, 0x0) 10:17:21 executing program 4: mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:17:22 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:17:22 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="a7", 0x1) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\'{{\x00', r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x80010, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) io_uring_enter(r1, 0x58ab, 0x1, 0x0, 0x0, 0x0) 10:17:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x5c}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:17:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:17:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x76}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:17:34 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="a7", 0x1) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\'{{\x00', r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:17:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x5d}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:17:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x7}, 0x0) 10:17:34 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:17:34 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:17:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1700, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:17:34 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:17:35 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="a7", 0x1) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\'{{\x00', r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:17:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x5e}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:17:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:17:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1800, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:17:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x77}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:17:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x8}, 0x0) 10:17:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x9}, 0x0) 10:17:48 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="a7", 0x1) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\'{{\x00', r0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:17:48 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:17:48 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:17:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x5f}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:17:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1900, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:17:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x7a}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:17:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:17:48 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="a7", 0x1) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\'{{\x00', r0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:17:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:17:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x60}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:17:48 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:17:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1a00, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:17:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x7e}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:17:48 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:17:48 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="a7", 0x1) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\'{{\x00', r0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:17:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf}, 0x0) 10:17:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:18:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x62}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xa7}, 0x0) 10:18:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x80000}, 0x0) 10:18:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:03 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="a7", 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:18:03 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:18:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1b00, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:18:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:18:03 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:18:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xec0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:18:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x63}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x2}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:03 executing program 1: add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:18:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:18:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1c00, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:18:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf0}, 0x0) 10:18:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x300}, 0x0) 10:18:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:18:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1d00, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:18:16 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="a7", 0x1) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\'{{\x00', r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x80010, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) io_uring_enter(r3, 0x58ab, 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r3, 0x1ff, 0x0, 0x7fffffff, 0x2, 0x1}, 0x7) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x0) r4 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_setup(0x5e4e, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, 0x3dd, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)) 10:18:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:18:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x64}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x3}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:16 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:18:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:18:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1e00, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:18:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x65}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 10:18:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x4}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:16 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:18:16 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:18:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x66}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:18:30 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:18:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x4}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x5}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x600}, 0x0) 10:18:30 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:18:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1f00, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:18:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x6}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:18:30 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:18:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x2000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:18:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x6b}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:30 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x10000000) r2 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) io_uring_enter(r2, 0x58ab, 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x166) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 10:18:30 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:18:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x7}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:18:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) 10:18:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x6c}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:18:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x900}, 0x0) 10:18:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x9}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:18:44 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x10000000) r2 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) io_uring_enter(r2, 0x58ab, 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x166) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 10:18:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:18:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x2100, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:18:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:18:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x6d}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:18:59 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x10000000) r2 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) io_uring_enter(r2, 0x58ab, 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x166) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 10:18:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x2200, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:18:59 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:18:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf00}, 0x0) 10:18:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:18:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x72}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:18:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0xf}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:19:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0xe5}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:19:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x2500, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:19:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x73}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:19:00 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:19:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xa700}, 0x0) 10:19:00 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x10000000) r2 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) io_uring_enter(r2, 0x58ab, 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x166) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) 10:19:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x2600, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:19:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:19:13 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x10000000) r2 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) io_uring_enter(r2, 0x58ab, 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x166) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) 10:19:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000080)) 10:19:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:19:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x2}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:19:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf000}, 0x0) 10:19:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x2700, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:19:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x74}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000080)) 10:19:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x3}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:19:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x2800, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:19:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x75}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:13 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x10000000) r2 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) io_uring_enter(r2, 0x58ab, 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x166) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:19:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:19:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x30000}, 0x0) 10:19:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:19:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000080)) 10:19:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x76}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x2a00, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:19:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x3101, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:19:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:19:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x80000}, 0x0) 10:19:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:19:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x77}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) 10:19:28 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x10000000) r2 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) io_uring_enter(r2, 0x58ab, 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x166) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:19:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x4}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf0ffff}, 0x0) 10:19:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:19:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xc00e, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:19:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x7a}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x5}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:19:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) 10:19:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x1000000}, 0x0) 10:19:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x6}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xf000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:19:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x7e}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:49 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x10000000) r2 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) io_uring_enter(r2, 0x58ab, 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x166) 10:19:49 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(0x0, 0x0) 10:19:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) 10:19:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x7}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:49 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(0x0, 0x0) 10:19:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x2000000}, 0x0) 10:19:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:19:49 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x10000000) r2 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) io_uring_enter(r2, 0x58ab, 0x1, 0x0, 0x0, 0x0) 10:19:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:19:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) [ 2581.154194] Bluetooth: hci0: command 0x0409 tx timeout [ 2583.202280] Bluetooth: hci0: command 0x041b tx timeout [ 2585.250164] Bluetooth: hci0: command 0x040f tx timeout [ 2586.372454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2586.374549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2586.377391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2586.440901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2586.442913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2586.445746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2587.298153] Bluetooth: hci0: command 0x0419 tx timeout 10:20:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x2}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x80000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:20:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:20:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x8}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x3000000}, 0x0) 10:20:15 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x10000000) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:20:15 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(0x0, 0x0) 10:20:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x9}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xf0ffff, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:20:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x3}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:20:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x4000000}, 0x0) 10:20:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:29 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:20:29 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:20:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x5000000}, 0x0) 10:20:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:20:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x4}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:20:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xf}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xe5}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:20:29 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:20:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x2000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:20:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x5}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:29 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:20:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xf0}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:20:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:20:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x300}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x6}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x6000000}, 0x0) 10:20:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:20:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x3000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:20:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:20:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:20:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, 0x0, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x500}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:44 executing program 5: syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:20:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x4000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:20:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x7000000}, 0x0) 10:20:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x600}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:20:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x58) 10:20:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, 0x0, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 2636.258177] Bluetooth: hci7: command 0x0409 tx timeout [ 2638.306167] Bluetooth: hci7: command 0x041b tx timeout [ 2640.354303] Bluetooth: hci7: command 0x040f tx timeout [ 2641.599019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2641.601119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2641.604686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2641.666554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2641.668315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2641.670831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2642.402144] Bluetooth: hci7: command 0x0419 tx timeout 10:21:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:21:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x7}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, 0x0, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:10 executing program 5: syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:21:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x5000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:21:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x700}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x9000000}, 0x0) 10:21:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:21:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:21:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x9}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x6000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:21:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x900}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:10 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r0, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:10 executing program 5: syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) [ 2661.794187] Bluetooth: hci0: command 0x0409 tx timeout [ 2663.842162] Bluetooth: hci0: command 0x041b tx timeout [ 2665.890385] Bluetooth: hci0: command 0x040f tx timeout [ 2666.772171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2666.774603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2666.779735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2666.830564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2666.832644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2666.835576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2667.938250] Bluetooth: hci0: command 0x0419 tx timeout 10:21:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:21:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x7000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:21:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf000000}, 0x0) 10:21:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xec0}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0xf}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:34 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r0, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:34 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:21:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x5}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xf00}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:34 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:21:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x8000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:21:34 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r0, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) 10:21:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000006, 0x13, r5, 0xa779a000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 10:21:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x9effffff}, 0x0) 10:21:51 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r2, 0xffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r3) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000850) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x20, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x10000) ftruncate(r1, 0xffff) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0xa, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_COMMENT={0x8, 0x1a, 'wg0\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffbc2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb04ee7398978c594}]}, @ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 10:21:51 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:21:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xa7000000}, 0x0) 10:21:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x9000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:21:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xc00e}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x2}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000080)) 10:21:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xe500}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x3}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:21:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xa000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:21:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000080)) 10:21:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) 10:21:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 10:21:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000080)) 10:21:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x4}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:21:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:22:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x5}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), 0x0) 10:22:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xf000}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xb000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:22:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 10:22:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:09 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:22:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xfffff000}, 0x0) 10:22:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xffffff7f}, 0x0) 10:22:24 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x3f}, 0x0, 0x1000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x1d, 0xc21, 0x0, 0x0, {0x3, 0x0, 0x2}, [@typed={0xe, 0x2, 0x0, 0x0, @str='\\!#{$)]*[\x00'}]}, 0x24}}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 10:22:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xffff}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x6}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), 0x0) 10:22:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:22:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xc000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:22:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) [ 2731.665584] netlink: 'syz-executor.4': attribute type 11 has an invalid length. 10:22:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xd000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:22:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x3}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), 0x0) 10:22:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xffffff9e}, 0x0) 10:22:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x7}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 2731.883053] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 10:22:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:22:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xe000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:22:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000000)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0100002000000328bd7000fddbdf250f000000e6e249a2102db7cf0fe239910bbc2b3050240c080012ea2230cb2cdf7249104501d05a66e4eb149bd14cacc7bd2a482eca63f8098370fee875e66be1c8492c11d6cff397d29e26f2d8e5158e650f3558e75141874ad6c73230161f3e0e84df415143bcb42a44214199bdcb7c3cfc3360aef5f1da42da18e65c6950c14e64c5637c657e878be57a0fae7ed926755df1e556932eab8f061988218f3f2c1eef8bc42c1094488d3e013380040094003827ef0ad58cbc0503441a1543fe4fe60106b5f2f4394b20941c8dba76cfae0f9664172579ad91e80728d663e175ec7ca49521e0e6cb3aac93d1720a25c30de43d9542adb233026bd759f6b5a72b49fe3d241afbdd2a3b5a797e89dff71587361874e75e9dfb685c949ed6638e2c4d13ab5a2c39d34a378c96226307cb04535aca9147da40af8ded007544492a7f03780d38ac0b975c9ebc27b655d5b2d795771c84b5dc33078c58c1afbcc95d637c04748702b07b6273f86f142cff4533571f190408ba6c424262b2ad1867634588d4ddb77f1388ff0406d0dfdb11ec9eb0a33f43f8df26b6a274fbf063b7ba533bd31359e5d134e53030d5f233b9f8cc967c6a0b4a579e6d4d5edbaf59f7dcce1379437442901da902fc5d7714000600fc0200000000000000000000000000010000000000000000000000000010dd02e57e35fb020e29a70ce3a4d3d3361dcc61b50036dd10ef3ffe51faf81719dbf31c1503bc454c6e90aa0d5393e7a3a7e9fe698c78d4c19565f23553de3e9a839bb6b0ec74477365eca52fab43d24f9af6c9377ab0b6704b0e4f68eec4affe32f9bda1f83352e7cdd7deabac39d4ac9daa1da8dd6c939f75fab185b2c6605eee3009c835fcbc0f8436efe60f9e34d84651fae2937344949fa4d39bd8ac400d85d8c70e251f2815216b07fae380f72b69806bbf1adc0acabb17a98c8ffb06d01d6a36dd53f46718d1dae4053100db3e1799c12274fbad4922ab2338255f68e4dfc5a01953b7d08d773d9bbe2a51d0394d9ae9af031ff1a3359bf72250f453aab0e249c882082510bc93fc0aacad8e0e5a05275afb9c21ddb97c0ae3dfdb11935060d2804db97c37d45ef3f926c6a0c18ef065718f47fce69f291dffaf38506f6c34c48daec4fbdbc45b596dca153e46ee4871d1045b75453ae1bcf351fb0ed61636ab99744d82ef21e76537df4bfbf5fc1f86afe256d33ce645e3199f1fd7b79111c3c2b497801f63e23d07ce415e782b95a641265f5fb139783ecb005b417e2ae6be5393b147ffd14f08fe7ec03c1d40e5f84c8486fdd4da92c183ba431a43f0e5d88f8e8000b2ca6afdc25a0e62a7fe34b9c8ebe3d1d29ae74a41f26d95e32759ed222c3940feaf195918b4658b7b02dc"], 0x1fc}, 0x1, 0x0, 0x0, 0x40040}, 0x44080) 10:22:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x14}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x8}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 2732.077861] netlink: 'syz-executor.6': attribute type 3 has an invalid length. [ 2736.802257] Bluetooth: hci7: command 0x0409 tx timeout [ 2738.850145] Bluetooth: hci7: command 0x041b tx timeout [ 2740.898180] Bluetooth: hci7: command 0x040f tx timeout [ 2741.883976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2741.886027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2741.908187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2741.936252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2741.937929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2741.940501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2742.946114] Bluetooth: hci7: command 0x0419 tx timeout 10:22:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x9}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xfffffff0}, 0x0) 10:22:50 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x3, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="70992967445042490d6a0a348ac6de9b91664f3cc9c9cb668204690bfe3be9dafee6ff88e9b07f3a53b5d7ad3a0d9484970ef0814b05c301f8d1539dde2d9bd7112bcf6b46f8dcf4b9e9b661f8836c00702ea9b511146cd34fb2f2d4f99fa76f0ce6e3e8826f790d7abf46fc96e598524e384069a70cfac3c026ddadf905259570597939d023e87018339b5e667f046bec", 0x91, 0x7}], 0x2008001, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x2}}, {@session={'session', 0x3d, 0x12}}, {@map_normal}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@sbsector={'sbsector', 0x3d, 0x7}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}) ftruncate(r1, 0x1) r2 = gettid() clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000140), 0x0, {0x40}, &(0x7f00000001c0)=""/67, 0x43, &(0x7f0000000240)=""/212, &(0x7f0000000340)=[r2, 0x0], 0x2}, 0x58) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7, 0x4, 0x0, 0x5}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001800000024ebb7bee390388c99005b9abc2598bc6b57c10f3d11286e78a3cb7012abf4bfc993d3544d6f8bfdffd71898e739d01ea7b5c8000400001d5b2ff9ea8e790f83197481ef0d5204aaa14d09056571a019d67880a65fc3a08ebbaf5777ccb66fb4331d79e3907938457e08", @ANYRES64=r3]) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x2) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010000001800000024ebb7bee390388c99e55b9abc2598bc6b57c10f3d11286e78a3cb7012abf4bfc993d3544d6f8bfdffd71898e739d01ea7b5c87f5aa8821d5b2ff9ea8e790f83197481ef0d5204aaa14d09056571a019d67880a65fc3a08ebbaf5777ccb66fb4331d79e3907938457e08", @ANYRES32=r5]) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x20, 0x3f, 0x0, 0x3, 0x0, 0x7ff, 0x5240, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x6, 0x3}, 0x40000, 0x3, 0x6, 0x2, 0x8001, 0x800, 0x8, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0x0, r5, 0xa) 10:22:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xf000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:22:50 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r0, &(0x7f0000000080)={[0x6]}, 0x8) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="13971a0065ffffff7f00000000395032303030"], 0x13) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 10:22:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:22:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x67}, @val={0xc}}}}, 0x28}}, 0x0) [ 2757.542064] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 10:22:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:22:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x10000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:22:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xf}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x69}, @val={0xc}}}}, 0x28}}, 0x0) 10:22:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x3000000000000}, 0x0) [ 2757.872817] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2763.106175] Bluetooth: hci0: command 0x0409 tx timeout [ 2765.154220] Bluetooth: hci0: command 0x041b tx timeout [ 2767.202188] Bluetooth: hci0: command 0x040f tx timeout [ 2768.348910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2768.351305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2768.354522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2768.430460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2768.432305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2768.435250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2769.250332] Bluetooth: hci0: command 0x0419 tx timeout 10:23:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x11000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:23:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x900, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:23:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:23:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xf0}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x2}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x8000000000000}, 0x0) 10:23:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010000001800000024ebb7bee390388c99e55b9abc2598bc6b57c10f3d11286e78a3cb7012abf4bfc993d3544d6f8bfdffd71898e739d01ea7b5c87f5aa8821d5b2ff9ea8e790f83197481ef0d5204aaa14d09056571a019d67880a65fc3a08ebbaf5777ccb66fb4331d79e3907938457e08", @ANYRES32=r3]) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000700)={{r3}, "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"}) r4 = signalfd(r1, &(0x7f0000000040)={[0x7]}, 0x8) dup3(r4, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)}, {&(0x7f00000000c0)="9a", 0x1}], 0x2}, 0x38008004) dup2(r0, r1) 10:23:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 1) 10:23:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:23:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf0ffffffffffff}, 0x0) 10:23:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 10:23:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x5}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x13d}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x12000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 2783.997228] FAULT_INJECTION: forcing a failure. [ 2783.997228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2783.999785] CPU: 1 PID: 17749 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2784.001273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2784.003032] Call Trace: [ 2784.003606] dump_stack+0x107/0x167 [ 2784.004509] should_fail.cold+0x5/0xa [ 2784.005510] _copy_from_user+0x2e/0x1b0 [ 2784.006583] io_uring_setup+0x9b/0x2980 [ 2784.007628] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2784.008930] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2784.010041] ? wait_for_completion_io+0x270/0x270 [ 2784.011092] ? rcu_read_lock_any_held+0x75/0xa0 [ 2784.012084] ? vfs_write+0x354/0xb10 [ 2784.012890] ? fput_many+0x2f/0x1a0 [ 2784.013679] ? ksys_write+0x1a9/0x260 [ 2784.014500] ? __ia32_sys_read+0xb0/0xb0 [ 2784.015355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2784.016506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2784.017586] do_syscall_64+0x33/0x40 [ 2784.018381] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2784.019480] RIP: 0033:0x7fed36701b19 [ 2784.020266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2784.024162] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2784.025798] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2784.027304] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2784.028852] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2784.030377] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2784.031887] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 2784.091567] FAULT_INJECTION: forcing a failure. [ 2784.091567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2784.094659] CPU: 0 PID: 17758 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2784.096481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2784.098504] Call Trace: [ 2784.099157] dump_stack+0x107/0x167 [ 2784.100058] should_fail.cold+0x5/0xa [ 2784.101011] _copy_from_user+0x2e/0x1b0 [ 2784.101990] copy_clone_args_from_user+0x147/0x790 [ 2784.103200] ? lock_acquire+0x197/0x470 [ 2784.104186] ? sighand_ctor+0x40/0x40 [ 2784.105152] ? find_held_lock+0x2c/0x110 [ 2784.106146] ? ksys_write+0x21a/0x260 [ 2784.107076] ? lock_downgrade+0x6d0/0x6d0 [ 2784.108100] __do_sys_clone3+0x9d/0x320 [ 2784.109091] ? __do_sys_clone+0x110/0x110 [ 2784.110116] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2784.111294] ? wait_for_completion_io+0x270/0x270 [ 2784.112485] ? rcu_read_lock_any_held+0x75/0xa0 [ 2784.113616] ? vfs_write+0x354/0xb10 [ 2784.114526] ? fput_many+0x2f/0x1a0 [ 2784.115416] ? ksys_write+0x1a9/0x260 [ 2784.116358] ? __ia32_sys_read+0xb0/0xb0 [ 2784.117354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2784.118628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2784.119885] ? trace_hardirqs_on+0x5b/0x180 [ 2784.120952] do_syscall_64+0x33/0x40 [ 2784.121859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2784.123111] RIP: 0033:0x7f55c06adb19 [ 2784.124028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2784.128498] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2784.130344] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2784.132105] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2784.133843] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2784.135570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2784.137317] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:23:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:23:32 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 10:23:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x100000000000000}, 0x0) 10:23:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x6}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x300}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x13000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:23:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 2) 10:23:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 2799.587629] FAULT_INJECTION: forcing a failure. [ 2799.587629] name failslab, interval 1, probability 0, space 0, times 0 [ 2799.590075] CPU: 1 PID: 17788 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2799.591537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2799.593286] Call Trace: [ 2799.593844] dump_stack+0x107/0x167 [ 2799.594611] should_fail.cold+0x5/0xa [ 2799.595413] ? io_uring_setup+0x258/0x2980 [ 2799.596306] should_failslab+0x5/0x20 [ 2799.597105] kmem_cache_alloc_trace+0x55/0x320 [ 2799.598068] io_uring_setup+0x258/0x2980 [ 2799.598917] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2799.599933] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2799.601001] ? wait_for_completion_io+0x270/0x270 [ 2799.602032] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2799.603133] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2799.604219] do_syscall_64+0x33/0x40 [ 2799.605004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2799.606075] RIP: 0033:0x7fed36701b19 [ 2799.606852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2799.610840] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2799.612495] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2799.614036] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2799.615578] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2799.617127] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2799.618668] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 2799.625514] FAULT_INJECTION: forcing a failure. [ 2799.625514] name failslab, interval 1, probability 0, space 0, times 0 [ 2799.627980] CPU: 1 PID: 17786 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2799.629490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2799.631289] Call Trace: [ 2799.631860] dump_stack+0x107/0x167 [ 2799.632661] should_fail.cold+0x5/0xa [ 2799.633495] ? copy_process+0x3305/0x78b0 [ 2799.634393] should_failslab+0x5/0x20 [ 2799.635218] kmem_cache_alloc_node+0x55/0x330 [ 2799.636196] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2799.637345] copy_process+0x3305/0x78b0 [ 2799.638209] ? SOFTIRQ_verbose+0x10/0x10 [ 2799.639095] ? __lockdep_reset_lock+0x180/0x180 [ 2799.640110] ? mark_lock+0xf5/0x2df0 [ 2799.640930] ? lock_acquire+0x197/0x470 [ 2799.641792] ? find_held_lock+0x2c/0x110 [ 2799.642687] ? __cleanup_sighand+0xb0/0xb0 [ 2799.643631] ? _copy_from_user+0xfb/0x1b0 [ 2799.644549] kernel_clone+0xe7/0x980 [ 2799.645358] ? __lockdep_reset_lock+0x180/0x180 [ 2799.646373] ? create_io_thread+0xf0/0xf0 [ 2799.647290] ? ksys_write+0x21a/0x260 [ 2799.648126] ? lock_downgrade+0x6d0/0x6d0 [ 2799.649029] __do_sys_clone3+0x1e5/0x320 [ 2799.649911] ? __do_sys_clone+0x110/0x110 [ 2799.650833] ? rcu_read_lock_any_held+0x75/0xa0 [ 2799.651839] ? vfs_write+0x354/0xb10 [ 2799.652661] ? fput_many+0x2f/0x1a0 [ 2799.653453] ? ksys_write+0x1a9/0x260 [ 2799.654282] ? __ia32_sys_read+0xb0/0xb0 [ 2799.655168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2799.656320] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2799.657434] ? trace_hardirqs_on+0x5b/0x180 [ 2799.658373] do_syscall_64+0x33/0x40 [ 2799.659181] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2799.660301] RIP: 0033:0x7f55c06adb19 [ 2799.661111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2799.665114] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2799.666765] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2799.668321] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2799.669870] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2799.671420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2799.672978] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:23:32 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r0, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x500}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:33 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:23:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 3) 10:23:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) 10:23:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x14000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 2799.933850] netlink: 'syz-executor.6': attribute type 8 has an invalid length. 10:23:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x200000000000000}, 0x0) 10:23:33 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r0, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 2800.056166] FAULT_INJECTION: forcing a failure. [ 2800.056166] name failslab, interval 1, probability 0, space 0, times 0 [ 2800.058974] CPU: 0 PID: 17814 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2800.060601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2800.062493] Call Trace: [ 2800.063104] dump_stack+0x107/0x167 [ 2800.063930] should_fail.cold+0x5/0xa [ 2800.064812] ? create_object.isra.0+0x3a/0xa30 [ 2800.065853] should_failslab+0x5/0x20 [ 2800.066717] kmem_cache_alloc+0x5b/0x310 [ 2800.067651] create_object.isra.0+0x3a/0xa30 [ 2800.068646] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2800.069809] kmem_cache_alloc_node+0x169/0x330 [ 2800.070851] copy_process+0x3305/0x78b0 [ 2800.071744] ? SOFTIRQ_verbose+0x10/0x10 [ 2800.072707] ? lock_acquire+0x197/0x470 [ 2800.073616] ? find_held_lock+0x2c/0x110 [ 2800.074562] ? __cleanup_sighand+0xb0/0xb0 [ 2800.075567] ? _copy_from_user+0xfb/0x1b0 [ 2800.076534] kernel_clone+0xe7/0x980 [ 2800.077387] ? lock_acquire+0x197/0x470 [ 2800.078300] ? create_io_thread+0xf0/0xf0 [ 2800.079272] ? ksys_write+0x21a/0x260 [ 2800.080149] ? lock_downgrade+0x6d0/0x6d0 [ 2800.081106] __do_sys_clone3+0x1e5/0x320 [ 2800.082030] ? __do_sys_clone+0x110/0x110 [ 2800.083014] ? rcu_read_lock_any_held+0x75/0xa0 [ 2800.084086] ? vfs_write+0x354/0xb10 [ 2800.084940] ? fput_many+0x2f/0x1a0 [ 2800.085773] ? ksys_write+0x1a9/0x260 [ 2800.086641] ? __ia32_sys_read+0xb0/0xb0 [ 2800.087580] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2800.088789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2800.089957] ? trace_hardirqs_on+0x5b/0x180 [ 2800.090945] do_syscall_64+0x33/0x40 [ 2800.091795] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2800.092966] RIP: 0033:0x7f55c06adb19 [ 2800.093818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2800.097480] FAULT_INJECTION: forcing a failure. [ 2800.097480] name failslab, interval 1, probability 0, space 0, times 0 [ 2800.097992] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2800.098017] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2800.098038] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2800.105277] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2800.106897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2800.108518] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2800.110184] CPU: 1 PID: 17813 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2800.111683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2800.113434] Call Trace: [ 2800.113998] dump_stack+0x107/0x167 [ 2800.114768] should_fail.cold+0x5/0xa [ 2800.115596] ? create_object.isra.0+0x3a/0xa30 [ 2800.116572] should_failslab+0x5/0x20 [ 2800.117383] kmem_cache_alloc+0x5b/0x310 [ 2800.118263] create_object.isra.0+0x3a/0xa30 [ 2800.119173] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2800.120255] kmem_cache_alloc_trace+0x151/0x320 [ 2800.121218] io_uring_setup+0x258/0x2980 [ 2800.122070] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2800.123087] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2800.124168] ? wait_for_completion_io+0x270/0x270 [ 2800.125220] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2800.126334] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2800.127450] do_syscall_64+0x33/0x40 [ 2800.128239] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2800.129317] RIP: 0033:0x7fed36701b19 [ 2800.130110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2800.133952] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2800.135536] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2800.137034] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2800.138519] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2800.140026] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2800.141515] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:23:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x9}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x300000000000000}, 0x0) 10:23:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) 10:23:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 4) 10:23:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:23:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x15000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:23:49 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r0, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x600}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 2815.966847] FAULT_INJECTION: forcing a failure. [ 2815.966847] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2815.969433] CPU: 1 PID: 17838 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2815.970899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2815.972655] Call Trace: [ 2815.973218] dump_stack+0x107/0x167 [ 2815.973986] should_fail.cold+0x5/0xa [ 2815.974796] __alloc_pages_nodemask+0x182/0x600 [ 2815.975771] ? lock_downgrade+0x6d0/0x6d0 [ 2815.976655] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2815.977923] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2815.979028] ? kmem_cache_alloc_node+0x2bc/0x330 [ 2815.980027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2815.981170] copy_process+0x62b/0x78b0 [ 2815.981991] ? SOFTIRQ_verbose+0x10/0x10 [ 2815.982849] ? __lockdep_reset_lock+0x180/0x180 [ 2815.983825] ? mark_lock+0xf5/0x2df0 [ 2815.984632] ? lock_acquire+0x197/0x470 [ 2815.985468] ? find_held_lock+0x2c/0x110 [ 2815.986337] ? __cleanup_sighand+0xb0/0xb0 [ 2815.987243] ? _copy_from_user+0xfb/0x1b0 [ 2815.988127] kernel_clone+0xe7/0x980 [ 2815.988912] ? __lockdep_reset_lock+0x180/0x180 [ 2815.989892] ? create_io_thread+0xf0/0xf0 [ 2815.990792] ? ksys_write+0x21a/0x260 [ 2815.991596] ? lock_downgrade+0x6d0/0x6d0 [ 2815.992484] __do_sys_clone3+0x1e5/0x320 [ 2815.993336] ? __do_sys_clone+0x110/0x110 [ 2815.994228] ? rcu_read_lock_any_held+0x75/0xa0 [ 2815.995202] ? vfs_write+0x354/0xb10 [ 2815.995989] ? fput_many+0x2f/0x1a0 [ 2815.996771] ? ksys_write+0x1a9/0x260 [ 2815.997573] ? __ia32_sys_read+0xb0/0xb0 [ 2815.998438] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2815.999537] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2816.000622] ? trace_hardirqs_on+0x5b/0x180 [ 2816.001531] do_syscall_64+0x33/0x40 [ 2816.002309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2816.003387] RIP: 0033:0x7f55c06adb19 [ 2816.004186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2816.008051] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2816.009657] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2816.011154] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2816.012662] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2816.014160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2816.015667] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2816.057499] FAULT_INJECTION: forcing a failure. [ 2816.057499] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2816.060340] CPU: 1 PID: 17845 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2816.061805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2816.063544] Call Trace: [ 2816.064116] dump_stack+0x107/0x167 [ 2816.064887] should_fail.cold+0x5/0xa [ 2816.065706] __alloc_pages_nodemask+0x182/0x600 [ 2816.066686] ? lock_release+0x680/0x680 [ 2816.067531] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2816.068809] ? lock_downgrade+0x6d0/0x6d0 [ 2816.069695] alloc_pages_current+0x187/0x280 [ 2816.070625] kmalloc_order+0x35/0x160 [ 2816.071440] kmalloc_order_trace+0x14/0xa0 [ 2816.072345] io_uring_setup+0x33c/0x2980 [ 2816.073200] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2816.074224] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2816.075288] ? wait_for_completion_io+0x270/0x270 [ 2816.076340] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2816.077453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2816.078545] do_syscall_64+0x33/0x40 [ 2816.079327] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2816.080414] RIP: 0033:0x7fed36701b19 [ 2816.081194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2816.085077] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2816.086679] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2816.088181] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2816.089690] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2816.091200] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2816.092718] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:23:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 10:23:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0xa}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x16000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:23:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:23:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x700}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:23:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) 10:23:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 5) 10:23:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x400000000000000}, 0x0) 10:23:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 10:23:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) [ 2816.466818] FAULT_INJECTION: forcing a failure. [ 2816.466818] name failslab, interval 1, probability 0, space 0, times 0 [ 2816.469317] CPU: 1 PID: 17873 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2816.470771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2816.472539] Call Trace: [ 2816.473101] dump_stack+0x107/0x167 [ 2816.473868] should_fail.cold+0x5/0xa [ 2816.474670] ? create_object.isra.0+0x3a/0xa30 [ 2816.475627] should_failslab+0x5/0x20 [ 2816.476447] kmem_cache_alloc+0x5b/0x310 [ 2816.477311] create_object.isra.0+0x3a/0xa30 [ 2816.478234] ? kasan_unpoison_shadow+0x33/0x50 [ 2816.479246] kmalloc_order+0xfe/0x160 [ 2816.480066] kmalloc_order_trace+0x14/0xa0 [ 2816.480996] io_uring_setup+0x33c/0x2980 [ 2816.481871] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2816.482905] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2816.483982] ? wait_for_completion_io+0x270/0x270 [ 2816.485057] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2816.486177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2816.487268] do_syscall_64+0x33/0x40 [ 2816.488055] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2816.489154] RIP: 0033:0x7fed36701b19 [ 2816.489948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2816.493851] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2816.495467] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2816.496987] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2816.498493] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2816.500004] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2816.501520] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 2816.509028] FAULT_INJECTION: forcing a failure. [ 2816.509028] name failslab, interval 1, probability 0, space 0, times 0 [ 2816.511456] CPU: 1 PID: 17876 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2816.513274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2816.515366] Call Trace: [ 2816.516007] dump_stack+0x107/0x167 [ 2816.516786] should_fail.cold+0x5/0xa [ 2816.517598] ? prepare_creds+0x25/0x5e0 [ 2816.518443] should_failslab+0x5/0x20 [ 2816.519249] kmem_cache_alloc+0x5b/0x310 [ 2816.520123] ? lock_downgrade+0x6d0/0x6d0 [ 2816.521003] prepare_creds+0x25/0x5e0 [ 2816.521802] copy_creds+0x72/0x580 [ 2816.522557] copy_process+0xfef/0x78b0 [ 2816.523372] ? SOFTIRQ_verbose+0x10/0x10 [ 2816.524238] ? mark_lock+0xf5/0x2df0 [ 2816.525034] ? lock_acquire+0x197/0x470 [ 2816.525871] ? find_held_lock+0x2c/0x110 [ 2816.526735] ? __cleanup_sighand+0xb0/0xb0 [ 2816.527640] ? _copy_from_user+0xfb/0x1b0 [ 2816.528535] kernel_clone+0xe7/0x980 [ 2816.529321] ? lock_acquire+0x197/0x470 [ 2816.530162] ? create_io_thread+0xf0/0xf0 [ 2816.531049] ? ksys_write+0x21a/0x260 [ 2816.531853] ? lock_downgrade+0x6d0/0x6d0 [ 2816.532743] __do_sys_clone3+0x1e5/0x320 [ 2816.533594] ? __do_sys_clone+0x110/0x110 [ 2816.534493] ? rcu_read_lock_any_held+0x75/0xa0 [ 2816.535468] ? vfs_write+0x354/0xb10 [ 2816.536262] ? fput_many+0x2f/0x1a0 [ 2816.537028] ? ksys_write+0x1a9/0x260 [ 2816.537832] ? __ia32_sys_read+0xb0/0xb0 [ 2816.538689] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2816.539811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2816.540899] ? trace_hardirqs_on+0x5b/0x180 [ 2816.541808] do_syscall_64+0x33/0x40 [ 2816.542588] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2816.543662] RIP: 0033:0x7f55c06adb19 [ 2816.544457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2816.548334] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2816.549933] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2816.551432] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2816.552956] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2816.554454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2816.555957] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:23:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x17000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:24:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) 10:24:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 6) 10:24:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x900}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0xb}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 10:24:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500000000000000}, 0x0) 10:24:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x18000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:24:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) [ 2829.524722] FAULT_INJECTION: forcing a failure. [ 2829.524722] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.527363] CPU: 1 PID: 17893 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2829.528979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.530913] Call Trace: [ 2829.531530] dump_stack+0x107/0x167 [ 2829.532389] should_fail.cold+0x5/0xa [ 2829.533286] ? create_object.isra.0+0x3a/0xa30 [ 2829.534352] should_failslab+0x5/0x20 [ 2829.535346] kmem_cache_alloc+0x5b/0x310 [ 2829.536493] create_object.isra.0+0x3a/0xa30 [ 2829.537669] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.538985] kmem_cache_alloc+0x159/0x310 [ 2829.540130] prepare_creds+0x25/0x5e0 [ 2829.541085] copy_creds+0x72/0x580 [ 2829.541992] copy_process+0xfef/0x78b0 [ 2829.542983] ? SOFTIRQ_verbose+0x10/0x10 [ 2829.544112] ? mark_lock+0xf5/0x2df0 [ 2829.545100] ? lock_acquire+0x197/0x470 [ 2829.546154] ? find_held_lock+0x2c/0x110 [ 2829.547231] ? __cleanup_sighand+0xb0/0xb0 [ 2829.548360] ? _copy_from_user+0xfb/0x1b0 [ 2829.549485] kernel_clone+0xe7/0x980 [ 2829.550360] ? lock_acquire+0x197/0x470 [ 2829.551425] ? create_io_thread+0xf0/0xf0 [ 2829.552531] ? ksys_write+0x21a/0x260 [ 2829.553425] ? lock_downgrade+0x6d0/0x6d0 [ 2829.554412] __do_sys_clone3+0x1e5/0x320 [ 2829.555377] ? __do_sys_clone+0x110/0x110 [ 2829.556403] ? rcu_read_lock_any_held+0x75/0xa0 [ 2829.557483] ? vfs_write+0x354/0xb10 [ 2829.558351] ? fput_many+0x2f/0x1a0 [ 2829.559200] ? ksys_write+0x1a9/0x260 [ 2829.560112] ? __ia32_sys_read+0xb0/0xb0 [ 2829.561103] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.562347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.563566] ? trace_hardirqs_on+0x5b/0x180 [ 2829.564581] do_syscall_64+0x33/0x40 [ 2829.565439] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.566618] RIP: 0033:0x7f55c06adb19 [ 2829.567481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.571722] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2829.573501] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2829.575142] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2829.576803] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2829.578446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2829.580089] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2829.621908] FAULT_INJECTION: forcing a failure. [ 2829.621908] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.624523] CPU: 1 PID: 17900 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2829.626101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.627974] Call Trace: [ 2829.628584] dump_stack+0x107/0x167 [ 2829.629411] should_fail.cold+0x5/0xa [ 2829.630283] ? io_uring_setup+0x40b/0x2980 [ 2829.631240] should_failslab+0x5/0x20 [ 2829.632152] kmem_cache_alloc_trace+0x55/0x320 [ 2829.633413] io_uring_setup+0x40b/0x2980 [ 2829.634442] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2829.635670] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2829.636986] ? wait_for_completion_io+0x270/0x270 [ 2829.638293] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.639631] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.640957] do_syscall_64+0x33/0x40 [ 2829.641945] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.643221] RIP: 0033:0x7fed36701b19 [ 2829.644156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.648710] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2829.650544] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2829.652143] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2829.653876] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2829.655477] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2829.657090] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:24:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) 10:24:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:24:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 10:24:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xec0}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 2829.758669] FAULT_INJECTION: forcing a failure. [ 2829.758669] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.760377] CPU: 0 PID: 17913 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2829.761299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.762406] Call Trace: [ 2829.762764] dump_stack+0x107/0x167 [ 2829.763255] should_fail.cold+0x5/0xa [ 2829.763764] ? security_prepare_creds+0x112/0x190 [ 2829.764417] should_failslab+0x5/0x20 [ 2829.764920] __kmalloc+0x72/0x390 [ 2829.765391] security_prepare_creds+0x112/0x190 [ 2829.766018] prepare_creds+0x452/0x5e0 [ 2829.766533] copy_creds+0x72/0x580 [ 2829.767007] copy_process+0xfef/0x78b0 [ 2829.767520] ? SOFTIRQ_verbose+0x10/0x10 [ 2829.768076] ? lock_acquire+0x197/0x470 [ 2829.768620] ? find_held_lock+0x2c/0x110 [ 2829.769175] ? __cleanup_sighand+0xb0/0xb0 [ 2829.769754] ? _copy_from_user+0xfb/0x1b0 [ 2829.770309] kernel_clone+0xe7/0x980 [ 2829.770810] ? lock_acquire+0x197/0x470 [ 2829.771335] ? create_io_thread+0xf0/0xf0 [ 2829.771897] ? ksys_write+0x21a/0x260 [ 2829.772412] ? lock_downgrade+0x6d0/0x6d0 [ 2829.772968] __do_sys_clone3+0x1e5/0x320 [ 2829.773504] ? __do_sys_clone+0x110/0x110 [ 2829.774085] ? rcu_read_lock_any_held+0x75/0xa0 [ 2829.774699] ? vfs_write+0x354/0xb10 [ 2829.775208] ? fput_many+0x2f/0x1a0 [ 2829.775688] ? ksys_write+0x1a9/0x260 [ 2829.776197] ? __ia32_sys_read+0xb0/0xb0 [ 2829.776745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.777433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.778121] ? trace_hardirqs_on+0x5b/0x180 [ 2829.778698] do_syscall_64+0x33/0x40 [ 2829.779193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.779861] RIP: 0033:0x7f55c06adb19 [ 2829.780359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.782806] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2829.783795] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2829.784742] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2829.785679] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2829.786612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2829.787539] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:24:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 7) [ 2829.909452] FAULT_INJECTION: forcing a failure. [ 2829.909452] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.912118] CPU: 1 PID: 17920 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2829.913701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.915580] Call Trace: [ 2829.916196] dump_stack+0x107/0x167 [ 2829.917028] should_fail.cold+0x5/0xa [ 2829.917900] ? create_object.isra.0+0x3a/0xa30 [ 2829.918943] should_failslab+0x5/0x20 [ 2829.919813] kmem_cache_alloc+0x5b/0x310 [ 2829.920751] create_object.isra.0+0x3a/0xa30 [ 2829.921745] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.922894] kmem_cache_alloc_trace+0x151/0x320 [ 2829.923955] io_uring_setup+0x40b/0x2980 [ 2829.924880] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2829.925978] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2829.927124] ? wait_for_completion_io+0x270/0x270 [ 2829.928251] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.929435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.930604] do_syscall_64+0x33/0x40 [ 2829.931448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.932612] RIP: 0033:0x7fed36701b19 [ 2829.933450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.937596] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2829.939457] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2829.941362] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2829.943315] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2829.945071] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2829.946684] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:24:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x19000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:24:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xf00}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 8) 10:24:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 10:24:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x600000000000000}, 0x0) 10:24:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x10}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:19 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) 10:24:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) [ 2846.106911] FAULT_INJECTION: forcing a failure. [ 2846.106911] name failslab, interval 1, probability 0, space 0, times 0 [ 2846.109506] CPU: 1 PID: 17939 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2846.111069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2846.112938] Call Trace: [ 2846.113536] dump_stack+0x107/0x167 [ 2846.113710] netlink: 'syz-executor.6': attribute type 16 has an invalid length. [ 2846.114358] should_fail.cold+0x5/0xa [ 2846.114382] ? create_object.isra.0+0x3a/0xa30 [ 2846.114402] should_failslab+0x5/0x20 [ 2846.114422] kmem_cache_alloc+0x5b/0x310 [ 2846.114450] create_object.isra.0+0x3a/0xa30 [ 2846.114481] kmemleak_alloc_percpu+0xa0/0x100 [ 2846.117480] FAULT_INJECTION: forcing a failure. [ 2846.117480] name failslab, interval 1, probability 0, space 0, times 0 [ 2846.118265] pcpu_alloc+0x4e2/0x1240 [ 2846.118304] ? io_tctx_exit_cb+0xf0/0xf0 [ 2846.118325] percpu_ref_init+0x31/0x3d0 [ 2846.118352] io_uring_setup+0x47a/0x2980 [ 2846.128185] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2846.129288] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2846.130435] ? wait_for_completion_io+0x270/0x270 [ 2846.131560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2846.132770] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2846.133943] do_syscall_64+0x33/0x40 [ 2846.134793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2846.135968] RIP: 0033:0x7fed36701b19 [ 2846.136822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2846.141022] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2846.142747] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2846.144373] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2846.146003] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2846.147625] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2846.149255] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 2846.151242] CPU: 0 PID: 17943 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2846.153074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2846.155234] Call Trace: [ 2846.155935] dump_stack+0x107/0x167 [ 2846.156903] should_fail.cold+0x5/0xa [ 2846.157902] ? create_object.isra.0+0x3a/0xa30 [ 2846.159093] should_failslab+0x5/0x20 [ 2846.160158] kmem_cache_alloc+0x5b/0x310 [ 2846.161403] create_object.isra.0+0x3a/0xa30 [ 2846.162546] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2846.163894] __kmalloc+0x16e/0x390 [ 2846.164857] security_prepare_creds+0x112/0x190 [ 2846.166085] prepare_creds+0x452/0x5e0 [ 2846.167108] copy_creds+0x72/0x580 [ 2846.168060] copy_process+0xfef/0x78b0 [ 2846.169081] ? SOFTIRQ_verbose+0x10/0x10 [ 2846.170151] ? __lockdep_reset_lock+0x180/0x180 [ 2846.171388] ? lock_acquire+0x197/0x470 [ 2846.172437] ? find_held_lock+0x2c/0x110 [ 2846.173529] ? __cleanup_sighand+0xb0/0xb0 [ 2846.174676] ? _copy_from_user+0xfb/0x1b0 [ 2846.175772] kernel_clone+0xe7/0x980 [ 2846.176741] ? __lockdep_reset_lock+0x180/0x180 [ 2846.177943] ? create_io_thread+0xf0/0xf0 [ 2846.179050] ? ksys_write+0x21a/0x260 [ 2846.180037] ? lock_downgrade+0x6d0/0x6d0 [ 2846.181124] __do_sys_clone3+0x1e5/0x320 [ 2846.182172] ? __do_sys_clone+0x110/0x110 [ 2846.183287] ? rcu_read_lock_any_held+0x75/0xa0 [ 2846.184503] ? vfs_write+0x354/0xb10 [ 2846.185478] ? fput_many+0x2f/0x1a0 [ 2846.186427] ? ksys_write+0x1a9/0x260 [ 2846.187419] ? __ia32_sys_read+0xb0/0xb0 [ 2846.188492] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2846.189836] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2846.191166] ? trace_hardirqs_on+0x5b/0x180 [ 2846.192302] do_syscall_64+0x33/0x40 [ 2846.193265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2846.194600] RIP: 0033:0x7f55c06adb19 [ 2846.195558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2846.200224] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2846.202175] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2846.203994] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2846.205826] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2846.207632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2846.209444] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:24:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 10:24:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x11}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:24:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 9) 10:24:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1a000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:24:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0x3d01}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:19 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9) 10:24:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x700000000000000}, 0x0) 10:24:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 2846.537760] FAULT_INJECTION: forcing a failure. [ 2846.537760] name failslab, interval 1, probability 0, space 0, times 0 [ 2846.540407] CPU: 1 PID: 17963 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2846.542065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2846.544126] Call Trace: [ 2846.544739] dump_stack+0x107/0x167 [ 2846.545606] should_fail.cold+0x5/0xa [ 2846.546600] ? create_object.isra.0+0x3a/0xa30 [ 2846.547750] should_failslab+0x5/0x20 [ 2846.548825] kmem_cache_alloc+0x5b/0x310 [ 2846.549752] create_object.isra.0+0x3a/0xa30 [ 2846.550791] kmemleak_alloc_percpu+0xa0/0x100 [ 2846.551951] pcpu_alloc+0x4e2/0x1240 [ 2846.553056] ? io_tctx_exit_cb+0xf0/0xf0 [ 2846.554026] percpu_ref_init+0x31/0x3d0 [ 2846.554937] io_uring_setup+0x47a/0x2980 [ 2846.556027] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2846.557134] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2846.558563] ? wait_for_completion_io+0x270/0x270 [ 2846.559713] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2846.560906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2846.562163] do_syscall_64+0x33/0x40 [ 2846.563154] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2846.564425] RIP: 0033:0x7fed36701b19 [ 2846.565263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2846.569703] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2846.571415] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2846.573036] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2846.574648] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2846.576264] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2846.577875] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 2846.590992] FAULT_INJECTION: forcing a failure. [ 2846.590992] name failslab, interval 1, probability 0, space 0, times 0 [ 2846.593996] CPU: 1 PID: 17964 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2846.595568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2846.597448] Call Trace: [ 2846.598045] dump_stack+0x107/0x167 [ 2846.598869] should_fail.cold+0x5/0xa [ 2846.599733] ? __delayacct_tsk_init+0x1b/0x80 [ 2846.600754] should_failslab+0x5/0x20 [ 2846.601615] kmem_cache_alloc+0x5b/0x310 [ 2846.602530] ? prepare_creds+0x466/0x5e0 [ 2846.603454] __delayacct_tsk_init+0x1b/0x80 [ 2846.604434] copy_process+0x3399/0x78b0 [ 2846.605331] ? SOFTIRQ_verbose+0x10/0x10 [ 2846.606252] ? mark_lock+0xf5/0x2df0 [ 2846.607103] ? lock_acquire+0x197/0x470 [ 2846.608003] ? find_held_lock+0x2c/0x110 [ 2846.608941] ? __cleanup_sighand+0xb0/0xb0 [ 2846.609918] ? _copy_from_user+0xfb/0x1b0 [ 2846.610866] kernel_clone+0xe7/0x980 [ 2846.611710] ? lock_acquire+0x197/0x470 [ 2846.612618] ? create_io_thread+0xf0/0xf0 [ 2846.613571] ? ksys_write+0x21a/0x260 [ 2846.614437] ? lock_downgrade+0x6d0/0x6d0 [ 2846.615381] __do_sys_clone3+0x1e5/0x320 [ 2846.616310] ? __do_sys_clone+0x110/0x110 [ 2846.617269] ? rcu_read_lock_any_held+0x75/0xa0 [ 2846.618328] ? vfs_write+0x354/0xb10 [ 2846.619172] ? fput_many+0x2f/0x1a0 [ 2846.620000] ? ksys_write+0x1a9/0x260 [ 2846.620873] ? __ia32_sys_read+0xb0/0xb0 [ 2846.621797] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2846.622986] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2846.624153] ? trace_hardirqs_on+0x5b/0x180 [ 2846.625144] do_syscall_64+0x33/0x40 [ 2846.625985] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2846.627145] RIP: 0033:0x7f55c06adb19 [ 2846.627986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2846.632183] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2846.633919] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2846.635534] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2846.637167] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2846.638782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2846.640405] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2858.403131] Bluetooth: hci7: command 0x0406 tx timeout 10:24:35 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10) 10:24:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x69}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 10) 10:24:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1b000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:24:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:24:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xc00e}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 10:24:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x900000000000000}, 0x0) [ 2861.861504] FAULT_INJECTION: forcing a failure. [ 2861.861504] name failslab, interval 1, probability 0, space 0, times 0 [ 2861.862835] CPU: 1 PID: 17992 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2861.862902] FAULT_INJECTION: forcing a failure. [ 2861.862902] name failslab, interval 1, probability 0, space 0, times 0 [ 2861.863624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2861.863629] Call Trace: [ 2861.863646] dump_stack+0x107/0x167 [ 2861.863658] should_fail.cold+0x5/0xa [ 2861.863683] ? percpu_ref_init+0xd8/0x3d0 [ 2861.869258] should_failslab+0x5/0x20 [ 2861.869695] kmem_cache_alloc_trace+0x55/0x320 [ 2861.870236] ? io_tctx_exit_cb+0xf0/0xf0 [ 2861.870698] percpu_ref_init+0xd8/0x3d0 [ 2861.871162] io_uring_setup+0x47a/0x2980 [ 2861.871711] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2861.872403] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2861.873111] ? wait_for_completion_io+0x270/0x270 [ 2861.873786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2861.874510] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2861.875127] do_syscall_64+0x33/0x40 [ 2861.875562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2861.876152] RIP: 0033:0x7fed36701b19 [ 2861.876587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2861.878694] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2861.879576] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2861.880403] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2861.881216] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2861.882030] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2861.882845] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 2861.883684] CPU: 0 PID: 17997 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2861.885269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2861.887152] Call Trace: [ 2861.887758] dump_stack+0x107/0x167 [ 2861.888600] should_fail.cold+0x5/0xa [ 2861.889517] ? create_object.isra.0+0x3a/0xa30 [ 2861.890555] should_failslab+0x5/0x20 [ 2861.891417] kmem_cache_alloc+0x5b/0x310 [ 2861.892369] create_object.isra.0+0x3a/0xa30 [ 2861.893368] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2861.894527] kmem_cache_alloc+0x159/0x310 [ 2861.895469] ? prepare_creds+0x466/0x5e0 [ 2861.896419] __delayacct_tsk_init+0x1b/0x80 [ 2861.897401] copy_process+0x3399/0x78b0 [ 2861.898297] ? SOFTIRQ_verbose+0x10/0x10 [ 2861.899248] ? lock_acquire+0x197/0x470 [ 2861.900148] ? find_held_lock+0x2c/0x110 [ 2861.901106] ? __cleanup_sighand+0xb0/0xb0 [ 2861.902097] ? _copy_from_user+0xfb/0x1b0 [ 2861.903058] kernel_clone+0xe7/0x980 [ 2861.903903] ? lock_acquire+0x197/0x470 [ 2861.904823] ? create_io_thread+0xf0/0xf0 [ 2861.905798] ? ksys_write+0x21a/0x260 [ 2861.906660] ? lock_downgrade+0x6d0/0x6d0 [ 2861.907606] __do_sys_clone3+0x1e5/0x320 [ 2861.908543] ? __do_sys_clone+0x110/0x110 [ 2861.909523] ? rcu_read_lock_any_held+0x75/0xa0 [ 2861.910571] ? vfs_write+0x354/0xb10 [ 2861.911423] ? fput_many+0x2f/0x1a0 [ 2861.912247] ? ksys_write+0x1a9/0x260 [ 2861.913126] ? __ia32_sys_read+0xb0/0xb0 [ 2861.914057] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2861.915242] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2861.916422] ? trace_hardirqs_on+0x5b/0x180 [ 2861.917405] do_syscall_64+0x33/0x40 [ 2861.918248] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2861.919405] RIP: 0033:0x7f55c06adb19 [ 2861.920245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2861.924395] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2861.926113] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2861.927727] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2861.929346] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2861.930953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2861.932576] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:24:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 10:24:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1c000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:24:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:24:35 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11) 10:24:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 11) 10:24:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x117}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xf000}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3e0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) [ 2862.145401] FAULT_INJECTION: forcing a failure. [ 2862.145401] name failslab, interval 1, probability 0, space 0, times 0 [ 2862.147068] CPU: 1 PID: 18018 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2862.148069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2862.149034] Call Trace: [ 2862.149341] dump_stack+0x107/0x167 [ 2862.149769] should_fail.cold+0x5/0xa [ 2862.150215] ? dup_fd+0x89/0xe40 [ 2862.150607] should_failslab+0x5/0x20 [ 2862.151050] kmem_cache_alloc+0x5b/0x310 [ 2862.151516] dup_fd+0x89/0xe40 [ 2862.151895] ? audit_filter_inodes+0x40/0x40 [ 2862.152411] ? security_task_alloc+0xe6/0x260 [ 2862.152941] copy_process+0x197c/0x78b0 [ 2862.153396] ? SOFTIRQ_verbose+0x10/0x10 [ 2862.153870] ? __lockdep_reset_lock+0x180/0x180 [ 2862.154397] ? mark_lock+0xf5/0x2df0 [ 2862.154843] ? __cleanup_sighand+0xb0/0xb0 [ 2862.155340] ? _copy_from_user+0xfb/0x1b0 [ 2862.155819] kernel_clone+0xe7/0x980 [ 2862.156252] ? __lockdep_reset_lock+0x180/0x180 [ 2862.156791] ? create_io_thread+0xf0/0xf0 [ 2862.157282] ? ksys_write+0x21a/0x260 [ 2862.157721] ? lock_downgrade+0x6d0/0x6d0 [ 2862.158208] __do_sys_clone3+0x1e5/0x320 [ 2862.158670] ? __do_sys_clone+0x110/0x110 [ 2862.159162] ? rcu_read_lock_any_held+0x75/0xa0 [ 2862.159696] ? vfs_write+0x354/0xb10 [ 2862.160128] ? fput_many+0x2f/0x1a0 [ 2862.160551] ? ksys_write+0x1a9/0x260 [ 2862.160994] ? __ia32_sys_read+0xb0/0xb0 [ 2862.161457] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2862.162059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2862.162779] ? trace_hardirqs_on+0x5b/0x180 [ 2862.163382] do_syscall_64+0x33/0x40 [ 2862.163987] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2862.164583] RIP: 0033:0x7f55c06adb19 [ 2862.165080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2862.167550] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2862.168571] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2862.169645] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2862.170499] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2862.171499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2862.172571] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2862.195735] FAULT_INJECTION: forcing a failure. [ 2862.195735] name failslab, interval 1, probability 0, space 0, times 0 [ 2862.197141] CPU: 1 PID: 18020 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2862.198056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2862.199247] Call Trace: [ 2862.199614] dump_stack+0x107/0x167 [ 2862.200035] should_fail.cold+0x5/0xa [ 2862.200594] ? create_object.isra.0+0x3a/0xa30 [ 2862.201259] should_failslab+0x5/0x20 [ 2862.201828] kmem_cache_alloc+0x5b/0x310 [ 2862.202477] create_object.isra.0+0x3a/0xa30 [ 2862.202986] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2862.203670] kmem_cache_alloc_trace+0x151/0x320 [ 2862.204310] ? io_tctx_exit_cb+0xf0/0xf0 [ 2862.204920] percpu_ref_init+0xd8/0x3d0 [ 2862.205462] io_uring_setup+0x47a/0x2980 [ 2862.206008] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2862.206674] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2862.207449] ? wait_for_completion_io+0x270/0x270 [ 2862.208102] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2862.208713] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2862.209451] do_syscall_64+0x33/0x40 [ 2862.209906] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2862.210664] RIP: 0033:0x7fed36701b19 [ 2862.211201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2862.213588] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2862.214705] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2862.215601] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2862.216544] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2862.217510] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2862.218485] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:24:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) 10:24:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, 0x0, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 12) 10:24:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x67, 0x0, 0xffff}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf00000000000000}, 0x0) 10:24:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1d000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:24:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12) 10:24:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x129}, @val={0xc}}}}, 0x28}}, 0x0) [ 2875.188726] FAULT_INJECTION: forcing a failure. [ 2875.188726] name failslab, interval 1, probability 0, space 0, times 0 [ 2875.191622] CPU: 1 PID: 18039 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2875.193435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2875.195550] Call Trace: [ 2875.196159] dump_stack+0x107/0x167 [ 2875.197008] should_fail.cold+0x5/0xa [ 2875.197867] ? create_object.isra.0+0x3a/0xa30 [ 2875.198891] should_failslab+0x5/0x20 [ 2875.199746] kmem_cache_alloc+0x5b/0x310 [ 2875.200671] create_object.isra.0+0x3a/0xa30 [ 2875.201652] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2875.202791] kmem_cache_alloc+0x159/0x310 [ 2875.203733] dup_fd+0x89/0xe40 [ 2875.204460] ? audit_filter_inodes+0x40/0x40 [ 2875.205444] ? security_task_alloc+0xe6/0x260 [ 2875.206459] copy_process+0x197c/0x78b0 [ 2875.207376] ? SOFTIRQ_verbose+0x10/0x10 [ 2875.208287] ? mark_lock+0xf5/0x2df0 [ 2875.209181] ? __cleanup_sighand+0xb0/0xb0 [ 2875.210182] ? _copy_from_user+0xfb/0x1b0 [ 2875.211152] kernel_clone+0xe7/0x980 [ 2875.212016] ? lock_acquire+0x197/0x470 [ 2875.212947] ? create_io_thread+0xf0/0xf0 [ 2875.213924] ? ksys_write+0x21a/0x260 [ 2875.214808] ? lock_downgrade+0x6d0/0x6d0 [ 2875.215775] __do_sys_clone3+0x1e5/0x320 [ 2875.216727] ? __do_sys_clone+0x110/0x110 [ 2875.217711] ? rcu_read_lock_any_held+0x75/0xa0 [ 2875.218784] ? vfs_write+0x354/0xb10 [ 2875.219646] ? fput_many+0x2f/0x1a0 [ 2875.220501] ? ksys_write+0x1a9/0x260 [ 2875.221386] ? __ia32_sys_read+0xb0/0xb0 [ 2875.222336] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2875.223552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2875.224751] ? trace_hardirqs_on+0x5b/0x180 [ 2875.225755] do_syscall_64+0x33/0x40 [ 2875.226621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2875.227810] RIP: 0033:0x7f55c06adb19 [ 2875.228678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2875.232950] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2875.234719] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2875.236371] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2875.238031] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2875.239686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2875.241351] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2875.268657] FAULT_INJECTION: forcing a failure. [ 2875.268657] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2875.271378] CPU: 1 PID: 18049 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2875.272991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2875.274918] Call Trace: [ 2875.275535] dump_stack+0x107/0x167 [ 2875.276384] should_fail.cold+0x5/0xa [ 2875.277286] __alloc_pages_nodemask+0x182/0x600 [ 2875.278373] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2875.279775] ? cap_capable+0x1cd/0x230 [ 2875.280700] alloc_pages_current+0x187/0x280 [ 2875.281724] __get_free_pages+0xc/0xa0 [ 2875.282627] io_uring_setup+0xe27/0x2980 [ 2875.283578] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2875.284758] ? wait_for_completion_io+0x270/0x270 [ 2875.285906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2875.287122] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2875.288320] do_syscall_64+0x33/0x40 [ 2875.289192] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2875.290381] RIP: 0033:0x7fed36701b19 [ 2875.291243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2875.295519] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2875.297290] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2875.298946] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2875.300611] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2875.302505] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2875.304433] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:24:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13) 10:24:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, 0x0, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3001}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x3}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1e000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:24:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x9effffff00000000}, 0x0) 10:24:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000080)) 10:24:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, 0x0, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:24:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 13) [ 2875.530144] FAULT_INJECTION: forcing a failure. [ 2875.530144] name failslab, interval 1, probability 0, space 0, times 0 [ 2875.531587] CPU: 0 PID: 18068 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2875.532381] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2875.533424] Call Trace: [ 2875.533762] dump_stack+0x107/0x167 [ 2875.534223] should_fail.cold+0x5/0xa [ 2875.534705] ? alloc_fdtable+0x9e/0x2c0 [ 2875.535208] should_failslab+0x5/0x20 [ 2875.535690] kmem_cache_alloc_trace+0x55/0x320 [ 2875.536266] ? rwlock_bug.part.0+0x90/0x90 [ 2875.536813] alloc_fdtable+0x9e/0x2c0 [ 2875.537296] dup_fd+0x92d/0xe40 [ 2875.537732] copy_process+0x197c/0x78b0 [ 2875.538239] ? SOFTIRQ_verbose+0x10/0x10 [ 2875.538787] ? __cleanup_sighand+0xb0/0xb0 [ 2875.539343] ? _copy_from_user+0xfb/0x1b0 [ 2875.539874] kernel_clone+0xe7/0x980 [ 2875.540349] ? lock_acquire+0x197/0x470 [ 2875.540863] ? create_io_thread+0xf0/0xf0 [ 2875.541403] ? ksys_write+0x21a/0x260 [ 2875.541886] ? lock_downgrade+0x6d0/0x6d0 [ 2875.542411] __do_sys_clone3+0x1e5/0x320 [ 2875.542926] ? __do_sys_clone+0x110/0x110 [ 2875.543474] ? rcu_read_lock_any_held+0x75/0xa0 [ 2875.544061] ? vfs_write+0x354/0xb10 [ 2875.544541] ? fput_many+0x2f/0x1a0 [ 2875.545002] ? ksys_write+0x1a9/0x260 [ 2875.545483] ? __ia32_sys_read+0xb0/0xb0 [ 2875.546006] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2875.546668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2875.547319] ? trace_hardirqs_on+0x5b/0x180 [ 2875.547867] do_syscall_64+0x33/0x40 [ 2875.548337] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2875.548996] RIP: 0033:0x7f55c06adb19 [ 2875.549467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2875.551778] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2875.552745] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2875.553646] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2875.554542] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2875.555438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2875.556334] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:24:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0x3}}}}, 0x28}}, 0x0) [ 2875.593844] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2875.636548] FAULT_INJECTION: forcing a failure. [ 2875.636548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2875.639399] CPU: 1 PID: 18077 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2875.641017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2875.642946] Call Trace: [ 2875.643562] dump_stack+0x107/0x167 [ 2875.644420] should_fail.cold+0x5/0xa [ 2875.645312] __alloc_pages_nodemask+0x182/0x600 [ 2875.646404] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2875.648057] ? cap_capable+0x1cd/0x230 [ 2875.648981] alloc_pages_current+0x187/0x280 [ 2875.650004] __get_free_pages+0xc/0xa0 [ 2875.650905] io_uring_setup+0xf9a/0x2980 [ 2875.651857] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2875.653039] ? wait_for_completion_io+0x270/0x270 [ 2875.654183] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2875.655397] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2875.656603] do_syscall_64+0x33/0x40 [ 2875.657466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2875.658655] RIP: 0033:0x7fed36701b19 [ 2875.659514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2875.663787] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2875.665554] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2875.667200] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2875.668853] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2875.670497] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2875.672146] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 2875.693647] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 10:24:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 14) 10:24:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x1f000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 2875.858589] FAULT_INJECTION: forcing a failure. [ 2875.858589] name failslab, interval 1, probability 0, space 0, times 0 [ 2875.861701] CPU: 1 PID: 18092 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2875.863307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2875.865409] Call Trace: [ 2875.866203] dump_stack+0x107/0x167 [ 2875.867111] should_fail.cold+0x5/0xa [ 2875.868168] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2875.869471] should_failslab+0x5/0x20 [ 2875.870351] kmem_cache_alloc_trace+0x55/0x320 [ 2875.871413] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2875.872672] io_uring_setup+0x14f6/0x2980 [ 2875.873638] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2875.874807] ? wait_for_completion_io+0x270/0x270 [ 2875.875946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2875.877165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2875.878358] do_syscall_64+0x33/0x40 [ 2875.879216] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2875.880401] RIP: 0033:0x7fed36701b19 [ 2875.881313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2875.885570] RSP: 002b:00007fed33c56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2875.887326] RAX: ffffffffffffffda RBX: 00007fed36815020 RCX: 00007fed36701b19 [ 2875.888979] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2875.890622] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2875.892263] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2875.893915] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 2887.074137] Bluetooth: hci0: command 0x0406 tx timeout 10:25:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14) 10:25:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x20000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:25:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xa700000000000000}, 0x0) 10:25:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 15) 10:25:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0x28}}}}, 0x28}}, 0x0) 10:25:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x0, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:25:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000080)) 10:25:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x14}, @val={0xc}}}}, 0x28}}, 0x0) [ 2890.226336] FAULT_INJECTION: forcing a failure. [ 2890.226336] name failslab, interval 1, probability 0, space 0, times 0 [ 2890.228157] CPU: 0 PID: 18109 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2890.229223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2890.230454] Call Trace: [ 2890.230866] dump_stack+0x107/0x167 [ 2890.231428] should_fail.cold+0x5/0xa [ 2890.232022] ? create_object.isra.0+0x3a/0xa30 [ 2890.232723] should_failslab+0x5/0x20 [ 2890.233282] kmem_cache_alloc+0x5b/0x310 [ 2890.234016] create_object.isra.0+0x3a/0xa30 [ 2890.234707] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2890.235512] kmem_cache_alloc_trace+0x151/0x320 [ 2890.236243] ? rwlock_bug.part.0+0x90/0x90 [ 2890.236913] alloc_fdtable+0x9e/0x2c0 [ 2890.237493] dup_fd+0x92d/0xe40 [ 2890.238032] copy_process+0x197c/0x78b0 [ 2890.238616] ? SOFTIRQ_verbose+0x10/0x10 [ 2890.239262] ? __cleanup_sighand+0xb0/0xb0 [ 2890.239906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2890.240711] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2890.241526] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2890.242348] ? kernel_clone+0x2ca/0x980 [ 2890.242951] kernel_clone+0xe7/0x980 [ 2890.243518] ? lock_acquire+0x197/0x470 [ 2890.244106] ? create_io_thread+0xf0/0xf0 [ 2890.244749] ? ksys_write+0x21a/0x260 [ 2890.245310] ? lock_downgrade+0x6d0/0x6d0 [ 2890.245936] __do_sys_clone3+0x1e5/0x320 [ 2890.246548] ? __do_sys_clone+0x110/0x110 [ 2890.247190] ? rcu_read_lock_any_held+0x75/0xa0 [ 2890.247881] ? vfs_write+0x354/0xb10 [ 2890.248434] ? fput_many+0x2f/0x1a0 [ 2890.248983] ? ksys_write+0x1a9/0x260 [ 2890.249549] ? __ia32_sys_read+0xb0/0xb0 [ 2890.250157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2890.250931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2890.251691] ? trace_hardirqs_on+0x5b/0x180 [ 2890.252342] do_syscall_64+0x33/0x40 [ 2890.252897] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2890.253646] RIP: 0033:0x7f55c06adb19 [ 2890.254190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2890.256899] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2890.258025] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2890.259075] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2890.260127] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2890.261180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2890.262234] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2890.288483] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2890.291270] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2890.349839] FAULT_INJECTION: forcing a failure. [ 2890.349839] name failslab, interval 1, probability 0, space 0, times 0 [ 2890.352311] CPU: 0 PID: 18116 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2890.353424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2890.354670] Call Trace: [ 2890.355152] dump_stack+0x107/0x167 [ 2890.355834] should_fail.cold+0x5/0xa [ 2890.356522] ? create_object.isra.0+0x3a/0xa30 [ 2890.357303] should_failslab+0x5/0x20 [ 2890.357933] kmem_cache_alloc+0x5b/0x310 [ 2890.358597] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2890.359665] create_object.isra.0+0x3a/0xa30 [ 2890.360372] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2890.361297] kmem_cache_alloc_trace+0x151/0x320 [ 2890.362196] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2890.363113] io_uring_setup+0x14f6/0x2980 [ 2890.363947] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2890.364754] ? wait_for_completion_io+0x270/0x270 [ 2890.365913] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2890.366763] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2890.367693] do_syscall_64+0x33/0x40 [ 2890.368323] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2890.369141] RIP: 0033:0x7fed36701b19 [ 2890.369756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2890.372396] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2890.373606] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2890.374693] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2890.375774] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2890.376861] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2890.377933] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 2895.010163] Bluetooth: hci0: command 0x0409 tx timeout [ 2897.058228] Bluetooth: hci0: command 0x041b tx timeout [ 2899.107204] Bluetooth: hci0: command 0x040f tx timeout [ 2900.199589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2900.201630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2900.204939] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2900.249894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2900.251570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2900.254030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2901.154138] Bluetooth: hci0: command 0x0419 tx timeout 10:25:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x21000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:25:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x0, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:25:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 16) 10:25:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000080)) 10:25:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf0ffffff00000000}, 0x0) 10:25:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0x67}}}}, 0x28}}, 0x0) 10:25:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x67}, @val={0xc}}}}, 0x28}}, 0x0) 10:25:28 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15) [ 2915.308515] FAULT_INJECTION: forcing a failure. [ 2915.308515] name failslab, interval 1, probability 0, space 0, times 0 [ 2915.311207] CPU: 1 PID: 18592 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2915.312745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2915.314464] Call Trace: [ 2915.315019] dump_stack+0x107/0x167 [ 2915.315774] should_fail.cold+0x5/0xa [ 2915.316559] ? create_object.isra.0+0x3a/0xa30 [ 2915.317518] should_failslab+0x5/0x20 [ 2915.318315] kmem_cache_alloc+0x5b/0x310 [ 2915.319171] create_object.isra.0+0x3a/0xa30 [ 2915.320088] kmemleak_alloc_percpu+0xa0/0x100 [ 2915.321028] pcpu_alloc+0x4e2/0x1240 [ 2915.321880] ? io_async_queue_proc+0x80/0x80 [ 2915.322807] percpu_ref_init+0x31/0x3d0 [ 2915.323642] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2915.324791] io_uring_setup+0x14f6/0x2980 [ 2915.325678] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2915.326732] ? wait_for_completion_io+0x270/0x270 [ 2915.327770] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2915.328879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2915.329977] do_syscall_64+0x33/0x40 [ 2915.330761] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2915.331841] RIP: 0033:0x7fed36701b19 [ 2915.332637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2915.336528] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2915.338148] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2915.339658] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2915.341174] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2915.342673] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2915.344201] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 2915.350510] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2915.393576] FAULT_INJECTION: forcing a failure. [ 2915.393576] name failslab, interval 1, probability 0, space 0, times 0 [ 2915.395905] CPU: 1 PID: 18599 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2915.397373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2915.399099] Call Trace: [ 2915.399660] dump_stack+0x107/0x167 [ 2915.400427] should_fail.cold+0x5/0xa [ 2915.401389] ? kvmalloc_node+0x119/0x170 [ 2915.402494] should_failslab+0x5/0x20 [ 2915.403399] __kmalloc_node+0x76/0x420 [ 2915.404360] kvmalloc_node+0x119/0x170 [ 2915.405198] alloc_fdtable+0xed/0x2c0 [ 2915.406171] dup_fd+0x92d/0xe40 [ 2915.407002] copy_process+0x197c/0x78b0 [ 2915.408054] ? SOFTIRQ_verbose+0x10/0x10 [ 2915.409071] ? __lockdep_reset_lock+0x180/0x180 [ 2915.410182] ? mark_lock+0xf5/0x2df0 [ 2915.411191] ? __cleanup_sighand+0xb0/0xb0 [ 2915.412209] ? _copy_from_user+0xfb/0x1b0 [ 2915.413099] kernel_clone+0xe7/0x980 [ 2915.413896] ? __lockdep_reset_lock+0x180/0x180 [ 2915.414881] ? create_io_thread+0xf0/0xf0 [ 2915.415773] ? ksys_write+0x21a/0x260 [ 2915.416573] ? lock_downgrade+0x6d0/0x6d0 [ 2915.417451] __do_sys_clone3+0x1e5/0x320 [ 2915.418297] ? __do_sys_clone+0x110/0x110 [ 2915.419194] ? rcu_read_lock_any_held+0x75/0xa0 [ 2915.420172] ? vfs_write+0x354/0xb10 [ 2915.420963] ? fput_many+0x2f/0x1a0 [ 2915.421734] ? ksys_write+0x1a9/0x260 [ 2915.422554] ? __ia32_sys_read+0xb0/0xb0 [ 2915.423416] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2915.424517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2915.425599] ? trace_hardirqs_on+0x5b/0x180 [ 2915.426518] do_syscall_64+0x33/0x40 [ 2915.427314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2915.428392] RIP: 0033:0x7f55c06adb19 [ 2915.429190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2915.433044] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2915.434629] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2915.436117] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2915.437618] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2915.439113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2915.440604] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2915.444107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 10:25:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x69}, @val={0xc}}}}, 0x28}}, 0x0) 10:25:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) 10:25:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x22000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:25:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x0, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:25:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0x69}}}}, 0x28}}, 0x0) 10:25:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xffffff7f00000000}, 0x0) 10:25:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 17) 10:25:28 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16) [ 2915.687784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2915.722193] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 10:25:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) 10:25:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x2}, @val={0xc}}}}, 0x28}}, 0x0) [ 2915.814845] FAULT_INJECTION: forcing a failure. [ 2915.814845] name failslab, interval 1, probability 0, space 0, times 0 [ 2915.817644] CPU: 1 PID: 18624 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2915.819288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2915.821417] Call Trace: [ 2915.822098] dump_stack+0x107/0x167 [ 2915.823098] should_fail.cold+0x5/0xa [ 2915.823906] ? create_object.isra.0+0x3a/0xa30 [ 2915.825071] should_failslab+0x5/0x20 [ 2915.826038] kmem_cache_alloc+0x5b/0x310 [ 2915.827087] create_object.isra.0+0x3a/0xa30 [ 2915.828041] kmemleak_alloc_percpu+0xa0/0x100 [ 2915.829290] pcpu_alloc+0x4e2/0x1240 [ 2915.830293] ? io_async_queue_proc+0x80/0x80 [ 2915.831222] percpu_ref_init+0x31/0x3d0 [ 2915.832339] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2915.833809] io_uring_setup+0x14f6/0x2980 [ 2915.835065] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2915.836638] ? wait_for_completion_io+0x270/0x270 [ 2915.838044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2915.839769] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2915.841163] do_syscall_64+0x33/0x40 [ 2915.842305] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2915.843756] RIP: 0033:0x7fed36701b19 [ 2915.844905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2915.850167] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2915.852356] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2915.854297] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2915.856361] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2915.858380] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2915.860371] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:25:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x25000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 2915.920990] FAULT_INJECTION: forcing a failure. [ 2915.920990] name failslab, interval 1, probability 0, space 0, times 0 [ 2915.923710] CPU: 0 PID: 18631 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2915.925433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2915.927347] Call Trace: [ 2915.927979] dump_stack+0x107/0x167 [ 2915.928872] should_fail.cold+0x5/0xa [ 2915.929755] ? create_object.isra.0+0x3a/0xa30 [ 2915.930803] should_failslab+0x5/0x20 [ 2915.931670] kmem_cache_alloc+0x5b/0x310 [ 2915.932629] create_object.isra.0+0x3a/0xa30 [ 2915.933648] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2915.934824] __kmalloc_node+0x1ae/0x420 [ 2915.935746] kvmalloc_node+0x119/0x170 [ 2915.936643] alloc_fdtable+0xed/0x2c0 [ 2915.937541] dup_fd+0x92d/0xe40 [ 2915.938331] copy_process+0x197c/0x78b0 [ 2915.939239] ? SOFTIRQ_verbose+0x10/0x10 [ 2915.940229] ? __cleanup_sighand+0xb0/0xb0 [ 2915.941236] ? _copy_from_user+0xfb/0x1b0 [ 2915.942226] kernel_clone+0xe7/0x980 [ 2915.943079] ? lock_acquire+0x197/0x470 [ 2915.944001] ? create_io_thread+0xf0/0xf0 [ 2915.944967] ? ksys_write+0x21a/0x260 [ 2915.945840] ? lock_downgrade+0x6d0/0x6d0 [ 2915.946803] __do_sys_clone3+0x1e5/0x320 [ 2915.947730] ? __do_sys_clone+0x110/0x110 [ 2915.948751] ? rcu_read_lock_any_held+0x75/0xa0 [ 2915.949815] ? vfs_write+0x354/0xb10 [ 2915.950679] ? fput_many+0x2f/0x1a0 [ 2915.951519] ? ksys_write+0x1a9/0x260 [ 2915.952387] ? __ia32_sys_read+0xb0/0xb0 [ 2915.953347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2915.954552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2915.955731] ? trace_hardirqs_on+0x5b/0x180 [ 2915.956764] do_syscall_64+0x33/0x40 [ 2915.957607] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2915.958784] RIP: 0033:0x7f55c06adb19 [ 2915.959640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2915.963877] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2915.965658] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2915.967521] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2915.969143] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2915.970803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2915.972492] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:25:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xfffffffffffff000}, 0x0) 10:25:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x117}}}}, 0x28}}, 0x0) 10:25:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x26000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:25:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) 10:25:41 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 18) 10:25:41 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 17) 10:25:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x5}, @val={0xc}}}}, 0x28}}, 0x0) 10:25:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x10}, @val={0xc}}}}, 0x28}}, 0x0) [ 2928.588859] FAULT_INJECTION: forcing a failure. [ 2928.588859] name failslab, interval 1, probability 0, space 0, times 0 [ 2928.591505] CPU: 1 PID: 18656 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2928.593504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2928.595814] Call Trace: [ 2928.596477] dump_stack+0x107/0x167 [ 2928.597257] should_fail.cold+0x5/0xa [ 2928.598089] ? kvmalloc_node+0x119/0x170 [ 2928.598958] should_failslab+0x5/0x20 [ 2928.599855] __kmalloc_node+0x76/0x420 [ 2928.600862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2928.602227] kvmalloc_node+0x119/0x170 [ 2928.603063] alloc_fdtable+0x159/0x2c0 [ 2928.603895] dup_fd+0x92d/0xe40 [ 2928.604622] copy_process+0x197c/0x78b0 [ 2928.605505] ? SOFTIRQ_verbose+0x10/0x10 [ 2928.606384] ? mark_lock+0xf5/0x2df0 [ 2928.607190] ? __cleanup_sighand+0xb0/0xb0 [ 2928.608108] ? _copy_from_user+0xfb/0x1b0 [ 2928.609192] kernel_clone+0xe7/0x980 [ 2928.610257] ? lock_acquire+0x197/0x470 [ 2928.611197] ? create_io_thread+0xf0/0xf0 [ 2928.612095] ? ksys_write+0x21a/0x260 [ 2928.613141] ? lock_downgrade+0x6d0/0x6d0 [ 2928.614239] __do_sys_clone3+0x1e5/0x320 [ 2928.615247] ? __do_sys_clone+0x110/0x110 [ 2928.616164] ? rcu_read_lock_any_held+0x75/0xa0 [ 2928.617185] ? vfs_write+0x354/0xb10 [ 2928.617999] ? fput_many+0x2f/0x1a0 [ 2928.618772] ? ksys_write+0x1a9/0x260 [ 2928.619577] ? __ia32_sys_read+0xb0/0xb0 [ 2928.620449] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2928.621578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2928.622662] ? trace_hardirqs_on+0x5b/0x180 [ 2928.623576] do_syscall_64+0x33/0x40 [ 2928.624368] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2928.625498] RIP: 0033:0x7f55c06adb19 [ 2928.626274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2928.630794] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2928.632863] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2928.634389] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2928.635880] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2928.637417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2928.638915] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2928.651402] FAULT_INJECTION: forcing a failure. [ 2928.651402] name failslab, interval 1, probability 0, space 0, times 0 [ 2928.653970] CPU: 1 PID: 18664 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2928.655452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2928.657227] Call Trace: [ 2928.657806] dump_stack+0x107/0x167 [ 2928.658602] should_fail.cold+0x5/0xa [ 2928.659427] ? percpu_ref_init+0xd8/0x3d0 [ 2928.660314] should_failslab+0x5/0x20 [ 2928.661153] kmem_cache_alloc_trace+0x55/0x320 [ 2928.662157] ? io_async_queue_proc+0x80/0x80 [ 2928.663109] percpu_ref_init+0xd8/0x3d0 [ 2928.663975] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2928.665156] io_uring_setup+0x14f6/0x2980 [ 2928.666073] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2928.667161] ? wait_for_completion_io+0x270/0x270 [ 2928.668224] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2928.669390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2928.670516] do_syscall_64+0x33/0x40 [ 2928.671320] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2928.672438] RIP: 0033:0x7fed36701b19 [ 2928.673255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2928.677231] RSP: 002b:00007fed33c56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2928.678895] RAX: ffffffffffffffda RBX: 00007fed36815020 RCX: 00007fed36701b19 [ 2928.680452] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2928.682006] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2928.683547] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2928.685092] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 2928.696508] netlink: 'syz-executor.0': attribute type 16 has an invalid length. 10:25:42 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 18) 10:25:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 19) 10:25:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x129}}}}, 0x28}}, 0x0) 10:25:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x6}, @val={0xc}}}}, 0x28}}, 0x0) 10:25:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 1) 10:25:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x27000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 2928.880527] FAULT_INJECTION: forcing a failure. [ 2928.880527] name failslab, interval 1, probability 0, space 0, times 0 [ 2928.883350] CPU: 0 PID: 18674 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2928.885081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2928.886980] Call Trace: [ 2928.887582] dump_stack+0x107/0x167 [ 2928.888407] should_fail.cold+0x5/0xa [ 2928.889277] ? create_object.isra.0+0x3a/0xa30 [ 2928.890321] should_failslab+0x5/0x20 [ 2928.891227] kmem_cache_alloc+0x5b/0x310 [ 2928.892179] create_object.isra.0+0x3a/0xa30 [ 2928.893201] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2928.894376] __kmalloc_node+0x1ae/0x420 [ 2928.895300] kvmalloc_node+0x119/0x170 [ 2928.896184] alloc_fdtable+0x159/0x2c0 [ 2928.897065] dup_fd+0x92d/0xe40 [ 2928.897846] copy_process+0x197c/0x78b0 [ 2928.898755] ? SOFTIRQ_verbose+0x10/0x10 [ 2928.899706] ? mark_lock+0xf5/0x2df0 [ 2928.900579] ? __cleanup_sighand+0xb0/0xb0 [ 2928.901570] ? _copy_from_user+0xfb/0x1b0 [ 2928.902542] kernel_clone+0xe7/0x980 [ 2928.903395] ? lock_acquire+0x197/0x470 [ 2928.904296] ? create_io_thread+0xf0/0xf0 [ 2928.905237] ? ksys_write+0x21a/0x260 [ 2928.906125] ? lock_downgrade+0x6d0/0x6d0 [ 2928.907075] __do_sys_clone3+0x1e5/0x320 [ 2928.907986] ? __do_sys_clone+0x110/0x110 [ 2928.908922] ? rcu_read_lock_any_held+0x75/0xa0 [ 2928.909962] ? vfs_write+0x354/0xb10 [ 2928.910812] ? fput_many+0x2f/0x1a0 [ 2928.911657] ? ksys_write+0x1a9/0x260 [ 2928.912521] ? __ia32_sys_read+0xb0/0xb0 [ 2928.913468] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2928.914673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2928.915879] ? trace_hardirqs_on+0x5b/0x180 [ 2928.916875] do_syscall_64+0x33/0x40 [ 2928.917716] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2928.918890] RIP: 0033:0x7f55c06adb19 [ 2928.919718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2928.923965] RSP: 002b:00007f55bdbe1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2928.925719] RAX: ffffffffffffffda RBX: 00007f55c07c10e0 RCX: 00007f55c06adb19 [ 2928.927340] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2928.928995] RBP: 00007f55bdbe11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2928.930633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2928.932252] R13: 00007ffcbb0d12ff R14: 00007f55bdbe1300 R15: 0000000000022000 10:25:42 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 1) [ 2929.030190] FAULT_INJECTION: forcing a failure. [ 2929.030190] name failslab, interval 1, probability 0, space 0, times 0 [ 2929.033005] CPU: 1 PID: 18679 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2929.034704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2929.036747] Call Trace: [ 2929.036864] FAULT_INJECTION: forcing a failure. [ 2929.036864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2929.037401] dump_stack+0x107/0x167 [ 2929.037430] should_fail.cold+0x5/0xa [ 2929.037461] ? create_object.isra.0+0x3a/0xa30 [ 2929.042943] should_failslab+0x5/0x20 [ 2929.043867] kmem_cache_alloc+0x5b/0x310 [ 2929.044878] create_object.isra.0+0x3a/0xa30 [ 2929.045960] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2929.047207] kmem_cache_alloc_trace+0x151/0x320 [ 2929.048351] ? io_async_queue_proc+0x80/0x80 [ 2929.049445] percpu_ref_init+0xd8/0x3d0 [ 2929.050435] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2929.051763] io_uring_setup+0x14f6/0x2980 [ 2929.052807] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2929.054052] ? wait_for_completion_io+0x270/0x270 [ 2929.055275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2929.056566] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2929.057843] do_syscall_64+0x33/0x40 [ 2929.058773] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2929.060019] RIP: 0033:0x7fed36701b19 [ 2929.060931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2929.065403] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2929.067248] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2929.068982] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2929.070716] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2929.072451] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2929.074184] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 2929.075959] CPU: 0 PID: 18681 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2929.077591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2929.079508] Call Trace: [ 2929.080118] dump_stack+0x107/0x167 [ 2929.080963] should_fail.cold+0x5/0xa [ 2929.081852] _copy_from_user+0x2e/0x1b0 [ 2929.082792] __copy_msghdr_from_user+0x91/0x4b0 [ 2929.083846] ? __ia32_sys_shutdown+0x80/0x80 [ 2929.084906] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2929.086067] sendmsg_copy_msghdr+0xa1/0x160 [ 2929.087037] ? do_recvmmsg+0x6d0/0x6d0 [ 2929.087937] ? perf_trace_lock+0x2bd/0x490 [ 2929.088933] ? SOFTIRQ_verbose+0x10/0x10 [ 2929.089887] ? __lockdep_reset_lock+0x180/0x180 [ 2929.091004] ___sys_sendmsg+0xc6/0x170 [ 2929.091905] ? sendmsg_copy_msghdr+0x160/0x160 [ 2929.092950] ? __fget_files+0x2cf/0x520 [ 2929.093874] ? lock_downgrade+0x6d0/0x6d0 [ 2929.094803] ? find_held_lock+0x2c/0x110 [ 2929.095752] ? __fget_files+0x2f8/0x520 [ 2929.096683] ? __fget_light+0xea/0x290 [ 2929.097642] __sys_sendmsg+0xe5/0x1b0 [ 2929.098529] ? __sys_sendmsg_sock+0x40/0x40 [ 2929.099506] ? rcu_read_lock_any_held+0x75/0xa0 [ 2929.100572] ? fput_many+0x2f/0x1a0 [ 2929.101428] ? ksys_write+0x1a9/0x260 [ 2929.102348] ? __ia32_sys_read+0xb0/0xb0 [ 2929.103287] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2929.104521] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2929.105709] ? trace_hardirqs_on+0x5b/0x180 [ 2929.106695] do_syscall_64+0x33/0x40 [ 2929.107546] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2929.108715] RIP: 0033:0x7f0d9a169b19 [ 2929.109577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2929.113878] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2929.115614] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 2929.117266] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2929.118918] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2929.120556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2929.122232] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 10:25:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x2}, 0x0) 10:25:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 2929.302967] FAULT_INJECTION: forcing a failure. [ 2929.302967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2929.306816] CPU: 0 PID: 18688 Comm: syz-executor.5 Not tainted 5.10.244 #1 10:25:42 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 19) [ 2929.308489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2929.310596] Call Trace: [ 2929.311360] dump_stack+0x107/0x167 [ 2929.312431] should_fail.cold+0x5/0xa [ 2929.313621] _copy_from_user+0x2e/0x1b0 [ 2929.314799] io_uring_setup+0x9b/0x2980 [ 2929.315927] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2929.317267] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2929.318527] ? wait_for_completion_io+0x270/0x270 [ 2929.319829] ? rcu_read_lock_any_held+0x75/0xa0 [ 2929.321015] ? vfs_write+0x354/0xb10 [ 2929.322120] ? fput_many+0x2f/0x1a0 [ 2929.323163] ? ksys_write+0x1a9/0x260 [ 2929.324217] ? __ia32_sys_read+0xb0/0xb0 [ 2929.325417] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2929.326762] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2929.328245] do_syscall_64+0x33/0x40 [ 2929.329237] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2929.330521] RIP: 0033:0x7f4d680b3b19 [ 2929.331488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2929.335672] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2929.337569] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 2929.339283] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2929.340995] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2929.342716] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 2929.344434] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:25:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:25:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x28000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 2929.466799] FAULT_INJECTION: forcing a failure. [ 2929.466799] name failslab, interval 1, probability 0, space 0, times 0 [ 2929.470156] CPU: 1 PID: 18702 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2929.471983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2929.474267] Call Trace: [ 2929.474905] dump_stack+0x107/0x167 [ 2929.475771] should_fail.cold+0x5/0xa [ 2929.476677] ? copy_fs_struct+0x45/0x340 [ 2929.477651] should_failslab+0x5/0x20 [ 2929.478553] kmem_cache_alloc+0x5b/0x310 [ 2929.479514] copy_fs_struct+0x45/0x340 [ 2929.480439] copy_process+0x34b5/0x78b0 [ 2929.481385] ? SOFTIRQ_verbose+0x10/0x10 [ 2929.482347] ? mark_lock+0xf5/0x2df0 [ 2929.483256] ? __cleanup_sighand+0xb0/0xb0 [ 2929.484285] ? _copy_from_user+0xfb/0x1b0 [ 2929.485292] kernel_clone+0xe7/0x980 [ 2929.486180] ? lock_acquire+0x197/0x470 [ 2929.487123] ? create_io_thread+0xf0/0xf0 [ 2929.488121] ? ksys_write+0x21a/0x260 [ 2929.489036] ? lock_downgrade+0x6d0/0x6d0 [ 2929.490030] __do_sys_clone3+0x1e5/0x320 [ 2929.490992] ? __do_sys_clone+0x110/0x110 [ 2929.492000] ? rcu_read_lock_any_held+0x75/0xa0 [ 2929.493105] ? vfs_write+0x354/0xb10 [ 2929.493992] ? fput_many+0x2f/0x1a0 [ 2929.494878] ? ksys_write+0x1a9/0x260 [ 2929.495784] ? __ia32_sys_read+0xb0/0xb0 [ 2929.496766] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2929.497992] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2929.499214] ? trace_hardirqs_on+0x5b/0x180 [ 2929.500245] do_syscall_64+0x33/0x40 [ 2929.501130] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2929.502324] RIP: 0033:0x7f55c06adb19 [ 2929.503199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2929.507655] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2929.509780] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2929.511863] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2929.514018] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2929.515993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2929.517992] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2929.563883] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 10:25:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 20) 10:25:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x2a000000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:25:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x3}, 0x0) 10:25:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 2) 10:25:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2}}}}}, 0x28}}, 0x0) 10:25:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 2) 10:25:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 20) 10:25:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x9}, @val={0xc}}}}, 0x28}}, 0x0) [ 2945.115636] FAULT_INJECTION: forcing a failure. [ 2945.115636] name failslab, interval 1, probability 0, space 0, times 0 [ 2945.116716] FAULT_INJECTION: forcing a failure. [ 2945.116716] name failslab, interval 1, probability 0, space 0, times 0 [ 2945.118296] CPU: 0 PID: 18727 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2945.122400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.124314] Call Trace: [ 2945.124938] dump_stack+0x107/0x167 [ 2945.125791] should_fail.cold+0x5/0xa [ 2945.126682] ? create_object.isra.0+0x3a/0xa30 [ 2945.127745] should_failslab+0x5/0x20 [ 2945.128629] kmem_cache_alloc+0x5b/0x310 [ 2945.129598] create_object.isra.0+0x3a/0xa30 [ 2945.130616] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2945.131804] kmem_cache_alloc+0x159/0x310 [ 2945.132784] copy_fs_struct+0x45/0x340 [ 2945.133718] copy_process+0x34b5/0x78b0 [ 2945.134641] ? SOFTIRQ_verbose+0x10/0x10 [ 2945.135594] ? __lockdep_reset_lock+0x180/0x180 [ 2945.136726] ? __cleanup_sighand+0xb0/0xb0 [ 2945.137758] ? _copy_from_user+0xfb/0x1b0 [ 2945.138740] kernel_clone+0xe7/0x980 [ 2945.139605] ? __lockdep_reset_lock+0x180/0x180 [ 2945.140689] ? create_io_thread+0xf0/0xf0 [ 2945.141691] ? ksys_write+0x21a/0x260 [ 2945.142577] ? lock_downgrade+0x6d0/0x6d0 [ 2945.143552] __do_sys_clone3+0x1e5/0x320 [ 2945.144496] ? __do_sys_clone+0x110/0x110 [ 2945.145508] ? rcu_read_lock_any_held+0x75/0xa0 [ 2945.146585] ? vfs_write+0x354/0xb10 [ 2945.147456] ? fput_many+0x2f/0x1a0 [ 2945.148305] ? ksys_write+0x1a9/0x260 [ 2945.149202] ? __ia32_sys_read+0xb0/0xb0 [ 2945.150158] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2945.151372] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2945.152573] ? trace_hardirqs_on+0x5b/0x180 [ 2945.153599] do_syscall_64+0x33/0x40 [ 2945.154472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2945.155670] RIP: 0033:0x7f55c06adb19 [ 2945.156538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2945.160844] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2945.162619] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2945.164280] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2945.165951] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2945.167603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2945.169275] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2945.171003] CPU: 1 PID: 18729 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 2945.172666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.174598] Call Trace: [ 2945.175223] dump_stack+0x107/0x167 [ 2945.176075] should_fail.cold+0x5/0xa [ 2945.176979] ? io_uring_setup+0x258/0x2980 [ 2945.177965] should_failslab+0x5/0x20 [ 2945.178851] kmem_cache_alloc_trace+0x55/0x320 [ 2945.179923] io_uring_setup+0x258/0x2980 [ 2945.180880] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2945.182004] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2945.183175] ? wait_for_completion_io+0x270/0x270 [ 2945.184326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2945.185552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2945.186839] do_syscall_64+0x33/0x40 [ 2945.187896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2945.189099] RIP: 0033:0x7f4d680b3b19 [ 2945.189965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2945.194242] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2945.196007] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 2945.197675] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2945.199332] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2945.200992] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 2945.202644] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 2945.208935] FAULT_INJECTION: forcing a failure. [ 2945.208935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2945.211941] CPU: 0 PID: 18732 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2945.213541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.215542] Call Trace: [ 2945.216149] dump_stack+0x107/0x167 [ 2945.217009] should_fail.cold+0x5/0xa [ 2945.217902] _copy_from_user+0x2e/0x1b0 [ 2945.218829] iovec_from_user+0x141/0x400 [ 2945.219778] __import_iovec+0x67/0x590 [ 2945.220674] ? __ia32_sys_shutdown+0x80/0x80 [ 2945.221694] ? perf_trace_lock+0xac/0x490 [ 2945.222658] import_iovec+0x83/0xb0 [ 2945.223506] sendmsg_copy_msghdr+0x131/0x160 [ 2945.224518] ? do_recvmmsg+0x6d0/0x6d0 [ 2945.225431] ? SOFTIRQ_verbose+0x10/0x10 [ 2945.226361] ? lock_downgrade+0x6d0/0x6d0 [ 2945.227318] ? __lockdep_reset_lock+0x180/0x180 [ 2945.228386] ? SOFTIRQ_verbose+0x10/0x10 [ 2945.229336] ___sys_sendmsg+0xc6/0x170 [ 2945.230235] ? sendmsg_copy_msghdr+0x160/0x160 [ 2945.231292] ? __fget_files+0x2cf/0x520 [ 2945.232207] ? lock_downgrade+0x6d0/0x6d0 [ 2945.233172] ? find_held_lock+0x2c/0x110 [ 2945.234120] ? __fget_files+0x2f8/0x520 [ 2945.235046] ? __fget_light+0xea/0x290 [ 2945.235952] __sys_sendmsg+0xe5/0x1b0 [ 2945.236839] ? __sys_sendmsg_sock+0x40/0x40 [ 2945.237831] ? rcu_read_lock_any_held+0x75/0xa0 [ 2945.238904] ? fput_many+0x2f/0x1a0 [ 2945.239744] ? ksys_write+0x1a9/0x260 [ 2945.240629] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2945.241844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2945.243025] ? trace_hardirqs_on+0x5b/0x180 [ 2945.244020] do_syscall_64+0x33/0x40 [ 2945.244883] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2945.246062] RIP: 0033:0x7f0d9a169b19 [ 2945.246915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2945.251158] RSP: 002b:00007f0d976be188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2945.252916] RAX: ffffffffffffffda RBX: 00007f0d9a27d020 RCX: 00007f0d9a169b19 [ 2945.253133] FAULT_INJECTION: forcing a failure. [ 2945.253133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2945.254555] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2945.254567] RBP: 00007f0d976be1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2945.254578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2945.254589] R13: 00007ffef3edb7df R14: 00007f0d976be300 R15: 0000000000022000 [ 2945.264156] CPU: 1 PID: 18723 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2945.265770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.267691] Call Trace: [ 2945.268313] dump_stack+0x107/0x167 [ 2945.269177] should_fail.cold+0x5/0xa [ 2945.270068] _copy_to_user+0x2e/0x180 [ 2945.270961] io_uring_setup+0x11b5/0x2980 [ 2945.271937] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2945.273121] ? wait_for_completion_io+0x270/0x270 [ 2945.274272] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2945.275492] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2945.276693] do_syscall_64+0x33/0x40 [ 2945.277568] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2945.278760] RIP: 0033:0x7fed36701b19 [ 2945.279626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2945.283897] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2945.285672] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2945.287327] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2945.288989] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2945.290646] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2945.292303] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:25:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 3) 10:25:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0xa}, @val={0xc}}}}, 0x28}}, 0x0) 10:25:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x31010000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:25:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3}}}}}, 0x28}}, 0x0) 10:25:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 21) [ 2945.495496] FAULT_INJECTION: forcing a failure. [ 2945.495496] name failslab, interval 1, probability 0, space 0, times 0 [ 2945.498665] CPU: 1 PID: 18746 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 2945.500439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.502382] Call Trace: [ 2945.503187] dump_stack+0x107/0x167 [ 2945.504116] should_fail.cold+0x5/0xa [ 2945.505018] ? create_object.isra.0+0x3a/0xa30 [ 2945.506076] should_failslab+0x5/0x20 [ 2945.506960] kmem_cache_alloc+0x5b/0x310 [ 2945.507910] create_object.isra.0+0x3a/0xa30 [ 2945.508937] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2945.510120] kmem_cache_alloc_trace+0x151/0x320 [ 2945.511208] io_uring_setup+0x258/0x2980 [ 2945.512156] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2945.513288] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2945.514461] ? wait_for_completion_io+0x270/0x270 [ 2945.515612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2945.516838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2945.518040] do_syscall_64+0x33/0x40 [ 2945.518905] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2945.520095] RIP: 0033:0x7f4d680b3b19 [ 2945.520972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2945.525257] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2945.527038] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 2945.528694] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2945.530361] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2945.532020] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 2945.533684] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:25:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x4}, 0x0) [ 2945.609060] FAULT_INJECTION: forcing a failure. [ 2945.609060] name failslab, interval 1, probability 0, space 0, times 0 [ 2945.612858] CPU: 0 PID: 18750 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2945.614591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.616635] Call Trace: [ 2945.617411] dump_stack+0x107/0x167 [ 2945.618495] should_fail.cold+0x5/0xa [ 2945.619574] ? __d_alloc+0x2a/0x990 [ 2945.620611] should_failslab+0x5/0x20 [ 2945.621630] kmem_cache_alloc+0x5b/0x310 [ 2945.622905] __d_alloc+0x2a/0x990 [ 2945.623838] ? find_held_lock+0x2c/0x110 [ 2945.625094] d_alloc_pseudo+0x19/0x70 [ 2945.626150] alloc_file_pseudo+0xce/0x250 [ 2945.627235] ? trace_hardirqs_on+0x5b/0x180 [ 2945.628404] ? alloc_file+0x5a0/0x5a0 [ 2945.629856] anon_inode_getfile+0xc8/0x1f0 [ 2945.631100] io_uring_setup+0x138b/0x2980 [ 2945.632418] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2945.633731] ? wait_for_completion_io+0x270/0x270 [ 2945.635527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2945.636904] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2945.638384] do_syscall_64+0x33/0x40 [ 2945.639398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2945.640716] RIP: 0033:0x7fed36701b19 [ 2945.641722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2945.646114] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2945.648072] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2945.649856] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2945.651636] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2945.653423] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2945.655204] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:26:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 3) 10:26:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 4) 10:26:11 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 21) 10:26:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4}}}}}, 0x28}}, 0x0) 10:26:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 22) 10:26:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x9effffff, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:26:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0xb}, @val={0xc}}}}, 0x28}}, 0x0) 10:26:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x5}, 0x0) [ 2958.600937] FAULT_INJECTION: forcing a failure. [ 2958.600937] name failslab, interval 1, probability 0, space 0, times 0 [ 2958.603623] CPU: 1 PID: 18774 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2958.605567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2958.607611] Call Trace: [ 2958.608357] dump_stack+0x107/0x167 [ 2958.609189] should_fail.cold+0x5/0xa [ 2958.610056] ? copy_process+0x1ae7/0x78b0 [ 2958.610986] should_failslab+0x5/0x20 [ 2958.611847] kmem_cache_alloc+0x5b/0x310 [ 2958.612756] ? _raw_spin_unlock+0x1a/0x30 [ 2958.613699] copy_process+0x1ae7/0x78b0 [ 2958.614598] ? SOFTIRQ_verbose+0x10/0x10 [ 2958.615523] ? mark_lock+0xf5/0x2df0 [ 2958.616391] ? __cleanup_sighand+0xb0/0xb0 [ 2958.617379] ? _copy_from_user+0xfb/0x1b0 [ 2958.618348] kernel_clone+0xe7/0x980 [ 2958.619218] ? lock_acquire+0x197/0x470 [ 2958.620140] ? create_io_thread+0xf0/0xf0 [ 2958.621126] ? ksys_write+0x21a/0x260 [ 2958.622014] ? lock_downgrade+0x6d0/0x6d0 [ 2958.622978] __do_sys_clone3+0x1e5/0x320 [ 2958.623918] ? __do_sys_clone+0x110/0x110 [ 2958.624903] ? rcu_read_lock_any_held+0x75/0xa0 [ 2958.625994] ? vfs_write+0x354/0xb10 [ 2958.626860] ? fput_many+0x2f/0x1a0 [ 2958.627711] ? ksys_write+0x1a9/0x260 [ 2958.628590] ? __ia32_sys_read+0xb0/0xb0 [ 2958.629541] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2958.630754] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2958.631950] ? trace_hardirqs_on+0x5b/0x180 [ 2958.632959] do_syscall_64+0x33/0x40 [ 2958.633824] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2958.635013] RIP: 0033:0x7f55c06adb19 [ 2958.635878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2958.640138] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2958.641903] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2958.643551] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2958.645193] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2958.646844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2958.648491] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2958.653411] FAULT_INJECTION: forcing a failure. [ 2958.653411] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2958.656549] CPU: 1 PID: 18783 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 2958.658339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2958.660533] Call Trace: [ 2958.661175] dump_stack+0x107/0x167 [ 2958.662198] should_fail.cold+0x5/0xa [ 2958.663142] __alloc_pages_nodemask+0x182/0x600 [ 2958.664215] ? lock_release+0x680/0x680 [ 2958.665150] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2958.666532] ? lock_downgrade+0x6d0/0x6d0 [ 2958.667497] alloc_pages_current+0x187/0x280 [ 2958.668511] kmalloc_order+0x35/0x160 [ 2958.669399] kmalloc_order_trace+0x14/0xa0 [ 2958.670380] io_uring_setup+0x33c/0x2980 [ 2958.671321] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2958.672438] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2958.673615] ? wait_for_completion_io+0x270/0x270 [ 2958.674757] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2958.675975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2958.677175] do_syscall_64+0x33/0x40 [ 2958.678040] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2958.679222] RIP: 0033:0x7f4d680b3b19 [ 2958.680082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2958.684342] RSP: 002b:00007f4d65608108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2958.686068] RAX: ffffffffffffffda RBX: 00007f4d681c7020 RCX: 00007f4d680b3b19 [ 2958.687692] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2958.689328] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2958.690969] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 2958.692588] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 2958.699864] FAULT_INJECTION: forcing a failure. [ 2958.699864] name failslab, interval 1, probability 0, space 0, times 0 [ 2958.702539] CPU: 1 PID: 18788 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2958.704108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2958.706001] Call Trace: [ 2958.706601] dump_stack+0x107/0x167 [ 2958.707432] should_fail.cold+0x5/0xa [ 2958.708300] ? __alloc_skb+0x6d/0x5b0 [ 2958.709174] should_failslab+0x5/0x20 [ 2958.710040] kmem_cache_alloc_node+0x55/0x330 [ 2958.711068] __alloc_skb+0x6d/0x5b0 [ 2958.711906] netlink_sendmsg+0x998/0xe00 [ 2958.712838] ? netlink_unicast+0xa00/0xa00 [ 2958.713822] ? netlink_unicast+0xa00/0xa00 [ 2958.714787] __sock_sendmsg+0x154/0x190 [ 2958.715686] ____sys_sendmsg+0x70d/0x870 [ 2958.716618] ? sock_write_iter+0x3d0/0x3d0 [ 2958.717588] ? do_recvmmsg+0x6d0/0x6d0 [ 2958.718479] ? SOFTIRQ_verbose+0x10/0x10 [ 2958.719410] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2958.720597] ? SOFTIRQ_verbose+0x10/0x10 [ 2958.721535] ___sys_sendmsg+0xf3/0x170 [ 2958.722465] ? sendmsg_copy_msghdr+0x160/0x160 [ 2958.723672] ? __fget_files+0x2cf/0x520 [ 2958.724694] ? lock_downgrade+0x6d0/0x6d0 [ 2958.725659] ? find_held_lock+0x2c/0x110 [ 2958.726852] ? __fget_files+0x2f8/0x520 10:26:12 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 22) [ 2958.727798] ? __fget_light+0xea/0x290 [ 2958.728982] __sys_sendmsg+0xe5/0x1b0 [ 2958.730082] ? __sys_sendmsg_sock+0x40/0x40 [ 2958.731168] ? rcu_read_lock_any_held+0x75/0xa0 [ 2958.732539] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2958.733964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2958.735345] ? trace_hardirqs_on+0x5b/0x180 [ 2958.736543] do_syscall_64+0x33/0x40 [ 2958.737525] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2958.738989] RIP: 0033:0x7f0d9a169b19 [ 2958.739886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2958.744834] RSP: 002b:00007f0d976be188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2958.746822] RAX: ffffffffffffffda RBX: 00007f0d9a27d020 RCX: 00007f0d9a169b19 [ 2958.748793] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2958.750579] RBP: 00007f0d976be1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2958.752473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2958.754102] R13: 00007ffef3edb7df R14: 00007f0d976be300 R15: 0000000000022000 [ 2958.761935] FAULT_INJECTION: forcing a failure. [ 2958.761935] name failslab, interval 1, probability 0, space 0, times 0 [ 2958.764549] CPU: 1 PID: 18785 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2958.766382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2958.768615] Call Trace: [ 2958.769231] dump_stack+0x107/0x167 [ 2958.770059] should_fail.cold+0x5/0xa [ 2958.770922] ? create_object.isra.0+0x3a/0xa30 [ 2958.771957] should_failslab+0x5/0x20 [ 2958.772824] kmem_cache_alloc+0x5b/0x310 [ 2958.773767] create_object.isra.0+0x3a/0xa30 [ 2958.774760] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2958.775927] kmem_cache_alloc+0x159/0x310 [ 2958.776887] __d_alloc+0x2a/0x990 [ 2958.777685] ? find_held_lock+0x2c/0x110 [ 2958.778616] d_alloc_pseudo+0x19/0x70 [ 2958.779490] alloc_file_pseudo+0xce/0x250 [ 2958.780430] ? trace_hardirqs_on+0x5b/0x180 [ 2958.781413] ? alloc_file+0x5a0/0x5a0 [ 2958.782309] anon_inode_getfile+0xc8/0x1f0 [ 2958.783292] io_uring_setup+0x138b/0x2980 [ 2958.784251] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2958.785412] ? wait_for_completion_io+0x270/0x270 [ 2958.786544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2958.787736] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2958.788910] do_syscall_64+0x33/0x40 [ 2958.789771] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2958.790933] RIP: 0033:0x7fed36701b19 [ 2958.791777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2958.795944] RSP: 002b:00007fed33c56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2958.797680] RAX: ffffffffffffffda RBX: 00007fed36815020 RCX: 00007fed36701b19 [ 2958.799293] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2958.800900] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2958.802534] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2958.804140] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:26:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x5}}}}}, 0x28}}, 0x0) [ 2958.843988] FAULT_INJECTION: forcing a failure. [ 2958.843988] name failslab, interval 1, probability 0, space 0, times 0 [ 2958.845601] CPU: 0 PID: 18795 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2958.846552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2958.847686] Call Trace: [ 2958.848055] dump_stack+0x107/0x167 [ 2958.848563] should_fail.cold+0x5/0xa [ 2958.849097] ? create_object.isra.0+0x3a/0xa30 [ 2958.849719] should_failslab+0x5/0x20 [ 2958.850248] kmem_cache_alloc+0x5b/0x310 [ 2958.850813] create_object.isra.0+0x3a/0xa30 [ 2958.851417] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2958.852113] kmem_cache_alloc+0x159/0x310 [ 2958.852677] ? _raw_spin_unlock+0x1a/0x30 [ 2958.853255] copy_process+0x1ae7/0x78b0 [ 2958.853805] ? SOFTIRQ_verbose+0x10/0x10 [ 2958.854395] ? __cleanup_sighand+0xb0/0xb0 [ 2958.854997] ? _copy_from_user+0xfb/0x1b0 [ 2958.855576] kernel_clone+0xe7/0x980 [ 2958.856084] ? lock_acquire+0x197/0x470 [ 2958.856625] ? create_io_thread+0xf0/0xf0 [ 2958.857212] ? ksys_write+0x21a/0x260 [ 2958.857728] ? lock_downgrade+0x6d0/0x6d0 [ 2958.858306] __do_sys_clone3+0x1e5/0x320 [ 2958.858858] ? __do_sys_clone+0x110/0x110 [ 2958.859457] ? rcu_read_lock_any_held+0x75/0xa0 [ 2958.860085] ? vfs_write+0x354/0xb10 [ 2958.860594] ? fput_many+0x2f/0x1a0 [ 2958.861238] ? ksys_write+0x1a9/0x260 [ 2958.861771] ? __ia32_sys_read+0xb0/0xb0 [ 2958.862332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2958.863042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2958.863737] ? trace_hardirqs_on+0x5b/0x180 [ 2958.864356] do_syscall_64+0x33/0x40 [ 2958.864878] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2958.865578] RIP: 0033:0x7f55c06adb19 [ 2958.866086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2958.868569] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2958.869610] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2958.870565] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2958.871524] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2958.872478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2958.873448] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:26:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 4) 10:26:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xc00e0000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:26:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6}}}}}, 0x28}}, 0x0) 10:26:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 23) 10:26:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 5) 10:26:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x10}, @val={0xc}}}}, 0x28}}, 0x0) 10:26:29 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 23) 10:26:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x6}, 0x0) [ 2976.231541] FAULT_INJECTION: forcing a failure. [ 2976.231541] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.233959] CPU: 1 PID: 18815 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2976.235395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.237118] Call Trace: [ 2976.237677] dump_stack+0x107/0x167 [ 2976.238442] should_fail.cold+0x5/0xa [ 2976.239244] ? copy_process+0x1c65/0x78b0 [ 2976.240114] should_failslab+0x5/0x20 [ 2976.240911] kmem_cache_alloc+0x5b/0x310 [ 2976.241774] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.242864] copy_process+0x1c65/0x78b0 [ 2976.243680] ? SOFTIRQ_verbose+0x10/0x10 [ 2976.244531] ? mark_lock+0xf5/0x2df0 [ 2976.245335] ? __cleanup_sighand+0xb0/0xb0 [ 2976.246236] ? _copy_from_user+0xfb/0x1b0 [ 2976.247099] kernel_clone+0xe7/0x980 [ 2976.247874] ? lock_acquire+0x197/0x470 [ 2976.248693] ? create_io_thread+0xf0/0xf0 [ 2976.249576] ? ksys_write+0x21a/0x260 [ 2976.250367] ? lock_downgrade+0x6d0/0x6d0 [ 2976.251238] __do_sys_clone3+0x1e5/0x320 [ 2976.252085] ? __do_sys_clone+0x110/0x110 [ 2976.252478] FAULT_INJECTION: forcing a failure. [ 2976.252478] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.252960] ? rcu_read_lock_any_held+0x75/0xa0 [ 2976.252979] ? vfs_write+0x354/0xb10 [ 2976.252999] ? fput_many+0x2f/0x1a0 [ 2976.253019] ? ksys_write+0x1a9/0x260 [ 2976.253052] ? __ia32_sys_read+0xb0/0xb0 [ 2976.253077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.253099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.253114] ? trace_hardirqs_on+0x5b/0x180 [ 2976.253136] do_syscall_64+0x33/0x40 [ 2976.253156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2976.253171] RIP: 0033:0x7f55c06adb19 [ 2976.253192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.253202] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2976.253223] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2976.253233] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2976.253244] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.253254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2976.253265] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2976.272383] FAULT_INJECTION: forcing a failure. [ 2976.272383] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.275702] CPU: 0 PID: 18814 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 2976.290774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.292954] Call Trace: [ 2976.293812] dump_stack+0x107/0x167 [ 2976.295016] should_fail.cold+0x5/0xa [ 2976.296191] ? create_object.isra.0+0x3a/0xa30 [ 2976.297572] should_failslab+0x5/0x20 [ 2976.298671] kmem_cache_alloc+0x5b/0x310 [ 2976.300096] create_object.isra.0+0x3a/0xa30 [ 2976.301323] ? kasan_unpoison_shadow+0x33/0x50 [ 2976.302775] kmalloc_order+0xfe/0x160 [ 2976.304054] kmalloc_order_trace+0x14/0xa0 [ 2976.305366] io_uring_setup+0x33c/0x2980 [ 2976.306623] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2976.308095] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2976.309489] ? wait_for_completion_io+0x270/0x270 [ 2976.311518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.312968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.314594] do_syscall_64+0x33/0x40 [ 2976.315698] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2976.317115] RIP: 0033:0x7f4d680b3b19 [ 2976.318179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.322834] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2976.325075] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 2976.327057] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2976.329080] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2976.331109] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 2976.333136] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 2976.335786] CPU: 1 PID: 18819 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2976.337316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.339069] Call Trace: [ 2976.339634] dump_stack+0x107/0x167 [ 2976.340408] should_fail.cold+0x5/0xa [ 2976.341225] ? create_object.isra.0+0x3a/0xa30 [ 2976.342187] should_failslab+0x5/0x20 [ 2976.342993] kmem_cache_alloc+0x5b/0x310 [ 2976.343855] create_object.isra.0+0x3a/0xa30 [ 2976.345104] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2976.346205] kmem_cache_alloc_node+0x169/0x330 [ 2976.347185] __alloc_skb+0x6d/0x5b0 [ 2976.347963] netlink_sendmsg+0x998/0xe00 [ 2976.348836] ? netlink_unicast+0xa00/0xa00 [ 2976.349760] ? netlink_unicast+0xa00/0xa00 [ 2976.350658] __sock_sendmsg+0x154/0x190 [ 2976.351500] ____sys_sendmsg+0x70d/0x870 [ 2976.352361] ? sock_write_iter+0x3d0/0x3d0 [ 2976.353259] ? do_recvmmsg+0x6d0/0x6d0 [ 2976.354093] ? SOFTIRQ_verbose+0x10/0x10 [ 2976.354947] ? lock_downgrade+0x6d0/0x6d0 [ 2976.355831] ? __lockdep_reset_lock+0x180/0x180 [ 2976.356805] ? SOFTIRQ_verbose+0x10/0x10 [ 2976.357679] ___sys_sendmsg+0xf3/0x170 [ 2976.358504] ? sendmsg_copy_msghdr+0x160/0x160 [ 2976.359482] ? __fget_files+0x2cf/0x520 [ 2976.360321] ? lock_downgrade+0x6d0/0x6d0 [ 2976.361207] ? find_held_lock+0x2c/0x110 [ 2976.362082] ? __fget_files+0x2f8/0x520 [ 2976.362937] ? __fget_light+0xea/0x290 [ 2976.363771] __sys_sendmsg+0xe5/0x1b0 [ 2976.364585] ? __sys_sendmsg_sock+0x40/0x40 [ 2976.365503] ? rcu_read_lock_any_held+0x75/0xa0 [ 2976.366519] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.367628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.368717] ? trace_hardirqs_on+0x5b/0x180 [ 2976.369642] do_syscall_64+0x33/0x40 [ 2976.370436] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2976.371528] RIP: 0033:0x7f0d9a169b19 [ 2976.372316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.376214] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2976.377847] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 2976.379358] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2976.380873] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.382396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2976.383908] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 [ 2976.391548] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2976.419571] FAULT_INJECTION: forcing a failure. [ 2976.419571] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.423017] CPU: 0 PID: 18813 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2976.424859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.427052] Call Trace: [ 2976.427872] dump_stack+0x107/0x167 [ 2976.429045] should_fail.cold+0x5/0xa [ 2976.430200] ? __alloc_file+0x21/0x320 [ 2976.431382] should_failslab+0x5/0x20 [ 2976.432456] kmem_cache_alloc+0x5b/0x310 [ 2976.433830] __alloc_file+0x21/0x320 [ 2976.435001] alloc_empty_file+0x6d/0x170 [ 2976.436274] alloc_file+0x5e/0x5a0 [ 2976.437488] alloc_file_pseudo+0x16a/0x250 [ 2976.438737] ? alloc_file+0x5a0/0x5a0 [ 2976.440281] anon_inode_getfile+0xc8/0x1f0 [ 2976.441630] io_uring_setup+0x138b/0x2980 [ 2976.443031] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2976.444398] ? wait_for_completion_io+0x270/0x270 [ 2976.446351] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.447785] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.449360] do_syscall_64+0x33/0x40 [ 2976.450435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2976.451819] RIP: 0033:0x7fed36701b19 [ 2976.452879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.457493] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2976.459558] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2976.461417] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2976.463268] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2976.465128] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2976.466982] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:26:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7}}}}}, 0x28}}, 0x0) 10:26:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x11}, @val={0xc}}}}, 0x28}}, 0x0) 10:26:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xf0ffffff, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:26:29 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 24) 10:26:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 6) 10:26:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 5) 10:26:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 24) 10:26:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x7}, 0x0) 10:26:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x69}, @val={0xc}}}}, 0x28}}, 0x0) 10:26:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8}}}}}, 0x28}}, 0x0) [ 2976.770222] FAULT_INJECTION: forcing a failure. [ 2976.770222] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.772870] CPU: 1 PID: 18839 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 2976.774434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.776105] Call Trace: [ 2976.776651] dump_stack+0x107/0x167 [ 2976.777407] should_fail.cold+0x5/0xa [ 2976.778382] ? io_uring_setup+0x40b/0x2980 [ 2976.779326] should_failslab+0x5/0x20 [ 2976.780149] kmem_cache_alloc_trace+0x55/0x320 [ 2976.781107] io_uring_setup+0x40b/0x2980 [ 2976.782155] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2976.783139] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2976.784159] ? wait_for_completion_io+0x270/0x270 [ 2976.785157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.786205] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.787242] do_syscall_64+0x33/0x40 [ 2976.787993] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2976.789014] RIP: 0033:0x7f4d680b3b19 [ 2976.789773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.793447] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2976.794961] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 2976.796374] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2976.797821] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2976.799249] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 2976.800679] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 2976.814019] FAULT_INJECTION: forcing a failure. [ 2976.814019] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.816888] CPU: 1 PID: 18841 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2976.818284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.819941] Call Trace: [ 2976.820465] dump_stack+0x107/0x167 [ 2976.821202] should_fail.cold+0x5/0xa [ 2976.821963] ? create_object.isra.0+0x3a/0xa30 [ 2976.822871] should_failslab+0x5/0x20 [ 2976.823626] kmem_cache_alloc+0x5b/0x310 [ 2976.824445] create_object.isra.0+0x3a/0xa30 [ 2976.825325] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2976.826338] kmem_cache_alloc+0x159/0x310 [ 2976.827160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.828216] copy_process+0x1c65/0x78b0 [ 2976.829003] ? SOFTIRQ_verbose+0x10/0x10 [ 2976.829826] ? mark_lock+0xf5/0x2df0 [ 2976.830585] ? __cleanup_sighand+0xb0/0xb0 [ 2976.831442] ? _copy_from_user+0xfb/0x1b0 [ 2976.832275] kernel_clone+0xe7/0x980 [ 2976.833020] ? lock_acquire+0x197/0x470 [ 2976.833819] ? create_io_thread+0xf0/0xf0 [ 2976.834657] ? ksys_write+0x21a/0x260 [ 2976.835407] ? lock_downgrade+0x6d0/0x6d0 [ 2976.836235] __do_sys_clone3+0x1e5/0x320 10:26:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xfffff000, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 2976.837048] ? __do_sys_clone+0x110/0x110 [ 2976.838092] ? rcu_read_lock_any_held+0x75/0xa0 [ 2976.839002] ? vfs_write+0x354/0xb10 [ 2976.839739] ? fput_many+0x2f/0x1a0 [ 2976.840589] ? ksys_write+0x1a9/0x260 [ 2976.841344] ? __ia32_sys_read+0xb0/0xb0 [ 2976.842248] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.843550] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.844710] ? trace_hardirqs_on+0x5b/0x180 [ 2976.845733] do_syscall_64+0x33/0x40 [ 2976.846652] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2976.847668] RIP: 0033:0x7f55c06adb19 [ 2976.848500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.852557] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2976.854053] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2976.855467] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2976.856839] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.858205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2976.859553] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2976.885576] FAULT_INJECTION: forcing a failure. [ 2976.885576] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.888164] CPU: 1 PID: 18845 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2976.889832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.891598] Call Trace: [ 2976.892235] dump_stack+0x107/0x167 [ 2976.893112] should_fail.cold+0x5/0xa [ 2976.893912] should_failslab+0x5/0x20 [ 2976.894741] __kmalloc_node_track_caller+0x74/0x3b0 [ 2976.895894] ? netlink_sendmsg+0x998/0xe00 [ 2976.896884] __alloc_skb+0xb1/0x5b0 [ 2976.897583] netlink_sendmsg+0x998/0xe00 [ 2976.898453] ? netlink_unicast+0xa00/0xa00 [ 2976.899272] ? netlink_unicast+0xa00/0xa00 [ 2976.900076] __sock_sendmsg+0x154/0x190 [ 2976.900985] ____sys_sendmsg+0x70d/0x870 [ 2976.902000] ? sock_write_iter+0x3d0/0x3d0 [ 2976.902867] ? do_recvmmsg+0x6d0/0x6d0 [ 2976.903674] ? SOFTIRQ_verbose+0x10/0x10 [ 2976.904492] ? lock_downgrade+0x6d0/0x6d0 [ 2976.905288] ? __lockdep_reset_lock+0x180/0x180 [ 2976.906315] ? SOFTIRQ_verbose+0x10/0x10 [ 2976.907275] ___sys_sendmsg+0xf3/0x170 [ 2976.908091] ? sendmsg_copy_msghdr+0x160/0x160 [ 2976.908981] ? __fget_files+0x2cf/0x520 [ 2976.909737] ? lock_downgrade+0x6d0/0x6d0 [ 2976.910530] ? find_held_lock+0x2c/0x110 [ 2976.911318] ? __fget_files+0x2f8/0x520 [ 2976.912087] ? __fget_light+0xea/0x290 [ 2976.912833] __sys_sendmsg+0xe5/0x1b0 [ 2976.913562] ? __sys_sendmsg_sock+0x40/0x40 [ 2976.914379] ? rcu_read_lock_any_held+0x75/0xa0 [ 2976.915294] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.916285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.917267] ? trace_hardirqs_on+0x5b/0x180 [ 2976.918103] do_syscall_64+0x33/0x40 [ 2976.918804] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2976.919777] RIP: 0033:0x7f0d9a169b19 [ 2976.920480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.923971] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2976.925406] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 2976.926731] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2976.928065] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.929413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2976.930758] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 [ 2976.968532] FAULT_INJECTION: forcing a failure. [ 2976.968532] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.971138] CPU: 1 PID: 18847 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2976.972423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.973951] Call Trace: [ 2976.974438] dump_stack+0x107/0x167 [ 2976.975113] should_fail.cold+0x5/0xa [ 2976.975816] ? create_object.isra.0+0x3a/0xa30 [ 2976.976657] should_failslab+0x5/0x20 [ 2976.977363] kmem_cache_alloc+0x5b/0x310 [ 2976.978121] create_object.isra.0+0x3a/0xa30 [ 2976.978928] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2976.979868] kmem_cache_alloc+0x159/0x310 [ 2976.980647] __alloc_file+0x21/0x320 [ 2976.981334] alloc_empty_file+0x6d/0x170 [ 2976.982074] alloc_file+0x5e/0x5a0 [ 2976.982720] alloc_file_pseudo+0x16a/0x250 [ 2976.983482] ? alloc_file+0x5a0/0x5a0 [ 2976.984198] anon_inode_getfile+0xc8/0x1f0 [ 2976.984970] io_uring_setup+0x138b/0x2980 [ 2976.985736] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2976.986661] ? wait_for_completion_io+0x270/0x270 [ 2976.987560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.988511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.989464] do_syscall_64+0x33/0x40 [ 2976.990149] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2976.991095] RIP: 0033:0x7fed36701b19 [ 2976.991771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.995127] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2976.996502] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2976.997797] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2976.999097] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2977.000366] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2977.001781] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:26:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 25) 10:26:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 7) 10:26:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xffffff7f, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 2977.241736] FAULT_INJECTION: forcing a failure. [ 2977.241736] name failslab, interval 1, probability 0, space 0, times 0 [ 2977.243588] CPU: 1 PID: 18870 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 2977.244662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2977.245978] Call Trace: [ 2977.246390] dump_stack+0x107/0x167 [ 2977.246960] should_fail.cold+0x5/0xa [ 2977.247553] ? create_object.isra.0+0x3a/0xa30 [ 2977.248263] should_failslab+0x5/0x20 [ 2977.248851] kmem_cache_alloc+0x5b/0x310 [ 2977.249499] create_object.isra.0+0x3a/0xa30 [ 2977.250179] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2977.250974] kmem_cache_alloc_trace+0x151/0x320 [ 2977.251698] io_uring_setup+0x40b/0x2980 [ 2977.252333] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2977.253094] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2977.253877] ? wait_for_completion_io+0x270/0x270 [ 2977.254643] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2977.255445] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2977.256234] do_syscall_64+0x33/0x40 [ 2977.256800] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2977.257589] RIP: 0033:0x7f4d680b3b19 [ 2977.258157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2977.260971] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2977.262171] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 2977.263253] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2977.264341] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2977.265428] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 2977.266517] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 2977.313777] FAULT_INJECTION: forcing a failure. [ 2977.313777] name failslab, interval 1, probability 0, space 0, times 0 [ 2977.315473] CPU: 1 PID: 18866 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2977.316520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2977.317770] Call Trace: [ 2977.318169] dump_stack+0x107/0x167 [ 2977.318716] should_fail.cold+0x5/0xa [ 2977.319286] ? security_file_alloc+0x34/0x170 [ 2977.319958] should_failslab+0x5/0x20 [ 2977.320528] kmem_cache_alloc+0x5b/0x310 [ 2977.321152] security_file_alloc+0x34/0x170 [ 2977.321798] __alloc_file+0xb7/0x320 [ 2977.322351] alloc_empty_file+0x6d/0x170 [ 2977.322962] alloc_file+0x5e/0x5a0 [ 2977.323490] alloc_file_pseudo+0x16a/0x250 [ 2977.324124] ? alloc_file+0x5a0/0x5a0 [ 2977.324703] anon_inode_getfile+0xc8/0x1f0 [ 2977.325354] io_uring_setup+0x138b/0x2980 [ 2977.325975] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2977.326745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2977.327523] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2977.328292] do_syscall_64+0x33/0x40 [ 2977.328844] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2977.329610] RIP: 0033:0x7fed36701b19 [ 2977.330164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2977.332892] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2977.334026] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2977.335074] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2977.336118] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2977.337442] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2977.338511] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:26:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 6) 10:26:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 26) 10:26:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 8) 10:26:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x8}, 0x0) 10:26:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x117}, @val={0xc}}}}, 0x28}}, 0x0) 10:26:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9}}}}}, 0x28}}, 0x0) 10:26:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xffffff9e, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:26:46 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 25) [ 2993.567845] FAULT_INJECTION: forcing a failure. [ 2993.567845] name failslab, interval 1, probability 0, space 0, times 0 [ 2993.570412] CPU: 1 PID: 18885 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 2993.571332] FAULT_INJECTION: forcing a failure. [ 2993.571332] name failslab, interval 1, probability 0, space 0, times 0 [ 2993.571919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2993.571926] Call Trace: [ 2993.571951] dump_stack+0x107/0x167 [ 2993.571974] should_fail.cold+0x5/0xa [ 2993.578476] ? copy_process+0x2514/0x78b0 [ 2993.579380] should_failslab+0x5/0x20 [ 2993.580212] kmem_cache_alloc+0x5b/0x310 [ 2993.581107] copy_process+0x2514/0x78b0 [ 2993.581988] ? SOFTIRQ_verbose+0x10/0x10 [ 2993.582877] ? __lockdep_reset_lock+0x180/0x180 [ 2993.583890] ? mark_lock+0xf5/0x2df0 [ 2993.584729] ? __cleanup_sighand+0xb0/0xb0 [ 2993.585684] ? _copy_from_user+0xfb/0x1b0 [ 2993.586597] kernel_clone+0xe7/0x980 [ 2993.587408] ? __lockdep_reset_lock+0x180/0x180 [ 2993.588420] ? create_io_thread+0xf0/0xf0 [ 2993.589352] ? ksys_write+0x21a/0x260 [ 2993.590183] ? lock_downgrade+0x6d0/0x6d0 [ 2993.591033] __do_sys_clone3+0x1e5/0x320 [ 2993.591884] ? __do_sys_clone+0x110/0x110 [ 2993.592786] ? rcu_read_lock_any_held+0x75/0xa0 [ 2993.593782] ? vfs_write+0x354/0xb10 [ 2993.594574] ? fput_many+0x2f/0x1a0 [ 2993.595346] ? ksys_write+0x1a9/0x260 [ 2993.596154] ? __ia32_sys_read+0xb0/0xb0 [ 2993.597019] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2993.598143] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2993.599229] ? trace_hardirqs_on+0x5b/0x180 [ 2993.600151] do_syscall_64+0x33/0x40 [ 2993.600944] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2993.602033] RIP: 0033:0x7f55c06adb19 [ 2993.602824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2993.606721] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2993.608327] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 2993.609848] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 2993.611355] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 2993.612861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2993.614388] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 2993.615938] CPU: 0 PID: 18881 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2993.617540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2993.619430] Call Trace: [ 2993.620043] dump_stack+0x107/0x167 [ 2993.620893] should_fail.cold+0x5/0xa [ 2993.621784] ? create_object.isra.0+0x3a/0xa30 [ 2993.622826] should_failslab+0x5/0x20 [ 2993.623703] kmem_cache_alloc+0x5b/0x310 [ 2993.624657] create_object.isra.0+0x3a/0xa30 [ 2993.625669] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2993.626978] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2993.628136] ? netlink_sendmsg+0x998/0xe00 [ 2993.629119] __alloc_skb+0xb1/0x5b0 [ 2993.629986] netlink_sendmsg+0x998/0xe00 [ 2993.630932] ? netlink_unicast+0xa00/0xa00 [ 2993.631926] ? netlink_unicast+0xa00/0xa00 [ 2993.632911] __sock_sendmsg+0x154/0x190 [ 2993.633848] ____sys_sendmsg+0x70d/0x870 [ 2993.634790] ? sock_write_iter+0x3d0/0x3d0 [ 2993.635760] ? do_recvmmsg+0x6d0/0x6d0 [ 2993.636652] ? perf_trace_lock+0x2bd/0x490 [ 2993.637628] ? SOFTIRQ_verbose+0x10/0x10 [ 2993.638572] ? __lockdep_reset_lock+0x180/0x180 [ 2993.639646] ___sys_sendmsg+0xf3/0x170 [ 2993.640542] ? sendmsg_copy_msghdr+0x160/0x160 [ 2993.641603] ? __fget_files+0x2cf/0x520 [ 2993.642518] ? lock_downgrade+0x6d0/0x6d0 [ 2993.643469] ? find_held_lock+0x2c/0x110 [ 2993.644428] ? __fget_files+0x2f8/0x520 [ 2993.645364] ? __fget_light+0xea/0x290 [ 2993.646273] __sys_sendmsg+0xe5/0x1b0 [ 2993.647152] ? __sys_sendmsg_sock+0x40/0x40 [ 2993.648133] ? rcu_read_lock_any_held+0x75/0xa0 [ 2993.649249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2993.650455] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2993.651632] ? trace_hardirqs_on+0x5b/0x180 [ 2993.652625] do_syscall_64+0x33/0x40 [ 2993.653484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2993.654652] RIP: 0033:0x7f0d9a169b19 [ 2993.655504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2993.659703] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2993.661444] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 2993.663071] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2993.664697] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2993.666325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2993.667949] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 [ 2993.682450] FAULT_INJECTION: forcing a failure. [ 2993.682450] name failslab, interval 1, probability 0, space 0, times 0 [ 2993.684864] CPU: 1 PID: 18892 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 2993.686338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2993.688088] Call Trace: [ 2993.688647] dump_stack+0x107/0x167 [ 2993.689427] should_fail.cold+0x5/0xa [ 2993.690237] ? create_object.isra.0+0x3a/0xa30 [ 2993.691464] should_failslab+0x5/0x20 [ 2993.692363] kmem_cache_alloc+0x5b/0x310 [ 2993.693469] create_object.isra.0+0x3a/0xa30 [ 2993.694559] kmemleak_alloc_percpu+0xa0/0x100 [ 2993.695738] pcpu_alloc+0x4e2/0x1240 [ 2993.696747] ? io_tctx_exit_cb+0xf0/0xf0 [ 2993.697806] percpu_ref_init+0x31/0x3d0 [ 2993.698760] io_uring_setup+0x47a/0x2980 [ 2993.699651] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2993.700924] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2993.702250] ? wait_for_completion_io+0x270/0x270 [ 2993.703435] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2993.704718] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2993.706049] do_syscall_64+0x33/0x40 [ 2993.706932] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2993.708219] RIP: 0033:0x7f4d680b3b19 [ 2993.709007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2993.713163] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2993.714779] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 2993.716284] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2993.718047] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 2993.719813] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 2993.721601] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 2993.735303] FAULT_INJECTION: forcing a failure. [ 2993.735303] name failslab, interval 1, probability 0, space 0, times 0 [ 2993.737816] CPU: 1 PID: 18895 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 2993.739287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2993.741035] Call Trace: [ 2993.741602] dump_stack+0x107/0x167 [ 2993.742387] should_fail.cold+0x5/0xa [ 2993.743196] ? create_object.isra.0+0x3a/0xa30 [ 2993.744154] should_failslab+0x5/0x20 [ 2993.744960] kmem_cache_alloc+0x5b/0x310 [ 2993.745839] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2993.746999] create_object.isra.0+0x3a/0xa30 [ 2993.747925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2993.749009] kmem_cache_alloc+0x159/0x310 [ 2993.749899] security_file_alloc+0x34/0x170 [ 2993.750803] __alloc_file+0xb7/0x320 [ 2993.751597] alloc_empty_file+0x6d/0x170 [ 2993.752448] alloc_file+0x5e/0x5a0 [ 2993.753213] alloc_file_pseudo+0x16a/0x250 [ 2993.754103] ? alloc_file+0x5a0/0x5a0 [ 2993.754927] anon_inode_getfile+0xc8/0x1f0 [ 2993.755824] io_uring_setup+0x138b/0x2980 [ 2993.756721] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2993.757798] ? wait_for_completion_io+0x270/0x270 [ 2993.758845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2993.759950] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2993.761044] do_syscall_64+0x33/0x40 [ 2993.761842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2993.762932] RIP: 0033:0x7fed36701b19 [ 2993.763718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2993.767635] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2993.769249] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 2993.770755] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 2993.772257] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 10:26:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xf}}}}}, 0x28}}, 0x0) [ 2993.773764] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 2993.775607] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:26:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 7) 10:26:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x9}, 0x0) 10:26:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xfffffff0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:26:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x129}, @val={0xc}}}}, 0x28}}, 0x0) 10:26:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xe5}}}}}, 0x28}}, 0x0) [ 2993.888031] FAULT_INJECTION: forcing a failure. [ 2993.888031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2993.890644] CPU: 1 PID: 18903 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 2993.892118] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2993.893886] Call Trace: [ 2993.894451] dump_stack+0x107/0x167 [ 2993.895229] should_fail.cold+0x5/0xa [ 2993.896049] _copy_from_iter_full+0x201/0xa60 [ 2993.897011] ? __virt_addr_valid+0x170/0x5d0 [ 2993.897957] ? __check_object_size+0x319/0x440 [ 2993.898939] netlink_sendmsg+0x879/0xe00 [ 2993.899817] ? netlink_unicast+0xa00/0xa00 [ 2993.900724] ? netlink_unicast+0xa00/0xa00 [ 2993.901641] __sock_sendmsg+0x154/0x190 [ 2993.902490] ____sys_sendmsg+0x70d/0x870 [ 2993.903359] ? sock_write_iter+0x3d0/0x3d0 [ 2993.904248] ? do_recvmmsg+0x6d0/0x6d0 [ 2993.905075] ? SOFTIRQ_verbose+0x10/0x10 [ 2993.905941] ? lock_downgrade+0x6d0/0x6d0 [ 2993.906820] ? __lockdep_reset_lock+0x180/0x180 [ 2993.907799] ? SOFTIRQ_verbose+0x10/0x10 [ 2993.908667] ___sys_sendmsg+0xf3/0x170 [ 2993.909502] ? sendmsg_copy_msghdr+0x160/0x160 [ 2993.910471] ? __fget_files+0x2cf/0x520 [ 2993.911318] ? lock_downgrade+0x6d0/0x6d0 [ 2993.912193] ? find_held_lock+0x2c/0x110 [ 2993.913077] ? __fget_files+0x2f8/0x520 [ 2993.913937] ? __fget_light+0xea/0x290 [ 2993.914768] __sys_sendmsg+0xe5/0x1b0 [ 2993.915572] ? __sys_sendmsg_sock+0x40/0x40 [ 2993.916479] ? rcu_read_lock_any_held+0x75/0xa0 [ 2993.917487] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2993.918600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2993.919681] ? trace_hardirqs_on+0x5b/0x180 [ 2993.920596] do_syscall_64+0x33/0x40 [ 2993.921391] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2993.922467] RIP: 0033:0x7f0d9a169b19 [ 2993.923251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2993.927100] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2993.928708] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 2993.930219] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 2993.931721] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2993.933228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2993.934731] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 10:27:00 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 26) 10:27:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3001}, @val={0xc}}}}, 0x28}}, 0x0) 10:27:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0xffffffff, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:27:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf}, 0x0) 10:27:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 9) 10:27:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 27) 10:27:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 8) 10:27:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xf0}}}}}, 0x28}}, 0x0) [ 3007.457573] FAULT_INJECTION: forcing a failure. [ 3007.457573] name failslab, interval 1, probability 0, space 0, times 0 [ 3007.460005] CPU: 1 PID: 18935 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3007.461468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3007.463204] Call Trace: [ 3007.463763] dump_stack+0x107/0x167 [ 3007.464380] FAULT_INJECTION: forcing a failure. [ 3007.464380] name failslab, interval 1, probability 0, space 0, times 0 [ 3007.464535] should_fail.cold+0x5/0xa [ 3007.467921] ? io_uring_alloc_task_context+0x99/0x6a0 [ 3007.469005] should_failslab+0x5/0x20 [ 3007.469817] kmem_cache_alloc_trace+0x55/0x320 [ 3007.470776] io_uring_alloc_task_context+0x99/0x6a0 [ 3007.471821] ? io_import_iovec+0x1120/0x1120 [ 3007.472742] ? lock_downgrade+0x6d0/0x6d0 [ 3007.473655] ? do_raw_spin_lock+0x121/0x260 [ 3007.474559] ? rwlock_bug.part.0+0x90/0x90 [ 3007.475455] __io_uring_add_tctx_node+0x2c6/0x520 [ 3007.476469] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3007.477571] ? alloc_fd+0x2e7/0x670 [ 3007.478349] io_uring_setup+0x1fbb/0x2980 [ 3007.479226] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3007.480287] ? wait_for_completion_io+0x270/0x270 [ 3007.481330] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3007.482428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3007.483506] do_syscall_64+0x33/0x40 [ 3007.484291] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3007.485374] RIP: 0033:0x7fed36701b19 [ 3007.486151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3007.489988] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3007.491573] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3007.493074] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3007.494573] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3007.496063] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3007.497552] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3007.499093] CPU: 0 PID: 18934 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3007.500759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3007.502911] Call Trace: [ 3007.503564] dump_stack+0x107/0x167 [ 3007.504508] should_fail.cold+0x5/0xa [ 3007.505462] ? create_object.isra.0+0x3a/0xa30 [ 3007.506585] should_failslab+0x5/0x20 [ 3007.507533] kmem_cache_alloc+0x5b/0x310 [ 3007.508545] create_object.isra.0+0x3a/0xa30 [ 3007.509721] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3007.510903] kmem_cache_alloc+0x159/0x310 [ 3007.511950] copy_process+0x2514/0x78b0 [ 3007.512859] ? SOFTIRQ_verbose+0x10/0x10 [ 3007.513950] ? __cleanup_sighand+0xb0/0xb0 [ 3007.515034] ? _copy_from_user+0xfb/0x1b0 [ 3007.516084] kernel_clone+0xe7/0x980 [ 3007.517006] ? lock_acquire+0x197/0x470 [ 3007.517920] ? create_io_thread+0xf0/0xf0 [ 3007.518962] ? ksys_write+0x21a/0x260 [ 3007.519829] ? lock_downgrade+0x6d0/0x6d0 [ 3007.520866] __do_sys_clone3+0x1e5/0x320 [ 3007.521797] ? __do_sys_clone+0x110/0x110 [ 3007.522870] ? rcu_read_lock_any_held+0x75/0xa0 [ 3007.523925] ? vfs_write+0x354/0xb10 [ 3007.524847] ? fput_many+0x2f/0x1a0 [ 3007.525695] ? ksys_write+0x1a9/0x260 [ 3007.526645] ? __ia32_sys_read+0xb0/0xb0 [ 3007.527549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3007.528741] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3007.530021] ? trace_hardirqs_on+0x5b/0x180 [ 3007.531012] do_syscall_64+0x33/0x40 [ 3007.531904] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3007.533064] RIP: 0033:0x7f55c06adb19 [ 3007.533960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3007.538117] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3007.539956] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3007.541578] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3007.543334] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3007.543685] FAULT_INJECTION: forcing a failure. [ 3007.543685] name failslab, interval 1, probability 0, space 0, times 0 [ 3007.545072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3007.545085] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3007.550952] CPU: 1 PID: 18936 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3007.552391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3007.554138] Call Trace: [ 3007.554694] dump_stack+0x107/0x167 [ 3007.555456] should_fail.cold+0x5/0xa [ 3007.556264] ? create_object.isra.0+0x3a/0xa30 [ 3007.557219] should_failslab+0x5/0x20 [ 3007.558033] kmem_cache_alloc+0x5b/0x310 [ 3007.558888] create_object.isra.0+0x3a/0xa30 [ 3007.559824] kmemleak_alloc_percpu+0xa0/0x100 [ 3007.560766] pcpu_alloc+0x4e2/0x1240 [ 3007.561568] ? io_tctx_exit_cb+0xf0/0xf0 [ 3007.562415] percpu_ref_init+0x31/0x3d0 [ 3007.563265] io_uring_setup+0x47a/0x2980 [ 3007.564111] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3007.565131] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3007.566209] ? wait_for_completion_io+0x270/0x270 [ 3007.567258] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3007.568374] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3007.569484] do_syscall_64+0x33/0x40 [ 3007.570280] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3007.571371] RIP: 0033:0x7f4d680b3b19 [ 3007.572164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3007.576110] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3007.577775] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3007.579304] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3007.580828] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3007.582394] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3007.583919] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:27:00 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 27) [ 3007.616980] FAULT_INJECTION: forcing a failure. [ 3007.616980] name failslab, interval 1, probability 0, space 0, times 0 [ 3007.619813] CPU: 0 PID: 18942 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 3007.621575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3007.623626] Call Trace: [ 3007.624268] dump_stack+0x107/0x167 [ 3007.625166] should_fail.cold+0x5/0xa [ 3007.626110] ? genl_start+0x1e6/0x670 [ 3007.627000] should_failslab+0x5/0x20 [ 3007.627932] kmem_cache_alloc_trace+0x55/0x320 [ 3007.629071] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3007.630324] ? netlink_lookup+0x270/0x500 [ 3007.631357] genl_start+0x1e6/0x670 [ 3007.632274] __netlink_dump_start+0x592/0x8e0 [ 3007.633353] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3007.634547] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3007.635790] genl_family_rcv_msg_dumpit+0x1c9/0x310 [ 3007.637038] ? genl_rcv+0x40/0x40 [ 3007.637909] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3007.639145] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3007.640358] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3007.641649] ? genl_op_from_small+0x23/0x3d0 [ 3007.642753] ? genl_get_cmd+0x3cf/0x480 [ 3007.643731] genl_rcv_msg+0x44d/0x5a0 [ 3007.644657] ? genl_get_cmd+0x480/0x480 [ 3007.645648] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3007.646925] ? lock_release+0x680/0x680 [ 3007.647913] ? __lockdep_reset_lock+0x180/0x180 [ 3007.649072] netlink_rcv_skb+0x14b/0x430 [ 3007.650063] ? genl_get_cmd+0x480/0x480 [ 3007.651039] ? netlink_ack+0xab0/0xab0 [ 3007.652029] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3007.653160] ? is_vmalloc_addr+0x7b/0xb0 [ 3007.654179] genl_rcv+0x24/0x40 [ 3007.655012] netlink_unicast+0x6ce/0xa00 [ 3007.656034] ? netlink_attachskb+0xab0/0xab0 [ 3007.657159] netlink_sendmsg+0x90f/0xe00 [ 3007.658125] ? netlink_unicast+0xa00/0xa00 [ 3007.659212] ? netlink_unicast+0xa00/0xa00 [ 3007.660262] __sock_sendmsg+0x154/0x190 [ 3007.661251] ____sys_sendmsg+0x70d/0x870 [ 3007.662162] ? sock_write_iter+0x3d0/0x3d0 [ 3007.663191] ? do_recvmmsg+0x6d0/0x6d0 [ 3007.664146] ? perf_trace_lock+0x2bd/0x490 [ 3007.665204] ? SOFTIRQ_verbose+0x10/0x10 [ 3007.666207] ? __lockdep_reset_lock+0x180/0x180 [ 3007.667387] ___sys_sendmsg+0xf3/0x170 [ 3007.668322] ? sendmsg_copy_msghdr+0x160/0x160 [ 3007.669436] ? __fget_files+0x2cf/0x520 [ 3007.670405] ? lock_downgrade+0x6d0/0x6d0 [ 3007.671424] ? find_held_lock+0x2c/0x110 [ 3007.672406] ? __fget_files+0x2f8/0x520 [ 3007.673414] ? __fget_light+0xea/0x290 [ 3007.674381] __sys_sendmsg+0xe5/0x1b0 [ 3007.675305] ? __sys_sendmsg_sock+0x40/0x40 [ 3007.676360] ? rcu_read_lock_any_held+0x75/0xa0 [ 3007.677545] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3007.678837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3007.680101] ? trace_hardirqs_on+0x5b/0x180 [ 3007.681181] do_syscall_64+0x33/0x40 [ 3007.682095] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3007.683362] RIP: 0033:0x7f0d9a169b19 [ 3007.684275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3007.688836] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3007.690721] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 3007.692484] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3007.694219] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3007.695961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3007.697743] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 10:27:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 10) 10:27:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 28) 10:27:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0x3}}}}, 0x28}}, 0x0) 10:27:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xa7}, 0x0) 10:27:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:27:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x300}}}}}, 0x28}}, 0x0) [ 3007.874228] FAULT_INJECTION: forcing a failure. [ 3007.874228] name failslab, interval 1, probability 0, space 0, times 0 [ 3007.876455] CPU: 1 PID: 18955 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3007.877815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3007.879435] Call Trace: [ 3007.879952] dump_stack+0x107/0x167 [ 3007.880668] should_fail.cold+0x5/0xa [ 3007.881433] ? create_object.isra.0+0x3a/0xa30 [ 3007.882320] should_failslab+0x5/0x20 [ 3007.883061] kmem_cache_alloc+0x5b/0x310 [ 3007.883861] create_object.isra.0+0x3a/0xa30 [ 3007.884707] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3007.885704] kmem_cache_alloc_trace+0x151/0x320 [ 3007.886620] io_uring_alloc_task_context+0x99/0x6a0 [ 3007.887593] ? io_import_iovec+0x1120/0x1120 [ 3007.888451] ? lock_downgrade+0x6d0/0x6d0 [ 3007.889267] ? do_raw_spin_lock+0x121/0x260 [ 3007.890117] ? rwlock_bug.part.0+0x90/0x90 [ 3007.890950] __io_uring_add_tctx_node+0x2c6/0x520 [ 3007.891879] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3007.892912] ? alloc_fd+0x2e7/0x670 [ 3007.893651] io_uring_setup+0x1fbb/0x2980 [ 3007.894468] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3007.895444] ? wait_for_completion_io+0x270/0x270 [ 3007.896393] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3007.897416] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3007.898405] do_syscall_64+0x33/0x40 [ 3007.899116] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3007.900097] RIP: 0033:0x7fed36701b19 [ 3007.900807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3007.904336] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3007.905803] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3007.907190] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3007.908575] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3007.909954] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3007.911327] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3007.915739] FAULT_INJECTION: forcing a failure. [ 3007.915739] name failslab, interval 1, probability 0, space 0, times 0 [ 3007.918150] CPU: 1 PID: 18956 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3007.919455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3007.921028] Call Trace: [ 3007.921537] dump_stack+0x107/0x167 [ 3007.922228] should_fail.cold+0x5/0xa [ 3007.922954] ? percpu_ref_init+0xd8/0x3d0 [ 3007.923752] should_failslab+0x5/0x20 [ 3007.924664] kmem_cache_alloc_trace+0x55/0x320 [ 3007.925827] ? io_tctx_exit_cb+0xf0/0xf0 [ 3007.926816] percpu_ref_init+0xd8/0x3d0 [ 3007.927801] io_uring_setup+0x47a/0x2980 [ 3007.928792] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3007.929993] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3007.931230] ? wait_for_completion_io+0x270/0x270 [ 3007.932264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3007.933309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3007.934306] do_syscall_64+0x33/0x40 [ 3007.935008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3007.935977] RIP: 0033:0x7f4d680b3b19 [ 3007.936683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3007.940339] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3007.941774] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3007.943101] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3007.944429] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3007.945777] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3007.947105] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3007.951926] FAULT_INJECTION: forcing a failure. [ 3007.951926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3007.954158] CPU: 1 PID: 18954 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3007.955443] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3007.956995] Call Trace: [ 3007.957491] dump_stack+0x107/0x167 [ 3007.958323] should_fail.cold+0x5/0xa [ 3007.959035] __alloc_pages_nodemask+0x182/0x600 [ 3007.959905] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3007.960875] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3007.962232] alloc_pages_current+0x187/0x280 [ 3007.963156] __get_free_pages+0xc/0xa0 [ 3007.963874] pgd_alloc+0x84/0x4e0 [ 3007.964533] ? pgd_page_get_mm+0x40/0x40 [ 3007.965376] ? lockdep_init_map_type+0x2c7/0x780 [ 3007.966502] ? lockdep_init_map_type+0x2c7/0x780 [ 3007.967394] mm_init+0x670/0xab0 [ 3007.968021] copy_process+0x257b/0x78b0 [ 3007.968760] ? SOFTIRQ_verbose+0x10/0x10 [ 3007.969528] ? mark_lock+0xf5/0x2df0 [ 3007.970240] ? __cleanup_sighand+0xb0/0xb0 [ 3007.971038] ? _copy_from_user+0xfb/0x1b0 [ 3007.971816] kernel_clone+0xe7/0x980 [ 3007.972506] ? lock_acquire+0x197/0x470 [ 3007.973250] ? create_io_thread+0xf0/0xf0 [ 3007.974026] ? ksys_write+0x21a/0x260 [ 3007.974730] ? lock_downgrade+0x6d0/0x6d0 [ 3007.975504] __do_sys_clone3+0x1e5/0x320 [ 3007.976263] ? __do_sys_clone+0x110/0x110 [ 3007.977050] ? rcu_read_lock_any_held+0x75/0xa0 [ 3007.977934] ? vfs_write+0x354/0xb10 [ 3007.978616] ? fput_many+0x2f/0x1a0 [ 3007.979294] ? ksys_write+0x1a9/0x260 [ 3007.979989] ? __ia32_sys_read+0xb0/0xb0 [ 3007.980751] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3007.981733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3007.982688] ? trace_hardirqs_on+0x5b/0x180 [ 3007.983492] do_syscall_64+0x33/0x40 [ 3007.984186] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3007.985138] RIP: 0033:0x7f55c06adb19 [ 3007.985841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3007.989717] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3007.991276] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3007.992875] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3007.994364] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3007.995970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3007.997299] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3008.014691] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:27:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x500}}}}}, 0x28}}, 0x0) 10:27:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 9) 10:27:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x2, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:27:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0x28}}}}, 0x28}}, 0x0) 10:27:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 29) [ 3008.246921] FAULT_INJECTION: forcing a failure. [ 3008.246921] name failslab, interval 1, probability 0, space 0, times 0 [ 3008.250698] CPU: 0 PID: 18978 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 3008.252329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3008.254191] Call Trace: [ 3008.254785] dump_stack+0x107/0x167 [ 3008.255604] should_fail.cold+0x5/0xa [ 3008.256458] ? create_object.isra.0+0x3a/0xa30 [ 3008.257462] should_failslab+0x5/0x20 [ 3008.258311] kmem_cache_alloc+0x5b/0x310 [ 3008.259211] ? lock_downgrade+0x6d0/0x6d0 [ 3008.260135] create_object.isra.0+0x3a/0xa30 [ 3008.261114] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3008.262234] kmem_cache_alloc_trace+0x151/0x320 [ 3008.263273] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3008.264415] genl_start+0x1e6/0x670 [ 3008.265252] __netlink_dump_start+0x592/0x8e0 [ 3008.266245] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3008.267362] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3008.268479] genl_family_rcv_msg_dumpit+0x1c9/0x310 [ 3008.269594] ? genl_rcv+0x40/0x40 [ 3008.270377] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3008.271486] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3008.272588] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3008.273744] ? genl_op_from_small+0x23/0x3d0 [ 3008.274696] ? genl_get_cmd+0x3cf/0x480 [ 3008.275581] genl_rcv_msg+0x44d/0x5a0 [ 3008.276427] ? genl_get_cmd+0x480/0x480 [ 3008.277326] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3008.278456] ? lock_release+0x680/0x680 [ 3008.279338] ? __lockdep_reset_lock+0x180/0x180 [ 3008.280384] netlink_rcv_skb+0x14b/0x430 [ 3008.281289] ? genl_get_cmd+0x480/0x480 [ 3008.282182] ? netlink_ack+0xab0/0xab0 [ 3008.283049] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3008.284047] ? is_vmalloc_addr+0x7b/0xb0 [ 3008.284950] genl_rcv+0x24/0x40 [ 3008.285692] netlink_unicast+0x6ce/0xa00 [ 3008.286601] ? netlink_attachskb+0xab0/0xab0 [ 3008.287614] netlink_sendmsg+0x90f/0xe00 [ 3008.288544] ? netlink_unicast+0xa00/0xa00 [ 3008.289521] ? netlink_unicast+0xa00/0xa00 [ 3008.290473] __sock_sendmsg+0x154/0x190 [ 3008.291370] ____sys_sendmsg+0x70d/0x870 [ 3008.292286] ? sock_write_iter+0x3d0/0x3d0 [ 3008.293228] ? do_recvmmsg+0x6d0/0x6d0 [ 3008.294104] ? perf_trace_lock+0x2bd/0x490 [ 3008.295035] ? SOFTIRQ_verbose+0x10/0x10 [ 3008.295945] ? __lockdep_reset_lock+0x180/0x180 [ 3008.297000] ___sys_sendmsg+0xf3/0x170 [ 3008.297886] ? sendmsg_copy_msghdr+0x160/0x160 [ 3008.298924] ? __fget_files+0x2cf/0x520 [ 3008.299822] ? lock_downgrade+0x6d0/0x6d0 [ 3008.300763] ? find_held_lock+0x2c/0x110 [ 3008.301708] ? __fget_files+0x2f8/0x520 [ 3008.302627] ? __fget_light+0xea/0x290 [ 3008.303516] __sys_sendmsg+0xe5/0x1b0 [ 3008.304390] ? __sys_sendmsg_sock+0x40/0x40 [ 3008.305366] ? rcu_read_lock_any_held+0x75/0xa0 [ 3008.306456] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3008.307630] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3008.308774] ? trace_hardirqs_on+0x5b/0x180 [ 3008.309756] do_syscall_64+0x33/0x40 [ 3008.310589] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3008.311736] RIP: 0033:0x7f0d9a169b19 [ 3008.312565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3008.316616] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3008.318297] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 3008.319877] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3008.321464] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3008.323040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3008.324625] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 [ 3008.367733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3008.441017] FAULT_INJECTION: forcing a failure. [ 3008.441017] name failslab, interval 1, probability 0, space 0, times 0 [ 3008.444511] CPU: 0 PID: 18987 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3008.446221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3008.448097] Call Trace: [ 3008.448815] dump_stack+0x107/0x167 [ 3008.449846] should_fail.cold+0x5/0xa [ 3008.450878] ? create_object.isra.0+0x3a/0xa30 [ 3008.452039] should_failslab+0x5/0x20 [ 3008.452988] kmem_cache_alloc+0x5b/0x310 [ 3008.454196] create_object.isra.0+0x3a/0xa30 [ 3008.455461] kmemleak_alloc_percpu+0xa0/0x100 [ 3008.456723] pcpu_alloc+0x4e2/0x1240 [ 3008.458087] __percpu_counter_init+0x10d/0x2d0 [ 3008.459288] io_uring_alloc_task_context+0xcc/0x6a0 [ 3008.460585] ? io_import_iovec+0x1120/0x1120 [ 3008.461714] ? lock_downgrade+0x6d0/0x6d0 [ 3008.462736] ? do_raw_spin_lock+0x121/0x260 [ 3008.463911] ? rwlock_bug.part.0+0x90/0x90 [ 3008.465102] __io_uring_add_tctx_node+0x2c6/0x520 [ 3008.466337] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3008.467527] ? alloc_fd+0x2e7/0x670 [ 3008.468703] io_uring_setup+0x1fbb/0x2980 [ 3008.469878] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3008.471005] ? wait_for_completion_io+0x270/0x270 [ 3008.472642] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3008.473872] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3008.475179] do_syscall_64+0x33/0x40 [ 3008.476126] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3008.477295] RIP: 0033:0x7fed36701b19 [ 3008.478179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3008.482026] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3008.483777] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3008.485368] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3008.486980] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3008.488546] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3008.490118] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3018.146116] Bluetooth: hci0: command 0x0406 tx timeout 10:27:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 11) 10:27:15 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 30) 10:27:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 10) 10:27:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x600}}}}}, 0x28}}, 0x0) 10:27:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0}, 0x0) 10:27:15 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 28) 10:27:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0x67}}}}, 0x28}}, 0x0) 10:27:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x3, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 3022.621895] FAULT_INJECTION: forcing a failure. [ 3022.621895] name failslab, interval 1, probability 0, space 0, times 0 [ 3022.624143] CPU: 1 PID: 18997 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 3022.625500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3022.627330] Call Trace: [ 3022.628024] dump_stack+0x107/0x167 [ 3022.628947] should_fail.cold+0x5/0xa [ 3022.629709] ? __alloc_skb+0x6d/0x5b0 [ 3022.630457] should_failslab+0x5/0x20 [ 3022.631202] kmem_cache_alloc_node+0x55/0x330 [ 3022.632077] __alloc_skb+0x6d/0x5b0 [ 3022.632807] netlink_dump+0x195/0x11f0 [ 3022.633578] ? trace_hardirqs_on+0x5b/0x180 [ 3022.634414] ? netlink_deliver_tap+0xcc0/0xcc0 [ 3022.635307] ? kasan_unpoison_shadow+0x33/0x50 [ 3022.636201] ? genl_start+0x452/0x670 [ 3022.637038] __netlink_dump_start+0x62e/0x8e0 [ 3022.637962] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3022.638438] FAULT_INJECTION: forcing a failure. [ 3022.638438] name failslab, interval 1, probability 0, space 0, times 0 [ 3022.638936] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3022.638954] genl_family_rcv_msg_dumpit+0x1c9/0x310 [ 3022.638976] ? genl_rcv+0x40/0x40 [ 3022.639007] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3022.639032] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3022.639049] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3022.639068] ? genl_op_from_small+0x23/0x3d0 [ 3022.648017] ? genl_get_cmd+0x3cf/0x480 [ 3022.648787] genl_rcv_msg+0x44d/0x5a0 [ 3022.649527] ? genl_get_cmd+0x480/0x480 [ 3022.650293] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3022.651274] ? lock_release+0x680/0x680 [ 3022.652035] ? __lockdep_reset_lock+0x180/0x180 [ 3022.652929] netlink_rcv_skb+0x14b/0x430 [ 3022.653716] ? genl_get_cmd+0x480/0x480 [ 3022.654484] ? netlink_ack+0xab0/0xab0 [ 3022.655242] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3022.656114] ? is_vmalloc_addr+0x7b/0xb0 [ 3022.656894] genl_rcv+0x24/0x40 [ 3022.657543] netlink_unicast+0x6ce/0xa00 [ 3022.658334] ? netlink_attachskb+0xab0/0xab0 [ 3022.659183] netlink_sendmsg+0x90f/0xe00 [ 3022.659962] ? netlink_unicast+0xa00/0xa00 [ 3022.660782] ? netlink_unicast+0xa00/0xa00 [ 3022.661595] __sock_sendmsg+0x154/0x190 [ 3022.662353] ____sys_sendmsg+0x70d/0x870 [ 3022.663124] ? sock_write_iter+0x3d0/0x3d0 [ 3022.663924] ? do_recvmmsg+0x6d0/0x6d0 [ 3022.664668] ? SOFTIRQ_verbose+0x10/0x10 [ 3022.665447] ? lock_downgrade+0x6d0/0x6d0 [ 3022.666238] ? __lockdep_reset_lock+0x180/0x180 [ 3022.667113] ? SOFTIRQ_verbose+0x10/0x10 [ 3022.667890] ___sys_sendmsg+0xf3/0x170 [ 3022.668633] ? sendmsg_copy_msghdr+0x160/0x160 [ 3022.669523] ? __fget_files+0x2cf/0x520 [ 3022.670278] ? lock_downgrade+0x6d0/0x6d0 [ 3022.671063] ? find_held_lock+0x2c/0x110 [ 3022.671846] ? __fget_files+0x2f8/0x520 [ 3022.672613] ? __fget_light+0xea/0x290 [ 3022.673370] __sys_sendmsg+0xe5/0x1b0 [ 3022.674101] ? __sys_sendmsg_sock+0x40/0x40 [ 3022.674917] ? rcu_read_lock_any_held+0x75/0xa0 [ 3022.675826] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3022.676813] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3022.677804] ? trace_hardirqs_on+0x5b/0x180 [ 3022.678633] do_syscall_64+0x33/0x40 [ 3022.679349] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3022.680327] RIP: 0033:0x7f0d9a169b19 [ 3022.681039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3022.684524] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3022.685965] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 3022.687314] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3022.688661] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3022.690013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3022.691360] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 [ 3022.692749] CPU: 0 PID: 18998 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3022.694327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3022.696185] Call Trace: [ 3022.696781] dump_stack+0x107/0x167 [ 3022.697622] should_fail.cold+0x5/0xa [ 3022.698497] ? vm_area_dup+0x78/0x290 [ 3022.699359] should_failslab+0x5/0x20 [ 3022.700219] kmem_cache_alloc+0x5b/0x310 [ 3022.701147] vm_area_dup+0x78/0x290 [ 3022.701993] ? __lock_acquire+0xbb1/0x5b00 [ 3022.702981] ? perf_trace_lock+0xac/0x490 [ 3022.703912] ? SOFTIRQ_verbose+0x10/0x10 [ 3022.704835] ? __lockdep_reset_lock+0x180/0x180 [ 3022.705917] ? vm_area_alloc+0x110/0x110 [ 3022.706815] ? find_held_lock+0x2c/0x110 [ 3022.707738] ? get_mm_exe_file+0x139/0x310 [ 3022.708685] ? lock_downgrade+0x6d0/0x6d0 [ 3022.709635] ? down_write_nested+0xe4/0x160 [ 3022.710594] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 3022.711740] ? get_mm_exe_file+0x162/0x310 [ 3022.712686] copy_process+0x298b/0x78b0 [ 3022.713585] ? SOFTIRQ_verbose+0x10/0x10 [ 3022.714575] ? __cleanup_sighand+0xb0/0xb0 [ 3022.715531] ? __might_fault+0x103/0x180 [ 3022.716463] ? _copy_from_user+0xfb/0x1b0 [ 3022.717426] kernel_clone+0xe7/0x980 [ 3022.718268] ? __lockdep_reset_lock+0x180/0x180 [ 3022.719309] ? create_io_thread+0xf0/0xf0 [ 3022.720270] ? ksys_write+0x21a/0x260 [ 3022.721121] ? lock_downgrade+0x6d0/0x6d0 [ 3022.722086] __do_sys_clone3+0x1e5/0x320 [ 3022.722999] ? __do_sys_clone+0x110/0x110 [ 3022.723990] ? rcu_read_lock_any_held+0x75/0xa0 [ 3022.725040] ? vfs_write+0x354/0xb10 [ 3022.725903] ? fput_many+0x2f/0x1a0 [ 3022.726729] ? ksys_write+0x1a9/0x260 [ 3022.727597] ? __ia32_sys_read+0xb0/0xb0 [ 3022.728526] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3022.729808] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3022.731108] ? trace_hardirqs_on+0x5b/0x180 [ 3022.732174] do_syscall_64+0x33/0x40 [ 3022.733184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3022.734423] RIP: 0033:0x7f55c06adb19 [ 3022.735268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3022.739637] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3022.741587] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3022.743420] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3022.745094] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3022.746729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3022.748580] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3022.766526] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:27:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 11) 10:27:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x700}}}}}, 0x28}}, 0x0) [ 3022.862866] FAULT_INJECTION: forcing a failure. [ 3022.862866] name failslab, interval 1, probability 0, space 0, times 0 [ 3022.864887] CPU: 1 PID: 19005 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3022.866090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3022.867501] Call Trace: [ 3022.867954] dump_stack+0x107/0x167 [ 3022.868582] should_fail.cold+0x5/0xa [ 3022.869243] ? create_object.isra.0+0x3a/0xa30 [ 3022.870027] should_failslab+0x5/0x20 [ 3022.870669] kmem_cache_alloc+0x5b/0x310 [ 3022.871358] create_object.isra.0+0x3a/0xa30 [ 3022.872121] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3022.872978] kmem_cache_alloc_trace+0x151/0x320 [ 3022.873777] ? io_tctx_exit_cb+0xf0/0xf0 [ 3022.874457] percpu_ref_init+0xd8/0x3d0 [ 3022.875141] io_uring_setup+0x47a/0x2980 [ 3022.875829] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3022.876693] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3022.877666] ? wait_for_completion_io+0x270/0x270 [ 3022.878784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3022.879796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3022.880772] do_syscall_64+0x33/0x40 [ 3022.881517] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3022.882576] RIP: 0033:0x7f4d680b3b19 [ 3022.883317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3022.886839] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3022.888462] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3022.889878] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3022.891109] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3022.892274] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3022.893684] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:27:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x4, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:27:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0x69}}}}, 0x28}}, 0x0) [ 3022.899373] FAULT_INJECTION: forcing a failure. [ 3022.899373] name failslab, interval 1, probability 0, space 0, times 0 [ 3022.901655] CPU: 1 PID: 18999 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3022.902946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3022.904579] Call Trace: [ 3022.905100] dump_stack+0x107/0x167 [ 3022.905925] should_fail.cold+0x5/0xa [ 3022.906628] ? create_object.isra.0+0x3a/0xa30 [ 3022.907356] should_failslab+0x5/0x20 [ 3022.908085] kmem_cache_alloc+0x5b/0x310 [ 3022.908892] create_object.isra.0+0x3a/0xa30 [ 3022.909755] kmemleak_alloc_percpu+0xa0/0x100 [ 3022.910643] pcpu_alloc+0x4e2/0x1240 [ 3022.911256] __percpu_counter_init+0x10d/0x2d0 [ 3022.912125] io_uring_alloc_task_context+0xcc/0x6a0 [ 3022.913152] ? io_import_iovec+0x1120/0x1120 [ 3022.913964] ? lock_downgrade+0x6d0/0x6d0 [ 3022.914758] ? do_raw_spin_lock+0x121/0x260 [ 3022.915646] ? rwlock_bug.part.0+0x90/0x90 [ 3022.916418] __io_uring_add_tctx_node+0x2c6/0x520 [ 3022.917381] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3022.918393] ? alloc_fd+0x2e7/0x670 [ 3022.919087] io_uring_setup+0x1fbb/0x2980 [ 3022.919778] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3022.920720] ? wait_for_completion_io+0x270/0x270 [ 3022.921757] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3022.922639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3022.923489] do_syscall_64+0x33/0x40 [ 3022.924204] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3022.925235] RIP: 0033:0x7fed36701b19 [ 3022.925945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3022.928916] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3022.930200] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3022.931366] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3022.932521] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3022.933688] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3022.934842] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3022.960447] FAULT_INJECTION: forcing a failure. [ 3022.960447] name failslab, interval 1, probability 0, space 0, times 0 [ 3022.962588] CPU: 1 PID: 19013 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 3022.963778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3022.965180] Call Trace: [ 3022.965604] dump_stack+0x107/0x167 [ 3022.966175] should_fail.cold+0x5/0xa [ 3022.966948] ? create_object.isra.0+0x3a/0xa30 [ 3022.967764] should_failslab+0x5/0x20 [ 3022.968495] kmem_cache_alloc+0x5b/0x310 [ 3022.969315] ? __sys_sendmsg+0xe5/0x1b0 [ 3022.969940] ? do_syscall_64+0x33/0x40 [ 3022.970549] create_object.isra.0+0x3a/0xa30 [ 3022.971226] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3022.972011] kmem_cache_alloc_node+0x169/0x330 [ 3022.972721] __alloc_skb+0x6d/0x5b0 [ 3022.973287] netlink_dump+0x195/0x11f0 [ 3022.973907] ? trace_hardirqs_on+0x5b/0x180 [ 3022.974569] ? netlink_deliver_tap+0xcc0/0xcc0 [ 3022.975269] ? kasan_unpoison_shadow+0x33/0x50 [ 3022.975977] ? genl_start+0x452/0x670 [ 3022.976563] __netlink_dump_start+0x62e/0x8e0 [ 3022.977245] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3022.978011] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3022.978798] genl_family_rcv_msg_dumpit+0x1c9/0x310 [ 3022.979563] ? genl_rcv+0x40/0x40 [ 3022.980103] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3022.980868] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3022.981648] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3022.982439] ? genl_op_from_small+0x23/0x3d0 [ 3022.983107] ? genl_get_cmd+0x3cf/0x480 [ 3022.983715] genl_rcv_msg+0x44d/0x5a0 [ 3022.984303] ? genl_get_cmd+0x480/0x480 [ 3022.984906] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3022.985686] ? lock_release+0x680/0x680 [ 3022.986433] ? __lockdep_reset_lock+0x180/0x180 [ 3022.987305] netlink_rcv_skb+0x14b/0x430 [ 3022.988099] ? genl_get_cmd+0x480/0x480 [ 3022.988715] ? netlink_ack+0xab0/0xab0 [ 3022.989463] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3022.990258] ? is_vmalloc_addr+0x7b/0xb0 [ 3022.991072] genl_rcv+0x24/0x40 [ 3022.991576] netlink_unicast+0x6ce/0xa00 [ 3022.992199] ? netlink_attachskb+0xab0/0xab0 [ 3022.992992] netlink_sendmsg+0x90f/0xe00 [ 3022.993711] ? netlink_unicast+0xa00/0xa00 [ 3022.994489] ? netlink_unicast+0xa00/0xa00 [ 3022.995206] __sock_sendmsg+0x154/0x190 [ 3022.995823] ____sys_sendmsg+0x70d/0x870 [ 3022.996452] ? sock_write_iter+0x3d0/0x3d0 [ 3022.997173] ? do_recvmmsg+0x6d0/0x6d0 [ 3022.997855] ? SOFTIRQ_verbose+0x10/0x10 [ 3022.998664] ? lock_downgrade+0x6d0/0x6d0 [ 3022.999407] ? __lockdep_reset_lock+0x180/0x180 [ 3023.000123] ? SOFTIRQ_verbose+0x10/0x10 [ 3023.000751] ___sys_sendmsg+0xf3/0x170 [ 3023.001362] ? sendmsg_copy_msghdr+0x160/0x160 [ 3023.002217] ? __fget_files+0x2cf/0x520 [ 3023.002837] ? lock_downgrade+0x6d0/0x6d0 [ 3023.003659] ? find_held_lock+0x2c/0x110 [ 3023.004304] ? __fget_files+0x2f8/0x520 [ 3023.004924] ? __fget_light+0xea/0x290 [ 3023.005536] __sys_sendmsg+0xe5/0x1b0 [ 3023.006121] ? __sys_sendmsg_sock+0x40/0x40 [ 3023.006776] ? rcu_read_lock_any_held+0x75/0xa0 [ 3023.007506] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3023.008307] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3023.009211] ? trace_hardirqs_on+0x5b/0x180 [ 3023.009979] do_syscall_64+0x33/0x40 [ 3023.010662] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3023.011455] RIP: 0033:0x7f0d9a169b19 [ 3023.012028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3023.015185] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3023.016345] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 3023.017439] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3023.018518] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3023.019595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3023.020676] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 [ 3023.031723] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:27:29 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 29) 10:27:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 31) 10:27:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 12) 10:27:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x5, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:27:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x300}, 0x0) 10:27:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x117}}}}, 0x28}}, 0x0) 10:27:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x900}}}}}, 0x28}}, 0x0) 10:27:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 12) [ 3036.296840] FAULT_INJECTION: forcing a failure. [ 3036.296840] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.298885] CPU: 1 PID: 19037 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3036.299820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3036.300975] Call Trace: [ 3036.301460] dump_stack+0x107/0x167 [ 3036.301983] should_fail.cold+0x5/0xa [ 3036.302676] ? create_object.isra.0+0x3a/0xa30 [ 3036.303422] should_failslab+0x5/0x20 [ 3036.303941] kmem_cache_alloc+0x5b/0x310 [ 3036.304493] create_object.isra.0+0x3a/0xa30 [ 3036.305078] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3036.305773] kmem_cache_alloc+0x159/0x310 [ 3036.306332] vm_area_dup+0x78/0x290 [ 3036.306828] ? __lock_acquire+0xbb1/0x5b00 [ 3036.307407] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3036.308104] ? SOFTIRQ_verbose+0x10/0x10 [ 3036.308648] ? lock_acquire+0x197/0x470 [ 3036.309178] ? copy_process+0x260c/0x78b0 [ 3036.309786] ? vm_area_alloc+0x110/0x110 [ 3036.310430] ? find_held_lock+0x2c/0x110 [ 3036.311132] ? get_mm_exe_file+0x139/0x310 [ 3036.311833] ? lock_downgrade+0x6d0/0x6d0 [ 3036.312391] ? down_write_nested+0xe4/0x160 [ 3036.312969] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 3036.313767] ? get_mm_exe_file+0x162/0x310 [ 3036.314374] copy_process+0x298b/0x78b0 [ 3036.315033] ? SOFTIRQ_verbose+0x10/0x10 [ 3036.315769] ? __cleanup_sighand+0xb0/0xb0 [ 3036.316351] ? _copy_from_user+0xfb/0x1b0 [ 3036.316912] kernel_clone+0xe7/0x980 [ 3036.317416] ? lock_acquire+0x197/0x470 [ 3036.318084] ? create_io_thread+0xf0/0xf0 [ 3036.318733] ? ksys_write+0x21a/0x260 [ 3036.319468] ? lock_downgrade+0x6d0/0x6d0 [ 3036.320098] __do_sys_clone3+0x1e5/0x320 [ 3036.320659] ? __do_sys_clone+0x110/0x110 [ 3036.321296] ? rcu_read_lock_any_held+0x75/0xa0 [ 3036.322037] ? vfs_write+0x354/0xb10 [ 3036.322715] ? fput_many+0x2f/0x1a0 [ 3036.323372] ? ksys_write+0x1a9/0x260 [ 3036.323889] ? __ia32_sys_read+0xb0/0xb0 [ 3036.324432] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3036.325130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3036.325827] ? trace_hardirqs_on+0x5b/0x180 [ 3036.326409] do_syscall_64+0x33/0x40 [ 3036.326917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3036.327596] RIP: 0033:0x7f55c06adb19 [ 3036.328094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3036.330545] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3036.331555] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3036.332501] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3036.333451] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3036.334393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3036.335332] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3036.344862] FAULT_INJECTION: forcing a failure. [ 3036.344862] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3036.346973] CPU: 1 PID: 19041 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3036.347891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3036.348988] Call Trace: [ 3036.349346] dump_stack+0x107/0x167 [ 3036.349843] should_fail.cold+0x5/0xa [ 3036.350355] __alloc_pages_nodemask+0x182/0x600 [ 3036.350982] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3036.351799] ? cap_capable+0x1cd/0x230 [ 3036.352329] alloc_pages_current+0x187/0x280 [ 3036.352921] __get_free_pages+0xc/0xa0 [ 3036.353457] io_uring_setup+0xe27/0x2980 [ 3036.353999] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3036.354686] ? wait_for_completion_io+0x270/0x270 [ 3036.355339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3036.356043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3036.356732] do_syscall_64+0x33/0x40 [ 3036.357218] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3036.357892] RIP: 0033:0x7f4d680b3b19 [ 3036.358383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3036.360756] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3036.361751] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3036.362686] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3036.363609] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3036.364549] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3036.365482] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3036.376502] FAULT_INJECTION: forcing a failure. [ 3036.376502] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.378399] CPU: 1 PID: 19046 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3036.379299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3036.380369] Call Trace: [ 3036.380721] dump_stack+0x107/0x167 [ 3036.381205] should_fail.cold+0x5/0xa [ 3036.381729] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 3036.382421] should_failslab+0x5/0x20 [ 3036.382923] kmem_cache_alloc_trace+0x55/0x320 [ 3036.383532] io_uring_alloc_task_context+0x4a3/0x6a0 [ 3036.384203] ? io_import_iovec+0x1120/0x1120 [ 3036.384782] ? lock_downgrade+0x6d0/0x6d0 [ 3036.385328] ? do_raw_spin_lock+0x121/0x260 [ 3036.385901] ? rwlock_bug.part.0+0x90/0x90 [ 3036.386465] __io_uring_add_tctx_node+0x2c6/0x520 [ 3036.387101] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3036.387782] ? alloc_fd+0x2e7/0x670 [ 3036.388274] io_uring_setup+0x1fbb/0x2980 [ 3036.388827] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3036.389495] ? wait_for_completion_io+0x270/0x270 [ 3036.390152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3036.390836] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3036.391519] do_syscall_64+0x33/0x40 [ 3036.392008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3036.392676] RIP: 0033:0x7fed36701b19 [ 3036.393162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3036.395584] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3036.396567] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3036.397494] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3036.398430] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3036.399356] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3036.400274] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3036.422487] FAULT_INJECTION: forcing a failure. [ 3036.422487] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.425122] CPU: 0 PID: 19048 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 3036.426708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3036.428586] Call Trace: [ 3036.429196] dump_stack+0x107/0x167 [ 3036.430040] should_fail.cold+0x5/0xa [ 3036.430924] should_failslab+0x5/0x20 [ 3036.431790] __kmalloc_node_track_caller+0x74/0x3b0 [ 3036.432914] ? netlink_dump+0x195/0x11f0 [ 3036.433865] __alloc_skb+0xb1/0x5b0 [ 3036.434706] netlink_dump+0x195/0x11f0 [ 3036.435584] ? trace_hardirqs_on+0x5b/0x180 [ 3036.436563] ? netlink_deliver_tap+0xcc0/0xcc0 [ 3036.437604] ? kasan_unpoison_shadow+0x33/0x50 [ 3036.438660] ? genl_start+0x452/0x670 [ 3036.439528] __netlink_dump_start+0x62e/0x8e0 [ 3036.440545] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3036.441691] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3036.442837] genl_family_rcv_msg_dumpit+0x1c9/0x310 [ 3036.443974] ? genl_rcv+0x40/0x40 [ 3036.444787] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3036.445923] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3036.447071] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3036.448243] ? genl_op_from_small+0x23/0x3d0 [ 3036.449248] ? genl_get_cmd+0x3cf/0x480 [ 3036.450179] genl_rcv_msg+0x44d/0x5a0 [ 3036.451057] ? genl_get_cmd+0x480/0x480 [ 3036.451973] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3036.453138] ? lock_release+0x680/0x680 [ 3036.454051] ? __lockdep_reset_lock+0x180/0x180 [ 3036.455125] netlink_rcv_skb+0x14b/0x430 [ 3036.456050] ? genl_get_cmd+0x480/0x480 [ 3036.456960] ? netlink_ack+0xab0/0xab0 [ 3036.457881] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3036.458923] ? is_vmalloc_addr+0x7b/0xb0 [ 3036.459855] genl_rcv+0x24/0x40 10:27:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x129}}}}, 0x28}}, 0x0) [ 3036.460610] netlink_unicast+0x6ce/0xa00 [ 3036.461725] ? netlink_attachskb+0xab0/0xab0 [ 3036.462758] netlink_sendmsg+0x90f/0xe00 [ 3036.463707] ? netlink_unicast+0xa00/0xa00 10:27:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xec0}}}}}, 0x28}}, 0x0) 10:27:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x6, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 3036.464684] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 3036.465812] ? netlink_unicast+0xa00/0xa00 [ 3036.466779] __sock_sendmsg+0x154/0x190 [ 3036.467682] ____sys_sendmsg+0x70d/0x870 [ 3036.468617] ? sock_write_iter+0x3d0/0x3d0 [ 3036.469577] ? do_recvmmsg+0x6d0/0x6d0 [ 3036.470467] ? perf_trace_lock+0x2bd/0x490 [ 3036.471432] ? SOFTIRQ_verbose+0x10/0x10 [ 3036.472374] ? __lockdep_reset_lock+0x180/0x180 [ 3036.473457] ___sys_sendmsg+0xf3/0x170 [ 3036.474356] ? sendmsg_copy_msghdr+0x160/0x160 [ 3036.475407] ? __fget_files+0x2cf/0x520 [ 3036.476314] ? lock_downgrade+0x6d0/0x6d0 [ 3036.477259] ? find_held_lock+0x2c/0x110 [ 3036.478220] ? __fget_files+0x2f8/0x520 [ 3036.479149] ? __fget_light+0xea/0x290 [ 3036.480066] __sys_sendmsg+0xe5/0x1b0 [ 3036.480933] ? __sys_sendmsg_sock+0x40/0x40 [ 3036.481921] ? rcu_read_lock_any_held+0x75/0xa0 [ 3036.483020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3036.484210] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3036.485375] ? trace_hardirqs_on+0x5b/0x180 [ 3036.486379] do_syscall_64+0x33/0x40 [ 3036.487226] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3036.488399] RIP: 0033:0x7f0d9a169b19 [ 3036.489248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3036.493467] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3036.495211] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 3036.496848] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3036.498501] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3036.500126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3036.501758] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 10:27:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 32) 10:27:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 13) 10:27:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x500}, 0x0) 10:27:29 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 30) 10:27:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 13) [ 3036.662778] FAULT_INJECTION: forcing a failure. [ 3036.662778] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.664140] CPU: 1 PID: 19064 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3036.664916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3036.665868] Call Trace: [ 3036.666175] dump_stack+0x107/0x167 [ 3036.666588] should_fail.cold+0x5/0xa [ 3036.667022] ? create_object.isra.0+0x3a/0xa30 [ 3036.667537] should_failslab+0x5/0x20 [ 3036.667967] kmem_cache_alloc+0x5b/0x310 [ 3036.668429] create_object.isra.0+0x3a/0xa30 [ 3036.668925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3036.669512] kmem_cache_alloc_trace+0x151/0x320 [ 3036.670046] io_uring_alloc_task_context+0x4a3/0x6a0 [ 3036.670622] ? io_import_iovec+0x1120/0x1120 [ 3036.671129] ? lock_downgrade+0x6d0/0x6d0 [ 3036.671595] ? do_raw_spin_lock+0x121/0x260 [ 3036.672081] ? rwlock_bug.part.0+0x90/0x90 [ 3036.672560] __io_uring_add_tctx_node+0x2c6/0x520 [ 3036.673105] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3036.673698] ? alloc_fd+0x2e7/0x670 [ 3036.674120] io_uring_setup+0x1fbb/0x2980 [ 3036.674591] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3036.675166] ? wait_for_completion_io+0x270/0x270 [ 3036.675721] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3036.676312] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3036.676894] do_syscall_64+0x33/0x40 [ 3036.677319] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3036.677905] RIP: 0033:0x7fed36701b19 [ 3036.678329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3036.680397] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3036.681261] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3036.682080] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3036.682881] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3036.683685] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3036.684489] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3036.776059] FAULT_INJECTION: forcing a failure. [ 3036.776059] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.778848] CPU: 0 PID: 19073 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3036.780505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3036.782344] Call Trace: [ 3036.782946] dump_stack+0x107/0x167 [ 3036.783763] should_fail.cold+0x5/0xa [ 3036.784610] ? vm_area_dup+0x78/0x290 [ 3036.785466] should_failslab+0x5/0x20 [ 3036.786314] kmem_cache_alloc+0x5b/0x310 [ 3036.787235] vm_area_dup+0x78/0x290 [ 3036.788062] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3036.789094] ? lock_downgrade+0x6d0/0x6d0 [ 3036.790022] ? copy_page_range+0x24e9/0x3810 [ 3036.791022] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3036.792062] ? avc_has_extended_perms+0xf40/0xf40 [ 3036.793144] ? vm_area_alloc+0x110/0x110 [ 3036.794046] ? find_held_lock+0x2c/0x110 [ 3036.794957] ? selinux_vm_enough_memory+0x114/0x180 [ 3036.796059] ? selinux_sb_statfs+0x250/0x250 [ 3036.797035] ? percpu_counter_add_batch+0x8b/0x140 [ 3036.798133] ? __vm_enough_memory+0x184/0x360 [ 3036.799121] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3036.800258] copy_process+0x298b/0x78b0 [ 3036.801132] ? SOFTIRQ_verbose+0x10/0x10 [ 3036.802116] ? __cleanup_sighand+0xb0/0xb0 [ 3036.803093] ? _copy_from_user+0xfb/0x1b0 [ 3036.804032] kernel_clone+0xe7/0x980 [ 3036.804858] ? lock_acquire+0x197/0x470 [ 3036.805753] ? create_io_thread+0xf0/0xf0 [ 3036.806707] ? ksys_write+0x21a/0x260 [ 3036.807543] ? lock_downgrade+0x6d0/0x6d0 [ 3036.808467] __do_sys_clone3+0x1e5/0x320 [ 3036.809364] ? __do_sys_clone+0x110/0x110 [ 3036.810334] ? rcu_read_lock_any_held+0x75/0xa0 [ 3036.811362] ? vfs_write+0x354/0xb10 [ 3036.812189] ? fput_many+0x2f/0x1a0 [ 3036.813001] ? ksys_write+0x1a9/0x260 [ 3036.813849] ? __ia32_sys_read+0xb0/0xb0 [ 3036.814753] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3036.815915] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3036.817050] ? trace_hardirqs_on+0x5b/0x180 [ 3036.818014] do_syscall_64+0x33/0x40 [ 3036.818846] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3036.819986] RIP: 0033:0x7f55c06adb19 [ 3036.820819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3036.822536] FAULT_INJECTION: forcing a failure. [ 3036.822536] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3036.824850] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3036.824876] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3036.824894] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3036.831087] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3036.832661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3036.834237] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3036.835857] CPU: 1 PID: 19071 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3036.836713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3036.837678] Call Trace: [ 3036.837992] dump_stack+0x107/0x167 [ 3036.838412] should_fail.cold+0x5/0xa 10:27:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x7, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:27:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 3036.838995] __alloc_pages_nodemask+0x182/0x600 [ 3036.839606] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3036.840320] ? cap_capable+0x1cd/0x230 [ 3036.840827] alloc_pages_current+0x187/0x280 [ 3036.841343] __get_free_pages+0xc/0xa0 [ 3036.841806] io_uring_setup+0xf9a/0x2980 [ 3036.842287] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3036.842874] ? wait_for_completion_io+0x270/0x270 [ 3036.843452] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3036.844059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3036.844658] do_syscall_64+0x33/0x40 [ 3036.845085] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3036.845680] RIP: 0033:0x7f4d680b3b19 [ 3036.846116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3036.848239] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3036.849125] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3036.849975] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3036.850806] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3036.851645] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3036.852473] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3036.890829] FAULT_INJECTION: forcing a failure. [ 3036.890829] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.893729] CPU: 0 PID: 19075 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 3036.895322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3036.897202] Call Trace: [ 3036.897822] dump_stack+0x107/0x167 [ 3036.898657] should_fail.cold+0x5/0xa [ 3036.899539] ? create_object.isra.0+0x3a/0xa30 [ 3036.900606] should_failslab+0x5/0x20 [ 3036.901476] kmem_cache_alloc+0x5b/0x310 [ 3036.902441] create_object.isra.0+0x3a/0xa30 [ 3036.903463] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3036.904662] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3036.905877] ? netlink_dump+0x195/0x11f0 [ 3036.906825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3036.908065] __alloc_skb+0xb1/0x5b0 [ 3036.908927] netlink_dump+0x195/0x11f0 [ 3036.909849] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 3036.911026] ? netlink_deliver_tap+0xcc0/0xcc0 [ 3036.912091] ? kasan_unpoison_shadow+0x33/0x50 [ 3036.913169] ? genl_start+0x452/0x670 [ 3036.914078] __netlink_dump_start+0x62e/0x8e0 [ 3036.915124] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3036.916389] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3036.917548] genl_family_rcv_msg_dumpit+0x1c9/0x310 [ 3036.918694] ? genl_rcv+0x40/0x40 [ 3036.919519] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3036.920674] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3036.921851] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3036.923046] ? genl_op_from_small+0x23/0x3d0 [ 3036.924054] ? genl_get_cmd+0x3cf/0x480 [ 3036.924989] genl_rcv_msg+0x44d/0x5a0 [ 3036.925878] ? genl_get_cmd+0x480/0x480 [ 3036.926790] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3036.927956] ? lock_release+0x680/0x680 [ 3036.928861] ? __lockdep_reset_lock+0x180/0x180 [ 3036.929940] netlink_rcv_skb+0x14b/0x430 [ 3036.930869] ? genl_get_cmd+0x480/0x480 [ 3036.931779] ? netlink_ack+0xab0/0xab0 [ 3036.932689] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3036.933741] ? is_vmalloc_addr+0x7b/0xb0 [ 3036.934676] genl_rcv+0x24/0x40 [ 3036.935428] netlink_unicast+0x6ce/0xa00 [ 3036.936369] ? netlink_attachskb+0xab0/0xab0 [ 3036.937402] netlink_sendmsg+0x90f/0xe00 [ 3036.938358] ? netlink_unicast+0xa00/0xa00 [ 3036.939352] ? netlink_unicast+0xa00/0xa00 [ 3036.940321] __sock_sendmsg+0x154/0x190 [ 3036.941233] ____sys_sendmsg+0x70d/0x870 [ 3036.942180] ? sock_write_iter+0x3d0/0x3d0 [ 3036.943146] ? do_recvmmsg+0x6d0/0x6d0 [ 3036.944031] ? perf_trace_lock+0x2bd/0x490 [ 3036.945007] ? SOFTIRQ_verbose+0x10/0x10 [ 3036.945949] ? __lockdep_reset_lock+0x180/0x180 [ 3036.947022] ___sys_sendmsg+0xf3/0x170 [ 3036.947921] ? sendmsg_copy_msghdr+0x160/0x160 [ 3036.948980] ? __fget_files+0x2cf/0x520 [ 3036.949900] ? lock_downgrade+0x6d0/0x6d0 [ 3036.950849] ? find_held_lock+0x2c/0x110 [ 3036.951802] ? __fget_files+0x2f8/0x520 [ 3036.952737] ? __fget_light+0xea/0x290 [ 3036.953656] __sys_sendmsg+0xe5/0x1b0 [ 3036.954525] ? __sys_sendmsg_sock+0x40/0x40 [ 3036.955506] ? rcu_read_lock_any_held+0x75/0xa0 [ 3036.956603] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3036.957809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3036.958975] ? trace_hardirqs_on+0x5b/0x180 [ 3036.959963] do_syscall_64+0x33/0x40 [ 3036.960824] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3036.961996] RIP: 0033:0x7f0d9a169b19 [ 3036.962844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3036.967006] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3036.968743] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 3036.970366] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3036.971990] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3036.973614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3036.975232] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 10:27:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x8, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:27:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xf00}}}}}, 0x28}}, 0x0) 10:27:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 14) 10:27:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2}}}}}, 0x28}}, 0x0) 10:27:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 14) 10:27:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 33) 10:27:44 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 31) 10:27:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x600}, 0x0) [ 3051.526716] FAULT_INJECTION: forcing a failure. [ 3051.526716] name failslab, interval 1, probability 0, space 0, times 0 [ 3051.529152] CPU: 1 PID: 19106 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3051.530634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3051.532398] Call Trace: [ 3051.532967] dump_stack+0x107/0x167 [ 3051.533758] should_fail.cold+0x5/0xa [ 3051.534575] ? create_object.isra.0+0x3a/0xa30 [ 3051.535547] should_failslab+0x5/0x20 [ 3051.536358] kmem_cache_alloc+0x5b/0x310 [ 3051.537230] create_object.isra.0+0x3a/0xa30 [ 3051.538171] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3051.538559] FAULT_INJECTION: forcing a failure. [ 3051.538559] name failslab, interval 1, probability 0, space 0, times 0 [ 3051.539254] kmem_cache_alloc+0x159/0x310 [ 3051.539284] vm_area_dup+0x78/0x290 [ 3051.539315] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3051.539337] ? lock_downgrade+0x6d0/0x6d0 [ 3051.539357] ? copy_page_range+0x24e9/0x3810 [ 3051.539397] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3051.539422] ? avc_has_extended_perms+0xf40/0xf40 [ 3051.539454] ? vm_area_alloc+0x110/0x110 [ 3051.539471] ? find_held_lock+0x2c/0x110 [ 3051.539499] ? selinux_vm_enough_memory+0x114/0x180 [ 3051.539522] ? selinux_sb_statfs+0x250/0x250 [ 3051.539548] ? percpu_counter_add_batch+0x8b/0x140 [ 3051.539575] ? __vm_enough_memory+0x184/0x360 [ 3051.539595] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3051.539618] copy_process+0x298b/0x78b0 [ 3051.539636] ? SOFTIRQ_verbose+0x10/0x10 [ 3051.539705] ? __cleanup_sighand+0xb0/0xb0 [ 3051.557924] ? _copy_from_user+0xfb/0x1b0 [ 3051.558817] kernel_clone+0xe7/0x980 [ 3051.559610] ? __lockdep_reset_lock+0x180/0x180 [ 3051.560604] ? create_io_thread+0xf0/0xf0 [ 3051.561507] ? ksys_write+0x21a/0x260 [ 3051.562332] ? lock_downgrade+0x6d0/0x6d0 [ 3051.563222] __do_sys_clone3+0x1e5/0x320 [ 3051.564086] ? __do_sys_clone+0x110/0x110 [ 3051.565002] ? rcu_read_lock_any_held+0x75/0xa0 [ 3051.565999] ? vfs_write+0x354/0xb10 [ 3051.566792] ? fput_many+0x2f/0x1a0 [ 3051.567570] ? ksys_write+0x1a9/0x260 [ 3051.568380] ? __ia32_sys_read+0xb0/0xb0 [ 3051.569270] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3051.570384] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3051.571505] ? trace_hardirqs_on+0x5b/0x180 [ 3051.572420] do_syscall_64+0x33/0x40 [ 3051.573231] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3051.574319] RIP: 0033:0x7f55c06adb19 [ 3051.575126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3051.579002] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3051.580657] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3051.582213] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3051.583763] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3051.585312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3051.586872] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3051.588488] CPU: 0 PID: 19103 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3051.590267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3051.592345] Call Trace: [ 3051.593134] dump_stack+0x107/0x167 [ 3051.594260] should_fail.cold+0x5/0xa [ 3051.595365] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 3051.596871] should_failslab+0x5/0x20 [ 3051.597910] kmem_cache_alloc_trace+0x55/0x320 [ 3051.599343] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 3051.600836] io_uring_setup+0x14f6/0x2980 [ 3051.602209] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3051.604168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3051.605560] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3051.607111] do_syscall_64+0x33/0x40 [ 3051.608142] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3051.609470] RIP: 0033:0x7f4d680b3b19 [ 3051.610498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3051.614885] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3051.616868] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3051.618669] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3051.620460] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3051.622261] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3051.624046] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3051.628842] FAULT_INJECTION: forcing a failure. [ 3051.628842] name failslab, interval 1, probability 0, space 0, times 0 [ 3051.631431] CPU: 0 PID: 19109 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3051.633023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3051.634938] Call Trace: [ 3051.635544] dump_stack+0x107/0x167 [ 3051.636401] should_fail.cold+0x5/0xa [ 3051.637278] ? create_object.isra.0+0x3a/0xa30 [ 3051.638339] should_failslab+0x5/0x20 [ 3051.639212] kmem_cache_alloc+0x5b/0x310 [ 3051.640153] create_object.isra.0+0x3a/0xa30 [ 3051.641163] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3051.642345] kmem_cache_alloc_trace+0x151/0x320 [ 3051.643423] io_uring_alloc_task_context+0x4a3/0x6a0 [ 3051.644595] ? io_import_iovec+0x1120/0x1120 [ 3051.645619] ? lock_downgrade+0x6d0/0x6d0 [ 3051.646569] ? do_raw_spin_lock+0x121/0x260 [ 3051.647558] ? rwlock_bug.part.0+0x90/0x90 [ 3051.648538] __io_uring_add_tctx_node+0x2c6/0x520 [ 3051.649660] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3051.650864] ? alloc_fd+0x2e7/0x670 [ 3051.651714] io_uring_setup+0x1fbb/0x2980 [ 3051.652678] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3051.653848] ? wait_for_completion_io+0x270/0x270 [ 3051.654984] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3051.656187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3051.657375] do_syscall_64+0x33/0x40 [ 3051.658241] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3051.659418] RIP: 0033:0x7fed36701b19 [ 3051.660276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3051.664492] RSP: 002b:00007fed33c56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3051.666246] RAX: ffffffffffffffda RBX: 00007fed36815020 RCX: 00007fed36701b19 [ 3051.667878] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3051.669518] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3051.671163] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3051.672817] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3051.681471] FAULT_INJECTION: forcing a failure. [ 3051.681471] name failslab, interval 1, probability 0, space 0, times 0 [ 3051.684216] CPU: 0 PID: 19102 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 3051.685836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3051.687753] Call Trace: [ 3051.688366] dump_stack+0x107/0x167 [ 3051.689218] should_fail.cold+0x5/0xa [ 3051.690117] ? nl80211_dump_survey+0xe0/0xa80 [ 3051.691157] should_failslab+0x5/0x20 [ 3051.692039] kmem_cache_alloc_trace+0x55/0x320 [ 3051.693092] ? lock_release+0x680/0x680 [ 3051.694036] nl80211_dump_survey+0xe0/0xa80 [ 3051.695056] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3051.696244] ? trace_hardirqs_on+0x5b/0x180 [ 3051.697258] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 3051.698474] ? netlink_dump+0x195/0x11f0 [ 3051.699419] ? memset+0x20/0x50 [ 3051.700191] ? __alloc_skb+0x388/0x5b0 [ 3051.701107] netlink_dump+0x616/0x11f0 [ 3051.702025] ? trace_hardirqs_on+0x5b/0x180 [ 3051.703024] ? netlink_deliver_tap+0xcc0/0xcc0 [ 3051.704077] ? kasan_unpoison_shadow+0x33/0x50 [ 3051.705161] ? genl_start+0x452/0x670 [ 3051.706061] __netlink_dump_start+0x62e/0x8e0 [ 3051.707110] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3051.708255] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3051.709441] genl_family_rcv_msg_dumpit+0x1c9/0x310 [ 3051.710598] ? genl_rcv+0x40/0x40 [ 3051.711436] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3051.712573] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3051.713771] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3051.714955] ? genl_op_from_small+0x23/0x3d0 [ 3051.715985] ? genl_get_cmd+0x3cf/0x480 [ 3051.716913] genl_rcv_msg+0x44d/0x5a0 [ 3051.717834] ? genl_get_cmd+0x480/0x480 [ 3051.718753] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3051.719951] ? lock_release+0x680/0x680 [ 3051.720863] ? __lockdep_reset_lock+0x180/0x180 [ 3051.721976] netlink_rcv_skb+0x14b/0x430 [ 3051.722911] ? genl_get_cmd+0x480/0x480 [ 3051.723847] ? netlink_ack+0xab0/0xab0 [ 3051.724760] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3051.725845] ? is_vmalloc_addr+0x7b/0xb0 [ 3051.726791] genl_rcv+0x24/0x40 [ 3051.727548] netlink_unicast+0x6ce/0xa00 [ 3051.728505] ? netlink_attachskb+0xab0/0xab0 [ 3051.729540] netlink_sendmsg+0x90f/0xe00 [ 3051.730504] ? netlink_unicast+0xa00/0xa00 [ 3051.731500] ? netlink_unicast+0xa00/0xa00 [ 3051.732478] __sock_sendmsg+0x154/0x190 [ 3051.733392] ____sys_sendmsg+0x70d/0x870 [ 3051.734348] ? sock_write_iter+0x3d0/0x3d0 [ 3051.735319] ? do_recvmmsg+0x6d0/0x6d0 [ 3051.736211] ? perf_trace_lock+0x2bd/0x490 [ 3051.737179] ? SOFTIRQ_verbose+0x10/0x10 [ 3051.738167] ? __lockdep_reset_lock+0x180/0x180 [ 3051.739259] ___sys_sendmsg+0xf3/0x170 [ 3051.740162] ? sendmsg_copy_msghdr+0x160/0x160 [ 3051.741218] ? __fget_files+0x2cf/0x520 [ 3051.742143] ? lock_downgrade+0x6d0/0x6d0 [ 3051.743101] ? find_held_lock+0x2c/0x110 [ 3051.744060] ? __fget_files+0x2f8/0x520 [ 3051.744992] ? __fget_light+0xea/0x290 [ 3051.745922] __sys_sendmsg+0xe5/0x1b0 [ 3051.746804] ? __sys_sendmsg_sock+0x40/0x40 [ 3051.747795] ? rcu_read_lock_any_held+0x75/0xa0 [ 3051.748904] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3051.750110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3051.751289] ? trace_hardirqs_on+0x5b/0x180 [ 3051.752283] do_syscall_64+0x33/0x40 [ 3051.753134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3051.754312] RIP: 0033:0x7f0d9a169b19 [ 3051.755164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3051.759409] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3051.761168] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 3051.762822] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3051.764467] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3051.766146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3051.767792] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 10:27:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3}}}}}, 0x28}}, 0x0) 10:27:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 32) [ 3052.046614] FAULT_INJECTION: forcing a failure. [ 3052.046614] name failslab, interval 1, probability 0, space 0, times 0 [ 3052.049401] CPU: 1 PID: 19125 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3052.050927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3052.052731] Call Trace: [ 3052.053310] dump_stack+0x107/0x167 [ 3052.054114] should_fail.cold+0x5/0xa [ 3052.054947] ? anon_vma_clone+0xdc/0x590 [ 3052.055829] should_failslab+0x5/0x20 [ 3052.056658] kmem_cache_alloc+0x5b/0x310 [ 3052.057566] anon_vma_clone+0xdc/0x590 [ 3052.058426] anon_vma_fork+0x82/0x640 [ 3052.059255] ? __vm_enough_memory+0x184/0x360 [ 3052.060238] copy_process+0x72cd/0x78b0 [ 3052.061127] ? SOFTIRQ_verbose+0x10/0x10 [ 3052.062055] ? __cleanup_sighand+0xb0/0xb0 [ 3052.062999] ? _copy_from_user+0xfb/0x1b0 [ 3052.063910] kernel_clone+0xe7/0x980 [ 3052.064723] ? lock_acquire+0x197/0x470 [ 3052.065596] ? create_io_thread+0xf0/0xf0 [ 3052.066516] ? ksys_write+0x21a/0x260 [ 3052.067344] ? lock_downgrade+0x6d0/0x6d0 [ 3052.068250] __do_sys_clone3+0x1e5/0x320 [ 3052.069133] ? __do_sys_clone+0x110/0x110 [ 3052.070066] ? rcu_read_lock_any_held+0x75/0xa0 [ 3052.071079] ? vfs_write+0x354/0xb10 [ 3052.071929] ? fput_many+0x2f/0x1a0 [ 3052.072866] ? ksys_write+0x1a9/0x260 [ 3052.073933] ? __ia32_sys_read+0xb0/0xb0 [ 3052.074913] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3052.076211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3052.077750] ? trace_hardirqs_on+0x5b/0x180 [ 3052.078713] do_syscall_64+0x33/0x40 [ 3052.079738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3052.081106] RIP: 0033:0x7f55c06adb19 [ 3052.082073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3052.087046] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3052.089038] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3052.090831] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3052.092808] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3052.094662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3052.096605] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:27:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x700}, 0x0) 10:27:59 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 33) 10:27:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4}}}}}, 0x28}}, 0x0) 10:27:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x9, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:27:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 34) 10:27:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 15) 10:27:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xc00e}}}}}, 0x28}}, 0x0) 10:27:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 15) [ 3065.764292] FAULT_INJECTION: forcing a failure. [ 3065.764292] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.766708] CPU: 1 PID: 19139 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3065.768157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3065.769906] Call Trace: [ 3065.770465] dump_stack+0x107/0x167 [ 3065.771232] should_fail.cold+0x5/0xa [ 3065.772035] ? create_object.isra.0+0x3a/0xa30 [ 3065.772992] should_failslab+0x5/0x20 [ 3065.773801] kmem_cache_alloc+0x5b/0x310 [ 3065.774655] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3065.775925] create_object.isra.0+0x3a/0xa30 [ 3065.776850] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3065.777933] kmem_cache_alloc_trace+0x151/0x320 [ 3065.778925] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 3065.780063] io_uring_setup+0x14f6/0x2980 [ 3065.780945] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3065.782292] ? wait_for_completion_io+0x270/0x270 [ 3065.783405] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.784514] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3065.785731] do_syscall_64+0x33/0x40 [ 3065.786693] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3065.787832] RIP: 0033:0x7f4d680b3b19 [ 3065.788620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.792895] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3065.794518] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3065.796015] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3065.797525] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3065.799034] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3065.800525] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3065.810223] FAULT_INJECTION: forcing a failure. [ 3065.810223] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.813121] CPU: 0 PID: 19140 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 3065.814704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3065.815507] FAULT_INJECTION: forcing a failure. [ 3065.815507] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.816581] Call Trace: [ 3065.816607] dump_stack+0x107/0x167 [ 3065.816637] should_fail.cold+0x5/0xa [ 3065.821190] ? create_object.isra.0+0x3a/0xa30 [ 3065.822235] should_failslab+0x5/0x20 [ 3065.823104] kmem_cache_alloc+0x5b/0x310 [ 3065.824042] create_object.isra.0+0x3a/0xa30 [ 3065.825032] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3065.826275] kmem_cache_alloc_trace+0x151/0x320 [ 3065.827356] nl80211_dump_survey+0xe0/0xa80 [ 3065.828357] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3065.829523] ? trace_hardirqs_on+0x5b/0x180 [ 3065.830533] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 3065.831722] ? netlink_dump+0x195/0x11f0 [ 3065.832646] ? memset+0x20/0x50 [ 3065.833403] ? __alloc_skb+0x388/0x5b0 [ 3065.834309] netlink_dump+0x616/0x11f0 [ 3065.835199] ? trace_hardirqs_on+0x5b/0x180 [ 3065.836179] ? netlink_deliver_tap+0xcc0/0xcc0 [ 3065.837212] ? kasan_unpoison_shadow+0x33/0x50 [ 3065.838272] ? genl_start+0x452/0x670 [ 3065.839154] __netlink_dump_start+0x62e/0x8e0 [ 3065.840176] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3065.841330] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3065.842524] genl_family_rcv_msg_dumpit+0x1c9/0x310 [ 3065.843663] ? genl_rcv+0x40/0x40 [ 3065.844478] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3065.845605] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3065.846761] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3065.847935] ? genl_op_from_small+0x23/0x3d0 [ 3065.848942] ? genl_get_cmd+0x3cf/0x480 [ 3065.849866] genl_rcv_msg+0x44d/0x5a0 [ 3065.850747] ? genl_get_cmd+0x480/0x480 [ 3065.851658] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3065.852821] ? lock_release+0x680/0x680 [ 3065.853737] ? __lockdep_reset_lock+0x180/0x180 [ 3065.854813] netlink_rcv_skb+0x14b/0x430 [ 3065.855742] ? genl_get_cmd+0x480/0x480 [ 3065.856655] ? netlink_ack+0xab0/0xab0 [ 3065.857559] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3065.858605] ? is_vmalloc_addr+0x7b/0xb0 [ 3065.859543] genl_rcv+0x24/0x40 [ 3065.860292] netlink_unicast+0x6ce/0xa00 [ 3065.861231] ? netlink_attachskb+0xab0/0xab0 [ 3065.862273] netlink_sendmsg+0x90f/0xe00 [ 3065.863215] ? netlink_unicast+0xa00/0xa00 [ 3065.864203] ? netlink_unicast+0xa00/0xa00 [ 3065.865172] __sock_sendmsg+0x154/0x190 [ 3065.866088] ____sys_sendmsg+0x70d/0x870 [ 3065.867020] ? sock_write_iter+0x3d0/0x3d0 [ 3065.867978] ? do_recvmmsg+0x6d0/0x6d0 [ 3065.868868] ? perf_trace_lock+0x2bd/0x490 [ 3065.869845] ? SOFTIRQ_verbose+0x10/0x10 [ 3065.870777] ? __lockdep_reset_lock+0x180/0x180 [ 3065.871856] ___sys_sendmsg+0xf3/0x170 [ 3065.872752] ? sendmsg_copy_msghdr+0x160/0x160 [ 3065.873813] ? __fget_files+0x2cf/0x520 [ 3065.874723] ? lock_downgrade+0x6d0/0x6d0 [ 3065.875675] ? find_held_lock+0x2c/0x110 [ 3065.876623] ? __fget_files+0x2f8/0x520 [ 3065.877554] ? __fget_light+0xea/0x290 [ 3065.878471] __sys_sendmsg+0xe5/0x1b0 [ 3065.879343] ? __sys_sendmsg_sock+0x40/0x40 [ 3065.880326] ? rcu_read_lock_any_held+0x75/0xa0 [ 3065.881429] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.882632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3065.883799] ? trace_hardirqs_on+0x5b/0x180 [ 3065.884794] do_syscall_64+0x33/0x40 [ 3065.885638] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3065.886814] RIP: 0033:0x7f0d9a169b19 [ 3065.887654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.891828] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3065.893547] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 3065.895177] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3065.896794] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3065.898409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3065.900026] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 [ 3065.901704] CPU: 1 PID: 19143 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3065.903181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3065.904936] Call Trace: [ 3065.905492] dump_stack+0x107/0x167 [ 3065.906268] should_fail.cold+0x5/0xa [ 3065.907072] ? create_object.isra.0+0x3a/0xa30 [ 3065.908035] should_failslab+0x5/0x20 [ 3065.908846] kmem_cache_alloc+0x5b/0x310 [ 3065.909721] create_object.isra.0+0x3a/0xa30 [ 3065.910645] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3065.911721] kmem_cache_alloc+0x159/0x310 [ 3065.912600] vm_area_dup+0x78/0x290 [ 3065.913384] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3065.914395] ? lock_downgrade+0x6d0/0x6d0 [ 3065.915402] ? copy_page_range+0x24e9/0x3810 [ 3065.916351] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3065.917337] ? avc_has_extended_perms+0xf40/0xf40 [ 3065.918379] ? vm_area_alloc+0x110/0x110 [ 3065.919234] ? find_held_lock+0x2c/0x110 [ 3065.920253] ? selinux_vm_enough_memory+0x114/0x180 [ 3065.921308] ? selinux_sb_statfs+0x250/0x250 [ 3065.922342] ? percpu_counter_add_batch+0x8b/0x140 [ 3065.923550] ? __vm_enough_memory+0x184/0x360 [ 3065.924501] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3065.925587] copy_process+0x298b/0x78b0 [ 3065.926666] ? SOFTIRQ_verbose+0x10/0x10 [ 3065.927567] ? __cleanup_sighand+0xb0/0xb0 [ 3065.928590] ? _copy_from_user+0xfb/0x1b0 [ 3065.929480] kernel_clone+0xe7/0x980 [ 3065.930282] ? __lockdep_reset_lock+0x180/0x180 [ 3065.931262] ? create_io_thread+0xf0/0xf0 [ 3065.932159] ? ksys_write+0x21a/0x260 [ 3065.932962] ? lock_downgrade+0x6d0/0x6d0 [ 3065.933850] __do_sys_clone3+0x1e5/0x320 [ 3065.934704] ? __do_sys_clone+0x110/0x110 [ 3065.935605] ? rcu_read_lock_any_held+0x75/0xa0 [ 3065.936581] ? vfs_write+0x354/0xb10 [ 3065.937371] ? fput_many+0x2f/0x1a0 [ 3065.938147] ? ksys_write+0x1a9/0x260 [ 3065.938953] ? __ia32_sys_read+0xb0/0xb0 [ 3065.939816] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.940915] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3065.942006] ? trace_hardirqs_on+0x5b/0x180 [ 3065.942921] do_syscall_64+0x33/0x40 [ 3065.943709] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3065.944785] RIP: 0033:0x7f55c06adb19 [ 3065.945577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.949462] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3065.951070] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3065.952572] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3065.954081] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3065.955582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3065.957096] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3065.968706] FAULT_INJECTION: forcing a failure. [ 3065.968706] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.971598] CPU: 1 PID: 19141 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3065.973179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3065.975051] Call Trace: [ 3065.975723] dump_stack+0x107/0x167 [ 3065.976568] should_fail.cold+0x5/0xa [ 3065.977373] ? create_object.isra.0+0x3a/0xa30 [ 3065.978454] should_failslab+0x5/0x20 [ 3065.979262] kmem_cache_alloc+0x5b/0x310 [ 3065.980213] create_object.isra.0+0x3a/0xa30 [ 3065.981281] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3065.982445] __kmalloc+0x16e/0x390 [ 3065.983209] io_wq_create+0xeb/0xc00 [ 3065.984037] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3065.985185] ? io_import_iovec+0x1120/0x1120 [ 3065.986160] ? io_apoll_task_func+0x2d0/0x2d0 [ 3065.987264] ? __io_req_find_next+0x300/0x300 [ 3065.988373] ? do_raw_spin_lock+0x121/0x260 [ 3065.989278] ? rwlock_bug.part.0+0x90/0x90 [ 3065.990187] __io_uring_add_tctx_node+0x2c6/0x520 [ 3065.991215] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3065.992424] ? alloc_fd+0x2e7/0x670 [ 3065.993207] io_uring_setup+0x1fbb/0x2980 [ 3065.994096] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3065.995163] ? wait_for_completion_io+0x270/0x270 [ 3065.996201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.997308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3065.998404] do_syscall_64+0x33/0x40 [ 3065.999193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3066.000276] RIP: 0033:0x7fed36701b19 [ 3066.001063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3066.004952] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3066.006565] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3066.008068] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3066.009570] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3066.011081] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3066.012585] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:27:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 16) 10:27:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 16) [ 3066.172142] FAULT_INJECTION: forcing a failure. [ 3066.172142] name failslab, interval 1, probability 0, space 0, times 0 [ 3066.174538] CPU: 1 PID: 19155 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3066.175990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3066.177738] Call Trace: [ 3066.178301] dump_stack+0x107/0x167 [ 3066.179080] should_fail.cold+0x5/0xa [ 3066.179885] ? create_object.isra.0+0x3a/0xa30 [ 3066.180846] should_failslab+0x5/0x20 [ 3066.181667] kmem_cache_alloc+0x5b/0x310 [ 3066.182532] create_object.isra.0+0x3a/0xa30 10:27:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0xa, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:27:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xe500}}}}}, 0x28}}, 0x0) [ 3066.183474] kmemleak_alloc_percpu+0xa0/0x100 10:27:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x5}}}}}, 0x28}}, 0x0) [ 3066.184650] pcpu_alloc+0x4e2/0x1240 [ 3066.185548] ? io_async_queue_proc+0x80/0x80 [ 3066.186550] percpu_ref_init+0x31/0x3d0 [ 3066.187389] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 3066.188513] io_uring_setup+0x14f6/0x2980 [ 3066.189389] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3066.190456] ? wait_for_completion_io+0x270/0x270 [ 3066.191480] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 10:27:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x900}, 0x0) [ 3066.192571] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3066.193873] do_syscall_64+0x33/0x40 [ 3066.194819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3066.195901] RIP: 0033:0x7f4d680b3b19 [ 3066.196810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3066.201041] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3066.202895] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3066.204399] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3066.205913] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3066.207421] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3066.208920] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:27:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 35) [ 3066.347943] FAULT_INJECTION: forcing a failure. [ 3066.347943] name failslab, interval 1, probability 0, space 0, times 0 [ 3066.350427] CPU: 1 PID: 19160 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3066.352089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3066.353834] Call Trace: [ 3066.354397] dump_stack+0x107/0x167 [ 3066.355168] should_fail.cold+0x5/0xa [ 3066.355974] ? io_wq_create+0x6ef/0xc00 [ 3066.356807] should_failslab+0x5/0x20 [ 3066.357608] kmem_cache_alloc_node_trace+0x59/0x340 [ 3066.358709] io_wq_create+0x6ef/0xc00 [ 3066.359514] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3066.360585] ? io_import_iovec+0x1120/0x1120 [ 3066.361505] ? io_apoll_task_func+0x2d0/0x2d0 [ 3066.362482] ? __io_req_find_next+0x300/0x300 [ 3066.363417] ? do_raw_spin_lock+0x121/0x260 [ 3066.364317] ? rwlock_bug.part.0+0x90/0x90 [ 3066.365216] __io_uring_add_tctx_node+0x2c6/0x520 [ 3066.366234] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3066.367335] ? alloc_fd+0x2e7/0x670 [ 3066.368116] io_uring_setup+0x1fbb/0x2980 [ 3066.369008] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3066.370087] ? wait_for_completion_io+0x270/0x270 [ 3066.371135] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3066.372237] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3066.373325] do_syscall_64+0x33/0x40 [ 3066.374117] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3066.375195] RIP: 0033:0x7fed36701b19 [ 3066.375971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3066.379847] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3066.381446] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3066.382956] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3066.384449] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3066.385952] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3066.387445] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3066.425896] FAULT_INJECTION: forcing a failure. [ 3066.425896] name failslab, interval 1, probability 0, space 0, times 0 [ 3066.428475] CPU: 0 PID: 19161 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 3066.430053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3066.431931] Call Trace: [ 3066.432542] dump_stack+0x107/0x167 [ 3066.433382] should_fail.cold+0x5/0xa [ 3066.434269] ? nl80211_prepare_wdev_dump+0x8c/0x620 [ 3066.435407] should_failslab+0x5/0x20 [ 3066.436295] kmem_cache_alloc_trace+0x55/0x320 [ 3066.437350] nl80211_prepare_wdev_dump+0x8c/0x620 [ 3066.438451] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3066.439610] nl80211_dump_survey+0x117/0xa80 [ 3066.440637] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3066.441821] ? trace_hardirqs_on+0x5b/0x180 [ 3066.443014] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 3066.444436] ? netlink_dump+0x195/0x11f0 [ 3066.445549] ? memset+0x20/0x50 [ 3066.446467] ? __alloc_skb+0x388/0x5b0 [ 3066.447544] netlink_dump+0x616/0x11f0 [ 3066.448613] ? trace_hardirqs_on+0x5b/0x180 [ 3066.449807] ? netlink_deliver_tap+0xcc0/0xcc0 [ 3066.451053] ? kasan_unpoison_shadow+0x33/0x50 [ 3066.452318] ? genl_start+0x452/0x670 [ 3066.453382] __netlink_dump_start+0x62e/0x8e0 [ 3066.454617] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3066.455985] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3066.457364] genl_family_rcv_msg_dumpit+0x1c9/0x310 [ 3066.458739] ? genl_rcv+0x40/0x40 [ 3066.459712] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3066.461074] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3066.462448] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3066.463858] ? genl_op_from_small+0x23/0x3d0 [ 3066.465051] ? genl_get_cmd+0x3cf/0x480 [ 3066.466187] genl_rcv_msg+0x44d/0x5a0 [ 3066.467235] ? genl_get_cmd+0x480/0x480 [ 3066.468331] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3066.469724] ? lock_release+0x680/0x680 [ 3066.470819] ? __lockdep_reset_lock+0x180/0x180 [ 3066.472093] netlink_rcv_skb+0x14b/0x430 [ 3066.473212] ? genl_get_cmd+0x480/0x480 [ 3066.474306] ? netlink_ack+0xab0/0xab0 [ 3066.475398] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3066.476633] ? is_vmalloc_addr+0x7b/0xb0 [ 3066.477794] genl_rcv+0x24/0x40 [ 3066.478691] netlink_unicast+0x6ce/0xa00 [ 3066.479822] ? netlink_attachskb+0xab0/0xab0 [ 3066.481048] netlink_sendmsg+0x90f/0xe00 [ 3066.482203] ? netlink_unicast+0xa00/0xa00 [ 3066.483384] ? netlink_unicast+0xa00/0xa00 [ 3066.484546] __sock_sendmsg+0x154/0x190 [ 3066.485637] ____sys_sendmsg+0x70d/0x870 [ 3066.486769] ? sock_write_iter+0x3d0/0x3d0 [ 3066.487898] ? do_recvmmsg+0x6d0/0x6d0 [ 3066.488950] ? perf_trace_lock+0x2bd/0x490 [ 3066.490096] ? SOFTIRQ_verbose+0x10/0x10 [ 3066.491210] ? __lockdep_reset_lock+0x180/0x180 [ 3066.492474] ___sys_sendmsg+0xf3/0x170 [ 3066.493537] ? sendmsg_copy_msghdr+0x160/0x160 [ 3066.494785] ? __fget_files+0x2cf/0x520 [ 3066.495859] ? lock_downgrade+0x6d0/0x6d0 [ 3066.496978] ? find_held_lock+0x2c/0x110 [ 3066.498115] ? __fget_files+0x2f8/0x520 [ 3066.499210] ? __fget_light+0xea/0x290 [ 3066.500292] __sys_sendmsg+0xe5/0x1b0 [ 3066.501314] ? __sys_sendmsg_sock+0x40/0x40 [ 3066.502491] ? rcu_read_lock_any_held+0x75/0xa0 [ 3066.503793] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3066.505209] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3066.506606] ? trace_hardirqs_on+0x5b/0x180 [ 3066.507783] do_syscall_64+0x33/0x40 [ 3066.508782] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3066.510177] RIP: 0033:0x7f0d9a169b19 [ 3066.511187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3066.516134] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3066.518184] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 3066.520088] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3066.522038] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3066.523911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3066.525824] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 10:27:59 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 34) 10:27:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xf000}}}}}, 0x28}}, 0x0) 10:27:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 17) 10:27:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 36) 10:27:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0xb, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:27:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 17) [ 3066.712809] FAULT_INJECTION: forcing a failure. [ 3066.712809] name failslab, interval 1, probability 0, space 0, times 0 [ 3066.715189] CPU: 1 PID: 19181 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3066.716478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3066.718029] Call Trace: [ 3066.718528] dump_stack+0x107/0x167 [ 3066.719210] should_fail.cold+0x5/0xa [ 3066.719923] ? create_object.isra.0+0x3a/0xa30 [ 3066.720772] should_failslab+0x5/0x20 [ 3066.721481] kmem_cache_alloc+0x5b/0x310 [ 3066.722257] create_object.isra.0+0x3a/0xa30 [ 3066.723084] kmemleak_alloc_percpu+0xa0/0x100 [ 3066.723924] pcpu_alloc+0x4e2/0x1240 [ 3066.724629] ? io_async_queue_proc+0x80/0x80 [ 3066.725460] percpu_ref_init+0x31/0x3d0 [ 3066.726222] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 3066.727239] io_uring_setup+0x14f6/0x2980 [ 3066.728018] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3066.728962] ? wait_for_completion_io+0x270/0x270 [ 3066.729888] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3066.730851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3066.731804] do_syscall_64+0x33/0x40 [ 3066.732500] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3066.733444] RIP: 0033:0x7f4d680b3b19 [ 3066.734138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3066.737540] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3066.738959] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3066.740277] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3066.741592] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3066.742916] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3066.744227] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:28:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6}}}}}, 0x28}}, 0x0) [ 3066.804473] FAULT_INJECTION: forcing a failure. [ 3066.804473] name failslab, interval 1, probability 0, space 0, times 0 [ 3066.807442] CPU: 0 PID: 19185 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3066.809161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3066.811134] Call Trace: [ 3066.811777] dump_stack+0x107/0x167 [ 3066.812647] should_fail.cold+0x5/0xa [ 3066.813559] ? anon_vma_fork+0xf1/0x640 [ 3066.814507] should_failslab+0x5/0x20 [ 3066.815414] kmem_cache_alloc+0x5b/0x310 [ 3066.816389] anon_vma_fork+0xf1/0x640 [ 3066.817297] ? __vm_enough_memory+0x184/0x360 [ 3066.818373] copy_process+0x72cd/0x78b0 [ 3066.819328] ? SOFTIRQ_verbose+0x10/0x10 [ 3066.820338] ? __cleanup_sighand+0xb0/0xb0 [ 3066.821377] ? _copy_from_user+0xfb/0x1b0 [ 3066.822385] kernel_clone+0xe7/0x980 [ 3066.823279] ? lock_acquire+0x197/0x470 [ 3066.824238] ? create_io_thread+0xf0/0xf0 [ 3066.825255] ? ksys_write+0x21a/0x260 [ 3066.826202] ? lock_downgrade+0x6d0/0x6d0 [ 3066.827204] __do_sys_clone3+0x1e5/0x320 [ 3066.828193] ? __do_sys_clone+0x110/0x110 [ 3066.829211] ? rcu_read_lock_any_held+0x75/0xa0 [ 3066.830332] ? vfs_write+0x354/0xb10 [ 3066.831229] ? fput_many+0x2f/0x1a0 [ 3066.832104] ? ksys_write+0x1a9/0x260 [ 3066.833030] ? __ia32_sys_read+0xb0/0xb0 [ 3066.834018] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3066.835265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3066.836477] ? trace_hardirqs_on+0x5b/0x180 [ 3066.837509] do_syscall_64+0x33/0x40 [ 3066.838390] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3066.839616] RIP: 0033:0x7f55c06adb19 [ 3066.840504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3066.844892] RSP: 002b:00007f55bdc02188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3066.846713] RAX: ffffffffffffffda RBX: 00007f55c07c1020 RCX: 00007f55c06adb19 [ 3066.848432] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3066.850156] RBP: 00007f55bdc021d0 R08: 0000000000000000 R09: 0000000000000000 [ 3066.851864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3066.853558] R13: 00007ffcbb0d12ff R14: 00007f55bdc02300 R15: 0000000000022000 [ 3066.860636] FAULT_INJECTION: forcing a failure. [ 3066.860636] name failslab, interval 1, probability 0, space 0, times 0 [ 3066.863336] CPU: 0 PID: 19187 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3066.865020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3066.866983] Call Trace: [ 3066.867615] dump_stack+0x107/0x167 [ 3066.868469] should_fail.cold+0x5/0xa [ 3066.869392] ? create_object.isra.0+0x3a/0xa30 [ 3066.870470] should_failslab+0x5/0x20 [ 3066.871355] kmem_cache_alloc+0x5b/0x310 [ 3066.872290] ? io_wq_create+0x6ef/0xc00 [ 3066.873213] create_object.isra.0+0x3a/0xa30 [ 3066.874231] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3066.875402] kmem_cache_alloc_node_trace+0x16d/0x340 [ 3066.876581] io_wq_create+0x6ef/0xc00 [ 3066.877469] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3066.878644] ? io_import_iovec+0x1120/0x1120 [ 3066.879657] ? io_apoll_task_func+0x2d0/0x2d0 [ 3066.880685] ? __io_req_find_next+0x300/0x300 [ 3066.881719] ? do_raw_spin_lock+0x121/0x260 [ 3066.882713] ? rwlock_bug.part.0+0x90/0x90 [ 3066.883697] __io_uring_add_tctx_node+0x2c6/0x520 [ 3066.884803] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3066.886015] ? alloc_fd+0x2e7/0x670 [ 3066.886876] io_uring_setup+0x1fbb/0x2980 [ 3066.887837] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3066.889019] ? wait_for_completion_io+0x270/0x270 [ 3066.890160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3066.891354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3066.892547] do_syscall_64+0x33/0x40 [ 3066.893402] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3066.894573] RIP: 0033:0x7fed36701b19 [ 3066.895418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3066.899613] RSP: 002b:00007fed33c56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3066.901367] RAX: ffffffffffffffda RBX: 00007fed36815020 RCX: 00007fed36701b19 [ 3066.903012] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3066.904642] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3066.906278] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3066.907888] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3066.989644] FAULT_INJECTION: forcing a failure. [ 3066.989644] name failslab, interval 1, probability 0, space 0, times 0 [ 3066.991595] CPU: 1 PID: 19195 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 3066.992721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3066.994079] Call Trace: [ 3066.994507] dump_stack+0x107/0x167 [ 3066.995103] should_fail.cold+0x5/0xa [ 3066.995721] ? create_object.isra.0+0x3a/0xa30 [ 3066.996463] should_failslab+0x5/0x20 [ 3066.997087] kmem_cache_alloc+0x5b/0x310 [ 3066.997762] create_object.isra.0+0x3a/0xa30 [ 3066.998472] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3066.999291] kmem_cache_alloc_trace+0x151/0x320 [ 3067.000053] nl80211_prepare_wdev_dump+0x8c/0x620 [ 3067.000825] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3067.001647] nl80211_dump_survey+0x117/0xa80 [ 3067.002374] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3067.003217] ? trace_hardirqs_on+0x5b/0x180 [ 3067.003903] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 3067.004734] ? netlink_dump+0x195/0x11f0 [ 3067.005398] ? memset+0x20/0x50 [ 3067.005938] ? __alloc_skb+0x388/0x5b0 [ 3067.006558] netlink_dump+0x616/0x11f0 [ 3067.007186] ? trace_hardirqs_on+0x5b/0x180 [ 3067.007872] ? netlink_deliver_tap+0xcc0/0xcc0 [ 3067.008590] ? kasan_unpoison_shadow+0x33/0x50 [ 3067.009320] ? genl_start+0x452/0x670 [ 3067.009954] __netlink_dump_start+0x62e/0x8e0 [ 3067.010669] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3067.011456] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3067.012252] genl_family_rcv_msg_dumpit+0x1c9/0x310 [ 3067.013042] ? genl_rcv+0x40/0x40 [ 3067.013600] ? genl_family_rcv_msg_doit+0x330/0x330 [ 3067.014389] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3067.015194] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3067.016018] ? genl_op_from_small+0x23/0x3d0 [ 3067.016710] ? genl_get_cmd+0x3cf/0x480 [ 3067.017359] genl_rcv_msg+0x44d/0x5a0 [ 3067.017976] ? genl_get_cmd+0x480/0x480 [ 3067.018771] ? nl80211_prepare_wdev_dump+0x620/0x620 [ 3067.019641] ? lock_release+0x680/0x680 [ 3067.020309] ? __lockdep_reset_lock+0x180/0x180 [ 3067.021052] netlink_rcv_skb+0x14b/0x430 [ 3067.021815] ? genl_get_cmd+0x480/0x480 [ 3067.022512] ? netlink_ack+0xab0/0xab0 [ 3067.023185] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3067.024032] ? is_vmalloc_addr+0x7b/0xb0 [ 3067.024824] genl_rcv+0x24/0x40 [ 3067.025364] netlink_unicast+0x6ce/0xa00 [ 3067.026139] ? netlink_attachskb+0xab0/0xab0 [ 3067.026850] netlink_sendmsg+0x90f/0xe00 [ 3067.027494] ? netlink_unicast+0xa00/0xa00 [ 3067.028173] ? netlink_unicast+0xa00/0xa00 [ 3067.028945] __sock_sendmsg+0x154/0x190 [ 3067.029672] ____sys_sendmsg+0x70d/0x870 [ 3067.030424] ? sock_write_iter+0x3d0/0x3d0 [ 3067.031096] ? do_recvmmsg+0x6d0/0x6d0 [ 3067.031774] ? SOFTIRQ_verbose+0x10/0x10 [ 3067.032562] ? lock_downgrade+0x6d0/0x6d0 [ 3067.033207] ? __lockdep_reset_lock+0x180/0x180 [ 3067.034043] ? SOFTIRQ_verbose+0x10/0x10 [ 3067.034864] ___sys_sendmsg+0xf3/0x170 [ 3067.035516] ? sendmsg_copy_msghdr+0x160/0x160 [ 3067.036297] ? __fget_files+0x2cf/0x520 [ 3067.037045] ? lock_downgrade+0x6d0/0x6d0 [ 3067.037769] ? find_held_lock+0x2c/0x110 [ 3067.038447] ? __fget_files+0x2f8/0x520 [ 3067.039172] ? __fget_light+0xea/0x290 [ 3067.039917] __sys_sendmsg+0xe5/0x1b0 [ 3067.040514] ? __sys_sendmsg_sock+0x40/0x40 [ 3067.041275] ? rcu_read_lock_any_held+0x75/0xa0 [ 3067.042029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3067.042961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3067.043746] ? trace_hardirqs_on+0x5b/0x180 [ 3067.044422] do_syscall_64+0x33/0x40 [ 3067.045017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3067.046071] RIP: 0033:0x7f0d9a169b19 [ 3067.046633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3067.049768] RSP: 002b:00007f0d976df188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3067.050934] RAX: ffffffffffffffda RBX: 00007f0d9a27cf60 RCX: 00007f0d9a169b19 [ 3067.052003] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 3067.053240] RBP: 00007f0d976df1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3067.054523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3067.055607] R13: 00007ffef3edb7df R14: 00007f0d976df300 R15: 0000000000022000 10:28:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) (fail_nth: 18) 10:28:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf00}, 0x0) 10:28:13 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 35) 10:28:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 18) 10:28:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x80000}}}}}, 0x28}}, 0x0) 10:28:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7}}}}}, 0x28}}, 0x0) 10:28:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 37) 10:28:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0xc, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 3080.150848] FAULT_INJECTION: forcing a failure. [ 3080.150848] name failslab, interval 1, probability 0, space 0, times 0 [ 3080.153515] CPU: 1 PID: 19211 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3080.155100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3080.156987] Call Trace: [ 3080.157590] dump_stack+0x107/0x167 [ 3080.158485] should_fail.cold+0x5/0xa [ 3080.159357] ? percpu_ref_init+0xd8/0x3d0 [ 3080.160309] should_failslab+0x5/0x20 [ 3080.161180] kmem_cache_alloc_trace+0x55/0x320 [ 3080.162233] ? io_async_queue_proc+0x80/0x80 [ 3080.163233] percpu_ref_init+0xd8/0x3d0 [ 3080.164147] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 3080.164484] FAULT_INJECTION: forcing a failure. [ 3080.164484] name failslab, interval 1, probability 0, space 0, times 0 [ 3080.165383] io_uring_setup+0x14f6/0x2980 [ 3080.165415] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3080.165436] ? wait_for_completion_io+0x270/0x270 [ 3080.170154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3080.171362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3080.172551] do_syscall_64+0x33/0x40 [ 3080.173414] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3080.174594] RIP: 0033:0x7f4d680b3b19 [ 3080.175442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3080.179626] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3080.181348] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3080.182977] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3080.184587] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3080.186231] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3080.187840] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3080.189477] CPU: 0 PID: 19210 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3080.190604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3080.191745] Call Trace: 10:28:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xf0ffff}}}}}, 0x28}}, 0x0) [ 3080.192117] dump_stack+0x107/0x167 [ 3080.192744] should_fail.cold+0x5/0xa [ 3080.193273] ? create_object.isra.0+0x3a/0xa30 [ 3080.193914] should_failslab+0x5/0x20 [ 3080.194441] kmem_cache_alloc+0x5b/0x310 [ 3080.195010] create_object.isra.0+0x3a/0xa30 [ 3080.195613] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3080.196321] kmem_cache_alloc+0x159/0x310 [ 3080.196915] anon_vma_fork+0xf1/0x640 [ 3080.197444] ? __vm_enough_memory+0x184/0x360 [ 3080.198083] copy_process+0x72cd/0x78b0 [ 3080.198623] ? SOFTIRQ_verbose+0x10/0x10 [ 3080.199227] ? __cleanup_sighand+0xb0/0xb0 [ 3080.199840] ? _copy_from_user+0xfb/0x1b0 [ 3080.200422] kernel_clone+0xe7/0x980 [ 3080.200940] ? lock_acquire+0x197/0x470 [ 3080.201485] ? create_io_thread+0xf0/0xf0 [ 3080.202081] ? ksys_write+0x21a/0x260 [ 3080.202604] ? lock_downgrade+0x6d0/0x6d0 [ 3080.203181] __do_sys_clone3+0x1e5/0x320 [ 3080.203739] ? __do_sys_clone+0x110/0x110 [ 3080.204336] ? rcu_read_lock_any_held+0x75/0xa0 [ 3080.204975] ? vfs_write+0x354/0xb10 [ 3080.205489] ? fput_many+0x2f/0x1a0 [ 3080.206000] ? ksys_write+0x1a9/0x260 [ 3080.206526] ? __ia32_sys_read+0xb0/0xb0 [ 3080.207088] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3080.207803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3080.208506] ? trace_hardirqs_on+0x5b/0x180 [ 3080.209101] do_syscall_64+0x33/0x40 [ 3080.209614] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3080.210328] RIP: 0033:0x7f55c06adb19 [ 3080.210837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3080.213335] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3080.214378] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3080.215357] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3080.216326] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3080.217301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3080.218289] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3080.220028] FAULT_INJECTION: forcing a failure. [ 3080.220028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3080.221705] CPU: 0 PID: 19215 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 3080.222735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3080.223855] Call Trace: [ 3080.224208] dump_stack+0x107/0x167 [ 3080.224699] should_fail.cold+0x5/0xa [ 3080.225238] _copy_to_user+0x2e/0x180 [ 3080.225767] simple_read_from_buffer+0xcc/0x160 [ 3080.226395] proc_fail_nth_read+0x198/0x230 [ 3080.226992] ? proc_sessionid_read+0x230/0x230 [ 3080.227612] ? security_file_permission+0xb1/0xe0 [ 3080.228274] ? proc_sessionid_read+0x230/0x230 [ 3080.228887] vfs_read+0x228/0x620 [ 3080.229363] ksys_read+0x12d/0x260 [ 3080.229850] ? vfs_write+0xb10/0xb10 [ 3080.230356] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3080.231061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3080.231758] do_syscall_64+0x33/0x40 [ 3080.232256] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3080.232951] RIP: 0033:0x7f0d9a11c69c [ 3080.233451] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3080.235950] RSP: 002b:00007f0d976be170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3080.236980] RAX: ffffffffffffffda RBX: 0000000000000028 RCX: 00007f0d9a11c69c [ 3080.237946] RDX: 000000000000000f RSI: 00007f0d976be1e0 RDI: 0000000000000005 [ 3080.238898] RBP: 00007f0d976be1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3080.239851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3080.240808] R13: 00007ffef3edb7df R14: 00007f0d976be300 R15: 0000000000022000 10:28:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:28:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 19) 10:28:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8}}}}}, 0x28}}, 0x0) [ 3080.388055] FAULT_INJECTION: forcing a failure. [ 3080.388055] name failslab, interval 1, probability 0, space 0, times 0 [ 3080.391753] CPU: 0 PID: 19217 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3080.393629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3080.395652] Call Trace: [ 3080.396411] dump_stack+0x107/0x167 [ 3080.397479] should_fail.cold+0x5/0xa [ 3080.398549] ? __io_uring_add_tctx_node+0x15c/0x520 [ 3080.399862] should_failslab+0x5/0x20 [ 3080.400845] kmem_cache_alloc_trace+0x55/0x320 [ 3080.402202] __io_uring_add_tctx_node+0x15c/0x520 [ 3080.403479] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3080.404781] ? alloc_fd+0x2e7/0x670 [ 3080.406041] io_uring_setup+0x1fbb/0x2980 [ 3080.407313] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3080.408579] ? wait_for_completion_io+0x270/0x270 [ 3080.410329] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3080.411666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3080.413104] do_syscall_64+0x33/0x40 [ 3080.414105] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3080.415386] RIP: 0033:0x7fed36701b19 [ 3080.416362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3080.420650] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3080.422573] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3080.424319] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3080.426075] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3080.427810] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3080.429541] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3080.600489] FAULT_INJECTION: forcing a failure. [ 3080.600489] name failslab, interval 1, probability 0, space 0, times 0 [ 3080.604927] CPU: 0 PID: 19233 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3080.606669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3080.608703] Call Trace: [ 3080.609482] dump_stack+0x107/0x167 [ 3080.610607] should_fail.cold+0x5/0xa [ 3080.611702] ? create_object.isra.0+0x3a/0xa30 [ 3080.612971] should_failslab+0x5/0x20 [ 3080.613997] kmem_cache_alloc+0x5b/0x310 [ 3080.615310] create_object.isra.0+0x3a/0xa30 [ 3080.616455] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3080.617959] kmem_cache_alloc_trace+0x151/0x320 [ 3080.619328] ? io_async_queue_proc+0x80/0x80 [ 3080.620533] percpu_ref_init+0xd8/0x3d0 [ 3080.621782] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 3080.623264] io_uring_setup+0x14f6/0x2980 [ 3080.624624] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3080.625940] ? wait_for_completion_io+0x270/0x270 [ 3080.627810] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3080.629180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3080.630700] do_syscall_64+0x33/0x40 [ 3080.631718] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3080.633031] RIP: 0033:0x7f4d680b3b19 [ 3080.634048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3080.638400] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3080.640359] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3080.642151] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3080.643915] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3080.645681] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3080.647460] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:28:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 20) 10:28:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0xd, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:28:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:28:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xa700}, 0x0) 10:28:28 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 36) 10:28:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1000000}}}}}, 0x28}}, 0x0) 10:28:28 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 38) 10:28:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9}}}}}, 0x28}}, 0x0) [ 3095.603451] FAULT_INJECTION: forcing a failure. [ 3095.603451] name failslab, interval 1, probability 0, space 0, times 0 [ 3095.605934] CPU: 1 PID: 19253 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3095.606377] FAULT_INJECTION: forcing a failure. [ 3095.606377] name failslab, interval 1, probability 0, space 0, times 0 [ 3095.607372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3095.607381] Call Trace: [ 3095.607406] dump_stack+0x107/0x167 [ 3095.607429] should_fail.cold+0x5/0xa [ 3095.607457] ? __io_uring_add_tctx_node+0x15c/0x520 [ 3095.614772] should_failslab+0x5/0x20 [ 3095.615571] kmem_cache_alloc_trace+0x55/0x320 [ 3095.616555] __io_uring_add_tctx_node+0x15c/0x520 [ 3095.617568] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3095.618672] ? alloc_fd+0x2e7/0x670 [ 3095.619448] io_uring_setup+0x1fbb/0x2980 [ 3095.620334] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3095.621409] ? wait_for_completion_io+0x270/0x270 [ 3095.622461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3095.623558] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3095.624639] do_syscall_64+0x33/0x40 [ 3095.625418] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3095.626505] RIP: 0033:0x7fed36701b19 [ 3095.627289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3095.631164] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3095.632748] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3095.634248] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3095.635739] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3095.637232] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3095.638742] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3095.640276] CPU: 0 PID: 19251 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3095.641871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3095.643367] FAULT_INJECTION: forcing a failure. [ 3095.643367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3095.643742] Call Trace: [ 3095.646742] dump_stack+0x107/0x167 [ 3095.647579] should_fail.cold+0x5/0xa [ 3095.648450] ? anon_vma_fork+0x1ff/0x640 [ 3095.649366] should_failslab+0x5/0x20 [ 3095.650244] kmem_cache_alloc+0x5b/0x310 [ 3095.651196] anon_vma_fork+0x1ff/0x640 [ 3095.652096] copy_process+0x72cd/0x78b0 [ 3095.653003] ? SOFTIRQ_verbose+0x10/0x10 [ 3095.654006] ? __cleanup_sighand+0xb0/0xb0 [ 3095.655002] ? _copy_from_user+0xfb/0x1b0 [ 3095.655955] kernel_clone+0xe7/0x980 [ 3095.656797] ? __lockdep_reset_lock+0x180/0x180 [ 3095.657849] ? create_io_thread+0xf0/0xf0 [ 3095.658838] ? ksys_write+0x21a/0x260 [ 3095.659702] ? lock_downgrade+0x6d0/0x6d0 [ 3095.660658] __do_sys_clone3+0x1e5/0x320 [ 3095.661584] ? __do_sys_clone+0x110/0x110 [ 3095.662574] ? rcu_read_lock_any_held+0x75/0xa0 [ 3095.663617] ? vfs_write+0x354/0xb10 [ 3095.664462] ? fput_many+0x2f/0x1a0 [ 3095.665291] ? ksys_write+0x1a9/0x260 [ 3095.666164] ? __ia32_sys_read+0xb0/0xb0 [ 3095.667087] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3095.668276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3095.669436] ? trace_hardirqs_on+0x5b/0x180 [ 3095.670421] do_syscall_64+0x33/0x40 [ 3095.671259] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3095.672412] RIP: 0033:0x7f55c06adb19 [ 3095.673259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3095.677414] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3095.679163] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3095.680762] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3095.682373] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3095.683955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3095.685552] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3095.687216] CPU: 1 PID: 19252 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3095.688676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3095.690427] Call Trace: [ 3095.690983] dump_stack+0x107/0x167 [ 3095.691749] should_fail.cold+0x5/0xa [ 3095.692553] _copy_to_user+0x2e/0x180 [ 3095.693358] io_uring_setup+0x11b5/0x2980 [ 3095.694258] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3095.695322] ? wait_for_completion_io+0x270/0x270 [ 3095.696369] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3095.697471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3095.698570] do_syscall_64+0x33/0x40 [ 3095.699359] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3095.700435] RIP: 0033:0x7f4d680b3b19 [ 3095.701217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3095.705079] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3095.706683] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3095.708194] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3095.709694] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3095.711202] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3095.712706] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:28:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xf}}}}}, 0x28}}, 0x0) 10:28:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:28:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2000000}}}}}, 0x28}}, 0x0) 10:28:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0xe, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:28:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 21) 10:28:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 39) 10:28:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf000}, 0x0) 10:28:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xf0}}}}}, 0x28}}, 0x0) 10:28:29 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 37) 10:28:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3000000}}}}}, 0x28}}, 0x0) 10:28:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 3096.085550] FAULT_INJECTION: forcing a failure. [ 3096.085550] name failslab, interval 1, probability 0, space 0, times 0 [ 3096.088145] CPU: 1 PID: 19281 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3096.089461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3096.091095] FAULT_INJECTION: forcing a failure. [ 3096.091095] name failslab, interval 1, probability 0, space 0, times 0 [ 3096.093698] Call Trace: [ 3096.093756] dump_stack+0x107/0x167 [ 3096.093787] should_fail.cold+0x5/0xa [ 3096.093815] ? xas_alloc+0x336/0x440 [ 3096.093841] should_failslab+0x5/0x20 [ 3096.093878] kmem_cache_alloc+0x5b/0x310 [ 3096.093906] ? stack_trace_consume_entry+0x160/0x160 [ 3096.093938] xas_alloc+0x336/0x440 [ 3096.093970] xas_create+0x34a/0x10d0 [ 3096.094018] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3096.101977] xas_store+0x8c/0x1c40 [ 3096.102682] __xa_store+0x164/0x2d0 [ 3096.103474] ? xa_delete_node+0x280/0x280 [ 3096.104339] ? trace_hardirqs_on+0x5b/0x180 [ 3096.105188] xa_store+0x31/0x50 [ 3096.105826] __io_uring_add_tctx_node+0x1cf/0x520 [ 3096.106785] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3096.107878] ? alloc_fd+0x2e7/0x670 [ 3096.108582] io_uring_setup+0x1fbb/0x2980 [ 3096.109383] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3096.110346] ? wait_for_completion_io+0x270/0x270 [ 3096.111287] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3096.112283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3096.113267] do_syscall_64+0x33/0x40 [ 3096.113980] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3096.114945] RIP: 0033:0x7fed36701b19 [ 3096.115652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3096.119143] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3096.120575] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3096.121940] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3096.123274] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3096.124604] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3096.125941] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3096.127329] CPU: 0 PID: 19280 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3096.128958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3096.130884] Call Trace: [ 3096.131601] dump_stack+0x107/0x167 [ 3096.132614] should_fail.cold+0x5/0xa [ 3096.133771] ? __d_alloc+0x2a/0x990 [ 3096.134739] should_failslab+0x5/0x20 [ 3096.135680] kmem_cache_alloc+0x5b/0x310 [ 3096.136869] __d_alloc+0x2a/0x990 [ 3096.137738] ? find_held_lock+0x2c/0x110 [ 3096.138898] d_alloc_pseudo+0x19/0x70 [ 3096.139868] alloc_file_pseudo+0xce/0x250 [ 3096.140870] ? trace_hardirqs_on+0x5b/0x180 [ 3096.141958] ? alloc_file+0x5a0/0x5a0 [ 3096.143300] anon_inode_getfile+0xc8/0x1f0 [ 3096.144453] io_uring_setup+0x138b/0x2980 [ 3096.145668] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3096.146871] ? wait_for_completion_io+0x270/0x270 [ 3096.148534] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3096.149796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3096.151176] do_syscall_64+0x33/0x40 [ 3096.152132] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3096.153344] RIP: 0033:0x7f4d680b3b19 [ 3096.154285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3096.158322] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3096.160133] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3096.161751] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3096.163376] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3096.164991] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3096.166616] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3096.290772] FAULT_INJECTION: forcing a failure. [ 3096.290772] name failslab, interval 1, probability 0, space 0, times 0 [ 3096.293206] CPU: 0 PID: 19293 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3096.294580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3096.296206] Call Trace: [ 3096.296731] dump_stack+0x107/0x167 [ 3096.297454] should_fail.cold+0x5/0xa [ 3096.298217] ? create_object.isra.0+0x3a/0xa30 [ 3096.299121] should_failslab+0x5/0x20 [ 3096.299867] kmem_cache_alloc+0x5b/0x310 [ 3096.300731] create_object.isra.0+0x3a/0xa30 [ 3096.301592] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3096.302620] kmem_cache_alloc+0x159/0x310 [ 3096.303447] anon_vma_fork+0xf1/0x640 [ 3096.304198] ? __vm_enough_memory+0x184/0x360 [ 3096.305087] copy_process+0x72cd/0x78b0 [ 3096.305874] ? SOFTIRQ_verbose+0x10/0x10 [ 3096.306727] ? __cleanup_sighand+0xb0/0xb0 [ 3096.307592] ? _copy_from_user+0xfb/0x1b0 [ 3096.308408] kernel_clone+0xe7/0x980 [ 3096.309134] ? lock_acquire+0x197/0x470 [ 3096.309920] ? create_io_thread+0xf0/0xf0 [ 3096.310756] ? ksys_write+0x21a/0x260 [ 3096.311496] ? lock_downgrade+0x6d0/0x6d0 [ 3096.312306] __do_sys_clone3+0x1e5/0x320 [ 3096.313097] ? __do_sys_clone+0x110/0x110 [ 3096.313955] ? rcu_read_lock_any_held+0x75/0xa0 [ 3096.314859] ? vfs_write+0x354/0xb10 [ 3096.315592] ? fput_many+0x2f/0x1a0 [ 3096.316312] ? ksys_write+0x1a9/0x260 [ 3096.317054] ? __ia32_sys_read+0xb0/0xb0 [ 3096.317849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3096.318878] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3096.319871] ? trace_hardirqs_on+0x5b/0x180 [ 3096.320729] do_syscall_64+0x33/0x40 [ 3096.321456] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3096.322454] RIP: 0033:0x7f55c06adb19 [ 3096.323171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3096.326740] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3096.328205] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3096.329586] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3096.330958] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3096.332317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3096.333687] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:28:47 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 38) 10:28:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:28:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 40) 10:28:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0xf, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 3114.376675] FAULT_INJECTION: forcing a failure. [ 3114.376675] name failslab, interval 1, probability 0, space 0, times 0 [ 3114.378755] CPU: 0 PID: 19309 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3114.379984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3114.381459] Call Trace: [ 3114.381936] dump_stack+0x107/0x167 [ 3114.382600] should_fail.cold+0x5/0xa [ 3114.383295] ? create_object.isra.0+0x3a/0xa30 [ 3114.384090] should_failslab+0x5/0x20 [ 3114.384758] kmem_cache_alloc+0x5b/0x310 10:28:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 22) 10:28:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x30000}, 0x0) 10:28:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x13d}}}}}, 0x28}}, 0x0) 10:28:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4000000}}}}}, 0x28}}, 0x0) [ 3114.385484] create_object.isra.0+0x3a/0xa30 [ 3114.386448] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3114.387404] kmem_cache_alloc+0x159/0x310 [ 3114.388189] anon_vma_fork+0xf1/0x640 [ 3114.388901] ? __vm_enough_memory+0x184/0x360 [ 3114.389907] copy_process+0x72cd/0x78b0 [ 3114.390655] ? SOFTIRQ_verbose+0x10/0x10 [ 3114.391457] ? __cleanup_sighand+0xb0/0xb0 [ 3114.392271] ? _copy_from_user+0xfb/0x1b0 [ 3114.393052] kernel_clone+0xe7/0x980 [ 3114.393743] ? lock_acquire+0x197/0x470 [ 3114.394485] ? create_io_thread+0xf0/0xf0 [ 3114.395276] ? ksys_write+0x21a/0x260 [ 3114.395976] ? lock_downgrade+0x6d0/0x6d0 [ 3114.396752] __do_sys_clone3+0x1e5/0x320 [ 3114.397502] ? __do_sys_clone+0x110/0x110 [ 3114.398302] ? rcu_read_lock_any_held+0x75/0xa0 [ 3114.399154] ? vfs_write+0x354/0xb10 [ 3114.399846] ? fput_many+0x2f/0x1a0 [ 3114.400522] ? ksys_write+0x1a9/0x260 [ 3114.401226] ? __ia32_sys_read+0xb0/0xb0 [ 3114.401986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3114.402959] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3114.403908] ? trace_hardirqs_on+0x5b/0x180 [ 3114.404708] do_syscall_64+0x33/0x40 [ 3114.405399] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3114.406345] RIP: 0033:0x7f55c06adb19 [ 3114.407027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3114.410406] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3114.411806] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3114.413119] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3114.414430] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3114.415742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3114.417051] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3114.495046] FAULT_INJECTION: forcing a failure. [ 3114.495046] name failslab, interval 1, probability 0, space 0, times 0 [ 3114.498236] CPU: 0 PID: 19314 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3114.499547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3114.501063] Call Trace: [ 3114.501641] dump_stack+0x107/0x167 [ 3114.502467] should_fail.cold+0x5/0xa [ 3114.503283] ? create_object.isra.0+0x3a/0xa30 [ 3114.504215] should_failslab+0x5/0x20 [ 3114.504966] kmem_cache_alloc+0x5b/0x310 [ 3114.505919] create_object.isra.0+0x3a/0xa30 [ 3114.506785] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3114.507870] kmem_cache_alloc+0x159/0x310 [ 3114.508842] __d_alloc+0x2a/0x990 [ 3114.509538] ? find_held_lock+0x2c/0x110 [ 3114.510477] d_alloc_pseudo+0x19/0x70 [ 3114.511259] alloc_file_pseudo+0xce/0x250 [ 3114.512075] ? trace_hardirqs_on+0x5b/0x180 [ 3114.512940] ? alloc_file+0x5a0/0x5a0 [ 3114.514040] anon_inode_getfile+0xc8/0x1f0 [ 3114.514311] FAULT_INJECTION: forcing a failure. [ 3114.514311] name failslab, interval 1, probability 0, space 0, times 0 [ 3114.514937] io_uring_setup+0x138b/0x2980 [ 3114.518315] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3114.519276] ? wait_for_completion_io+0x270/0x270 [ 3114.520613] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3114.521619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3114.522716] do_syscall_64+0x33/0x40 [ 3114.523460] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3114.524421] RIP: 0033:0x7f4d680b3b19 [ 3114.525157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3114.528359] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3114.529802] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3114.531108] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3114.532412] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3114.533721] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3114.535040] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3114.536717] CPU: 1 PID: 19316 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3114.538223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3114.539984] Call Trace: [ 3114.540560] dump_stack+0x107/0x167 [ 3114.541335] should_fail.cold+0x5/0xa [ 3114.542155] ? create_object.isra.0+0x3a/0xa30 [ 3114.543116] should_failslab+0x5/0x20 [ 3114.543916] kmem_cache_alloc+0x5b/0x310 [ 3114.544780] create_object.isra.0+0x3a/0xa30 [ 3114.545701] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3114.546779] kmem_cache_alloc+0x159/0x310 [ 3114.547660] xas_alloc+0x336/0x440 [ 3114.548639] xas_create+0x34a/0x10d0 [ 3114.549436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3114.550564] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3114.551703] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3114.552810] xas_store+0x8c/0x1c40 [ 3114.553583] __xa_store+0x164/0x2d0 [ 3114.554384] ? xa_delete_node+0x280/0x280 [ 3114.555267] ? trace_hardirqs_on+0x5b/0x180 [ 3114.556182] xa_store+0x31/0x50 [ 3114.556890] __io_uring_add_tctx_node+0x1cf/0x520 [ 3114.557903] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3114.559012] ? alloc_fd+0x2e7/0x670 [ 3114.559791] io_uring_setup+0x1fbb/0x2980 [ 3114.560671] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3114.561746] ? wait_for_completion_io+0x270/0x270 [ 3114.562801] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3114.563904] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3114.565002] do_syscall_64+0x33/0x40 [ 3114.565790] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3114.566877] RIP: 0033:0x7fed36701b19 [ 3114.567664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3114.571567] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3114.573176] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3114.574696] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3114.576201] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3114.577708] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3114.579231] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:28:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x10, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:28:47 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 39) 10:28:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:28:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x5000000}}}}}, 0x28}}, 0x0) 10:28:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x300}}}}}, 0x28}}, 0x0) 10:28:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x80000}, 0x0) [ 3114.729195] FAULT_INJECTION: forcing a failure. [ 3114.729195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3114.731890] CPU: 1 PID: 19334 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3114.733442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3114.735492] Call Trace: [ 3114.736234] dump_stack+0x107/0x167 [ 3114.737147] should_fail.cold+0x5/0xa [ 3114.738299] __alloc_pages_nodemask+0x182/0x600 [ 3114.739448] ? lock_acquire+0x197/0x470 [ 3114.740642] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3114.742195] ? lock_downgrade+0x6d0/0x6d0 [ 3114.743292] ? do_raw_spin_lock+0x121/0x260 [ 3114.744219] alloc_pages_current+0x187/0x280 [ 3114.745285] __pmd_alloc+0x37/0x630 [ 3114.746312] copy_page_range+0x2bd8/0x3810 [ 3114.747296] ? SOFTIRQ_verbose+0x10/0x10 [ 3114.748435] ? lock_chain_count+0x20/0x20 [ 3114.749502] ? up_write+0x191/0x550 [ 3114.750296] ? vm_iomap_memory+0x190/0x190 [ 3114.751337] ? downgrade_write+0x3a0/0x3a0 [ 3114.752504] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3114.753789] ? __vma_link_rb+0x540/0x700 [ 3114.754670] copy_process+0x7658/0x78b0 [ 3114.755508] ? SOFTIRQ_verbose+0x10/0x10 [ 3114.756607] ? __cleanup_sighand+0xb0/0xb0 [ 3114.757594] ? _copy_from_user+0xfb/0x1b0 [ 3114.758635] kernel_clone+0xe7/0x980 [ 3114.759420] ? lock_acquire+0x197/0x470 [ 3114.760577] ? create_io_thread+0xf0/0xf0 [ 3114.761467] ? ksys_write+0x21a/0x260 [ 3114.762278] ? lock_downgrade+0x6d0/0x6d0 [ 3114.763167] __do_sys_clone3+0x1e5/0x320 [ 3114.764023] ? __do_sys_clone+0x110/0x110 [ 3114.764921] ? rcu_read_lock_any_held+0x75/0xa0 [ 3114.765889] ? vfs_write+0x354/0xb10 [ 3114.766694] ? fput_many+0x2f/0x1a0 [ 3114.767467] ? ksys_write+0x1a9/0x260 [ 3114.768270] ? __ia32_sys_read+0xb0/0xb0 [ 3114.769133] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3114.770256] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3114.771344] ? trace_hardirqs_on+0x5b/0x180 [ 3114.772263] do_syscall_64+0x33/0x40 [ 3114.773054] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3114.774162] RIP: 0033:0x7f55c06adb19 [ 3114.774949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3114.778824] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3114.780428] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3114.781933] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3114.783449] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3114.784956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3114.786463] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:28:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 23) 10:28:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 41) [ 3114.913585] FAULT_INJECTION: forcing a failure. [ 3114.913585] name failslab, interval 1, probability 0, space 0, times 0 [ 3114.916057] CPU: 1 PID: 19345 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3114.917505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3114.919248] Call Trace: [ 3114.919808] dump_stack+0x107/0x167 [ 3114.920576] should_fail.cold+0x5/0xa [ 3114.921377] ? __alloc_file+0x21/0x320 [ 3114.922203] should_failslab+0x5/0x20 [ 3114.923001] kmem_cache_alloc+0x5b/0x310 [ 3114.923855] __alloc_file+0x21/0x320 [ 3114.924637] alloc_empty_file+0x6d/0x170 [ 3114.925489] alloc_file+0x5e/0x5a0 [ 3114.926250] alloc_file_pseudo+0x16a/0x250 [ 3114.927139] ? alloc_file+0x5a0/0x5a0 [ 3114.927956] anon_inode_getfile+0xc8/0x1f0 [ 3114.928858] io_uring_setup+0x138b/0x2980 [ 3114.929746] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3114.930814] ? wait_for_completion_io+0x270/0x270 [ 3114.931853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3114.932956] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3114.934049] do_syscall_64+0x33/0x40 [ 3114.934837] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3114.935922] RIP: 0033:0x7f4d680b3b19 [ 3114.936706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3114.940586] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3114.942202] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3114.943697] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3114.945197] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3114.946706] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3114.948199] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3115.024006] FAULT_INJECTION: forcing a failure. [ 3115.024006] name failslab, interval 1, probability 0, space 0, times 0 [ 3115.027063] CPU: 1 PID: 19352 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3115.028830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3115.030878] Call Trace: [ 3115.031575] dump_stack+0x107/0x167 [ 3115.032379] should_fail.cold+0x5/0xa [ 3115.033476] ? xas_alloc+0x336/0x440 [ 3115.034280] should_failslab+0x5/0x20 [ 3115.035081] kmem_cache_alloc+0x5b/0x310 [ 3115.035938] xas_alloc+0x336/0x440 [ 3115.036689] xas_create+0x34a/0x10d0 [ 3115.037483] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3115.038591] xas_store+0x8c/0x1c40 [ 3115.039352] __xa_store+0x164/0x2d0 [ 3115.040118] ? xa_delete_node+0x280/0x280 [ 3115.040999] ? trace_hardirqs_on+0x5b/0x180 [ 3115.041909] xa_store+0x31/0x50 [ 3115.042613] __io_uring_add_tctx_node+0x1cf/0x520 [ 3115.043619] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3115.044720] ? alloc_fd+0x2e7/0x670 10:28:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:28:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6000000}}}}}, 0x28}}, 0x0) 10:28:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 24) [ 3115.045496] io_uring_setup+0x1fbb/0x2980 10:28:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 40) [ 3115.046609] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3115.047827] ? wait_for_completion_io+0x270/0x270 [ 3115.049069] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3115.050478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3115.051737] do_syscall_64+0x33/0x40 [ 3115.052707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3115.053975] RIP: 0033:0x7fed36701b19 [ 3115.054932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3115.059700] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3115.061694] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3115.063504] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3115.065231] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3115.067106] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3115.068609] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3115.150626] FAULT_INJECTION: forcing a failure. [ 3115.150626] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3115.152265] CPU: 0 PID: 19361 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3115.153223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3115.154240] Call Trace: [ 3115.154568] dump_stack+0x107/0x167 [ 3115.155036] should_fail.cold+0x5/0xa [ 3115.155509] __alloc_pages_nodemask+0x182/0x600 [ 3115.156082] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3115.156833] ? copy_page_range+0x28e1/0x3810 [ 3115.157377] alloc_pages_current+0x187/0x280 [ 3115.157924] get_zeroed_page+0x14/0xb0 [ 3115.158405] __pud_alloc+0x33/0x270 [ 3115.158859] copy_page_range+0x2ca1/0x3810 [ 3115.159379] ? lock_chain_count+0x20/0x20 [ 3115.159904] ? lock_downgrade+0x6d0/0x6d0 [ 3115.160434] ? up_write+0x191/0x550 [ 3115.160882] ? vm_iomap_memory+0x190/0x190 [ 3115.161398] ? downgrade_write+0x3a0/0x3a0 [ 3115.161917] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3115.162585] ? __vma_link_rb+0x540/0x700 [ 3115.163096] copy_process+0x7658/0x78b0 [ 3115.163578] ? SOFTIRQ_verbose+0x10/0x10 [ 3115.164112] ? __cleanup_sighand+0xb0/0xb0 [ 3115.164650] ? _copy_from_user+0xfb/0x1b0 [ 3115.165165] kernel_clone+0xe7/0x980 [ 3115.165623] ? lock_acquire+0x197/0x470 [ 3115.166114] ? create_io_thread+0xf0/0xf0 [ 3115.166636] ? ksys_write+0x21a/0x260 [ 3115.167109] ? lock_downgrade+0x6d0/0x6d0 [ 3115.167618] __do_sys_clone3+0x1e5/0x320 [ 3115.168112] ? __do_sys_clone+0x110/0x110 [ 3115.168645] ? rcu_read_lock_any_held+0x75/0xa0 [ 3115.169216] ? vfs_write+0x354/0xb10 [ 3115.169673] ? fput_many+0x2f/0x1a0 [ 3115.170133] ? ksys_write+0x1a9/0x260 [ 3115.170600] ? __ia32_sys_read+0xb0/0xb0 [ 3115.171104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3115.171743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3115.172369] ? trace_hardirqs_on+0x5b/0x180 [ 3115.172902] do_syscall_64+0x33/0x40 [ 3115.173367] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3115.173993] RIP: 0033:0x7f55c06adb19 [ 3115.174457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3115.176701] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3115.177624] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3115.178513] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3115.179376] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3115.180238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3115.181104] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3115.221286] FAULT_INJECTION: forcing a failure. [ 3115.221286] name failslab, interval 1, probability 0, space 0, times 0 [ 3115.224339] CPU: 1 PID: 19362 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3115.226114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3115.228072] Call Trace: [ 3115.228819] dump_stack+0x107/0x167 [ 3115.229593] should_fail.cold+0x5/0xa [ 3115.230413] ? create_object.isra.0+0x3a/0xa30 [ 3115.231725] should_failslab+0x5/0x20 [ 3115.232644] kmem_cache_alloc+0x5b/0x310 [ 3115.233720] create_object.isra.0+0x3a/0xa30 [ 3115.234953] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3115.236272] kmem_cache_alloc+0x159/0x310 [ 3115.237351] __alloc_file+0x21/0x320 [ 3115.238341] alloc_empty_file+0x6d/0x170 [ 3115.239444] alloc_file+0x5e/0x5a0 [ 3115.240296] alloc_file_pseudo+0x16a/0x250 [ 3115.241436] ? alloc_file+0x5a0/0x5a0 [ 3115.242334] anon_inode_getfile+0xc8/0x1f0 [ 3115.243474] io_uring_setup+0x138b/0x2980 [ 3115.244457] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3115.245548] ? wait_for_completion_io+0x270/0x270 [ 3115.246654] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3115.247789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3115.248908] do_syscall_64+0x33/0x40 [ 3115.249714] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3115.251132] RIP: 0033:0x7f4d680b3b19 [ 3115.252036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3115.256671] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3115.258606] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3115.260512] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3115.262287] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3115.264060] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3115.265849] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:29:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 25) 10:29:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x11, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:29:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:29:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 42) 10:29:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x500}}}}}, 0x28}}, 0x0) 10:29:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0ffff}, 0x0) 10:29:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 41) 10:29:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7000000}}}}}, 0x28}}, 0x0) [ 3129.613977] FAULT_INJECTION: forcing a failure. [ 3129.613977] name failslab, interval 1, probability 0, space 0, times 0 [ 3129.615430] FAULT_INJECTION: forcing a failure. [ 3129.615430] name failslab, interval 1, probability 0, space 0, times 0 [ 3129.616393] CPU: 1 PID: 19377 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3129.616404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3129.616412] Call Trace: [ 3129.616439] dump_stack+0x107/0x167 [ 3129.616466] should_fail.cold+0x5/0xa [ 3129.624622] ? create_object.isra.0+0x3a/0xa30 [ 3129.625575] should_failslab+0x5/0x20 [ 3129.626383] kmem_cache_alloc+0x5b/0x310 [ 3129.627240] ? mark_held_locks+0x9e/0xe0 [ 3129.628093] create_object.isra.0+0x3a/0xa30 [ 3129.629012] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3129.630086] kmem_cache_alloc+0x159/0x310 [ 3129.630972] xas_alloc+0x336/0x440 [ 3129.631723] xas_create+0x34a/0x10d0 [ 3129.632516] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3129.633619] xas_store+0x8c/0x1c40 [ 3129.634386] __xa_store+0x164/0x2d0 [ 3129.635154] ? xa_delete_node+0x280/0x280 [ 3129.636028] ? trace_hardirqs_on+0x5b/0x180 [ 3129.636950] xa_store+0x31/0x50 [ 3129.637647] __io_uring_add_tctx_node+0x1cf/0x520 [ 3129.638671] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3129.639776] ? alloc_fd+0x2e7/0x670 [ 3129.640555] io_uring_setup+0x1fbb/0x2980 [ 3129.641432] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3129.642514] ? wait_for_completion_io+0x270/0x270 [ 3129.643554] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3129.644664] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3129.645761] do_syscall_64+0x33/0x40 [ 3129.646558] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3129.647631] RIP: 0033:0x7fed36701b19 [ 3129.648424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3129.652301] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3129.653893] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3129.655411] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3129.656927] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3129.658437] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3129.659953] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3129.661486] CPU: 0 PID: 19380 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3129.663072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3129.664949] Call Trace: [ 3129.665567] dump_stack+0x107/0x167 [ 3129.665892] FAULT_INJECTION: forcing a failure. [ 3129.665892] name failslab, interval 1, probability 0, space 0, times 0 [ 3129.666400] should_fail.cold+0x5/0xa [ 3129.666432] ? create_object.isra.0+0x3a/0xa30 [ 3129.670574] should_failslab+0x5/0x20 [ 3129.671441] kmem_cache_alloc+0x5b/0x310 [ 3129.672373] create_object.isra.0+0x3a/0xa30 [ 3129.673364] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3129.674527] kmem_cache_alloc+0x159/0x310 [ 3129.675486] __pmd_alloc+0x94/0x630 [ 3129.676320] copy_page_range+0x2bd8/0x3810 [ 3129.677281] ? lock_chain_count+0x20/0x20 [ 3129.678304] ? up_write+0x191/0x550 [ 3129.679134] ? vm_iomap_memory+0x190/0x190 [ 3129.680086] ? downgrade_write+0x3a0/0x3a0 [ 3129.681046] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3129.682279] ? __vma_link_rb+0x540/0x700 [ 3129.683212] copy_process+0x7658/0x78b0 [ 3129.684111] ? SOFTIRQ_verbose+0x10/0x10 [ 3129.685105] ? __cleanup_sighand+0xb0/0xb0 [ 3129.686125] ? _copy_from_user+0xfb/0x1b0 [ 3129.687078] kernel_clone+0xe7/0x980 [ 3129.687922] ? lock_acquire+0x197/0x470 [ 3129.688820] ? create_io_thread+0xf0/0xf0 [ 3129.689790] ? ksys_write+0x21a/0x260 [ 3129.690656] ? lock_downgrade+0x6d0/0x6d0 [ 3129.691603] __do_sys_clone3+0x1e5/0x320 [ 3129.692526] ? __do_sys_clone+0x110/0x110 [ 3129.693499] ? rcu_read_lock_any_held+0x75/0xa0 [ 3129.694549] ? vfs_write+0x354/0xb10 [ 3129.695395] ? fput_many+0x2f/0x1a0 [ 3129.696218] ? ksys_write+0x1a9/0x260 [ 3129.697079] ? __ia32_sys_read+0xb0/0xb0 [ 3129.698003] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3129.699192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3129.700343] ? trace_hardirqs_on+0x5b/0x180 [ 3129.701322] do_syscall_64+0x33/0x40 [ 3129.702167] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3129.703317] RIP: 0033:0x7f55c06adb19 [ 3129.704151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3129.708272] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3129.709987] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3129.711601] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3129.713203] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3129.714808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3129.716415] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3129.718079] CPU: 1 PID: 19378 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3129.719543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3129.721271] Call Trace: [ 3129.721825] dump_stack+0x107/0x167 [ 3129.722603] should_fail.cold+0x5/0xa [ 3129.723649] ? security_file_alloc+0x34/0x170 [ 3129.724612] should_failslab+0x5/0x20 [ 3129.725526] kmem_cache_alloc+0x5b/0x310 [ 3129.726661] security_file_alloc+0x34/0x170 [ 3129.727690] __alloc_file+0xb7/0x320 [ 3129.728561] alloc_empty_file+0x6d/0x170 [ 3129.729416] alloc_file+0x5e/0x5a0 [ 3129.730422] alloc_file_pseudo+0x16a/0x250 [ 3129.731371] ? alloc_file+0x5a0/0x5a0 [ 3129.732321] anon_inode_getfile+0xc8/0x1f0 [ 3129.733217] io_uring_setup+0x138b/0x2980 [ 3129.734105] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3129.735243] ? wait_for_completion_io+0x270/0x270 [ 3129.736491] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3129.737885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3129.739119] do_syscall_64+0x33/0x40 [ 3129.740023] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3129.741306] RIP: 0033:0x7f4d680b3b19 [ 3129.742088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3129.745936] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3129.747543] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3129.749041] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3129.750537] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3129.752032] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3129.753525] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:29:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:29:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x12, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:29:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x9, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:29:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x600}}}}}, 0x28}}, 0x0) 10:29:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x1000000}, 0x0) 10:29:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9000000}}}}}, 0x28}}, 0x0) 10:29:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 43) 10:29:20 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 26) 10:29:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 42) [ 3147.006765] FAULT_INJECTION: forcing a failure. [ 3147.006765] name failslab, interval 1, probability 0, space 0, times 0 [ 3147.009201] CPU: 1 PID: 19408 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3147.010666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3147.012403] Call Trace: [ 3147.012979] dump_stack+0x107/0x167 [ 3147.013747] should_fail.cold+0x5/0xa [ 3147.014568] ? create_object.isra.0+0x3a/0xa30 [ 3147.015533] should_failslab+0x5/0x20 [ 3147.016330] kmem_cache_alloc+0x5b/0x310 [ 3147.017185] ? mark_held_locks+0x9e/0xe0 [ 3147.018049] create_object.isra.0+0x3a/0xa30 [ 3147.018972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3147.020037] kmem_cache_alloc+0x159/0x310 [ 3147.020920] xas_alloc+0x336/0x440 [ 3147.021678] xas_create+0x34a/0x10d0 [ 3147.022489] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3147.023592] xas_store+0x8c/0x1c40 [ 3147.024350] __xa_store+0x164/0x2d0 [ 3147.025116] ? xa_delete_node+0x280/0x280 [ 3147.025984] ? trace_hardirqs_on+0x5b/0x180 [ 3147.026908] xa_store+0x31/0x50 [ 3147.027602] __io_uring_add_tctx_node+0x1cf/0x520 [ 3147.028611] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3147.029712] ? alloc_fd+0x2e7/0x670 [ 3147.030496] io_uring_setup+0x1fbb/0x2980 [ 3147.031371] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3147.032429] ? wait_for_completion_io+0x270/0x270 [ 3147.033470] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3147.034574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3147.035661] do_syscall_64+0x33/0x40 [ 3147.036436] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3147.037505] RIP: 0033:0x7fed36701b19 [ 3147.038302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3147.042157] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3147.043758] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3147.045251] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3147.046754] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3147.048241] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3147.049711] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3147.054878] FAULT_INJECTION: forcing a failure. [ 3147.054878] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3147.057389] CPU: 1 PID: 19418 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3147.058443] FAULT_INJECTION: forcing a failure. [ 3147.058443] name failslab, interval 1, probability 0, space 0, times 0 [ 3147.058844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3147.058850] Call Trace: [ 3147.058872] dump_stack+0x107/0x167 [ 3147.058896] should_fail.cold+0x5/0xa [ 3147.065201] __alloc_pages_nodemask+0x182/0x600 [ 3147.066206] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3147.067478] ? find_held_lock+0x2c/0x110 [ 3147.068360] ? __pmd_alloc+0x31d/0x630 [ 3147.069197] ? lock_downgrade+0x6d0/0x6d0 [ 3147.070084] ? do_raw_spin_lock+0x121/0x260 [ 3147.071026] alloc_pages_current+0x187/0x280 [ 3147.071975] pte_alloc_one+0x16/0x1a0 [ 3147.072800] __pte_alloc+0x1d/0x330 [ 3147.073590] copy_page_range+0x1b62/0x3810 [ 3147.074505] ? SOFTIRQ_verbose+0x10/0x10 [ 3147.075373] ? lock_chain_count+0x20/0x20 [ 3147.076308] ? up_write+0x191/0x550 [ 3147.077090] ? vm_iomap_memory+0x190/0x190 [ 3147.077997] ? downgrade_write+0x3a0/0x3a0 [ 3147.078916] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3147.080081] ? __vma_link_rb+0x540/0x700 [ 3147.080960] copy_process+0x7658/0x78b0 [ 3147.081811] ? SOFTIRQ_verbose+0x10/0x10 [ 3147.082729] ? __cleanup_sighand+0xb0/0xb0 [ 3147.083655] ? _copy_from_user+0xfb/0x1b0 [ 3147.084554] kernel_clone+0xe7/0x980 [ 3147.085356] ? lock_acquire+0x197/0x470 [ 3147.086210] ? create_io_thread+0xf0/0xf0 [ 3147.087131] ? ksys_write+0x21a/0x260 [ 3147.087947] ? lock_downgrade+0x6d0/0x6d0 [ 3147.088843] __do_sys_clone3+0x1e5/0x320 [ 3147.089713] ? __do_sys_clone+0x110/0x110 [ 3147.090631] ? rcu_read_lock_any_held+0x75/0xa0 [ 3147.091629] ? vfs_write+0x354/0xb10 [ 3147.092434] ? fput_many+0x2f/0x1a0 [ 3147.093219] ? ksys_write+0x1a9/0x260 [ 3147.094038] ? __ia32_sys_read+0xb0/0xb0 [ 3147.094934] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3147.096070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3147.097186] ? trace_hardirqs_on+0x5b/0x180 [ 3147.098127] do_syscall_64+0x33/0x40 [ 3147.098980] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3147.100092] RIP: 0033:0x7f55c06adb19 [ 3147.100901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3147.104918] RSP: 002b:00007f55bdc02188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3147.106605] RAX: ffffffffffffffda RBX: 00007f55c07c1020 RCX: 00007f55c06adb19 [ 3147.108147] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3147.109692] RBP: 00007f55bdc021d0 R08: 0000000000000000 R09: 0000000000000000 [ 3147.111249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3147.112797] R13: 00007ffcbb0d12ff R14: 00007f55bdc02300 R15: 0000000000022000 [ 3147.114398] CPU: 0 PID: 19419 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3147.116061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3147.117971] Call Trace: [ 3147.118597] dump_stack+0x107/0x167 [ 3147.119606] should_fail.cold+0x5/0xa [ 3147.120496] ? create_object.isra.0+0x3a/0xa30 [ 3147.121740] should_failslab+0x5/0x20 [ 3147.122631] kmem_cache_alloc+0x5b/0x310 [ 3147.123568] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 3147.124839] create_object.isra.0+0x3a/0xa30 [ 3147.125848] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3147.127030] kmem_cache_alloc+0x159/0x310 [ 3147.127992] security_file_alloc+0x34/0x170 [ 3147.128985] __alloc_file+0xb7/0x320 [ 3147.129842] alloc_empty_file+0x6d/0x170 [ 3147.130790] alloc_file+0x5e/0x5a0 [ 3147.131611] alloc_file_pseudo+0x16a/0x250 [ 3147.132580] ? alloc_file+0x5a0/0x5a0 [ 3147.133476] anon_inode_getfile+0xc8/0x1f0 [ 3147.134461] io_uring_setup+0x138b/0x2980 [ 3147.135416] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3147.136583] ? wait_for_completion_io+0x270/0x270 [ 3147.137721] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3147.138939] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3147.140136] do_syscall_64+0x33/0x40 [ 3147.140994] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3147.142179] RIP: 0033:0x7f4d680b3b19 [ 3147.143051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3147.147316] RSP: 002b:00007f4d65608108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3147.149078] RAX: ffffffffffffffda RBX: 00007f4d681c7020 RCX: 00007f4d680b3b19 [ 3147.150733] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3147.152381] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3147.154026] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3147.155689] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:29:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x2000000}, 0x0) 10:29:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 43) 10:29:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 44) 10:29:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:29:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x13, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:29:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x700}}}}}, 0x28}}, 0x0) 10:29:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xf000000}}}}}, 0x28}}, 0x0) 10:29:20 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 27) [ 3147.489271] FAULT_INJECTION: forcing a failure. [ 3147.489271] name failslab, interval 1, probability 0, space 0, times 0 [ 3147.491996] CPU: 0 PID: 19435 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3147.493560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3147.495439] Call Trace: [ 3147.496045] dump_stack+0x107/0x167 [ 3147.496886] should_fail.cold+0x5/0xa [ 3147.497761] ? create_object.isra.0+0x3a/0xa30 [ 3147.498813] should_failslab+0x5/0x20 [ 3147.499683] kmem_cache_alloc+0x5b/0x310 [ 3147.500625] create_object.isra.0+0x3a/0xa30 [ 3147.501628] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3147.502806] kmem_cache_alloc+0x159/0x310 [ 3147.503768] __pmd_alloc+0x94/0x630 [ 3147.504625] copy_page_range+0x2bd8/0x3810 [ 3147.505596] ? lock_chain_count+0x20/0x20 [ 3147.506631] ? up_write+0x191/0x550 [ 3147.507467] ? vm_iomap_memory+0x190/0x190 [ 3147.508428] ? downgrade_write+0x3a0/0x3a0 [ 3147.509407] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3147.510660] ? __vma_link_rb+0x540/0x700 [ 3147.511606] copy_process+0x7658/0x78b0 [ 3147.512510] ? SOFTIRQ_verbose+0x10/0x10 [ 3147.513504] ? __cleanup_sighand+0xb0/0xb0 [ 3147.514521] ? _copy_from_user+0xfb/0x1b0 [ 3147.515491] kernel_clone+0xe7/0x980 [ 3147.516362] ? lock_acquire+0x197/0x470 [ 3147.517269] ? create_io_thread+0xf0/0xf0 [ 3147.518262] ? ksys_write+0x21a/0x260 [ 3147.519132] ? lock_downgrade+0x6d0/0x6d0 [ 3147.520089] __do_sys_clone3+0x1e5/0x320 [ 3147.521016] ? __do_sys_clone+0x110/0x110 [ 3147.521998] ? rcu_read_lock_any_held+0x75/0xa0 [ 3147.523061] ? vfs_write+0x354/0xb10 [ 3147.523917] ? fput_many+0x2f/0x1a0 [ 3147.524757] ? ksys_write+0x1a9/0x260 [ 3147.525628] ? __ia32_sys_read+0xb0/0xb0 [ 3147.526583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3147.527782] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3147.528953] ? trace_hardirqs_on+0x5b/0x180 [ 3147.529940] do_syscall_64+0x33/0x40 [ 3147.530802] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3147.531969] RIP: 0033:0x7f55c06adb19 [ 3147.532814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3147.537146] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3147.538891] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3147.540504] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3147.542117] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3147.543751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3147.545368] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:29:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x900}}}}}, 0x28}}, 0x0) [ 3147.683955] FAULT_INJECTION: forcing a failure. [ 3147.683955] name failslab, interval 1, probability 0, space 0, times 0 [ 3147.686896] CPU: 0 PID: 19436 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3147.688637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3147.690726] Call Trace: [ 3147.691534] dump_stack+0x107/0x167 [ 3147.692693] should_fail.cold+0x5/0xa [ 3147.693765] ? create_object.isra.0+0x3a/0xa30 [ 3147.695090] should_failslab+0x5/0x20 [ 3147.696133] kmem_cache_alloc+0x5b/0x310 [ 3147.697235] ? mark_held_locks+0x9e/0xe0 [ 3147.698547] create_object.isra.0+0x3a/0xa30 [ 3147.699672] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3147.701205] kmem_cache_alloc+0x159/0x310 [ 3147.702510] xas_alloc+0x336/0x440 [ 3147.703582] xas_create+0x34a/0x10d0 [ 3147.704844] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3147.706296] xas_store+0x8c/0x1c40 [ 3147.707660] __xa_store+0x164/0x2d0 [ 3147.708860] ? xa_delete_node+0x280/0x280 [ 3147.710193] ? trace_hardirqs_on+0x5b/0x180 [ 3147.711568] xa_store+0x31/0x50 [ 3147.712542] __io_uring_add_tctx_node+0x1cf/0x520 [ 3147.713822] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3147.715136] ? alloc_fd+0x2e7/0x670 [ 3147.716466] io_uring_setup+0x1fbb/0x2980 [ 3147.717851] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3147.719135] ? wait_for_completion_io+0x270/0x270 [ 3147.721012] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3147.722398] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3147.723923] do_syscall_64+0x33/0x40 [ 3147.724914] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3147.726301] RIP: 0033:0x7fed36701b19 [ 3147.727290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3147.731614] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3147.733588] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3147.735443] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3147.737186] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3147.738986] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3147.740730] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:29:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9effffff}}}}}, 0x28}}, 0x0) [ 3147.845976] FAULT_INJECTION: forcing a failure. [ 3147.845976] name failslab, interval 1, probability 0, space 0, times 0 [ 3147.849938] CPU: 0 PID: 19455 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3147.851588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3147.853456] Call Trace: [ 3147.854153] dump_stack+0x107/0x167 [ 3147.855188] should_fail.cold+0x5/0xa [ 3147.856224] ? io_uring_alloc_task_context+0x99/0x6a0 [ 3147.857526] should_failslab+0x5/0x20 [ 3147.858507] kmem_cache_alloc_trace+0x55/0x320 [ 3147.859769] io_uring_alloc_task_context+0x99/0x6a0 [ 3147.861073] ? io_import_iovec+0x1120/0x1120 [ 3147.862202] ? lock_downgrade+0x6d0/0x6d0 [ 3147.863235] ? do_raw_spin_lock+0x121/0x260 [ 3147.864330] ? rwlock_bug.part.0+0x90/0x90 [ 3147.865587] __io_uring_add_tctx_node+0x2c6/0x520 [ 3147.866782] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3147.867994] ? alloc_fd+0x2e7/0x670 [ 3147.869192] io_uring_setup+0x1fbb/0x2980 [ 3147.870442] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3147.872123] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3147.873431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3147.874794] do_syscall_64+0x33/0x40 [ 3147.875711] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3147.876902] RIP: 0033:0x7f4d680b3b19 [ 3147.877805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3147.881822] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3147.883594] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3147.885228] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3147.886865] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3147.888494] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3147.890126] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:29:34 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 28) 10:29:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 45) 10:29:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0xf, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:29:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xec0}}}}}, 0x28}}, 0x0) 10:29:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x14, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:29:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x3000000}, 0x0) 10:29:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 44) 10:29:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xc00e0000}}}}}, 0x28}}, 0x0) [ 3160.979461] FAULT_INJECTION: forcing a failure. [ 3160.979461] name failslab, interval 1, probability 0, space 0, times 0 [ 3160.982512] CPU: 1 PID: 19472 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3160.984302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3160.986567] Call Trace: [ 3160.987187] dump_stack+0x107/0x167 [ 3160.988038] should_fail.cold+0x5/0xa [ 3160.988931] ? create_object.isra.0+0x3a/0xa30 [ 3160.989998] should_failslab+0x5/0x20 [ 3160.990895] kmem_cache_alloc+0x5b/0x310 [ 3160.992000] create_object.isra.0+0x3a/0xa30 [ 3160.993161] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3160.994530] kmem_cache_alloc_trace+0x151/0x320 [ 3160.995626] io_uring_alloc_task_context+0x99/0x6a0 [ 3160.996918] ? io_import_iovec+0x1120/0x1120 [ 3160.998242] ? lock_downgrade+0x6d0/0x6d0 [ 3160.999237] ? do_raw_spin_lock+0x121/0x260 [ 3161.000248] ? rwlock_bug.part.0+0x90/0x90 [ 3161.001288] __io_uring_add_tctx_node+0x2c6/0x520 [ 3161.002661] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3161.004072] ? alloc_fd+0x2e7/0x670 [ 3161.004945] io_uring_setup+0x1fbb/0x2980 [ 3161.006091] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3161.007591] ? wait_for_completion_io+0x270/0x270 [ 3161.008755] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3161.010000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3161.011248] do_syscall_64+0x33/0x40 [ 3161.012130] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3161.013364] RIP: 0033:0x7f4d680b3b19 [ 3161.014243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3161.018829] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3161.020861] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3161.022643] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3161.024479] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3161.026199] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3161.028099] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3161.041576] FAULT_INJECTION: forcing a failure. [ 3161.041576] name failslab, interval 1, probability 0, space 0, times 0 [ 3161.044163] CPU: 1 PID: 19474 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3161.045641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3161.047433] Call Trace: [ 3161.047998] dump_stack+0x107/0x167 [ 3161.048783] should_fail.cold+0x5/0xa [ 3161.049600] ? xas_alloc+0x336/0x440 [ 3161.050402] should_failslab+0x5/0x20 [ 3161.051217] kmem_cache_alloc+0x5b/0x310 [ 3161.052090] xas_alloc+0x336/0x440 [ 3161.052858] xas_create+0x34a/0x10d0 [ 3161.053666] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3161.054816] xas_store+0x8c/0x1c40 [ 3161.055599] __xa_store+0x164/0x2d0 [ 3161.056389] ? xa_delete_node+0x280/0x280 [ 3161.057290] ? trace_hardirqs_on+0x5b/0x180 [ 3161.058226] xa_store+0x31/0x50 [ 3161.058967] __io_uring_add_tctx_node+0x1cf/0x520 [ 3161.060017] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3161.061142] ? alloc_fd+0x2e7/0x670 [ 3161.061938] io_uring_setup+0x1fbb/0x2980 [ 3161.062853] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3161.063958] ? wait_for_completion_io+0x270/0x270 [ 3161.065035] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3161.066175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3161.067311] do_syscall_64+0x33/0x40 [ 3161.068124] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3161.069236] RIP: 0033:0x7fed36701b19 [ 3161.070045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3161.074084] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3161.075762] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3161.077454] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3161.079058] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3161.080634] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3161.082220] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3161.088287] FAULT_INJECTION: forcing a failure. [ 3161.088287] name failslab, interval 1, probability 0, space 0, times 0 [ 3161.090684] CPU: 1 PID: 19477 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3161.092148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3161.093900] Call Trace: [ 3161.094473] dump_stack+0x107/0x167 [ 3161.095250] should_fail.cold+0x5/0xa [ 3161.096054] ? create_object.isra.0+0x3a/0xa30 [ 3161.097016] should_failslab+0x5/0x20 [ 3161.097818] kmem_cache_alloc+0x5b/0x310 [ 3161.098691] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3161.099968] create_object.isra.0+0x3a/0xa30 [ 3161.100894] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3161.101975] kmem_cache_alloc+0x159/0x310 [ 3161.102877] ptlock_alloc+0x1d/0x70 [ 3161.103652] pte_alloc_one+0x68/0x1a0 [ 3161.104461] __pte_alloc+0x1d/0x330 [ 3161.105240] copy_page_range+0x1b62/0x3810 [ 3161.106132] ? perf_trace_lock+0xac/0x490 [ 3161.107023] ? lock_chain_count+0x20/0x20 [ 3161.107950] ? up_write+0x191/0x550 [ 3161.108720] ? vm_iomap_memory+0x190/0x190 [ 3161.109617] ? downgrade_write+0x3a0/0x3a0 [ 3161.110527] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3161.111666] ? __vma_link_rb+0x540/0x700 [ 3161.112535] copy_process+0x7658/0x78b0 [ 3161.113371] ? SOFTIRQ_verbose+0x10/0x10 [ 3161.114269] ? __cleanup_sighand+0xb0/0xb0 [ 3161.115199] ? _copy_from_user+0xfb/0x1b0 [ 3161.116085] kernel_clone+0xe7/0x980 [ 3161.116881] ? lock_acquire+0x197/0x470 [ 3161.117718] ? create_io_thread+0xf0/0xf0 [ 3161.118626] ? ksys_write+0x21a/0x260 [ 3161.119431] ? lock_downgrade+0x6d0/0x6d0 [ 3161.120321] __do_sys_clone3+0x1e5/0x320 [ 3161.121186] ? __do_sys_clone+0x110/0x110 [ 3161.122090] ? rcu_read_lock_any_held+0x75/0xa0 [ 3161.123079] ? vfs_write+0x354/0xb10 [ 3161.123867] ? fput_many+0x2f/0x1a0 [ 3161.124637] ? ksys_write+0x1a9/0x260 [ 3161.125451] ? __ia32_sys_read+0xb0/0xb0 [ 3161.126317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3161.127431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3161.128514] ? trace_hardirqs_on+0x5b/0x180 [ 3161.129430] do_syscall_64+0x33/0x40 [ 3161.130228] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3161.131318] RIP: 0033:0x7f55c06adb19 [ 3161.132106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3161.135997] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3161.137610] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3161.139125] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3161.140640] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3161.142148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3161.143660] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:29:34 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 29) 10:29:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x22, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:29:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x15, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:29:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xe5000000}}}}}, 0x28}}, 0x0) 10:29:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xf00}}}}}, 0x28}}, 0x0) 10:29:34 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 46) 10:29:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x4000000}, 0x0) 10:29:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 45) [ 3161.485523] FAULT_INJECTION: forcing a failure. [ 3161.485523] name failslab, interval 1, probability 0, space 0, times 0 [ 3161.488056] CPU: 1 PID: 19497 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3161.489510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3161.491264] Call Trace: [ 3161.491826] dump_stack+0x107/0x167 [ 3161.492601] should_fail.cold+0x5/0xa [ 3161.493407] ? create_object.isra.0+0x3a/0xa30 [ 3161.494379] should_failslab+0x5/0x20 [ 3161.495182] kmem_cache_alloc+0x5b/0x310 [ 3161.496041] create_object.isra.0+0x3a/0xa30 [ 3161.496975] kmemleak_alloc_percpu+0xa0/0x100 [ 3161.497934] pcpu_alloc+0x4e2/0x1240 [ 3161.498746] __percpu_counter_init+0x10d/0x2d0 [ 3161.499717] io_uring_alloc_task_context+0xcc/0x6a0 [ 3161.500768] ? io_import_iovec+0x1120/0x1120 [ 3161.501699] ? lock_downgrade+0x6d0/0x6d0 [ 3161.502585] ? do_raw_spin_lock+0x121/0x260 [ 3161.503497] ? rwlock_bug.part.0+0x90/0x90 [ 3161.504398] __io_uring_add_tctx_node+0x2c6/0x520 [ 3161.505416] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3161.506528] ? alloc_fd+0x2e7/0x670 [ 3161.507308] io_uring_setup+0x1fbb/0x2980 [ 3161.508190] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3161.509260] ? wait_for_completion_io+0x270/0x270 [ 3161.510303] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3161.511421] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3161.512517] do_syscall_64+0x33/0x40 [ 3161.513306] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3161.514406] RIP: 0033:0x7f4d680b3b19 [ 3161.515189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3161.519059] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3161.520671] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3161.522174] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3161.523689] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3161.525205] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3161.526727] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:29:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0xf0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 3161.598462] FAULT_INJECTION: forcing a failure. [ 3161.598462] name failslab, interval 1, probability 0, space 0, times 0 [ 3161.600888] CPU: 1 PID: 19508 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3161.602351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3161.604123] Call Trace: [ 3161.604693] dump_stack+0x107/0x167 [ 3161.605468] should_fail.cold+0x5/0xa [ 3161.606282] ? create_object.isra.0+0x3a/0xa30 [ 3161.607262] should_failslab+0x5/0x20 [ 3161.608075] kmem_cache_alloc+0x5b/0x310 [ 3161.608938] ? mark_held_locks+0x9e/0xe0 [ 3161.609803] create_object.isra.0+0x3a/0xa30 [ 3161.610737] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3161.611817] kmem_cache_alloc+0x159/0x310 [ 3161.612711] xas_alloc+0x336/0x440 [ 3161.613472] xas_create+0x34a/0x10d0 [ 3161.614276] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3161.615403] xas_store+0x8c/0x1c40 [ 3161.616176] __xa_store+0x164/0x2d0 [ 3161.616949] ? xa_delete_node+0x280/0x280 [ 3161.617842] ? trace_hardirqs_on+0x5b/0x180 [ 3161.618782] xa_store+0x31/0x50 [ 3161.619492] __io_uring_add_tctx_node+0x1cf/0x520 [ 3161.620513] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3161.621616] ? alloc_fd+0x2e7/0x670 [ 3161.622412] io_uring_setup+0x1fbb/0x2980 [ 3161.623308] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3161.624380] ? wait_for_completion_io+0x270/0x270 [ 3161.625429] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3161.626545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3161.627637] do_syscall_64+0x33/0x40 [ 3161.628431] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3161.629514] RIP: 0033:0x7fed36701b19 [ 3161.630301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3161.634197] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3161.635823] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3161.637341] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3161.638860] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3161.640378] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3161.641894] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:29:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xf0ffffff}}}}}, 0x28}}, 0x0) [ 3161.684702] FAULT_INJECTION: forcing a failure. [ 3161.684702] name failslab, interval 1, probability 0, space 0, times 0 [ 3161.687734] CPU: 0 PID: 19512 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3161.689453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3161.691410] Call Trace: [ 3161.692024] dump_stack+0x107/0x167 [ 3161.692889] should_fail.cold+0x5/0xa [ 3161.693793] ? vm_area_dup+0x78/0x290 [ 3161.694723] should_failslab+0x5/0x20 [ 3161.695620] kmem_cache_alloc+0x5b/0x310 [ 3161.696596] vm_area_dup+0x78/0x290 [ 3161.697470] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3161.698585] ? lock_downgrade+0x6d0/0x6d0 [ 3161.699557] ? _cond_resched+0x23/0x30 [ 3161.700476] ? copy_page_range+0x24e9/0x3810 [ 3161.701577] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3161.702703] ? avc_has_extended_perms+0xf40/0xf40 [ 3161.704027] ? vm_area_alloc+0x110/0x110 [ 3161.704999] ? selinux_vm_enough_memory+0x114/0x180 [ 3161.706163] ? selinux_sb_statfs+0x250/0x250 [ 3161.707233] ? percpu_counter_add_batch+0x8b/0x140 [ 3161.708405] ? __vm_enough_memory+0x184/0x360 [ 3161.709445] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3161.710681] copy_process+0x298b/0x78b0 [ 3161.711610] ? SOFTIRQ_verbose+0x10/0x10 [ 3161.712643] ? __cleanup_sighand+0xb0/0xb0 [ 3161.713677] ? _copy_from_user+0xfb/0x1b0 [ 3161.714702] kernel_clone+0xe7/0x980 [ 3161.715578] ? __lockdep_reset_lock+0x180/0x180 [ 3161.716672] ? create_io_thread+0xf0/0xf0 [ 3161.717682] ? ksys_write+0x21a/0x260 [ 3161.718613] ? lock_downgrade+0x6d0/0x6d0 [ 3161.719597] __do_sys_clone3+0x1e5/0x320 [ 3161.720545] ? __do_sys_clone+0x110/0x110 [ 3161.721564] ? rcu_read_lock_any_held+0x75/0xa0 [ 3161.722669] ? vfs_write+0x354/0xb10 [ 3161.723550] ? fput_many+0x2f/0x1a0 [ 3161.724425] ? ksys_write+0x1a9/0x260 [ 3161.725315] ? __ia32_sys_read+0xb0/0xb0 [ 3161.726267] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3161.727515] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3161.728712] ? trace_hardirqs_on+0x5b/0x180 [ 3161.729724] do_syscall_64+0x33/0x40 [ 3161.730624] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3161.731812] RIP: 0033:0x7f55c06adb19 [ 3161.732680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3161.736938] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3161.738737] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3161.740389] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3161.742035] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3161.743724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3161.745411] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:29:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x16, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:29:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3d01}}}}}, 0x28}}, 0x0) 10:29:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 30) 10:29:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xfffff000}}}}}, 0x28}}, 0x0) 10:29:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:29:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x5000000}, 0x0) 10:29:49 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 47) 10:29:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 46) 10:29:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xc00e}}}}}, 0x28}}, 0x0) 10:29:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x17, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 3176.420792] FAULT_INJECTION: forcing a failure. [ 3176.420792] name failslab, interval 1, probability 0, space 0, times 0 [ 3176.422149] FAULT_INJECTION: forcing a failure. [ 3176.422149] name failslab, interval 1, probability 0, space 0, times 0 [ 3176.422449] CPU: 1 PID: 19543 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3176.426372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3176.427463] Call Trace: [ 3176.427819] dump_stack+0x107/0x167 [ 3176.428295] should_fail.cold+0x5/0xa [ 3176.428790] ? create_object.isra.0+0x3a/0xa30 [ 3176.429434] should_failslab+0x5/0x20 [ 3176.429926] kmem_cache_alloc+0x5b/0x310 [ 3176.430520] create_object.isra.0+0x3a/0xa30 [ 3176.431102] kmemleak_alloc_percpu+0xa0/0x100 [ 3176.431696] pcpu_alloc+0x4e2/0x1240 [ 3176.432214] __percpu_counter_init+0x10d/0x2d0 [ 3176.432827] io_uring_alloc_task_context+0xcc/0x6a0 [ 3176.433530] ? io_import_iovec+0x1120/0x1120 [ 3176.434100] ? lock_downgrade+0x6d0/0x6d0 [ 3176.434651] ? do_raw_spin_lock+0x121/0x260 [ 3176.435214] ? rwlock_bug.part.0+0x90/0x90 [ 3176.435773] __io_uring_add_tctx_node+0x2c6/0x520 [ 3176.436405] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3176.437101] ? alloc_fd+0x2e7/0x670 [ 3176.437631] io_uring_setup+0x1fbb/0x2980 [ 3176.438211] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3176.438909] ? wait_for_completion_io+0x270/0x270 [ 3176.439560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.440281] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3176.440961] do_syscall_64+0x33/0x40 [ 3176.441519] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3176.442196] RIP: 0033:0x7f4d680b3b19 [ 3176.442686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3176.445068] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3176.446048] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3176.446977] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3176.447893] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3176.448814] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3176.449737] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3176.450696] CPU: 0 PID: 19544 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3176.452280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3176.454149] Call Trace: [ 3176.454456] FAULT_INJECTION: forcing a failure. [ 3176.454456] name failslab, interval 1, probability 0, space 0, times 0 [ 3176.454761] dump_stack+0x107/0x167 [ 3176.456990] should_fail.cold+0x5/0xa [ 3176.457870] ? create_object.isra.0+0x3a/0xa30 [ 3176.458914] should_failslab+0x5/0x20 [ 3176.459778] kmem_cache_alloc+0x5b/0x310 [ 3176.460716] create_object.isra.0+0x3a/0xa30 [ 3176.461713] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3176.462889] kmem_cache_alloc+0x159/0x310 [ 3176.463850] vm_area_dup+0x78/0x290 [ 3176.464696] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3176.465758] ? lock_downgrade+0x6d0/0x6d0 [ 3176.466698] ? _cond_resched+0x10/0x30 [ 3176.467580] ? copy_page_range+0x24e9/0x3810 [ 3176.468616] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3176.469677] ? avc_has_extended_perms+0xf40/0xf40 [ 3176.470798] ? vm_area_alloc+0x110/0x110 [ 3176.471736] ? selinux_vm_enough_memory+0x114/0x180 [ 3176.472914] ? selinux_sb_statfs+0x250/0x250 [ 3176.473969] ? percpu_counter_add_batch+0x8b/0x140 [ 3176.475112] ? __vm_enough_memory+0x184/0x360 [ 3176.476137] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3176.477306] copy_process+0x298b/0x78b0 [ 3176.478215] ? SOFTIRQ_verbose+0x10/0x10 [ 3176.479217] ? __cleanup_sighand+0xb0/0xb0 [ 3176.480217] ? _copy_from_user+0xfb/0x1b0 [ 3176.481171] kernel_clone+0xe7/0x980 [ 3176.482018] ? lock_acquire+0x197/0x470 [ 3176.482925] ? create_io_thread+0xf0/0xf0 [ 3176.483898] ? ksys_write+0x21a/0x260 [ 3176.484760] ? lock_downgrade+0x6d0/0x6d0 [ 3176.485718] __do_sys_clone3+0x1e5/0x320 [ 3176.486645] ? __do_sys_clone+0x110/0x110 [ 3176.487627] ? rcu_read_lock_any_held+0x75/0xa0 [ 3176.488676] ? vfs_write+0x354/0xb10 [ 3176.489527] ? fput_many+0x2f/0x1a0 [ 3176.490356] ? ksys_write+0x1a9/0x260 [ 3176.491235] ? __ia32_sys_read+0xb0/0xb0 [ 3176.492168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.493350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3176.494515] ? trace_hardirqs_on+0x5b/0x180 [ 3176.495499] do_syscall_64+0x33/0x40 [ 3176.496347] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3176.497510] RIP: 0033:0x7f55c06adb19 [ 3176.498355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3176.502505] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3176.504240] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3176.505934] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3176.507551] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3176.509167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3176.510785] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3176.512449] CPU: 1 PID: 19545 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3176.513326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3176.514365] Call Trace: [ 3176.514701] dump_stack+0x107/0x167 [ 3176.515164] should_fail.cold+0x5/0xa [ 3176.515759] ? xas_alloc+0x336/0x440 [ 3176.516315] should_failslab+0x5/0x20 [ 3176.516788] kmem_cache_alloc+0x5b/0x310 [ 3176.517309] xas_alloc+0x336/0x440 [ 3176.517769] xas_create+0x34a/0x10d0 [ 3176.518245] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3176.518909] xas_store+0x8c/0x1c40 [ 3176.519360] __xa_store+0x164/0x2d0 [ 3176.519816] ? xa_delete_node+0x280/0x280 [ 3176.520337] ? trace_hardirqs_on+0x5b/0x180 [ 3176.520898] xa_store+0x31/0x50 [ 3176.521321] __io_uring_add_tctx_node+0x1cf/0x520 [ 3176.521913] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3176.522587] ? alloc_fd+0x2e7/0x670 [ 3176.523053] io_uring_setup+0x1fbb/0x2980 [ 3176.523578] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3176.524201] ? wait_for_completion_io+0x270/0x270 [ 3176.524815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.525462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3176.526107] do_syscall_64+0x33/0x40 [ 3176.526576] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3176.527222] RIP: 0033:0x7fed36701b19 [ 3176.527681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3176.529961] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3176.530920] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3176.531805] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3176.532688] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3176.533571] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3176.534520] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:29:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffff7f}}}}}, 0x28}}, 0x0) 10:30:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 48) 10:30:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x6000000}, 0x0) 10:30:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x18, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:30:09 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 47) 10:30:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x3e6, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:30:09 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 31) 10:30:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xf000}}}}}, 0x28}}, 0x0) 10:30:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffff9e}}}}}, 0x28}}, 0x0) [ 3196.470114] FAULT_INJECTION: forcing a failure. [ 3196.470114] name failslab, interval 1, probability 0, space 0, times 0 [ 3196.472799] CPU: 1 PID: 19568 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3196.474649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3196.476884] Call Trace: [ 3196.477566] dump_stack+0x107/0x167 [ 3196.478494] should_fail.cold+0x5/0xa [ 3196.479719] ? create_object.isra.0+0x3a/0xa30 [ 3196.480879] should_failslab+0x5/0x20 [ 3196.481842] kmem_cache_alloc+0x5b/0x310 [ 3196.483049] ? mark_held_locks+0x9e/0xe0 [ 3196.484261] create_object.isra.0+0x3a/0xa30 [ 3196.485477] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3196.486792] kmem_cache_alloc+0x159/0x310 [ 3196.488021] xas_alloc+0x336/0x440 [ 3196.488973] xas_create+0x34a/0x10d0 [ 3196.490063] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3196.491392] xas_store+0x8c/0x1c40 [ 3196.492547] __xa_store+0x164/0x2d0 [ 3196.493552] ? xa_delete_node+0x280/0x280 [ 3196.494842] ? trace_hardirqs_on+0x5b/0x180 [ 3196.496110] xa_store+0x31/0x50 [ 3196.497146] __io_uring_add_tctx_node+0x1cf/0x520 [ 3196.498477] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3196.500040] ? alloc_fd+0x2e7/0x670 [ 3196.500989] io_uring_setup+0x1fbb/0x2980 [ 3196.502305] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3196.503714] ? wait_for_completion_io+0x270/0x270 [ 3196.505104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3196.506676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3196.508119] do_syscall_64+0x33/0x40 [ 3196.509304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3196.510601] RIP: 0033:0x7fed36701b19 [ 3196.511745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3196.516601] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3196.518538] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3196.520374] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3196.522192] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3196.524008] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3196.525823] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3196.535817] FAULT_INJECTION: forcing a failure. [ 3196.535817] name failslab, interval 1, probability 0, space 0, times 0 [ 3196.538350] CPU: 1 PID: 19578 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3196.539823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3196.541809] Call Trace: [ 3196.542489] dump_stack+0x107/0x167 [ 3196.543279] should_fail.cold+0x5/0xa [ 3196.544205] ? anon_vma_clone+0xdc/0x590 [ 3196.545132] should_failslab+0x5/0x20 [ 3196.545947] kmem_cache_alloc+0x5b/0x310 [ 3196.546904] anon_vma_clone+0xdc/0x590 [ 3196.547879] anon_vma_fork+0x82/0x640 [ 3196.548732] ? __vm_enough_memory+0x184/0x360 [ 3196.549739] copy_process+0x72cd/0x78b0 [ 3196.550971] ? __cleanup_sighand+0xb0/0xb0 [ 3196.551896] ? _copy_from_user+0xfb/0x1b0 [ 3196.552786] kernel_clone+0xe7/0x980 [ 3196.553711] ? lock_acquire+0x197/0x470 [ 3196.554721] ? create_io_thread+0xf0/0xf0 [ 3196.555751] ? ksys_write+0x21a/0x260 [ 3196.556650] ? lock_downgrade+0x6d0/0x6d0 [ 3196.557714] __do_sys_clone3+0x1e5/0x320 [ 3196.558694] ? __do_sys_clone+0x110/0x110 [ 3196.559835] ? rcu_read_lock_any_held+0x75/0xa0 [ 3196.561063] ? vfs_write+0x354/0xb10 [ 3196.561905] ? fput_many+0x2f/0x1a0 [ 3196.562804] ? ksys_write+0x1a9/0x260 [ 3196.563855] ? __ia32_sys_read+0xb0/0xb0 [ 3196.564842] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3196.565944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3196.567040] ? trace_hardirqs_on+0x5b/0x180 [ 3196.567951] do_syscall_64+0x33/0x40 [ 3196.568736] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3196.569954] RIP: 0033:0x7f55c06adb19 [ 3196.570995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3196.575340] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3196.576947] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3196.578462] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3196.579971] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3196.581471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3196.582988] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:30:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 49) [ 3196.622266] FAULT_INJECTION: forcing a failure. [ 3196.622266] name failslab, interval 1, probability 0, space 0, times 0 [ 3196.624897] CPU: 1 PID: 19587 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3196.626564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3196.628745] Call Trace: [ 3196.629378] dump_stack+0x107/0x167 [ 3196.630449] should_fail.cold+0x5/0xa [ 3196.631392] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 3196.632785] should_failslab+0x5/0x20 [ 3196.633847] kmem_cache_alloc_trace+0x55/0x320 [ 3196.635001] io_uring_alloc_task_context+0x4a3/0x6a0 [ 3196.636325] ? io_import_iovec+0x1120/0x1120 [ 3196.637495] ? lock_downgrade+0x6d0/0x6d0 [ 3196.638577] ? do_raw_spin_lock+0x121/0x260 [ 3196.639647] ? rwlock_bug.part.0+0x90/0x90 [ 3196.640753] __io_uring_add_tctx_node+0x2c6/0x520 [ 3196.641898] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3196.643163] ? alloc_fd+0x2e7/0x670 [ 3196.644169] io_uring_setup+0x1fbb/0x2980 [ 3196.645055] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3196.646122] ? wait_for_completion_io+0x270/0x270 [ 3196.647175] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3196.648279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3196.649367] do_syscall_64+0x33/0x40 [ 3196.650157] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3196.651252] RIP: 0033:0x7f4d680b3b19 [ 3196.652032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3196.655917] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 10:30:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x19, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 3196.657528] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3196.659298] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3196.661031] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3196.662824] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3196.664693] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:30:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x80000}}}}}, 0x28}}, 0x0) 10:30:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xfffffff0}}}}}, 0x28}}, 0x0) 10:30:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x500, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:30:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x7000000}, 0x0) 10:30:10 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 48) 10:30:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x1a, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 3196.904802] FAULT_INJECTION: forcing a failure. [ 3196.904802] name failslab, interval 1, probability 0, space 0, times 0 [ 3196.907837] CPU: 1 PID: 19608 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3196.909485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3196.911512] Call Trace: [ 3196.912280] dump_stack+0x107/0x167 [ 3196.913119] should_fail.cold+0x5/0xa [ 3196.914138] ? create_object.isra.0+0x3a/0xa30 [ 3196.915118] should_failslab+0x5/0x20 [ 3196.915914] kmem_cache_alloc+0x5b/0x310 [ 3196.916827] create_object.isra.0+0x3a/0xa30 [ 3196.917743] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3196.918822] kmem_cache_alloc+0x159/0x310 [ 3196.919724] anon_vma_clone+0xdc/0x590 [ 3196.920779] anon_vma_fork+0x82/0x640 [ 3196.921632] ? __vm_enough_memory+0x184/0x360 [ 3196.922771] copy_process+0x72cd/0x78b0 [ 3196.923840] ? SOFTIRQ_verbose+0x10/0x10 [ 3196.924729] ? __cleanup_sighand+0xb0/0xb0 [ 3196.925636] ? _copy_from_user+0xfb/0x1b0 [ 3196.926647] kernel_clone+0xe7/0x980 [ 3196.927578] ? lock_acquire+0x197/0x470 [ 3196.928583] ? create_io_thread+0xf0/0xf0 [ 3196.929470] ? ksys_write+0x21a/0x260 [ 3196.930273] ? lock_downgrade+0x6d0/0x6d0 [ 3196.931358] __do_sys_clone3+0x1e5/0x320 [ 3196.932446] ? __do_sys_clone+0x110/0x110 [ 3196.933411] ? rcu_read_lock_any_held+0x75/0xa0 [ 3196.934389] ? vfs_write+0x354/0xb10 [ 3196.935190] ? fput_many+0x2f/0x1a0 [ 3196.935953] ? ksys_write+0x1a9/0x260 [ 3196.936765] ? __ia32_sys_read+0xb0/0xb0 [ 3196.937806] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3196.938927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3196.940332] ? trace_hardirqs_on+0x5b/0x180 [ 3196.941253] do_syscall_64+0x33/0x40 [ 3196.942056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3196.943391] RIP: 0033:0x7f55c06adb19 [ 3196.944323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3196.948246] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3196.949846] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3196.951361] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3196.952863] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3196.954380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3196.955892] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3196.969654] FAULT_INJECTION: forcing a failure. [ 3196.969654] name failslab, interval 1, probability 0, space 0, times 0 [ 3196.973596] CPU: 1 PID: 19611 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3196.975072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3196.976806] Call Trace: [ 3196.977364] dump_stack+0x107/0x167 [ 3196.978140] should_fail.cold+0x5/0xa [ 3196.978956] ? ___slab_alloc+0x155/0x700 [ 3196.979805] ? create_object.isra.0+0x3a/0xa30 [ 3196.980775] should_failslab+0x5/0x20 [ 3196.981581] kmem_cache_alloc+0x5b/0x310 [ 3196.982441] create_object.isra.0+0x3a/0xa30 [ 3196.983388] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3196.984460] kmem_cache_alloc+0x159/0x310 [ 3196.985340] xas_alloc+0x336/0x440 [ 3196.986090] xas_create+0x34a/0x10d0 [ 3196.986896] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3196.988001] xas_store+0x8c/0x1c40 [ 3196.988764] __xa_store+0x164/0x2d0 [ 3196.989537] ? xa_delete_node+0x280/0x280 [ 3196.990415] ? trace_hardirqs_on+0x5b/0x180 [ 3196.991341] xa_store+0x31/0x50 [ 3196.992038] __io_uring_add_tctx_node+0x1cf/0x520 [ 3196.993050] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3196.994157] ? alloc_fd+0x2e7/0x670 [ 3196.994954] io_uring_setup+0x1fbb/0x2980 [ 3196.995834] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3196.996910] ? wait_for_completion_io+0x270/0x270 [ 3196.997942] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3196.999049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3197.000131] do_syscall_64+0x33/0x40 [ 3197.000911] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3197.001983] RIP: 0033:0x7fed36701b19 [ 3197.002771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3197.006649] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3197.008256] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3197.009755] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3197.011266] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3197.012764] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3197.014260] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:30:26 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 49) 10:30:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x600, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:30:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 50) 10:30:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 32) 10:30:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xf0ffff}}}}}, 0x28}}, 0x0) 10:30:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffffff}}}}}, 0x28}}, 0x0) 10:30:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x1b, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:30:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x9000000}, 0x0) [ 3213.146006] FAULT_INJECTION: forcing a failure. [ 3213.146006] name failslab, interval 1, probability 0, space 0, times 0 [ 3213.148938] CPU: 1 PID: 19633 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3213.150733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3213.152490] Call Trace: [ 3213.153058] dump_stack+0x107/0x167 [ 3213.153821] should_fail.cold+0x5/0xa [ 3213.154620] ? anon_vma_fork+0xf1/0x640 [ 3213.155462] should_failslab+0x5/0x20 [ 3213.156262] kmem_cache_alloc+0x5b/0x310 [ 3213.157129] anon_vma_fork+0xf1/0x640 [ 3213.157926] ? __vm_enough_memory+0x184/0x360 [ 3213.158891] copy_process+0x72cd/0x78b0 [ 3213.159736] ? SOFTIRQ_verbose+0x10/0x10 [ 3213.160650] ? __cleanup_sighand+0xb0/0xb0 [ 3213.161598] ? _copy_from_user+0xfb/0x1b0 [ 3213.162494] kernel_clone+0xe7/0x980 [ 3213.163305] ? lock_acquire+0x197/0x470 [ 3213.164166] ? create_io_thread+0xf0/0xf0 [ 3213.165070] ? ksys_write+0x21a/0x260 [ 3213.165887] ? lock_downgrade+0x6d0/0x6d0 [ 3213.166802] __do_sys_clone3+0x1e5/0x320 [ 3213.167675] ? __do_sys_clone+0x110/0x110 [ 3213.168603] ? rcu_read_lock_any_held+0x75/0xa0 [ 3213.169596] ? vfs_write+0x354/0xb10 [ 3213.170398] ? fput_many+0x2f/0x1a0 [ 3213.171200] ? ksys_write+0x1a9/0x260 [ 3213.171998] ? __ia32_sys_read+0xb0/0xb0 [ 3213.172861] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3213.173968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3213.175054] ? trace_hardirqs_on+0x5b/0x180 [ 3213.175956] do_syscall_64+0x33/0x40 [ 3213.176738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3213.177810] RIP: 0033:0x7f55c06adb19 [ 3213.178589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3213.182461] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3213.184070] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3213.185570] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3213.187093] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3213.188592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3213.190093] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3213.218692] FAULT_INJECTION: forcing a failure. [ 3213.218692] name failslab, interval 1, probability 0, space 0, times 0 [ 3213.221171] CPU: 1 PID: 19637 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3213.222632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3213.224377] Call Trace: [ 3213.224936] dump_stack+0x107/0x167 [ 3213.225701] should_fail.cold+0x5/0xa [ 3213.226505] ? create_object.isra.0+0x3a/0xa30 [ 3213.227470] should_failslab+0x5/0x20 [ 3213.228268] kmem_cache_alloc+0x5b/0x310 [ 3213.229126] create_object.isra.0+0x3a/0xa30 [ 3213.230049] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3213.231127] kmem_cache_alloc_trace+0x151/0x320 [ 3213.232117] io_uring_alloc_task_context+0x4a3/0x6a0 [ 3213.233185] ? io_import_iovec+0x1120/0x1120 [ 3213.234114] ? lock_downgrade+0x6d0/0x6d0 [ 3213.235019] ? do_raw_spin_lock+0x121/0x260 [ 3213.235931] ? rwlock_bug.part.0+0x90/0x90 [ 3213.236847] __io_uring_add_tctx_node+0x2c6/0x520 [ 3213.237863] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3213.238972] ? alloc_fd+0x2e7/0x670 [ 3213.239758] io_uring_setup+0x1fbb/0x2980 [ 3213.240645] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3213.241711] ? wait_for_completion_io+0x270/0x270 [ 3213.242751] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3213.243860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3213.244952] do_syscall_64+0x33/0x40 [ 3213.245734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3213.246830] RIP: 0033:0x7f4d680b3b19 [ 3213.247608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3213.251490] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3213.253097] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3213.254602] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3213.256116] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3213.257614] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3213.259125] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:30:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x700, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 3213.315933] FAULT_INJECTION: forcing a failure. [ 3213.315933] name failslab, interval 1, probability 0, space 0, times 0 [ 3213.319976] CPU: 0 PID: 19635 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3213.321702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3213.323728] Call Trace: [ 3213.324506] dump_stack+0x107/0x167 10:30:26 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 50) [ 3213.325605] should_fail.cold+0x5/0xa 10:30:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 3213.326911] ? create_object.isra.0+0x3a/0xa30 [ 3213.328162] should_failslab+0x5/0x20 [ 3213.329167] kmem_cache_alloc+0x5b/0x310 [ 3213.330253] ? mark_held_locks+0x9e/0xe0 [ 3213.331508] create_object.isra.0+0x3a/0xa30 [ 3213.332650] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3213.334117] kmem_cache_alloc+0x159/0x310 [ 3213.335441] xas_alloc+0x336/0x440 [ 3213.336544] xas_create+0x34a/0x10d0 [ 3213.337846] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3213.339332] xas_store+0x8c/0x1c40 [ 3213.340748] __xa_store+0x164/0x2d0 [ 3213.341843] ? xa_delete_node+0x280/0x280 [ 3213.343232] ? trace_hardirqs_on+0x5b/0x180 [ 3213.344640] xa_store+0x31/0x50 [ 3213.345641] __io_uring_add_tctx_node+0x1cf/0x520 [ 3213.346966] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3213.348341] ? alloc_fd+0x2e7/0x670 [ 3213.349729] io_uring_setup+0x1fbb/0x2980 [ 3213.351081] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3213.352368] ? wait_for_completion_io+0x270/0x270 [ 3213.354232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3213.355596] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3213.357090] do_syscall_64+0x33/0x40 [ 3213.358103] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3213.359421] RIP: 0033:0x7fed36701b19 [ 3213.360413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3213.364711] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3213.366665] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3213.368448] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3213.370209] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3213.371986] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3213.373744] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:30:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1000000}}}}}, 0x28}}, 0x0) 10:30:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 33) 10:30:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x1c, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:30:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf000000}, 0x0) [ 3213.568515] FAULT_INJECTION: forcing a failure. [ 3213.568515] name failslab, interval 1, probability 0, space 0, times 0 [ 3213.571394] CPU: 0 PID: 19655 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3213.573057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3213.574951] Call Trace: [ 3213.575566] dump_stack+0x107/0x167 [ 3213.576406] should_fail.cold+0x5/0xa [ 3213.577287] ? create_object.isra.0+0x3a/0xa30 [ 3213.578330] should_failslab+0x5/0x20 [ 3213.579203] kmem_cache_alloc+0x5b/0x310 [ 3213.580140] create_object.isra.0+0x3a/0xa30 [ 3213.581138] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3213.582305] kmem_cache_alloc+0x159/0x310 [ 3213.583282] anon_vma_fork+0xf1/0x640 [ 3213.584144] ? __vm_enough_memory+0x184/0x360 [ 3213.585169] copy_process+0x72cd/0x78b0 [ 3213.586065] ? SOFTIRQ_verbose+0x10/0x10 [ 3213.587077] ? __cleanup_sighand+0xb0/0xb0 [ 3213.588080] ? _copy_from_user+0xfb/0x1b0 [ 3213.589054] kernel_clone+0xe7/0x980 [ 3213.589916] ? lock_acquire+0x197/0x470 [ 3213.590829] ? create_io_thread+0xf0/0xf0 [ 3213.591806] ? ksys_write+0x21a/0x260 [ 3213.592677] ? lock_downgrade+0x6d0/0x6d0 [ 3213.593622] __do_sys_clone3+0x1e5/0x320 [ 3213.594540] ? __do_sys_clone+0x110/0x110 [ 3213.595526] ? rcu_read_lock_any_held+0x75/0xa0 [ 3213.596586] ? vfs_write+0x354/0xb10 [ 3213.597432] ? fput_many+0x2f/0x1a0 [ 3213.598261] ? ksys_write+0x1a9/0x260 [ 3213.599137] ? __ia32_sys_read+0xb0/0xb0 [ 3213.600071] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3213.601251] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3213.602415] ? trace_hardirqs_on+0x5b/0x180 [ 3213.603402] do_syscall_64+0x33/0x40 [ 3213.604250] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3213.605402] RIP: 0033:0x7f55c06adb19 [ 3213.606243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3213.610393] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3213.612119] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3213.613731] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3213.615356] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3213.616974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3213.618589] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:30:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 51) 10:30:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x900, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:30:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2000000}}}}}, 0x28}}, 0x0) 10:30:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x1d, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:30:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x28}}, 0x0) [ 3213.775884] FAULT_INJECTION: forcing a failure. [ 3213.775884] name failslab, interval 1, probability 0, space 0, times 0 [ 3213.778453] CPU: 1 PID: 19671 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3213.779917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3213.782049] Call Trace: [ 3213.782616] dump_stack+0x107/0x167 [ 3213.783428] should_fail.cold+0x5/0xa [ 3213.784382] ? xas_alloc+0x336/0x440 [ 3213.785165] should_failslab+0x5/0x20 [ 3213.785970] kmem_cache_alloc+0x5b/0x310 [ 3213.787104] xas_alloc+0x336/0x440 [ 3213.787955] xas_create+0x34a/0x10d0 [ 3213.788748] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3213.790043] xas_store+0x8c/0x1c40 [ 3213.790923] __xa_store+0x164/0x2d0 [ 3213.791806] ? xa_delete_node+0x280/0x280 [ 3213.792799] ? trace_hardirqs_on+0x5b/0x180 [ 3213.793718] xa_store+0x31/0x50 [ 3213.794588] __io_uring_add_tctx_node+0x1cf/0x520 [ 3213.795898] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3213.797053] ? alloc_fd+0x2e7/0x670 [ 3213.797836] io_uring_setup+0x1fbb/0x2980 [ 3213.798979] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3213.800301] ? wait_for_completion_io+0x270/0x270 [ 3213.801435] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3213.802537] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3213.803635] do_syscall_64+0x33/0x40 [ 3213.804413] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3213.805492] RIP: 0033:0x7fed36701b19 [ 3213.806275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3213.810655] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3213.812265] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3213.813946] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3213.815411] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3213.817272] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3213.818759] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3213.823134] FAULT_INJECTION: forcing a failure. [ 3213.823134] name failslab, interval 1, probability 0, space 0, times 0 [ 3213.825761] CPU: 1 PID: 19657 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3213.827245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3213.829322] Call Trace: [ 3213.829879] dump_stack+0x107/0x167 [ 3213.830642] should_fail.cold+0x5/0xa [ 3213.831451] ? io_wq_create+0xeb/0xc00 [ 3213.832444] should_failslab+0x5/0x20 [ 3213.833371] __kmalloc+0x72/0x390 [ 3213.834356] io_wq_create+0xeb/0xc00 [ 3213.835160] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3213.836482] ? io_import_iovec+0x1120/0x1120 [ 3213.837695] ? io_apoll_task_func+0x2d0/0x2d0 [ 3213.838631] ? __io_req_find_next+0x300/0x300 [ 3213.839858] ? do_raw_spin_lock+0x121/0x260 [ 3213.841038] ? rwlock_bug.part.0+0x90/0x90 [ 3213.841932] __io_uring_add_tctx_node+0x2c6/0x520 [ 3213.843148] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3213.844566] ? alloc_fd+0x2e7/0x670 [ 3213.845425] io_uring_setup+0x1fbb/0x2980 [ 3213.846305] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3213.847386] ? wait_for_completion_io+0x270/0x270 [ 3213.848426] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3213.849522] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3213.850605] do_syscall_64+0x33/0x40 [ 3213.851399] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3213.852474] RIP: 0033:0x7f4d680b3b19 [ 3213.853256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3213.857123] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3213.858714] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3213.860222] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3213.861710] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3213.863214] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3213.864704] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:30:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x1e, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:30:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 52) 10:30:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x9effffff}, 0x0) [ 3214.245232] FAULT_INJECTION: forcing a failure. [ 3214.245232] name failslab, interval 1, probability 0, space 0, times 0 [ 3214.247587] CPU: 1 PID: 19695 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3214.249012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3214.250736] Call Trace: [ 3214.251298] dump_stack+0x107/0x167 [ 3214.252050] should_fail.cold+0x5/0xa [ 3214.252845] ? create_object.isra.0+0x3a/0xa30 [ 3214.253779] should_failslab+0x5/0x20 [ 3214.254567] kmem_cache_alloc+0x5b/0x310 [ 3214.255428] ? mark_held_locks+0x9e/0xe0 [ 3214.256267] create_object.isra.0+0x3a/0xa30 [ 3214.257169] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3214.258244] kmem_cache_alloc+0x159/0x310 [ 3214.259121] xas_alloc+0x336/0x440 [ 3214.259859] xas_create+0x34a/0x10d0 [ 3214.260642] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3214.261729] xas_store+0x8c/0x1c40 [ 3214.262483] __xa_store+0x164/0x2d0 [ 3214.263266] ? xa_delete_node+0x280/0x280 [ 3214.264129] ? trace_hardirqs_on+0x5b/0x180 [ 3214.265029] xa_store+0x31/0x50 [ 3214.265716] __io_uring_add_tctx_node+0x1cf/0x520 [ 3214.266726] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3214.267833] ? alloc_fd+0x2e7/0x670 [ 3214.268603] io_uring_setup+0x1fbb/0x2980 [ 3214.269471] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3214.270516] ? wait_for_completion_io+0x270/0x270 [ 3214.271554] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3214.272658] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3214.273726] do_syscall_64+0x33/0x40 [ 3214.274491] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3214.275560] RIP: 0033:0x7fed36701b19 [ 3214.276330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3214.280169] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3214.281776] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3214.283287] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3214.284793] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3214.286296] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3214.287815] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:30:39 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 34) 10:30:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xa7000000}, 0x0) 10:30:39 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 51) 10:30:39 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 53) 10:30:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3000000}}}}}, 0x28}}, 0x0) 10:30:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0xc00, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:30:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x3}}}}}, 0x28}}, 0x0) 10:30:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x21, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 3226.646031] FAULT_INJECTION: forcing a failure. [ 3226.646031] name failslab, interval 1, probability 0, space 0, times 0 [ 3226.648954] FAULT_INJECTION: forcing a failure. [ 3226.648954] name failslab, interval 1, probability 0, space 0, times 0 [ 3226.651775] CPU: 1 PID: 19712 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3226.651788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3226.651795] Call Trace: [ 3226.651825] dump_stack+0x107/0x167 [ 3226.651850] should_fail.cold+0x5/0xa [ 3226.651875] ? create_object.isra.0+0x3a/0xa30 [ 3226.651896] should_failslab+0x5/0x20 [ 3226.651918] kmem_cache_alloc+0x5b/0x310 [ 3226.651949] create_object.isra.0+0x3a/0xa30 [ 3226.661715] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3226.663022] __kmalloc+0x16e/0x390 [ 3226.663907] io_wq_create+0xeb/0xc00 [ 3226.664700] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3226.665779] ? io_import_iovec+0x1120/0x1120 [ 3226.666698] ? io_apoll_task_func+0x2d0/0x2d0 [ 3226.667656] ? __io_req_find_next+0x300/0x300 [ 3226.668597] ? do_raw_spin_lock+0x121/0x260 [ 3226.669510] ? rwlock_bug.part.0+0x90/0x90 [ 3226.670408] __io_uring_add_tctx_node+0x2c6/0x520 [ 3226.671437] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3226.672531] ? alloc_fd+0x2e7/0x670 [ 3226.673304] io_uring_setup+0x1fbb/0x2980 [ 3226.674185] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3226.675256] ? wait_for_completion_io+0x270/0x270 [ 3226.676293] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3226.677457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3226.678853] do_syscall_64+0x33/0x40 [ 3226.679889] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3226.681268] RIP: 0033:0x7f4d680b3b19 [ 3226.682260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3226.687137] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3226.688967] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3226.690492] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3226.692051] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3226.693577] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3226.695128] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3226.696792] CPU: 0 PID: 19713 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3226.697783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3226.698977] Call Trace: [ 3226.699425] dump_stack+0x107/0x167 [ 3226.700061] should_fail.cold+0x5/0xa [ 3226.700696] ? xas_alloc+0x336/0x440 [ 3226.701310] should_failslab+0x5/0x20 [ 3226.701923] kmem_cache_alloc+0x5b/0x310 [ 3226.702677] xas_alloc+0x336/0x440 [ 3226.703319] xas_create+0x34a/0x10d0 [ 3226.704063] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3226.704908] xas_store+0x8c/0x1c40 [ 3226.705698] __xa_store+0x164/0x2d0 [ 3226.706340] ? xa_delete_node+0x280/0x280 [ 3226.707127] ? trace_hardirqs_on+0x5b/0x180 [ 3226.707920] xa_store+0x31/0x50 [ 3226.708498] __io_uring_add_tctx_node+0x1cf/0x520 [ 3226.709281] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3226.710086] ? alloc_fd+0x2e7/0x670 [ 3226.710838] io_uring_setup+0x1fbb/0x2980 [ 3226.711600] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3226.712333] ? wait_for_completion_io+0x270/0x270 [ 3226.713387] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3226.714163] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3226.715022] do_syscall_64+0x33/0x40 [ 3226.715607] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3226.716350] RIP: 0033:0x7fed36701b19 [ 3226.716921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3226.719379] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3226.720489] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3226.721490] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3226.722502] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3226.723517] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3226.724512] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3226.741244] FAULT_INJECTION: forcing a failure. [ 3226.741244] name failslab, interval 1, probability 0, space 0, times 0 [ 3226.743863] CPU: 1 PID: 19718 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3226.745333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3226.747081] Call Trace: [ 3226.747640] dump_stack+0x107/0x167 [ 3226.748414] should_fail.cold+0x5/0xa [ 3226.749275] ? anon_vma_fork+0x1ff/0x640 [ 3226.750442] should_failslab+0x5/0x20 [ 3226.751360] kmem_cache_alloc+0x5b/0x310 [ 3226.752222] anon_vma_fork+0x1ff/0x640 [ 3226.753054] copy_process+0x72cd/0x78b0 [ 3226.753894] ? SOFTIRQ_verbose+0x10/0x10 [ 3226.754795] ? __cleanup_sighand+0xb0/0xb0 [ 3226.755731] ? _copy_from_user+0xfb/0x1b0 [ 3226.756639] kernel_clone+0xe7/0x980 [ 3226.757433] ? lock_acquire+0x197/0x470 [ 3226.758268] ? create_io_thread+0xf0/0xf0 [ 3226.759165] ? ksys_write+0x21a/0x260 [ 3226.759965] ? lock_downgrade+0x6d0/0x6d0 [ 3226.760845] __do_sys_clone3+0x1e5/0x320 [ 3226.761822] ? __do_sys_clone+0x110/0x110 [ 3226.762976] ? rcu_read_lock_any_held+0x75/0xa0 [ 3226.764051] ? vfs_write+0x354/0xb10 [ 3226.764834] ? fput_many+0x2f/0x1a0 [ 3226.765599] ? ksys_write+0x1a9/0x260 [ 3226.766404] ? __ia32_sys_read+0xb0/0xb0 [ 3226.767272] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3226.768383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3226.769474] ? trace_hardirqs_on+0x5b/0x180 [ 3226.770383] do_syscall_64+0x33/0x40 [ 3226.771177] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3226.772262] RIP: 0033:0x7f55c06adb19 [ 3226.773045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3226.776910] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3226.778519] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3226.780149] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3226.782072] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3226.784007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3226.785927] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:30:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 10:30:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x22, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:30:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 35) [ 3227.074841] FAULT_INJECTION: forcing a failure. [ 3227.074841] name failslab, interval 1, probability 0, space 0, times 0 [ 3227.077961] CPU: 1 PID: 19739 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3227.079491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3227.081290] Call Trace: [ 3227.081868] dump_stack+0x107/0x167 [ 3227.082662] should_fail.cold+0x5/0xa [ 3227.083504] ? io_wq_create+0x6ef/0xc00 [ 3227.084369] should_failslab+0x5/0x20 [ 3227.085196] kmem_cache_alloc_node_trace+0x59/0x340 [ 3227.086287] io_wq_create+0x6ef/0xc00 [ 3227.087132] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3227.088241] ? io_import_iovec+0x1120/0x1120 [ 3227.089203] ? io_apoll_task_func+0x2d0/0x2d0 [ 3227.090172] ? __io_req_find_next+0x300/0x300 [ 3227.091159] ? do_raw_spin_lock+0x121/0x260 [ 3227.092099] ? rwlock_bug.part.0+0x90/0x90 [ 3227.093024] __io_uring_add_tctx_node+0x2c6/0x520 [ 3227.094072] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3227.095217] ? alloc_fd+0x2e7/0x670 [ 3227.096021] io_uring_setup+0x1fbb/0x2980 [ 3227.096933] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3227.098032] ? wait_for_completion_io+0x270/0x270 [ 3227.099118] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3227.100253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3227.101377] do_syscall_64+0x33/0x40 [ 3227.102182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3227.103303] RIP: 0033:0x7f4d680b3b19 [ 3227.104114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3227.108112] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3227.109762] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3227.111317] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3227.112861] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3227.114407] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3227.115959] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:30:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 54) 10:30:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 36) 10:30:54 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 52) 10:30:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4000000}}}}}, 0x28}}, 0x0) 10:30:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x4}}}}}, 0x28}}, 0x0) 10:30:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x25, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:30:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xfffff000}, 0x0) 10:30:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0xec0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 3241.395383] FAULT_INJECTION: forcing a failure. [ 3241.395383] name failslab, interval 1, probability 0, space 0, times 0 [ 3241.397810] CPU: 1 PID: 19758 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3241.399269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3241.401011] Call Trace: [ 3241.401570] dump_stack+0x107/0x167 [ 3241.402348] should_fail.cold+0x5/0xa [ 3241.403162] ? create_object.isra.0+0x3a/0xa30 [ 3241.404126] should_failslab+0x5/0x20 [ 3241.404932] kmem_cache_alloc+0x5b/0x310 [ 3241.405798] ? mark_held_locks+0x9e/0xe0 [ 3241.406662] create_object.isra.0+0x3a/0xa30 [ 3241.407594] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3241.408667] kmem_cache_alloc+0x159/0x310 [ 3241.409544] xas_alloc+0x336/0x440 [ 3241.410294] xas_create+0x34a/0x10d0 [ 3241.411094] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3241.412199] xas_store+0x8c/0x1c40 [ 3241.412962] __xa_store+0x164/0x2d0 [ 3241.413732] ? xa_delete_node+0x280/0x280 [ 3241.414612] ? trace_hardirqs_on+0x5b/0x180 [ 3241.415539] xa_store+0x31/0x50 [ 3241.416239] __io_uring_add_tctx_node+0x1cf/0x520 [ 3241.417248] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3241.418352] ? alloc_fd+0x2e7/0x670 [ 3241.419143] io_uring_setup+0x1fbb/0x2980 [ 3241.420028] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3241.421091] ? wait_for_completion_io+0x270/0x270 [ 3241.422131] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3241.423246] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3241.424338] do_syscall_64+0x33/0x40 [ 3241.425130] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3241.426209] RIP: 0033:0x7fed36701b19 [ 3241.427002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3241.430879] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3241.432489] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3241.433978] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3241.435501] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3241.437005] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3241.438508] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3241.450002] FAULT_INJECTION: forcing a failure. [ 3241.450002] name failslab, interval 1, probability 0, space 0, times 0 [ 3241.452418] CPU: 1 PID: 19763 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3241.453880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3241.455634] Call Trace: [ 3241.456194] dump_stack+0x107/0x167 [ 3241.456964] should_fail.cold+0x5/0xa [ 3241.457771] ? create_object.isra.0+0x3a/0xa30 [ 3241.458737] should_failslab+0x5/0x20 [ 3241.459550] kmem_cache_alloc+0x5b/0x310 [ 3241.460425] create_object.isra.0+0x3a/0xa30 [ 3241.461358] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3241.462434] kmem_cache_alloc+0x159/0x310 [ 3241.463328] anon_vma_clone+0xdc/0x590 [ 3241.464158] anon_vma_fork+0x82/0x640 [ 3241.464962] ? __vm_enough_memory+0x184/0x360 [ 3241.465908] copy_process+0x72cd/0x78b0 [ 3241.466778] ? __cleanup_sighand+0xb0/0xb0 [ 3241.467696] ? _copy_from_user+0xfb/0x1b0 [ 3241.468572] kernel_clone+0xe7/0x980 [ 3241.469353] ? lock_acquire+0x197/0x470 [ 3241.470189] ? create_io_thread+0xf0/0xf0 [ 3241.471086] ? ksys_write+0x21a/0x260 [ 3241.471883] ? lock_downgrade+0x6d0/0x6d0 [ 3241.472756] __do_sys_clone3+0x1e5/0x320 [ 3241.473615] ? __do_sys_clone+0x110/0x110 [ 3241.474518] ? rcu_read_lock_any_held+0x75/0xa0 [ 3241.475503] ? vfs_write+0x354/0xb10 [ 3241.476286] ? fput_many+0x2f/0x1a0 [ 3241.477056] ? ksys_write+0x1a9/0x260 [ 3241.477856] ? __ia32_sys_read+0xb0/0xb0 [ 3241.478716] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3241.479828] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3241.480903] ? trace_hardirqs_on+0x5b/0x180 [ 3241.481816] do_syscall_64+0x33/0x40 [ 3241.482598] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3241.483683] RIP: 0033:0x7f55c06adb19 [ 3241.484464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3241.488329] RSP: 002b:00007f55bdc02188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3241.489932] RAX: ffffffffffffffda RBX: 00007f55c07c1020 RCX: 00007f55c06adb19 [ 3241.491438] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3241.492940] RBP: 00007f55bdc021d0 R08: 0000000000000000 R09: 0000000000000000 [ 3241.494432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3241.495952] R13: 00007ffcbb0d12ff R14: 00007f55bdc02300 R15: 0000000000022000 [ 3241.520017] FAULT_INJECTION: forcing a failure. [ 3241.520017] name failslab, interval 1, probability 0, space 0, times 0 [ 3241.522498] CPU: 1 PID: 19768 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3241.524123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3241.526226] Call Trace: [ 3241.526786] dump_stack+0x107/0x167 [ 3241.527564] should_fail.cold+0x5/0xa [ 3241.528355] ? create_object.isra.0+0x3a/0xa30 [ 3241.529312] should_failslab+0x5/0x20 [ 3241.530111] kmem_cache_alloc+0x5b/0x310 [ 3241.530969] ? io_wq_create+0x114/0xc00 [ 3241.531892] create_object.isra.0+0x3a/0xa30 [ 3241.532795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3241.533879] kmem_cache_alloc_node_trace+0x16d/0x340 [ 3241.535152] io_wq_create+0x6ef/0xc00 [ 3241.536117] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3241.537381] ? io_import_iovec+0x1120/0x1120 [ 3241.538338] ? io_apoll_task_func+0x2d0/0x2d0 [ 3241.539425] ? __io_req_find_next+0x300/0x300 [ 3241.540370] ? do_raw_spin_lock+0x121/0x260 [ 3241.541284] ? rwlock_bug.part.0+0x90/0x90 [ 3241.542338] __io_uring_add_tctx_node+0x2c6/0x520 [ 3241.543923] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3241.545280] ? alloc_fd+0x2e7/0x670 [ 3241.546062] io_uring_setup+0x1fbb/0x2980 [ 3241.546942] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3241.548226] ? wait_for_completion_io+0x270/0x270 [ 3241.549275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3241.550371] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3241.551471] do_syscall_64+0x33/0x40 [ 3241.552257] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3241.553513] RIP: 0033:0x7f4d680b3b19 [ 3241.554558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3241.558527] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3241.560140] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3241.561636] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3241.563136] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3241.564633] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3241.566132] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:30:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:30:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x26, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:30:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x5000000}}}}}, 0x28}}, 0x0) 10:30:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x5}}}}}, 0x28}}, 0x0) 10:30:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) 10:30:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x2200, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:30:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 55) [ 3241.911018] FAULT_INJECTION: forcing a failure. [ 3241.911018] name failslab, interval 1, probability 0, space 0, times 0 [ 3241.914424] CPU: 0 PID: 19792 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3241.916334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3241.918513] Call Trace: [ 3241.919368] dump_stack+0x107/0x167 [ 3241.920580] should_fail.cold+0x5/0xa [ 3241.921773] ? xas_alloc+0x336/0x440 [ 3241.922932] should_failslab+0x5/0x20 [ 3241.924073] kmem_cache_alloc+0x5b/0x310 [ 3241.925479] xas_alloc+0x336/0x440 [ 3241.926674] xas_create+0x34a/0x10d0 [ 3241.928104] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3241.929734] xas_store+0x8c/0x1c40 [ 3241.931292] __xa_store+0x164/0x2d0 [ 3241.932491] ? xa_delete_node+0x280/0x280 [ 3241.933969] ? trace_hardirqs_on+0x5b/0x180 [ 3241.935505] xa_store+0x31/0x50 [ 3241.936609] __io_uring_add_tctx_node+0x1cf/0x520 [ 3241.938060] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3241.939549] ? alloc_fd+0x2e7/0x670 [ 3241.941010] io_uring_setup+0x1fbb/0x2980 [ 3241.942480] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3241.943903] ? wait_for_completion_io+0x270/0x270 [ 3241.945919] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3241.947423] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3241.949056] do_syscall_64+0x33/0x40 [ 3241.950164] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3241.951626] RIP: 0033:0x7fed36701b19 [ 3241.952699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3241.957414] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3241.959574] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3241.961508] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3241.963447] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3241.965386] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3241.967343] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:30:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 37) 10:30:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x27, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 3242.164017] FAULT_INJECTION: forcing a failure. [ 3242.164017] name failslab, interval 1, probability 0, space 0, times 0 [ 3242.166582] CPU: 1 PID: 19800 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3242.168064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3242.169822] Call Trace: [ 3242.170390] dump_stack+0x107/0x167 [ 3242.171181] should_fail.cold+0x5/0xa [ 3242.171998] ? create_object.isra.0+0x3a/0xa30 [ 3242.172971] should_failslab+0x5/0x20 [ 3242.173801] kmem_cache_alloc+0x5b/0x310 [ 3242.174679] ? io_wq_create+0x114/0xc00 [ 3242.175540] create_object.isra.0+0x3a/0xa30 [ 3242.176470] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3242.177547] kmem_cache_alloc_node_trace+0x16d/0x340 [ 3242.178637] io_wq_create+0x6ef/0xc00 [ 3242.179465] io_uring_alloc_task_context+0x1f1/0x6a0 [ 3242.180544] ? io_import_iovec+0x1120/0x1120 [ 3242.181478] ? io_apoll_task_func+0x2d0/0x2d0 [ 3242.182428] ? __io_req_find_next+0x300/0x300 [ 3242.183388] ? do_raw_spin_lock+0x121/0x260 [ 3242.184303] ? rwlock_bug.part.0+0x90/0x90 [ 3242.185212] __io_uring_add_tctx_node+0x2c6/0x520 [ 3242.186239] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3242.187348] ? alloc_fd+0x2e7/0x670 [ 3242.188135] io_uring_setup+0x1fbb/0x2980 [ 3242.189026] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3242.190100] ? wait_for_completion_io+0x270/0x270 [ 3242.191159] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3242.192272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3242.193373] do_syscall_64+0x33/0x40 [ 3242.194164] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3242.195262] RIP: 0033:0x7f4d680b3b19 [ 3242.196050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3242.199965] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3242.201581] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3242.203111] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3242.204632] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3242.206152] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3242.207676] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:31:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 38) 10:31:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6000000}}}}}, 0x28}}, 0x0) 10:31:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0xc00e, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:31:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xffffff9e}, 0x0) 10:31:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x6}}}}}, 0x28}}, 0x0) 10:31:13 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 53) 10:31:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 56) 10:31:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x28, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 3260.394606] FAULT_INJECTION: forcing a failure. [ 3260.394606] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.397249] CPU: 1 PID: 19820 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3260.399037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3260.400780] Call Trace: [ 3260.401345] dump_stack+0x107/0x167 [ 3260.402115] should_fail.cold+0x5/0xa [ 3260.402917] ? anon_vma_fork+0x1ff/0x640 [ 3260.403786] should_failslab+0x5/0x20 [ 3260.404586] kmem_cache_alloc+0x5b/0x310 [ 3260.405449] anon_vma_fork+0x1ff/0x640 [ 3260.406269] copy_process+0x72cd/0x78b0 [ 3260.407094] ? SOFTIRQ_verbose+0x10/0x10 [ 3260.407967] ? __cleanup_sighand+0xb0/0xb0 [ 3260.408892] ? _copy_from_user+0xfb/0x1b0 [ 3260.409772] kernel_clone+0xe7/0x980 [ 3260.410552] ? lock_acquire+0x197/0x470 [ 3260.411403] ? create_io_thread+0xf0/0xf0 [ 3260.412292] ? ksys_write+0x21a/0x260 [ 3260.413093] ? lock_downgrade+0x6d0/0x6d0 [ 3260.413964] __do_sys_clone3+0x1e5/0x320 [ 3260.414809] ? __do_sys_clone+0x110/0x110 [ 3260.415707] ? rcu_read_lock_any_held+0x75/0xa0 [ 3260.416681] ? vfs_write+0x354/0xb10 [ 3260.417462] ? fput_many+0x2f/0x1a0 [ 3260.418227] ? ksys_write+0x1a9/0x260 [ 3260.418326] FAULT_INJECTION: forcing a failure. [ 3260.418326] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.419030] ? __ia32_sys_read+0xb0/0xb0 [ 3260.419056] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3260.419078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3260.419094] ? trace_hardirqs_on+0x5b/0x180 [ 3260.419117] do_syscall_64+0x33/0x40 [ 3260.419137] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3260.419160] RIP: 0033:0x7f55c06adb19 [ 3260.419182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3260.419193] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3260.419215] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3260.419226] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3260.419238] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3260.419249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3260.419261] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3260.448298] CPU: 0 PID: 19817 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3260.450013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3260.452052] Call Trace: [ 3260.452804] dump_stack+0x107/0x167 [ 3260.453873] should_fail.cold+0x5/0xa [ 3260.454933] ? create_object.isra.0+0x3a/0xa30 [ 3260.456173] should_failslab+0x5/0x20 [ 3260.457163] kmem_cache_alloc+0x5b/0x310 [ 3260.458418] create_object.isra.0+0x3a/0xa30 [ 3260.459550] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3260.460988] kmem_cache_alloc_trace+0x151/0x320 [ 3260.462375] __io_uring_add_tctx_node+0x15c/0x520 [ 3260.463676] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3260.464994] ? alloc_fd+0x2e7/0x670 [ 3260.466267] io_uring_setup+0x1fbb/0x2980 [ 3260.467570] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3260.468847] ? wait_for_completion_io+0x270/0x270 [ 3260.470611] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3260.471962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3260.473411] do_syscall_64+0x33/0x40 [ 3260.474405] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3260.475706] RIP: 0033:0x7f4d680b3b19 [ 3260.476681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3260.480962] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3260.482882] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3260.484636] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3260.486367] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3260.488116] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3260.489856] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:31:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0) [ 3260.503794] FAULT_INJECTION: forcing a failure. [ 3260.503794] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.506329] CPU: 0 PID: 19827 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3260.507896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3260.509748] Call Trace: [ 3260.510351] dump_stack+0x107/0x167 [ 3260.511184] should_fail.cold+0x5/0xa [ 3260.512042] ? create_object.isra.0+0x3a/0xa30 [ 3260.513072] should_failslab+0x5/0x20 [ 3260.513924] kmem_cache_alloc+0x5b/0x310 [ 3260.514833] ? mark_held_locks+0x9e/0xe0 [ 3260.515773] create_object.isra.0+0x3a/0xa30 [ 3260.516759] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3260.517902] kmem_cache_alloc+0x159/0x310 [ 3260.518841] xas_alloc+0x336/0x440 [ 3260.519657] xas_create+0x34a/0x10d0 [ 3260.520504] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3260.521681] xas_store+0x8c/0x1c40 [ 3260.522491] __xa_store+0x164/0x2d0 [ 3260.523327] ? xa_delete_node+0x280/0x280 [ 3260.524269] ? trace_hardirqs_on+0x5b/0x180 [ 3260.525242] xa_store+0x31/0x50 [ 3260.525989] __io_uring_add_tctx_node+0x1cf/0x520 [ 3260.527083] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3260.528273] ? alloc_fd+0x2e7/0x670 [ 3260.529106] io_uring_setup+0x1fbb/0x2980 [ 3260.530049] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3260.531190] ? wait_for_completion_io+0x270/0x270 [ 3260.532322] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3260.533502] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3260.534659] do_syscall_64+0x33/0x40 [ 3260.535502] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3260.536658] RIP: 0033:0x7fed36701b19 [ 3260.537485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3260.541627] RSP: 002b:00007fed33c56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3260.543330] RAX: ffffffffffffffda RBX: 00007fed36815020 RCX: 00007fed36701b19 [ 3260.544939] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3260.546517] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3260.548117] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3260.549732] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:31:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0) 10:31:13 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 54) 10:31:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0xe603, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:31:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 57) 10:31:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x2a, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:31:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 39) 10:31:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7000000}}}}}, 0x28}}, 0x0) [ 3260.726631] FAULT_INJECTION: forcing a failure. [ 3260.726631] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.729205] CPU: 0 PID: 19837 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3260.730913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3260.732809] Call Trace: [ 3260.733424] dump_stack+0x107/0x167 [ 3260.734262] should_fail.cold+0x5/0xa [ 3260.735143] ? create_object.isra.0+0x3a/0xa30 [ 3260.736202] should_failslab+0x5/0x20 [ 3260.737071] kmem_cache_alloc+0x5b/0x310 [ 3260.738016] create_object.isra.0+0x3a/0xa30 [ 3260.739016] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3260.740196] kmem_cache_alloc+0x159/0x310 [ 3260.741135] ? copy_page_range+0x28e1/0x3810 [ 3260.742148] vm_area_dup+0x78/0x290 [ 3260.743006] ? copy_page_range+0x24e9/0x3810 [ 3260.744024] ? lock_chain_count+0x20/0x20 [ 3260.745039] ? vm_area_alloc+0x110/0x110 [ 3260.745971] ? up_write+0x191/0x550 [ 3260.746808] ? vm_iomap_memory+0x190/0x190 [ 3260.747784] ? downgrade_write+0x3a0/0x3a0 [ 3260.748761] ? anon_vma_interval_tree_insert+0x277/0x450 [ 3260.749994] ? __vma_link_rb+0x540/0x700 [ 3260.750944] copy_process+0x298b/0x78b0 [ 3260.751857] ? SOFTIRQ_verbose+0x10/0x10 [ 3260.752855] ? __cleanup_sighand+0xb0/0xb0 [ 3260.753859] ? _copy_from_user+0xfb/0x1b0 [ 3260.754819] kernel_clone+0xe7/0x980 [ 3260.755680] ? lock_acquire+0x197/0x470 [ 3260.756587] ? create_io_thread+0xf0/0xf0 [ 3260.757561] ? ksys_write+0x21a/0x260 [ 3260.758432] ? lock_downgrade+0x6d0/0x6d0 [ 3260.759409] __do_sys_clone3+0x1e5/0x320 [ 3260.760338] ? __do_sys_clone+0x110/0x110 [ 3260.761321] ? rcu_read_lock_any_held+0x75/0xa0 [ 3260.762371] ? vfs_write+0x354/0xb10 [ 3260.763235] ? fput_many+0x2f/0x1a0 [ 3260.764067] ? ksys_write+0x1a9/0x260 [ 3260.764937] ? __ia32_sys_read+0xb0/0xb0 [ 3260.765871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3260.767061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3260.768242] ? trace_hardirqs_on+0x5b/0x180 [ 3260.769227] do_syscall_64+0x33/0x40 [ 3260.770082] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3260.771255] RIP: 0033:0x7f55c06adb19 [ 3260.772100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3260.776279] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3260.778007] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3260.779630] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3260.781250] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3260.782868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3260.784489] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3260.864595] FAULT_INJECTION: forcing a failure. [ 3260.864595] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.867213] CPU: 1 PID: 19846 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3260.868675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3260.870423] Call Trace: [ 3260.870988] dump_stack+0x107/0x167 [ 3260.871776] should_fail.cold+0x5/0xa [ 3260.872597] ? xas_alloc+0x336/0x440 [ 3260.873416] should_failslab+0x5/0x20 [ 3260.874248] kmem_cache_alloc+0x5b/0x310 [ 3260.875144] xas_alloc+0x336/0x440 [ 3260.875939] xas_create+0x34a/0x10d0 [ 3260.876771] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3260.877924] xas_store+0x8c/0x1c40 [ 3260.878729] __xa_store+0x164/0x2d0 [ 3260.879538] ? xa_delete_node+0x280/0x280 [ 3260.880455] ? trace_hardirqs_on+0x5b/0x180 [ 3260.881412] xa_store+0x31/0x50 [ 3260.882141] __io_uring_add_tctx_node+0x1cf/0x520 [ 3260.883205] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3260.884352] ? alloc_fd+0x2e7/0x670 [ 3260.885179] io_uring_setup+0x1fbb/0x2980 [ 3260.886096] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3260.887209] ? wait_for_completion_io+0x270/0x270 [ 3260.888293] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3260.889443] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3260.890578] do_syscall_64+0x33/0x40 [ 3260.891401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3260.892528] RIP: 0033:0x7fed36701b19 [ 3260.893343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3260.897391] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3260.899059] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3260.900626] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3260.902188] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3260.903756] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3260.905319] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3261.017493] FAULT_INJECTION: forcing a failure. [ 3261.017493] name failslab, interval 1, probability 0, space 0, times 0 [ 3261.020349] CPU: 0 PID: 19852 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3261.021616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3261.023104] Call Trace: [ 3261.023683] dump_stack+0x107/0x167 [ 3261.024483] should_fail.cold+0x5/0xa [ 3261.025283] ? xas_alloc+0x336/0x440 [ 3261.026063] should_failslab+0x5/0x20 [ 3261.026810] kmem_cache_alloc+0x5b/0x310 [ 3261.027772] xas_alloc+0x336/0x440 [ 3261.028579] xas_create+0x34a/0x10d0 [ 3261.029530] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3261.030621] xas_store+0x8c/0x1c40 [ 3261.031654] __xa_store+0x164/0x2d0 [ 3261.032457] ? xa_delete_node+0x280/0x280 [ 3261.033462] ? trace_hardirqs_on+0x5b/0x180 [ 3261.034488] xa_store+0x31/0x50 [ 3261.035223] __io_uring_add_tctx_node+0x1cf/0x520 [ 3261.036187] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3261.037169] ? alloc_fd+0x2e7/0x670 [ 3261.038140] io_uring_setup+0x1fbb/0x2980 [ 3261.039126] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3261.040548] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3261.041552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3261.042644] do_syscall_64+0x33/0x40 [ 3261.043401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3261.044364] RIP: 0033:0x7f4d680b3b19 [ 3261.045095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3261.048290] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3261.049735] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3261.051036] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3261.052346] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3261.053645] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3261.054943] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:31:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 40) 10:31:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x3000000000000}, 0x0) 10:31:29 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 55) 10:31:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0xf0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:31:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0xf000, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:31:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x8}}}}}, 0x28}}, 0x0) 10:31:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9000000}}}}}, 0x28}}, 0x0) 10:31:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 58) [ 3276.413399] FAULT_INJECTION: forcing a failure. [ 3276.413399] name failslab, interval 1, probability 0, space 0, times 0 [ 3276.415921] CPU: 1 PID: 19871 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3276.417359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3276.419096] Call Trace: [ 3276.419660] dump_stack+0x107/0x167 [ 3276.420424] should_fail.cold+0x5/0xa [ 3276.421220] ? create_object.isra.0+0x3a/0xa30 [ 3276.422196] should_failslab+0x5/0x20 [ 3276.422997] kmem_cache_alloc+0x5b/0x310 [ 3276.423870] create_object.isra.0+0x3a/0xa30 [ 3276.424796] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3276.425860] kmem_cache_alloc+0x159/0x310 [ 3276.426285] FAULT_INJECTION: forcing a failure. [ 3276.426285] name failslab, interval 1, probability 0, space 0, times 0 [ 3276.426738] xas_alloc+0x336/0x440 [ 3276.426764] xas_create+0x34a/0x10d0 [ 3276.426801] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3276.431903] xas_store+0x8c/0x1c40 [ 3276.432689] __xa_store+0x164/0x2d0 [ 3276.433470] ? xa_delete_node+0x280/0x280 [ 3276.434373] ? trace_hardirqs_on+0x5b/0x180 [ 3276.435315] xa_store+0x31/0x50 [ 3276.436032] __io_uring_add_tctx_node+0x1cf/0x520 [ 3276.437063] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3276.438165] ? alloc_fd+0x2e7/0x670 [ 3276.438958] io_uring_setup+0x1fbb/0x2980 [ 3276.439861] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3276.440933] ? wait_for_completion_io+0x270/0x270 [ 3276.441988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3276.443102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3276.444219] do_syscall_64+0x33/0x40 [ 3276.445026] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3276.446115] RIP: 0033:0x7f4d680b3b19 [ 3276.446908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3276.450812] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3276.452450] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3276.453959] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3276.455484] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3276.456984] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3276.458491] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3276.460091] CPU: 0 PID: 19874 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3276.461683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3276.463741] Call Trace: [ 3276.464348] dump_stack+0x107/0x167 [ 3276.465179] should_fail.cold+0x5/0xa [ 3276.466038] ? vm_area_dup+0x78/0x290 [ 3276.466903] should_failslab+0x5/0x20 [ 3276.467765] kmem_cache_alloc+0x5b/0x310 [ 3276.468677] ? copy_page_range+0x28e1/0x3810 [ 3276.469341] FAULT_INJECTION: forcing a failure. [ 3276.469341] name failslab, interval 1, probability 0, space 0, times 0 [ 3276.469675] vm_area_dup+0x78/0x290 [ 3276.472855] ? copy_page_range+0x24e9/0x3810 [ 3276.473923] ? vm_area_alloc+0x110/0x110 [ 3276.474850] ? vm_iomap_memory+0x190/0x190 [ 3276.475838] ? __vma_link_rb+0x540/0x700 [ 3276.476766] copy_process+0x298b/0x78b0 [ 3276.477652] ? SOFTIRQ_verbose+0x10/0x10 [ 3276.478645] ? __cleanup_sighand+0xb0/0xb0 [ 3276.479657] ? _copy_from_user+0xfb/0x1b0 [ 3276.480607] kernel_clone+0xe7/0x980 [ 3276.481442] ? __lockdep_reset_lock+0x180/0x180 [ 3276.482500] ? create_io_thread+0xf0/0xf0 [ 3276.483473] ? ksys_write+0x21a/0x260 [ 3276.484330] ? lock_downgrade+0x6d0/0x6d0 [ 3276.485269] __do_sys_clone3+0x1e5/0x320 [ 3276.486182] ? __do_sys_clone+0x110/0x110 [ 3276.487155] ? rcu_read_lock_any_held+0x75/0xa0 [ 3276.488203] ? vfs_write+0x354/0xb10 [ 3276.489052] ? fput_many+0x2f/0x1a0 [ 3276.489872] ? ksys_write+0x1a9/0x260 [ 3276.490730] ? __ia32_sys_read+0xb0/0xb0 [ 3276.491665] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3276.492844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3276.493994] ? trace_hardirqs_on+0x5b/0x180 [ 3276.494974] do_syscall_64+0x33/0x40 [ 3276.495818] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3276.496963] RIP: 0033:0x7f55c06adb19 [ 3276.497800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3276.501922] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3276.503640] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3276.505238] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3276.506840] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3276.508452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3276.510051] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3276.511721] CPU: 1 PID: 19873 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3276.513238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3276.514987] Call Trace: [ 3276.515565] dump_stack+0x107/0x167 [ 3276.516336] should_fail.cold+0x5/0xa [ 3276.517147] ? ___slab_alloc+0x155/0x700 [ 3276.518001] ? create_object.isra.0+0x3a/0xa30 [ 3276.518961] should_failslab+0x5/0x20 [ 3276.519771] kmem_cache_alloc+0x5b/0x310 [ 3276.520631] create_object.isra.0+0x3a/0xa30 [ 3276.521551] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3276.522630] kmem_cache_alloc+0x159/0x310 [ 3276.523525] xas_alloc+0x336/0x440 [ 3276.524283] xas_create+0x34a/0x10d0 [ 3276.525087] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3276.526193] xas_store+0x8c/0x1c40 [ 3276.526958] __xa_store+0x164/0x2d0 [ 3276.527736] ? xa_delete_node+0x280/0x280 [ 3276.528626] ? trace_hardirqs_on+0x5b/0x180 [ 3276.529544] xa_store+0x31/0x50 [ 3276.530245] __io_uring_add_tctx_node+0x1cf/0x520 [ 3276.531259] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3276.532371] ? alloc_fd+0x2e7/0x670 [ 3276.533159] io_uring_setup+0x1fbb/0x2980 [ 3276.534046] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3276.535111] ? wait_for_completion_io+0x270/0x270 [ 3276.536170] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3276.537278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3276.538374] do_syscall_64+0x33/0x40 [ 3276.539155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3276.540243] RIP: 0033:0x7fed36701b19 [ 3276.541030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3276.544914] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3276.546526] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3276.548049] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3276.549551] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3276.551065] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3276.552590] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:31:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x131, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:31:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x9}}}}}, 0x28}}, 0x0) 10:31:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 59) 10:31:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 41) 10:31:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xf000000}}}}}, 0x28}}, 0x0) 10:31:30 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 56) 10:31:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x8000000000000}, 0x0) 10:31:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x80000, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 3276.876158] FAULT_INJECTION: forcing a failure. [ 3276.876158] name failslab, interval 1, probability 0, space 0, times 0 [ 3276.878408] CPU: 0 PID: 19894 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3276.879758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3276.881362] Call Trace: [ 3276.881874] dump_stack+0x107/0x167 [ 3276.882580] should_fail.cold+0x5/0xa [ 3276.883328] ? xas_alloc+0x336/0x440 [ 3276.884052] should_failslab+0x5/0x20 [ 3276.884784] kmem_cache_alloc+0x5b/0x310 [ 3276.885566] xas_alloc+0x336/0x440 [ 3276.886242] xas_create+0x34a/0x10d0 [ 3276.886972] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3276.887974] xas_store+0x8c/0x1c40 [ 3276.888657] __xa_store+0x164/0x2d0 [ 3276.889349] ? xa_delete_node+0x280/0x280 [ 3276.890135] ? trace_hardirqs_on+0x5b/0x180 [ 3276.890952] xa_store+0x31/0x50 [ 3276.891585] __io_uring_add_tctx_node+0x1cf/0x520 [ 3276.892498] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3276.893489] ? alloc_fd+0x2e7/0x670 [ 3276.894183] io_uring_setup+0x1fbb/0x2980 [ 3276.894976] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3276.895948] ? wait_for_completion_io+0x270/0x270 [ 3276.896876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3276.897873] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3276.898854] do_syscall_64+0x33/0x40 [ 3276.899574] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3276.900545] RIP: 0033:0x7fed36701b19 [ 3276.901251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3276.904751] RSP: 002b:00007fed33c56108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3276.906193] RAX: ffffffffffffffda RBX: 00007fed36815020 RCX: 00007fed36701b19 [ 3276.907552] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3276.908906] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3276.910261] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3276.911622] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3276.942654] FAULT_INJECTION: forcing a failure. [ 3276.942654] name failslab, interval 1, probability 0, space 0, times 0 [ 3276.945083] CPU: 0 PID: 19901 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3276.946452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3276.948007] Call Trace: [ 3276.948505] dump_stack+0x107/0x167 [ 3276.949199] should_fail.cold+0x5/0xa [ 3276.949917] ? create_object.isra.0+0x3a/0xa30 [ 3276.950779] should_failslab+0x5/0x20 [ 3276.951502] kmem_cache_alloc+0x5b/0x310 [ 3276.952281] create_object.isra.0+0x3a/0xa30 [ 3276.953103] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3276.954065] kmem_cache_alloc+0x159/0x310 [ 3276.954844] ? copy_page_range+0x28e1/0x3810 [ 3276.955688] vm_area_dup+0x78/0x290 [ 3276.956395] ? copy_page_range+0x24e9/0x3810 [ 3276.957282] ? vm_area_alloc+0x110/0x110 [ 3276.958051] ? vm_iomap_memory+0x190/0x190 [ 3276.958866] ? __vma_link_rb+0x540/0x700 [ 3276.959641] copy_process+0x298b/0x78b0 [ 3276.960379] ? SOFTIRQ_verbose+0x10/0x10 [ 3276.961189] ? __cleanup_sighand+0xb0/0xb0 [ 3276.962008] ? _copy_from_user+0xfb/0x1b0 [ 3276.962798] kernel_clone+0xe7/0x980 [ 3276.963500] ? lock_acquire+0x197/0x470 [ 3276.964245] ? create_io_thread+0xf0/0xf0 [ 3276.965040] ? ksys_write+0x21a/0x260 [ 3276.965750] ? lock_downgrade+0x6d0/0x6d0 [ 3276.966533] __do_sys_clone3+0x1e5/0x320 [ 3276.967297] ? __do_sys_clone+0x110/0x110 [ 3276.968105] ? rcu_read_lock_any_held+0x75/0xa0 [ 3276.968966] ? vfs_write+0x354/0xb10 [ 3276.969665] ? fput_many+0x2f/0x1a0 [ 3276.970343] ? ksys_write+0x1a9/0x260 [ 3276.971052] ? __ia32_sys_read+0xb0/0xb0 [ 3276.971821] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3276.972795] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3276.973737] ? trace_hardirqs_on+0x5b/0x180 [ 3276.974535] do_syscall_64+0x33/0x40 [ 3276.975233] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3276.976183] RIP: 0033:0x7f55c06adb19 [ 3276.976868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3276.980244] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3276.981651] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3276.982961] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3276.984276] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3276.985584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3276.986902] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3277.061973] FAULT_INJECTION: forcing a failure. [ 3277.061973] name failslab, interval 1, probability 0, space 0, times 0 [ 3277.064557] CPU: 0 PID: 19904 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3277.065859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3277.067399] Call Trace: [ 3277.067984] dump_stack+0x107/0x167 [ 3277.068816] should_fail.cold+0x5/0xa [ 3277.069634] ? xas_alloc+0x336/0x440 [ 3277.070431] should_failslab+0x5/0x20 [ 3277.071194] kmem_cache_alloc+0x5b/0x310 [ 3277.072170] xas_alloc+0x336/0x440 [ 3277.073022] xas_create+0x34a/0x10d0 [ 3277.074001] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3277.075121] xas_store+0x8c/0x1c40 [ 3277.076175] __xa_store+0x164/0x2d0 [ 3277.076996] ? xa_delete_node+0x280/0x280 [ 3277.078018] ? trace_hardirqs_on+0x5b/0x180 [ 3277.079071] xa_store+0x31/0x50 [ 3277.079831] __io_uring_add_tctx_node+0x1cf/0x520 [ 3277.080810] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3277.081804] ? alloc_fd+0x2e7/0x670 [ 3277.082791] io_uring_setup+0x1fbb/0x2980 [ 3277.083794] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3277.084761] ? wait_for_completion_io+0x270/0x270 [ 3277.086120] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3277.087136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3277.088253] do_syscall_64+0x33/0x40 [ 3277.089016] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3277.090000] RIP: 0033:0x7f4d680b3b19 [ 3277.090739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3277.093993] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3277.095449] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3277.096742] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3277.098041] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3277.099346] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3277.100654] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:31:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 42) 10:31:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0xf}}}}}, 0x28}}, 0x0) 10:31:43 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 57) 10:31:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 60) 10:31:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x300, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:31:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3d010000}}}}}, 0x28}}, 0x0) 10:31:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 10:31:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0xf0ffff, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 3290.195206] FAULT_INJECTION: forcing a failure. [ 3290.195206] name failslab, interval 1, probability 0, space 0, times 0 [ 3290.198138] CPU: 1 PID: 19932 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3290.199972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3290.202061] Call Trace: [ 3290.202765] dump_stack+0x107/0x167 [ 3290.203667] should_fail.cold+0x5/0xa [ 3290.204704] ? create_object.isra.0+0x3a/0xa30 [ 3290.205799] should_failslab+0x5/0x20 [ 3290.206806] kmem_cache_alloc+0x5b/0x310 [ 3290.207753] ? mark_held_locks+0x9e/0xe0 [ 3290.208814] create_object.isra.0+0x3a/0xa30 [ 3290.209759] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3290.211079] kmem_cache_alloc+0x159/0x310 [ 3290.211974] xas_alloc+0x336/0x440 [ 3290.212726] xas_create+0x34a/0x10d0 [ 3290.213521] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3290.214627] xas_store+0x8c/0x1c40 [ 3290.215400] __xa_store+0x164/0x2d0 [ 3290.216174] ? xa_delete_node+0x280/0x280 [ 3290.217054] ? trace_hardirqs_on+0x5b/0x180 [ 3290.217975] xa_store+0x31/0x50 [ 3290.218682] __io_uring_add_tctx_node+0x1cf/0x520 [ 3290.219708] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3290.221000] ? alloc_fd+0x2e7/0x670 [ 3290.221937] io_uring_setup+0x1fbb/0x2980 [ 3290.223031] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3290.224721] ? wait_for_completion_io+0x270/0x270 [ 3290.225880] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3290.227189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3290.228545] do_syscall_64+0x33/0x40 [ 3290.229370] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3290.230742] RIP: 0033:0x7fed36701b19 [ 3290.231646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3290.236038] RSP: 002b:00007fed33c77108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3290.237642] RAX: ffffffffffffffda RBX: 00007fed36814f60 RCX: 00007fed36701b19 [ 3290.239468] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3290.240979] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3290.242491] R10: 00000000200002c0 R11: 0000000000000202 R12: 0000000020000080 [ 3290.244003] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3290.252918] FAULT_INJECTION: forcing a failure. [ 3290.252918] name failslab, interval 1, probability 0, space 0, times 0 [ 3290.255334] CPU: 1 PID: 19931 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3290.256792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 10:31:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x1000000, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 3290.258523] Call Trace: [ 3290.259247] dump_stack+0x107/0x167 [ 3290.260140] should_fail.cold+0x5/0xa [ 3290.261215] ? anon_vma_fork+0xf1/0x640 [ 3290.262144] should_failslab+0x5/0x20 [ 3290.262946] kmem_cache_alloc+0x5b/0x310 [ 3290.263819] anon_vma_fork+0xf1/0x640 [ 3290.264621] ? __vm_enough_memory+0x184/0x360 [ 3290.265570] copy_process+0x72cd/0x78b0 [ 3290.266452] ? __cleanup_sighand+0xb0/0xb0 [ 3290.267372] ? _copy_from_user+0xfb/0x1b0 10:31:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9effffff}}}}}, 0x28}}, 0x0) [ 3290.268264] kernel_clone+0xe7/0x980 [ 3290.269136] ? __lockdep_reset_lock+0x180/0x180 [ 3290.270119] ? create_io_thread+0xf0/0xf0 [ 3290.271025] ? ksys_write+0x21a/0x260 [ 3290.271840] ? lock_downgrade+0x6d0/0x6d0 [ 3290.272724] __do_sys_clone3+0x1e5/0x320 [ 3290.273579] ? __do_sys_clone+0x110/0x110 [ 3290.274495] ? rcu_read_lock_any_held+0x75/0xa0 [ 3290.275483] ? vfs_write+0x354/0xb10 [ 3290.276276] ? fput_many+0x2f/0x1a0 [ 3290.277045] ? ksys_write+0x1a9/0x260 [ 3290.277846] ? __ia32_sys_read+0xb0/0xb0 [ 3290.278708] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3290.279819] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3290.280907] ? trace_hardirqs_on+0x5b/0x180 [ 3290.281835] do_syscall_64+0x33/0x40 [ 3290.282621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3290.283716] RIP: 0033:0x7f55c06adb19 [ 3290.284499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3290.288379] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3290.289982] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3290.291498] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3290.293001] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3290.294493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3290.296010] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3290.303303] FAULT_INJECTION: forcing a failure. [ 3290.303303] name failslab, interval 1, probability 0, space 0, times 0 [ 3290.305720] CPU: 1 PID: 19937 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3290.307299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3290.309275] Call Trace: [ 3290.309835] dump_stack+0x107/0x167 [ 3290.310603] should_fail.cold+0x5/0xa [ 3290.311417] ? create_object.isra.0+0x3a/0xa30 [ 3290.312377] should_failslab+0x5/0x20 [ 3290.313179] kmem_cache_alloc+0x5b/0x310 [ 3290.314121] ? mark_held_locks+0x9e/0xe0 [ 3290.315080] create_object.isra.0+0x3a/0xa30 [ 3290.316107] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3290.317383] kmem_cache_alloc+0x159/0x310 [ 3290.318583] xas_alloc+0x336/0x440 [ 3290.319473] xas_create+0x34a/0x10d0 [ 3290.320513] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3290.321881] xas_store+0x8c/0x1c40 [ 3290.322673] __xa_store+0x164/0x2d0 [ 3290.323683] ? xa_delete_node+0x280/0x280 [ 3290.324661] ? trace_hardirqs_on+0x5b/0x180 [ 3290.325762] xa_store+0x31/0x50 [ 3290.326488] __io_uring_add_tctx_node+0x1cf/0x520 [ 3290.327746] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3290.329072] ? alloc_fd+0x2e7/0x670 [ 3290.330056] io_uring_setup+0x1fbb/0x2980 [ 3290.331043] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3290.332292] ? wait_for_completion_io+0x270/0x270 [ 3290.333503] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3290.334693] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3290.336025] do_syscall_64+0x33/0x40 [ 3290.336843] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3290.337928] RIP: 0033:0x7f4d680b3b19 [ 3290.338863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3290.343417] RSP: 002b:00007f4d65608108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3290.345018] RAX: ffffffffffffffda RBX: 00007f4d681c7020 RCX: 00007f4d680b3b19 [ 3290.346518] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3290.348028] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3290.349526] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3290.351027] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:31:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0xe5}}}}}, 0x28}}, 0x0) 10:31:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x500, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:31:43 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 58) 10:31:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 61) [ 3290.496581] FAULT_INJECTION: forcing a failure. [ 3290.496581] name failslab, interval 1, probability 0, space 0, times 0 [ 3290.499333] CPU: 1 PID: 19952 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3290.500897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3290.502768] Call Trace: [ 3290.503349] dump_stack+0x107/0x167 [ 3290.504161] should_fail.cold+0x5/0xa [ 3290.504985] ? create_object.isra.0+0x3a/0xa30 [ 3290.505997] should_failslab+0x5/0x20 [ 3290.506976] kmem_cache_alloc+0x5b/0x310 [ 3290.507855] create_object.isra.0+0x3a/0xa30 [ 3290.508810] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3290.510233] kmem_cache_alloc+0x159/0x310 [ 3290.511286] vm_area_dup+0x78/0x290 [ 3290.512241] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 3290.513481] ? lock_downgrade+0x6d0/0x6d0 [ 3290.514542] ? copy_page_range+0x24e9/0x3810 [ 3290.515729] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3290.517105] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 3290.518352] ? avc_has_extended_perms+0xf40/0xf40 [ 3290.519607] ? copy_process+0x2be1/0x78b0 [ 3290.520637] ? vm_area_alloc+0x110/0x110 [ 3290.521678] ? selinux_vm_enough_memory+0x114/0x180 [ 3290.523078] ? selinux_sb_statfs+0x250/0x250 [ 3290.524117] ? up_write+0x191/0x550 [ 3290.525080] ? percpu_counter_add_batch+0x8b/0x140 [ 3290.526230] ? __vm_enough_memory+0x184/0x360 [ 3290.527403] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 3290.528504] copy_process+0x298b/0x78b0 [ 3290.529380] ? __cleanup_sighand+0xb0/0xb0 [ 3290.530299] ? _copy_from_user+0xfb/0x1b0 [ 3290.531184] kernel_clone+0xe7/0x980 [ 3290.531987] ? lock_acquire+0x197/0x470 [ 3290.532824] ? create_io_thread+0xf0/0xf0 [ 3290.533723] ? ksys_write+0x21a/0x260 [ 3290.534539] ? lock_downgrade+0x6d0/0x6d0 [ 3290.535428] __do_sys_clone3+0x1e5/0x320 [ 3290.536287] ? __do_sys_clone+0x110/0x110 [ 3290.537187] ? rcu_read_lock_any_held+0x75/0xa0 [ 3290.538166] ? vfs_write+0x354/0xb10 [ 3290.538953] ? fput_many+0x2f/0x1a0 [ 3290.539742] ? ksys_write+0x1a9/0x260 [ 3290.540549] ? __ia32_sys_read+0xb0/0xb0 [ 3290.541507] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3290.542758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3290.543862] ? trace_hardirqs_on+0x5b/0x180 [ 3290.544787] do_syscall_64+0x33/0x40 [ 3290.545582] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3290.546666] RIP: 0033:0x7f55c06adb19 [ 3290.547466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3290.551329] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3290.552931] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3290.554434] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3290.555940] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3290.557444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3290.558948] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:31:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0xf0}}}}}, 0x28}}, 0x0) 10:31:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 3290.596043] FAULT_INJECTION: forcing a failure. [ 3290.596043] name failslab, interval 1, probability 0, space 0, times 0 [ 3290.599073] CPU: 1 PID: 19957 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3290.600675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3290.602811] Call Trace: [ 3290.603563] dump_stack+0x107/0x167 [ 3290.604370] should_fail.cold+0x5/0xa [ 3290.605296] ? vm_area_dup+0x78/0x290 [ 3290.606294] should_failslab+0x5/0x20 [ 3290.607220] kmem_cache_alloc+0x5b/0x310 [ 3290.608281] vm_area_dup+0x78/0x290 [ 3290.609137] ? lock_release+0x680/0x680 [ 3290.609988] ? mark_lock+0xf5/0x2df0 [ 3290.610782] ? lock_chain_count+0x20/0x20 [ 3290.611667] ? mark_lock+0xf5/0x2df0 [ 3290.612460] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3290.613569] ? lock_chain_count+0x20/0x20 [ 3290.614446] ? mark_lock+0xf5/0x2df0 [ 3290.615232] ? vm_area_alloc+0x110/0x110 [ 3290.616105] ? __lock_acquire+0x1657/0x5b00 [ 3290.617043] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3290.618147] ? SOFTIRQ_verbose+0x10/0x10 [ 3290.619010] ? vmacache_find+0x55/0x2a0 [ 3290.619852] __split_vma+0xa8/0x4e0 [ 3290.620624] __do_munmap+0x365/0x1260 [ 3290.621437] ? arch_get_unmapped_area+0x450/0x450 [ 3290.622449] ? lock_release+0x680/0x680 [ 3290.623289] mmap_region+0x7cc/0x1500 [ 3290.624116] do_mmap+0x868/0x1370 [ 3290.624864] vm_mmap_pgoff+0x198/0x1f0 [ 3290.625682] ? randomize_page+0xb0/0xb0 [ 3290.626530] ksys_mmap_pgoff+0x41c/0x560 [ 3290.627384] ? find_mergeable_anon_vma+0x250/0x250 [ 3290.628435] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3290.629543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3290.630628] do_syscall_64+0x33/0x40 [ 3290.631425] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3290.632509] RIP: 0033:0x7fed36701b62 [ 3290.633288] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3290.637878] RSP: 002b:00007fed33c770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3290.639835] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fed36701b62 [ 3290.641626] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000 [ 3290.643460] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000 [ 3290.645188] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000080 [ 3290.646912] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:31:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 43) 10:31:43 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 59) [ 3290.780619] FAULT_INJECTION: forcing a failure. [ 3290.780619] name failslab, interval 1, probability 0, space 0, times 0 [ 3290.783053] CPU: 1 PID: 19968 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3290.784864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3290.786622] Call Trace: [ 3290.787178] dump_stack+0x107/0x167 [ 3290.788055] should_fail.cold+0x5/0xa [ 3290.788976] ? xas_alloc+0x336/0x440 [ 3290.789912] should_failslab+0x5/0x20 [ 3290.790871] kmem_cache_alloc+0x5b/0x310 [ 3290.791918] xas_alloc+0x336/0x440 [ 3290.792677] xas_create+0x34a/0x10d0 [ 3290.793481] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3290.794869] xas_store+0x8c/0x1c40 [ 3290.795853] __xa_store+0x164/0x2d0 [ 3290.796703] ? xa_delete_node+0x280/0x280 [ 3290.797798] ? trace_hardirqs_on+0x5b/0x180 [ 3290.798924] xa_store+0x31/0x50 [ 3290.799750] __io_uring_add_tctx_node+0x1cf/0x520 [ 3290.801089] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3290.802393] ? alloc_fd+0x2e7/0x670 [ 3290.803269] io_uring_setup+0x1fbb/0x2980 [ 3290.804398] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3290.805504] ? wait_for_completion_io+0x270/0x270 [ 3290.806756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3290.808031] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3290.809342] do_syscall_64+0x33/0x40 [ 3290.810355] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3290.811549] RIP: 0033:0x7f4d680b3b19 [ 3290.812552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3290.816973] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3290.818892] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3290.820583] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3290.822273] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3290.823785] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3290.825290] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3290.897656] FAULT_INJECTION: forcing a failure. [ 3290.897656] name failslab, interval 1, probability 0, space 0, times 0 [ 3290.899105] CPU: 0 PID: 19973 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3290.899930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3290.900913] Call Trace: [ 3290.901239] dump_stack+0x107/0x167 [ 3290.901676] should_fail.cold+0x5/0xa [ 3290.902130] ? create_object.isra.0+0x3a/0xa30 [ 3290.902673] should_failslab+0x5/0x20 [ 3290.903127] kmem_cache_alloc+0x5b/0x310 [ 3290.903618] create_object.isra.0+0x3a/0xa30 [ 3290.904134] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3290.904740] kmem_cache_alloc+0x159/0x310 [ 3290.905244] vm_area_dup+0x78/0x290 [ 3290.905692] ? copy_page_range+0x24e9/0x3810 [ 3290.906250] ? vm_area_alloc+0x110/0x110 [ 3290.906738] ? vm_iomap_memory+0x190/0x190 [ 3290.907249] ? __vma_link_rb+0x540/0x700 [ 3290.907746] copy_process+0x298b/0x78b0 [ 3290.908215] ? SOFTIRQ_verbose+0x10/0x10 [ 3290.908732] ? __cleanup_sighand+0xb0/0xb0 [ 3290.909258] ? _copy_from_user+0xfb/0x1b0 [ 3290.909759] kernel_clone+0xe7/0x980 [ 3290.910203] ? lock_acquire+0x197/0x470 [ 3290.910673] ? create_io_thread+0xf0/0xf0 [ 3290.911181] ? ksys_write+0x21a/0x260 [ 3290.911634] ? lock_downgrade+0x6d0/0x6d0 [ 3290.912129] __do_sys_clone3+0x1e5/0x320 [ 3290.912609] ? __do_sys_clone+0x110/0x110 [ 3290.913128] ? rcu_read_lock_any_held+0x75/0xa0 [ 3290.913669] ? vfs_write+0x354/0xb10 [ 3290.914110] ? fput_many+0x2f/0x1a0 [ 3290.914537] ? ksys_write+0x1a9/0x260 [ 3290.914985] ? __ia32_sys_read+0xb0/0xb0 [ 3290.915474] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3290.916090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3290.916691] ? trace_hardirqs_on+0x5b/0x180 [ 3290.917200] do_syscall_64+0x33/0x40 [ 3290.917637] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3290.918236] RIP: 0033:0x7f55c06adb19 [ 3290.918673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3290.920820] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3290.921709] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3290.922540] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3290.923373] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3290.924209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3290.925033] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:31:59 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 60) 10:31:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xc00e0000}}}}}, 0x28}}, 0x0) 10:31:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x300}}}}}, 0x28}}, 0x0) 10:31:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x2000000, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:31:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x600, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:31:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 62) 10:31:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0) 10:31:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 44) [ 3306.182515] FAULT_INJECTION: forcing a failure. [ 3306.182515] name failslab, interval 1, probability 0, space 0, times 0 [ 3306.185124] CPU: 1 PID: 19987 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3306.186823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3306.188905] Call Trace: [ 3306.189461] dump_stack+0x107/0x167 [ 3306.190218] should_fail.cold+0x5/0xa [ 3306.191009] ? create_object.isra.0+0x3a/0xa30 [ 3306.191963] should_failslab+0x5/0x20 [ 3306.192747] kmem_cache_alloc+0x5b/0x310 [ 3306.193597] create_object.isra.0+0x3a/0xa30 [ 3306.194513] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3306.195586] kmem_cache_alloc+0x159/0x310 [ 3306.196454] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3306.197380] FAULT_INJECTION: forcing a failure. [ 3306.197380] name failslab, interval 1, probability 0, space 0, times 0 [ 3306.197556] vm_area_dup+0x78/0x290 [ 3306.199917] ? mark_lock+0xf5/0x2df0 [ 3306.200710] ? lock_chain_count+0x20/0x20 [ 3306.201570] ? mark_lock+0xf5/0x2df0 [ 3306.202346] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3306.203432] ? lock_chain_count+0x20/0x20 [ 3306.204313] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3306.205277] ? trace_hardirqs_on+0x5b/0x180 [ 3306.206208] ? mark_lock+0xf5/0x2df0 [ 3306.207010] ? vm_area_alloc+0x110/0x110 [ 3306.207899] ? __lock_acquire+0x1657/0x5b00 [ 3306.208845] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3306.209966] ? SOFTIRQ_verbose+0x10/0x10 [ 3306.210838] ? vmacache_find+0x55/0x2a0 [ 3306.211700] __split_vma+0xa8/0x4e0 [ 3306.212485] __do_munmap+0x365/0x1260 [ 3306.213305] ? arch_get_unmapped_area+0x450/0x450 [ 3306.214341] ? lock_release+0x680/0x680 [ 3306.215196] mmap_region+0x7cc/0x1500 [ 3306.216036] do_mmap+0x868/0x1370 [ 3306.216790] vm_mmap_pgoff+0x198/0x1f0 [ 3306.217630] ? randomize_page+0xb0/0xb0 [ 3306.218500] ksys_mmap_pgoff+0x41c/0x560 [ 3306.219374] ? find_mergeable_anon_vma+0x250/0x250 [ 3306.220439] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3306.221569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3306.222683] do_syscall_64+0x33/0x40 [ 3306.223483] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3306.224590] RIP: 0033:0x7fed36701b62 [ 3306.225392] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3306.229353] RSP: 002b:00007fed33c770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3306.230984] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fed36701b62 [ 3306.232520] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000 [ 3306.234048] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000 [ 3306.235586] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000080 [ 3306.237115] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3306.238693] CPU: 0 PID: 19993 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3306.239991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3306.241260] FAULT_INJECTION: forcing a failure. [ 3306.241260] name failslab, interval 1, probability 0, space 0, times 0 [ 3306.241451] Call Trace: [ 3306.244389] dump_stack+0x107/0x167 [ 3306.245172] should_fail.cold+0x5/0xa [ 3306.245959] ? create_object.isra.0+0x3a/0xa30 [ 3306.246864] should_failslab+0x5/0x20 [ 3306.247613] kmem_cache_alloc+0x5b/0x310 [ 3306.248410] ? mark_held_locks+0x9e/0xe0 [ 3306.249295] create_object.isra.0+0x3a/0xa30 [ 3306.250121] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3306.251172] kmem_cache_alloc+0x159/0x310 [ 3306.252120] xas_alloc+0x336/0x440 [ 3306.252919] xas_create+0x34a/0x10d0 [ 3306.253864] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3306.254933] xas_store+0x8c/0x1c40 [ 3306.255920] __xa_store+0x164/0x2d0 [ 3306.256699] ? xa_delete_node+0x280/0x280 [ 3306.257659] ? trace_hardirqs_on+0x5b/0x180 [ 3306.258649] xa_store+0x31/0x50 [ 3306.259366] __io_uring_add_tctx_node+0x1cf/0x520 [ 3306.260326] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3306.261290] ? alloc_fd+0x2e7/0x670 [ 3306.262218] io_uring_setup+0x1fbb/0x2980 [ 3306.263165] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3306.264123] ? wait_for_completion_io+0x270/0x270 [ 3306.265393] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3306.266377] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3306.267433] do_syscall_64+0x33/0x40 [ 3306.268738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3306.270650] RIP: 0033:0x7f4d680b3b19 [ 3306.272076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3306.277617] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3306.280106] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3306.282354] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3306.284624] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3306.286906] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3306.289187] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3306.292076] CPU: 1 PID: 19986 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3306.293547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3306.295263] Call Trace: [ 3306.295836] dump_stack+0x107/0x167 [ 3306.296589] should_fail.cold+0x5/0xa [ 3306.297384] ? create_object.isra.0+0x3a/0xa30 [ 3306.298328] should_failslab+0x5/0x20 [ 3306.299114] kmem_cache_alloc+0x5b/0x310 [ 3306.299971] create_object.isra.0+0x3a/0xa30 [ 3306.300886] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3306.301959] kmem_cache_alloc+0x159/0x310 [ 3306.302830] anon_vma_clone+0xdc/0x590 [ 3306.303662] anon_vma_fork+0x82/0x640 [ 3306.304470] ? __vm_enough_memory+0x184/0x360 [ 3306.305410] copy_process+0x72cd/0x78b0 [ 3306.306261] ? __cleanup_sighand+0xb0/0xb0 [ 3306.307161] ? _copy_from_user+0xfb/0x1b0 [ 3306.308035] kernel_clone+0xe7/0x980 [ 3306.308804] ? lock_acquire+0x197/0x470 [ 3306.309635] ? create_io_thread+0xf0/0xf0 [ 3306.310531] ? ksys_write+0x21a/0x260 [ 3306.311316] ? lock_downgrade+0x6d0/0x6d0 [ 3306.312199] __do_sys_clone3+0x1e5/0x320 [ 3306.313038] ? __do_sys_clone+0x110/0x110 [ 3306.313939] ? rcu_read_lock_any_held+0x75/0xa0 [ 3306.314915] ? vfs_write+0x354/0xb10 [ 3306.315709] ? fput_many+0x2f/0x1a0 [ 3306.316486] ? ksys_write+0x1a9/0x260 [ 3306.317290] ? __ia32_sys_read+0xb0/0xb0 [ 3306.318156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3306.319265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3306.320366] ? trace_hardirqs_on+0x5b/0x180 [ 3306.321277] do_syscall_64+0x33/0x40 [ 3306.322061] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3306.323141] RIP: 0033:0x7f55c06adb19 [ 3306.323938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3306.327815] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3306.329418] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3306.330927] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3306.332443] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3306.333957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3306.335470] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:31:59 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 61) 10:31:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x700, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 3306.520993] FAULT_INJECTION: forcing a failure. [ 3306.520993] name failslab, interval 1, probability 0, space 0, times 0 [ 3306.524329] CPU: 0 PID: 20005 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3306.525903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3306.527785] Call Trace: [ 3306.528404] dump_stack+0x107/0x167 [ 3306.529254] should_fail.cold+0x5/0xa [ 3306.530133] ? down_write+0xe0/0x160 [ 3306.531003] ? anon_vma_clone+0xdc/0x590 [ 3306.531953] should_failslab+0x5/0x20 [ 3306.532827] kmem_cache_alloc+0x5b/0x310 [ 3306.533776] anon_vma_clone+0xdc/0x590 [ 3306.534698] anon_vma_fork+0x82/0x640 [ 3306.535589] ? __vm_enough_memory+0x184/0x360 [ 3306.536628] copy_process+0x72cd/0x78b0 [ 3306.537614] ? __cleanup_sighand+0xb0/0xb0 [ 3306.538627] ? _copy_from_user+0xfb/0x1b0 [ 3306.539613] kernel_clone+0xe7/0x980 [ 3306.540491] ? lock_acquire+0x197/0x470 [ 3306.541412] ? create_io_thread+0xf0/0xf0 [ 3306.542402] ? ksys_write+0x21a/0x260 [ 3306.543279] ? lock_downgrade+0x6d0/0x6d0 [ 3306.544255] __do_sys_clone3+0x1e5/0x320 [ 3306.545189] ? __do_sys_clone+0x110/0x110 [ 3306.546188] ? rcu_read_lock_any_held+0x75/0xa0 [ 3306.547246] ? vfs_write+0x354/0xb10 [ 3306.548121] ? fput_many+0x2f/0x1a0 [ 3306.548962] ? ksys_write+0x1a9/0x260 [ 3306.549882] ? __ia32_sys_read+0xb0/0xb0 [ 3306.550916] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3306.552161] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3306.553339] ? trace_hardirqs_on+0x5b/0x180 [ 3306.554340] do_syscall_64+0x33/0x40 [ 3306.555199] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3306.556392] RIP: 0033:0x7f55c06adb19 [ 3306.557254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3306.561425] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3306.563154] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3306.564786] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3306.566411] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3306.568073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3306.569709] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:31:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 63) 10:31:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xf0ffffff}}}}}, 0x28}}, 0x0) [ 3306.749039] FAULT_INJECTION: forcing a failure. [ 3306.749039] name failslab, interval 1, probability 0, space 0, times 0 [ 3306.751580] CPU: 1 PID: 20013 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3306.753047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3306.754797] Call Trace: [ 3306.755357] dump_stack+0x107/0x167 [ 3306.756142] should_fail.cold+0x5/0xa [ 3306.756947] ? anon_vma_clone+0xdc/0x590 [ 3306.757804] should_failslab+0x5/0x20 [ 3306.758606] kmem_cache_alloc+0x5b/0x310 [ 3306.759466] anon_vma_clone+0xdc/0x590 [ 3306.760305] __split_vma+0x17c/0x4e0 [ 3306.761094] __do_munmap+0x365/0x1260 [ 3306.761898] ? arch_get_unmapped_area+0x450/0x450 [ 3306.762919] ? lock_release+0x680/0x680 [ 3306.763769] mmap_region+0x7cc/0x1500 [ 3306.764590] do_mmap+0x868/0x1370 [ 3306.765330] vm_mmap_pgoff+0x198/0x1f0 [ 3306.766164] ? randomize_page+0xb0/0xb0 [ 3306.767020] ksys_mmap_pgoff+0x41c/0x560 [ 3306.767891] ? find_mergeable_anon_vma+0x250/0x250 [ 3306.768925] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3306.770025] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3306.771111] do_syscall_64+0x33/0x40 [ 3306.771908] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3306.772986] RIP: 0033:0x7fed36701b62 [ 3306.773767] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3306.777639] RSP: 002b:00007fed33c770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3306.779242] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fed36701b62 [ 3306.780750] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000 [ 3306.782248] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000 [ 3306.783754] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000080 [ 3306.785258] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:32:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 45) 10:32:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) 10:32:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 64) 10:32:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x500}}}}}, 0x28}}, 0x0) 10:32:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x3000000, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:32:13 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 62) 10:32:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0x900, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:32:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xfffff000}}}}}, 0x28}}, 0x0) [ 3319.833630] FAULT_INJECTION: forcing a failure. [ 3319.833630] name failslab, interval 1, probability 0, space 0, times 0 [ 3319.835420] CPU: 1 PID: 20029 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3319.836362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3319.837625] Call Trace: [ 3319.838025] dump_stack+0x107/0x167 [ 3319.838645] should_fail.cold+0x5/0xa [ 3319.839163] ? anon_vma_clone+0xdc/0x590 [ 3319.839799] should_failslab+0x5/0x20 [ 3319.840389] kmem_cache_alloc+0x5b/0x310 [ 3319.841017] anon_vma_clone+0xdc/0x590 [ 3319.841589] __split_vma+0x17c/0x4e0 [ 3319.842074] __do_munmap+0x365/0x1260 [ 3319.842577] ? arch_get_unmapped_area+0x450/0x450 [ 3319.843268] ? lock_release+0x680/0x680 [ 3319.843836] mmap_region+0x7cc/0x1500 [ 3319.844454] do_mmap+0x868/0x1370 [ 3319.845011] vm_mmap_pgoff+0x198/0x1f0 [ 3319.845594] ? randomize_page+0xb0/0xb0 [ 3319.846123] ksys_mmap_pgoff+0x41c/0x560 [ 3319.846659] ? find_mergeable_anon_vma+0x250/0x250 [ 3319.847302] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3319.848000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3319.848677] do_syscall_64+0x33/0x40 [ 3319.849156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3319.849827] RIP: 0033:0x7fed36701b62 [ 3319.850304] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3319.852699] RSP: 002b:00007fed33c770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3319.853675] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fed36701b62 [ 3319.854590] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000 [ 3319.855512] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000 [ 3319.856483] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000080 [ 3319.857398] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3319.865253] FAULT_INJECTION: forcing a failure. [ 3319.865253] name failslab, interval 1, probability 0, space 0, times 0 [ 3319.866723] CPU: 1 PID: 20033 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3319.867615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3319.868696] Call Trace: [ 3319.869039] dump_stack+0x107/0x167 [ 3319.869511] should_fail.cold+0x5/0xa [ 3319.870008] ? create_object.isra.0+0x3a/0xa30 [ 3319.870601] should_failslab+0x5/0x20 [ 3319.871108] kmem_cache_alloc+0x5b/0x310 [ 3319.871643] create_object.isra.0+0x3a/0xa30 [ 3319.872210] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3319.872887] kmem_cache_alloc+0x159/0x310 [ 3319.873437] anon_vma_clone+0xdc/0x590 [ 3319.873956] anon_vma_fork+0x82/0x640 [ 3319.874447] ? __vm_enough_memory+0x184/0x360 [ 3319.875034] copy_process+0x72cd/0x78b0 [ 3319.875584] ? __cleanup_sighand+0xb0/0xb0 [ 3319.876168] ? _copy_from_user+0xfb/0x1b0 [ 3319.876711] kernel_clone+0xe7/0x980 [ 3319.877202] ? __lockdep_reset_lock+0x180/0x180 [ 3319.877809] ? create_io_thread+0xf0/0xf0 [ 3319.878371] ? ksys_write+0x21a/0x260 [ 3319.878868] ? lock_downgrade+0x6d0/0x6d0 [ 3319.879415] __do_sys_clone3+0x1e5/0x320 [ 3319.879961] ? __do_sys_clone+0x110/0x110 [ 3319.880518] ? rcu_read_lock_any_held+0x75/0xa0 [ 3319.881127] ? vfs_write+0x354/0xb10 [ 3319.881617] ? fput_many+0x2f/0x1a0 [ 3319.882098] ? ksys_write+0x1a9/0x260 [ 3319.882598] ? __ia32_sys_read+0xb0/0xb0 [ 3319.883127] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3319.883835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3319.884493] ? trace_hardirqs_on+0x5b/0x180 [ 3319.885056] do_syscall_64+0x33/0x40 [ 3319.885548] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3319.886212] RIP: 0033:0x7f55c06adb19 [ 3319.886700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3319.889083] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3319.890067] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3319.890986] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3319.891917] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3319.892828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3319.893731] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3319.913008] FAULT_INJECTION: forcing a failure. [ 3319.913008] name failslab, interval 1, probability 0, space 0, times 0 [ 3319.914447] CPU: 1 PID: 20038 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3319.915322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3319.916366] Call Trace: [ 3319.916701] dump_stack+0x107/0x167 [ 3319.917166] should_fail.cold+0x5/0xa [ 3319.917659] ? xas_alloc+0x336/0x440 [ 3319.918124] should_failslab+0x5/0x20 [ 3319.918608] kmem_cache_alloc+0x5b/0x310 [ 3319.919122] xas_alloc+0x336/0x440 [ 3319.919570] xas_create+0x34a/0x10d0 [ 3319.920058] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3319.920716] xas_store+0x8c/0x1c40 [ 3319.921178] __xa_store+0x164/0x2d0 [ 3319.921650] ? xa_delete_node+0x280/0x280 [ 3319.922184] ? trace_hardirqs_on+0x5b/0x180 [ 3319.922729] xa_store+0x31/0x50 [ 3319.923148] __io_uring_add_tctx_node+0x1cf/0x520 [ 3319.923768] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3319.924420] ? alloc_fd+0x2e7/0x670 [ 3319.924894] io_uring_setup+0x1fbb/0x2980 [ 3319.925420] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3319.926070] ? wait_for_completion_io+0x270/0x270 [ 3319.926716] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3319.927379] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3319.928047] do_syscall_64+0x33/0x40 [ 3319.928515] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3319.929167] RIP: 0033:0x7f4d680b3b19 [ 3319.929647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3319.931963] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3319.932930] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3319.933835] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3319.934749] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3319.935670] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3319.936569] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:32:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) 10:32:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0xa00, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:32:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x600}}}}}, 0x28}}, 0x0) 10:32:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:32:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffff7f}}}}}, 0x28}}, 0x0) 10:32:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 65) 10:32:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 46) 10:32:13 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 63) [ 3320.166218] FAULT_INJECTION: forcing a failure. [ 3320.166218] name failslab, interval 1, probability 0, space 0, times 0 [ 3320.167511] CPU: 1 PID: 20061 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3320.168298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3320.169223] Call Trace: [ 3320.169530] dump_stack+0x107/0x167 [ 3320.169942] should_fail.cold+0x5/0xa [ 3320.170374] ? vm_area_alloc+0x1c/0x110 [ 3320.170821] should_failslab+0x5/0x20 [ 3320.171252] kmem_cache_alloc+0x5b/0x310 [ 3320.171718] vm_area_alloc+0x1c/0x110 [ 3320.172147] mmap_region+0x982/0x1500 [ 3320.172583] do_mmap+0x868/0x1370 [ 3320.172982] vm_mmap_pgoff+0x198/0x1f0 [ 3320.173423] ? randomize_page+0xb0/0xb0 [ 3320.173881] ksys_mmap_pgoff+0x41c/0x560 [ 3320.174339] ? find_mergeable_anon_vma+0x250/0x250 [ 3320.174896] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3320.175484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3320.176075] do_syscall_64+0x33/0x40 [ 3320.176495] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3320.177069] RIP: 0033:0x7fed36701b62 [ 3320.177487] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3320.179551] RSP: 002b:00007fed33c770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3320.180417] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fed36701b62 [ 3320.181218] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000 [ 3320.182019] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000 [ 3320.182821] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000080 [ 3320.183625] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:32:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 66) [ 3320.251497] FAULT_INJECTION: forcing a failure. [ 3320.251497] name failslab, interval 1, probability 0, space 0, times 0 [ 3320.252970] CPU: 1 PID: 20067 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3320.253752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3320.254693] Call Trace: [ 3320.255009] dump_stack+0x107/0x167 [ 3320.255431] should_fail.cold+0x5/0xa [ 3320.255873] ? create_object.isra.0+0x3a/0xa30 [ 3320.256390] should_failslab+0x5/0x20 [ 3320.256822] kmem_cache_alloc+0x5b/0x310 [ 3320.257284] ? mark_held_locks+0x9e/0xe0 [ 3320.257748] create_object.isra.0+0x3a/0xa30 [ 3320.258244] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3320.258824] kmem_cache_alloc+0x159/0x310 [ 3320.259302] xas_alloc+0x336/0x440 [ 3320.259716] xas_create+0x34a/0x10d0 [ 3320.260146] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3320.260743] xas_store+0x8c/0x1c40 [ 3320.261156] __xa_store+0x164/0x2d0 [ 3320.261568] ? xa_delete_node+0x280/0x280 [ 3320.262044] ? trace_hardirqs_on+0x5b/0x180 [ 3320.262542] xa_store+0x31/0x50 [ 3320.262925] __io_uring_add_tctx_node+0x1cf/0x520 [ 3320.263473] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3320.264074] ? alloc_fd+0x2e7/0x670 [ 3320.264493] io_uring_setup+0x1fbb/0x2980 [ 3320.264967] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3320.265548] ? wait_for_completion_io+0x270/0x270 [ 3320.266111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3320.266703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3320.267292] do_syscall_64+0x33/0x40 [ 3320.267722] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3320.268304] RIP: 0033:0x7f4d680b3b19 [ 3320.268730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3320.270821] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3320.271693] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3320.272506] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3320.273322] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3320.274135] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3320.274948] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3320.286975] FAULT_INJECTION: forcing a failure. 10:32:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffff9e}}}}}, 0x28}}, 0x0) 10:32:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x700}}}}}, 0x28}}, 0x0) [ 3320.286975] name failslab, interval 1, probability 0, space 0, times 0 [ 3320.290136] CPU: 0 PID: 20068 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3320.291902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3320.293879] Call Trace: [ 3320.294519] dump_stack+0x107/0x167 [ 3320.295406] should_fail.cold+0x5/0xa [ 3320.296334] ? down_write+0xe0/0x160 [ 3320.297230] ? anon_vma_clone+0xdc/0x590 [ 3320.298205] should_failslab+0x5/0x20 [ 3320.299118] kmem_cache_alloc+0x5b/0x310 [ 3320.300126] anon_vma_clone+0xdc/0x590 [ 3320.301091] anon_vma_fork+0x82/0x640 [ 3320.302004] ? __vm_enough_memory+0x184/0x360 [ 3320.303096] copy_process+0x72cd/0x78b0 [ 3320.304150] ? __cleanup_sighand+0xb0/0xb0 [ 3320.305215] ? _copy_from_user+0xfb/0x1b0 [ 3320.306237] kernel_clone+0xe7/0x980 [ 3320.307146] ? lock_acquire+0x197/0x470 [ 3320.308111] ? create_io_thread+0xf0/0xf0 [ 3320.309142] ? ksys_write+0x21a/0x260 [ 3320.310068] ? lock_downgrade+0x6d0/0x6d0 [ 3320.311079] __do_sys_clone3+0x1e5/0x320 [ 3320.312066] ? __do_sys_clone+0x110/0x110 [ 3320.313108] ? rcu_read_lock_any_held+0x75/0xa0 [ 3320.314224] ? vfs_write+0x354/0xb10 [ 3320.315124] ? fput_many+0x2f/0x1a0 [ 3320.316017] ? ksys_write+0x1a9/0x260 [ 3320.316941] ? __ia32_sys_read+0xb0/0xb0 [ 3320.317930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3320.319191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3320.320432] ? trace_hardirqs_on+0x5b/0x180 [ 3320.321483] do_syscall_64+0x33/0x40 [ 3320.322387] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3320.323620] RIP: 0033:0x7f55c06adb19 [ 3320.324522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3320.328926] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3320.330758] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3320.332478] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3320.334193] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3320.335892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3320.337612] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 10:32:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0xb00, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 3320.439085] FAULT_INJECTION: forcing a failure. [ 3320.439085] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3320.440456] CPU: 1 PID: 20072 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3320.441229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3320.442154] Call Trace: [ 3320.442472] dump_stack+0x107/0x167 [ 3320.442890] should_fail.cold+0x5/0xa [ 3320.443333] __alloc_pages_nodemask+0x182/0x600 [ 3320.443876] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3320.444576] alloc_pages_current+0x187/0x280 [ 3320.445070] allocate_slab+0x26f/0x380 [ 3320.445526] ___slab_alloc+0x470/0x700 [ 3320.445980] ? vm_area_alloc+0x1c/0x110 [ 3320.446436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3320.447057] ? obj_cgroup_charge+0xc6/0x490 [ 3320.447537] ? trace_hardirqs_on+0x5b/0x180 [ 3320.448027] ? vm_area_alloc+0x1c/0x110 [ 3320.448477] ? kmem_cache_alloc+0x301/0x310 [ 3320.448964] ? vm_area_alloc+0x1c/0x110 [ 3320.449410] kmem_cache_alloc+0x301/0x310 [ 3320.449878] vm_area_alloc+0x1c/0x110 [ 3320.450310] mmap_region+0x982/0x1500 [ 3320.450750] do_mmap+0x868/0x1370 [ 3320.451146] vm_mmap_pgoff+0x198/0x1f0 [ 3320.451591] ? randomize_page+0xb0/0xb0 [ 3320.452058] ksys_mmap_pgoff+0x41c/0x560 [ 3320.452515] ? find_mergeable_anon_vma+0x250/0x250 [ 3320.453066] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3320.453655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3320.454233] do_syscall_64+0x33/0x40 [ 3320.454659] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3320.455239] RIP: 0033:0x7fed36701b62 [ 3320.455662] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3320.457739] RSP: 002b:00007fed33c770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3320.458596] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fed36701b62 [ 3320.459398] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000 [ 3320.460202] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000 [ 3320.461008] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000080 [ 3320.461803] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 10:32:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x900}}}}}, 0x28}}, 0x0) 10:32:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0xc00, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:32:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x500000000000000}, 0x0) 10:32:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 47) 10:32:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 67) 10:32:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:32:26 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 64) 10:32:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xfffffff0}}}}}, 0x28}}, 0x0) [ 3333.699301] FAULT_INJECTION: forcing a failure. [ 3333.699301] name failslab, interval 1, probability 0, space 0, times 0 [ 3333.700932] CPU: 0 PID: 20106 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3333.701886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3333.703029] Call Trace: [ 3333.703405] dump_stack+0x107/0x167 [ 3333.703927] should_fail.cold+0x5/0xa [ 3333.704462] ? create_object.isra.0+0x3a/0xa30 [ 3333.705095] should_failslab+0x5/0x20 [ 3333.705629] kmem_cache_alloc+0x5b/0x310 [ 3333.706201] create_object.isra.0+0x3a/0xa30 [ 3333.706811] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3333.707531] kmem_cache_alloc+0x159/0x310 [ 3333.708125] anon_vma_clone+0xdc/0x590 [ 3333.708683] anon_vma_fork+0x82/0x640 [ 3333.709213] ? __vm_enough_memory+0x184/0x360 [ 3333.709842] copy_process+0x72cd/0x78b0 [ 3333.710441] ? __cleanup_sighand+0xb0/0xb0 [ 3333.711062] ? _copy_from_user+0xfb/0x1b0 [ 3333.711650] kernel_clone+0xe7/0x980 [ 3333.712180] ? lock_acquire+0x197/0x470 [ 3333.712736] ? create_io_thread+0xf0/0xf0 [ 3333.713329] ? ksys_write+0x21a/0x260 [ 3333.713855] ? lock_downgrade+0x6d0/0x6d0 [ 3333.714435] __do_sys_clone3+0x1e5/0x320 [ 3333.714999] ? __do_sys_clone+0x110/0x110 [ 3333.715605] ? rcu_read_lock_any_held+0x75/0xa0 [ 3333.716258] ? vfs_write+0x354/0xb10 [ 3333.716778] ? fput_many+0x2f/0x1a0 [ 3333.717286] ? ksys_write+0x1a9/0x260 [ 3333.717811] ? __ia32_sys_read+0xb0/0xb0 [ 3333.718387] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3333.719120] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3333.719842] ? trace_hardirqs_on+0x5b/0x180 [ 3333.720447] do_syscall_64+0x33/0x40 [ 3333.720960] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3333.721665] RIP: 0033:0x7f55c06adb19 [ 3333.722179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3333.724703] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3333.725752] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3333.726728] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3333.727711] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3333.728696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3333.729667] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3333.754860] FAULT_INJECTION: forcing a failure. [ 3333.754860] name failslab, interval 1, probability 0, space 0, times 0 [ 3333.757538] CPU: 1 PID: 20095 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3333.759081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3333.759263] FAULT_INJECTION: forcing a failure. [ 3333.759263] name failslab, interval 1, probability 0, space 0, times 0 [ 3333.760928] Call Trace: [ 3333.760956] dump_stack+0x107/0x167 [ 3333.760980] should_fail.cold+0x5/0xa [ 3333.761003] ? create_object.isra.0+0x3a/0xa30 [ 3333.761023] should_failslab+0x5/0x20 [ 3333.761044] kmem_cache_alloc+0x5b/0x310 [ 3333.761072] create_object.isra.0+0x3a/0xa30 [ 3333.761089] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3333.761116] kmem_cache_alloc+0x159/0x310 [ 3333.761146] vm_area_alloc+0x1c/0x110 [ 3333.761165] mmap_region+0x982/0x1500 [ 3333.761202] do_mmap+0x868/0x1370 [ 3333.761234] vm_mmap_pgoff+0x198/0x1f0 [ 3333.761263] ? randomize_page+0xb0/0xb0 [ 3333.774804] ksys_mmap_pgoff+0x41c/0x560 [ 3333.775733] ? find_mergeable_anon_vma+0x250/0x250 [ 3333.776866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3333.778063] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3333.779244] do_syscall_64+0x33/0x40 [ 3333.780104] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3333.781272] RIP: 0033:0x7fed36701b62 [ 3333.782122] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3333.786334] RSP: 002b:00007fed33c770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3333.788084] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fed36701b62 [ 3333.789710] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000 [ 3333.791340] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000 [ 3333.792974] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000080 [ 3333.794586] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3333.796248] CPU: 0 PID: 20102 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3333.797314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3333.798574] Call Trace: [ 3333.799044] dump_stack+0x107/0x167 [ 3333.799822] should_fail.cold+0x5/0xa [ 3333.800487] ? xas_alloc+0x336/0x440 [ 3333.801139] should_failslab+0x5/0x20 [ 3333.801753] kmem_cache_alloc+0x5b/0x310 [ 3333.802537] xas_alloc+0x336/0x440 [ 3333.803201] xas_create+0x34a/0x10d0 [ 3333.803990] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3333.804900] xas_store+0x8c/0x1c40 [ 3333.805739] __xa_store+0x164/0x2d0 [ 3333.806406] ? xa_delete_node+0x280/0x280 [ 3333.807228] ? trace_hardirqs_on+0x5b/0x180 [ 3333.808081] xa_store+0x31/0x50 [ 3333.808687] __io_uring_add_tctx_node+0x1cf/0x520 [ 3333.809488] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3333.810305] ? alloc_fd+0x2e7/0x670 [ 3333.811098] io_uring_setup+0x1fbb/0x2980 [ 3333.811904] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3333.812688] ? wait_for_completion_io+0x270/0x270 [ 3333.813785] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3333.814610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3333.815509] do_syscall_64+0x33/0x40 [ 3333.816128] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3333.816928] RIP: 0033:0x7f4d680b3b19 [ 3333.817536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3333.820188] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3333.821379] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3333.822453] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3333.823529] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3333.824611] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3333.825685] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:32:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x6000000, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:32:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0xd00, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:32:27 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 65) 10:32:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0xec0}}}}}, 0x28}}, 0x0) 10:32:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x600000000000000}, 0x0) [ 3334.051168] FAULT_INJECTION: forcing a failure. [ 3334.051168] name failslab, interval 1, probability 0, space 0, times 0 [ 3334.053868] CPU: 1 PID: 20123 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3334.055475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3334.057407] Call Trace: [ 3334.058025] dump_stack+0x107/0x167 [ 3334.058876] should_fail.cold+0x5/0xa [ 3334.059774] ? anon_vma_fork+0xf1/0x640 [ 3334.060854] should_failslab+0x5/0x20 [ 3334.061829] kmem_cache_alloc+0x5b/0x310 [ 3334.062995] anon_vma_fork+0xf1/0x640 [ 3334.063892] ? __vm_enough_memory+0x184/0x360 [ 3334.064941] copy_process+0x72cd/0x78b0 [ 3334.065906] ? __cleanup_sighand+0xb0/0xb0 [ 3334.066916] ? _copy_from_user+0xfb/0x1b0 [ 3334.067899] kernel_clone+0xe7/0x980 [ 3334.068768] ? lock_acquire+0x197/0x470 [ 3334.069692] ? create_io_thread+0xf0/0xf0 [ 3334.070675] ? ksys_write+0x21a/0x260 [ 3334.071559] ? lock_downgrade+0x6d0/0x6d0 [ 3334.072536] __do_sys_clone3+0x1e5/0x320 [ 3334.073478] ? __do_sys_clone+0x110/0x110 [ 3334.074465] ? rcu_read_lock_any_held+0x75/0xa0 [ 3334.075541] ? vfs_write+0x354/0xb10 [ 3334.076415] ? fput_many+0x2f/0x1a0 [ 3334.077446] ? ksys_write+0x1a9/0x260 [ 3334.078369] ? __ia32_sys_read+0xb0/0xb0 [ 3334.079321] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3334.080556] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3334.081749] ? trace_hardirqs_on+0x5b/0x180 [ 3334.082757] do_syscall_64+0x33/0x40 [ 3334.083707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3334.085044] RIP: 0033:0x7f55c06adb19 [ 3334.086023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3334.090567] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3334.092345] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3334.094002] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3334.095658] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3334.097316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3334.098971] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3338.658141] Bluetooth: hci0: command 0x0409 tx timeout [ 3340.706166] Bluetooth: hci0: command 0x041b tx timeout [ 3342.754326] Bluetooth: hci0: command 0x040f tx timeout [ 3343.797337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3343.799757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3343.802828] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3343.860412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3343.862753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3343.865464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3344.802137] Bluetooth: hci0: command 0x0419 tx timeout 10:32:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0xe00, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:32:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 66) 10:32:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffffff}}}}}, 0x28}}, 0x0) 10:32:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x7000000, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:32:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 68) 10:32:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 48) 10:32:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0xf00}}}}}, 0x28}}, 0x0) 10:32:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x700000000000000}, 0x0) [ 3358.646365] FAULT_INJECTION: forcing a failure. [ 3358.646365] name failslab, interval 1, probability 0, space 0, times 0 [ 3358.650302] CPU: 1 PID: 20607 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3358.652092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3358.654551] Call Trace: [ 3358.655237] dump_stack+0x107/0x167 [ 3358.656197] should_fail.cold+0x5/0xa [ 3358.657222] ? ptlock_alloc+0x1d/0x70 [ 3358.658390] should_failslab+0x5/0x20 [ 3358.659491] kmem_cache_alloc+0x5b/0x310 [ 3358.660676] ptlock_alloc+0x1d/0x70 [ 3358.661711] pte_alloc_one+0x68/0x1a0 [ 3358.662846] __pte_alloc+0x1d/0x330 [ 3358.663795] remap_pfn_range_internal+0x9a3/0xf60 [ 3358.665051] ? lookup_memtype+0x5b/0x200 [ 3358.666106] ? apply_to_existing_page_range+0x40/0x40 [ 3358.667455] remap_pfn_range+0xcd/0x160 [ 3358.668512] ? remap_pfn_range_notrack+0x70/0x70 [ 3358.669534] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3358.670638] io_uring_mmap+0x398/0x530 [ 3358.671473] mmap_file+0x5e/0xe0 [ 3358.672206] mmap_region+0xc4d/0x1500 [ 3358.673033] do_mmap+0x868/0x1370 [ 3358.673786] vm_mmap_pgoff+0x198/0x1f0 [ 3358.674621] ? randomize_page+0xb0/0xb0 [ 3358.675490] ksys_mmap_pgoff+0x41c/0x560 [ 3358.676379] ? find_mergeable_anon_vma+0x250/0x250 [ 3358.677423] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3358.678533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3358.679632] do_syscall_64+0x33/0x40 [ 3358.680435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3358.681514] RIP: 0033:0x7fed36701b62 [ 3358.682309] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3358.686203] RSP: 002b:00007fed33c770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3358.687813] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fed36701b62 [ 3358.689341] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000 [ 3358.690844] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000 [ 3358.692391] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000080 [ 3358.693903] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3358.703873] FAULT_INJECTION: forcing a failure. [ 3358.703873] name failslab, interval 1, probability 0, space 0, times 0 [ 3358.706463] CPU: 1 PID: 20611 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 3358.707926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3358.710093] Call Trace: [ 3358.710671] dump_stack+0x107/0x167 [ 3358.711616] should_fail.cold+0x5/0xa [ 3358.712708] ? create_object.isra.0+0x3a/0xa30 [ 3358.713918] should_failslab+0x5/0x20 [ 3358.714858] kmem_cache_alloc+0x5b/0x310 [ 3358.715723] ? mark_held_locks+0x9e/0xe0 [ 3358.716302] FAULT_INJECTION: forcing a failure. [ 3358.716302] name failslab, interval 1, probability 0, space 0, times 0 [ 3358.716620] create_object.isra.0+0x3a/0xa30 [ 3358.719751] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3358.720843] kmem_cache_alloc+0x159/0x310 [ 3358.721721] xas_alloc+0x336/0x440 [ 3358.722471] xas_create+0x34a/0x10d0 [ 3358.723268] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3358.724372] xas_store+0x8c/0x1c40 [ 3358.725143] __xa_store+0x164/0x2d0 [ 3358.725909] ? xa_delete_node+0x280/0x280 [ 3358.726784] ? trace_hardirqs_on+0x5b/0x180 [ 3358.727693] xa_store+0x31/0x50 [ 3358.728403] __io_uring_add_tctx_node+0x1cf/0x520 [ 3358.729425] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3358.730523] ? alloc_fd+0x2e7/0x670 [ 3358.731300] io_uring_setup+0x1fbb/0x2980 [ 3358.732193] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3358.733264] ? wait_for_completion_io+0x270/0x270 [ 3358.734302] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3358.735414] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3358.736514] do_syscall_64+0x33/0x40 [ 3358.737292] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3358.738367] RIP: 0033:0x7f4d680b3b19 [ 3358.739152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3358.743069] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3358.744687] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3358.746191] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3358.747692] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3358.749207] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3358.750703] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3358.752250] CPU: 0 PID: 20618 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 3358.753644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3358.755316] Call Trace: [ 3358.755860] dump_stack+0x107/0x167 [ 3358.756602] should_fail.cold+0x5/0xa [ 3358.757366] ? create_object.isra.0+0x3a/0xa30 [ 3358.758278] should_failslab+0x5/0x20 [ 3358.759039] kmem_cache_alloc+0x5b/0x310 [ 3358.759859] create_object.isra.0+0x3a/0xa30 [ 3358.760743] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3358.761768] kmem_cache_alloc+0x159/0x310 [ 3358.762612] anon_vma_fork+0x1ff/0x640 [ 3358.763405] copy_process+0x72cd/0x78b0 [ 3358.764254] ? __cleanup_sighand+0xb0/0xb0 [ 3358.765119] ? _copy_from_user+0xfb/0x1b0 [ 3358.765956] kernel_clone+0xe7/0x980 [ 3358.766703] ? __lockdep_reset_lock+0x180/0x180 [ 3358.767639] ? create_io_thread+0xf0/0xf0 [ 3358.768490] ? ksys_write+0x21a/0x260 [ 3358.769247] ? lock_downgrade+0x6d0/0x6d0 [ 3358.770070] __do_sys_clone3+0x1e5/0x320 [ 3358.770871] ? __do_sys_clone+0x110/0x110 [ 3358.771710] ? rcu_read_lock_any_held+0x75/0xa0 [ 3358.772632] ? vfs_write+0x354/0xb10 [ 3358.773370] ? fput_many+0x2f/0x1a0 [ 3358.774093] ? ksys_write+0x1a9/0x260 [ 3358.774845] ? __ia32_sys_read+0xb0/0xb0 [ 3358.775652] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3358.776695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3358.777707] ? trace_hardirqs_on+0x5b/0x180 [ 3358.778561] do_syscall_64+0x33/0x40 [ 3358.779297] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3358.780321] RIP: 0033:0x7f55c06adb19 [ 3358.781056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3358.784694] RSP: 002b:00007f55bdc02188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3358.786206] RAX: ffffffffffffffda RBX: 00007f55c07c1020 RCX: 00007f55c06adb19 [ 3358.787612] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3358.789029] RBP: 00007f55bdc021d0 R08: 0000000000000000 R09: 0000000000000000 [ 3358.790418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3358.791812] R13: 00007ffcbb0d12ff R14: 00007f55bdc02300 R15: 0000000000022000 [ 3358.890533] ------------[ cut here ]------------ [ 3358.891917] WARNING: CPU: 0 PID: 20607 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 3358.893960] Modules linked in: [ 3358.894959] CPU: 0 PID: 20607 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 3358.896580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3358.898475] RIP: 0010:get_pat_info+0x216/0x270 [ 3358.899670] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 51 8e 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 3a 8e 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 55 a5 5a 00 e9 [ 3358.903441] RSP: 0018:ffff88804751f890 EFLAGS: 00010206 [ 3358.905297] RAX: 0000000000013560 RBX: ffff88800ca62c00 RCX: ffffc90001bf5000 [ 3358.909299] RDX: 0000000000040000 RSI: ffffffff811243f6 RDI: 0000000000000007 [ 3358.913783] RBP: ffff88804751f948 R08: 0000000000000000 R09: ffff88804751f818 [ 3358.915445] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 3358.917288] R13: 1ffff11008ea3f12 R14: 0000000000000000 R15: ffff88800ca62c50 [ 3358.918968] FS: 00007fed33c77700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 3358.920784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3358.922328] CR2: 0000000020ffa000 CR3: 00000000416d2000 CR4: 0000000000350ef0 [ 3358.924052] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3358.925845] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 000000000ddd062a [ 3358.927516] Call Trace: [ 3358.928392] ? pgprot_writethrough+0xc0/0xc0 [ 3358.929539] ? finish_task_switch+0x126/0x5d0 [ 3358.930730] ? finish_task_switch+0xef/0x5d0 [ 3358.932401] untrack_pfn+0xdc/0x240 [ 3358.933424] ? track_pfn_insert+0x150/0x150 [ 3358.934673] ? lock_downgrade+0x6d0/0x6d0 [ 3358.935800] ? uprobe_munmap+0x1c/0x560 [ 3358.936864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3358.938459] unmap_single_vma+0x1bc/0x300 [ 3358.939784] zap_page_range_single+0x2ce/0x450 [ 3358.941255] ? unmap_single_vma+0x300/0x300 [ 3358.942346] ? remap_pfn_range_internal+0xc56/0xf60 [ 3358.943821] ? lookup_memtype+0x5b/0x200 [ 3358.945457] ? apply_to_existing_page_range+0x40/0x40 10:32:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0xc00e}}}}}, 0x28}}, 0x0) 10:32:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 3358.947434] remap_pfn_range+0x139/0x160 10:32:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x900000000000000}, 0x0) 10:32:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0xec0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 10:32:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x9000000, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 3358.948552] ? remap_pfn_range_notrack+0x70/0x70 [ 3358.949862] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3358.951484] io_uring_mmap+0x398/0x530 [ 3358.952713] mmap_file+0x5e/0xe0 [ 3358.953726] mmap_region+0xc4d/0x1500 [ 3358.955630] do_mmap+0x868/0x1370 [ 3358.956883] vm_mmap_pgoff+0x198/0x1f0 [ 3358.958404] ? randomize_page+0xb0/0xb0 [ 3358.959858] ksys_mmap_pgoff+0x41c/0x560 [ 3358.961042] ? find_mergeable_anon_vma+0x250/0x250 [ 3358.962518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3358.963841] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3358.965398] do_syscall_64+0x33/0x40 [ 3358.966412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3358.967680] RIP: 0033:0x7fed36701b62 [ 3358.968727] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3358.972377] RSP: 002b:00007fed33c770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3358.974263] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fed36701b62 [ 3358.975857] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000 [ 3358.977457] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000 [ 3358.979207] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000080 [ 3358.980793] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3358.982889] irq event stamp: 2395 [ 3358.983865] hardirqs last enabled at (2407): [] console_unlock+0x92d/0xb40 [ 3358.985733] hardirqs last disabled at (2418): [] console_unlock+0x839/0xb40 [ 3358.987582] softirqs last enabled at (824): [] asm_call_irq_on_stack+0x12/0x20 [ 3358.989500] softirqs last disabled at (547): [] asm_call_irq_on_stack+0x12/0x20 [ 3358.991373] ---[ end trace 7489574cbe0d608a ]--- 10:32:52 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 67) 10:32:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 49) 10:32:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 69) [ 3359.131055] FAULT_INJECTION: forcing a failure. [ 3359.131055] name failslab, interval 1, probability 0, space 0, times 0 [ 3359.133538] CPU: 1 PID: 20629 Comm: syz-executor.4 Tainted: G W 5.10.244 #1 [ 3359.135290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3359.137063] Call Trace: [ 3359.137637] dump_stack+0x107/0x167 [ 3359.138417] should_fail.cold+0x5/0xa [ 3359.139230] ? create_object.isra.0+0x3a/0xa30 [ 3359.140221] should_failslab+0x5/0x20 [ 3359.141051] kmem_cache_alloc+0x5b/0x310 [ 3359.141927] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3359.143200] create_object.isra.0+0x3a/0xa30 [ 3359.144143] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3359.145215] kmem_cache_alloc+0x159/0x310 [ 3359.146100] ptlock_alloc+0x1d/0x70 [ 3359.146869] pte_alloc_one+0x68/0x1a0 [ 3359.147676] __pte_alloc+0x1d/0x330 [ 3359.148467] remap_pfn_range_internal+0x9a3/0xf60 [ 3359.149493] ? lookup_memtype+0x5b/0x200 [ 3359.150376] ? apply_to_existing_page_range+0x40/0x40 [ 3359.151488] remap_pfn_range+0xcd/0x160 [ 3359.152351] ? remap_pfn_range_notrack+0x70/0x70 [ 3359.153361] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3359.154461] io_uring_mmap+0x398/0x530 [ 3359.155299] mmap_file+0x5e/0xe0 [ 3359.156031] mmap_region+0xc4d/0x1500 [ 3359.156862] do_mmap+0x868/0x1370 [ 3359.157622] vm_mmap_pgoff+0x198/0x1f0 [ 3359.158462] ? randomize_page+0xb0/0xb0 [ 3359.159332] ksys_mmap_pgoff+0x41c/0x560 [ 3359.160215] ? find_mergeable_anon_vma+0x250/0x250 [ 3359.161255] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3359.162370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3359.163467] do_syscall_64+0x33/0x40 [ 3359.164275] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3359.165356] RIP: 0033:0x7fed36701b62 [ 3359.166149] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3359.170029] RSP: 002b:00007fed33c770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3359.171643] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fed36701b62 [ 3359.173159] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000 [ 3359.174676] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000 [ 3359.176193] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000080 [ 3359.177703] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3359.230007] FAULT_INJECTION: forcing a failure. [ 3359.230007] name failslab, interval 1, probability 0, space 0, times 0 [ 3359.231660] CPU: 0 PID: 20644 Comm: syz-executor.1 Tainted: G W 5.10.244 #1 [ 3359.232864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3359.234063] Call Trace: [ 3359.234452] dump_stack+0x107/0x167 [ 3359.234988] should_fail.cold+0x5/0xa [ 3359.235542] ? anon_vma_fork+0xf1/0x640 [ 3359.236127] should_failslab+0x5/0x20 [ 3359.236677] kmem_cache_alloc+0x5b/0x310 [ 3359.237271] anon_vma_fork+0xf1/0x640 [ 3359.237814] ? __vm_enough_memory+0x184/0x360 [ 3359.238463] copy_process+0x72cd/0x78b0 [ 3359.239096] ? __cleanup_sighand+0xb0/0xb0 [ 3359.239734] ? _copy_from_user+0xfb/0x1b0 [ 3359.240354] kernel_clone+0xe7/0x980 [ 3359.240898] ? __lockdep_reset_lock+0x180/0x180 [ 3359.241568] ? create_io_thread+0xf0/0xf0 [ 3359.242190] ? ksys_write+0x21a/0x260 [ 3359.242737] ? lock_downgrade+0x6d0/0x6d0 [ 3359.243343] __do_sys_clone3+0x1e5/0x320 [ 3359.243928] ? __do_sys_clone+0x110/0x110 [ 3359.244562] ? rcu_read_lock_any_held+0x75/0xa0 [ 3359.245226] ? vfs_write+0x354/0xb10 [ 3359.245772] ? fput_many+0x2f/0x1a0 [ 3359.246301] ? ksys_write+0x1a9/0x260 [ 3359.246856] ? __ia32_sys_read+0xb0/0xb0 [ 3359.247444] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3359.248209] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3359.248944] ? trace_hardirqs_on+0x5b/0x180 [ 3359.249565] do_syscall_64+0x33/0x40 [ 3359.250095] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3359.250821] RIP: 0033:0x7f55c06adb19 [ 3359.251352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3359.253966] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3359.255042] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3359.256057] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3359.257080] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3359.258088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3359.259094] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 [ 3359.293297] FAULT_INJECTION: forcing a failure. [ 3359.293297] name failslab, interval 1, probability 0, space 0, times 0 [ 3359.295270] CPU: 0 PID: 20641 Comm: syz-executor.5 Tainted: G W 5.10.244 #1 [ 3359.296509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3359.297752] Call Trace: [ 3359.298220] dump_stack+0x107/0x167 [ 3359.298875] should_fail.cold+0x5/0xa [ 3359.299526] ? xas_alloc+0x336/0x440 [ 3359.300173] should_failslab+0x5/0x20 [ 3359.300791] kmem_cache_alloc+0x5b/0x310 [ 3359.301564] xas_alloc+0x336/0x440 [ 3359.302225] xas_create+0x34a/0x10d0 [ 3359.303008] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3359.303895] xas_store+0x8c/0x1c40 [ 3359.304735] __xa_store+0x164/0x2d0 [ 3359.305390] ? xa_delete_node+0x280/0x280 [ 3359.306203] ? trace_hardirqs_on+0x5b/0x180 [ 3359.307048] xa_store+0x31/0x50 [ 3359.307645] __io_uring_add_tctx_node+0x1cf/0x520 [ 3359.308439] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3359.309239] ? alloc_fd+0x2e7/0x670 [ 3359.310017] io_uring_setup+0x1fbb/0x2980 [ 3359.310810] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3359.311583] ? wait_for_completion_io+0x270/0x270 [ 3359.312690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3359.313506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3359.314400] do_syscall_64+0x33/0x40 [ 3359.315009] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3359.315801] RIP: 0033:0x7f4d680b3b19 10:32:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0xc000000, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 10:32:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x38, r1, 0x701, 0x0, 0xf00, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) [ 3359.316404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3359.319240] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3359.320471] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3359.321562] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3359.322646] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3359.323730] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3359.324830] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 10:32:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x28}}, 0x0) 10:32:52 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 68) 10:32:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000080)) (fail_nth: 70) 10:32:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) (fail_nth: 50) 10:32:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)={0x28, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0xe500}}}}}, 0x28}}, 0x0) [ 3359.546841] FAULT_INJECTION: forcing a failure. [ 3359.546841] name failslab, interval 1, probability 0, space 0, times 0 [ 3359.548402] CPU: 0 PID: 20667 Comm: syz-executor.5 Tainted: G W 5.10.244 #1 [ 3359.549478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3359.550557] Call Trace: [ 3359.550970] dump_stack+0x107/0x167 [ 3359.551561] should_fail.cold+0x5/0xa [ 3359.552157] ? create_object.isra.0+0x3a/0xa30 [ 3359.552827] should_failslab+0x5/0x20 [ 3359.553369] kmem_cache_alloc+0x5b/0x310 [ 3359.553954] ? mark_held_locks+0x9e/0xe0 [ 3359.554619] create_object.isra.0+0x3a/0xa30 [ 3359.555232] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3359.556027] kmem_cache_alloc+0x159/0x310 [ 3359.556728] xas_alloc+0x336/0x440 [ 3359.557315] xas_create+0x34a/0x10d0 [ 3359.558008] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3359.558808] xas_store+0x8c/0x1c40 [ 3359.559453] ? mark_held_locks+0x9e/0xe0 [ 3359.559687] FAULT_INJECTION: forcing a failure. [ 3359.559687] name failslab, interval 1, probability 0, space 0, times 0 [ 3359.560016] ? irqentry_enter+0x26/0x60 [ 3359.562982] __xa_store+0x164/0x2d0 [ 3359.563566] ? xa_delete_node+0x280/0x280 [ 3359.564464] xa_store+0x31/0x50 [ 3359.564991] __io_uring_add_tctx_node+0x1cf/0x520 [ 3359.565685] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3359.566393] ? alloc_fd+0x2e7/0x670 [ 3359.567097] io_uring_setup+0x1fbb/0x2980 [ 3359.567805] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3359.568502] ? wait_for_completion_io+0x270/0x270 [ 3359.569481] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3359.570200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3359.570991] do_syscall_64+0x33/0x40 [ 3359.571529] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3359.572235] RIP: 0033:0x7f4d680b3b19 [ 3359.572764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3359.575049] RSP: 002b:00007f4d65629108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3359.576096] RAX: ffffffffffffffda RBX: 00007f4d681c6f60 RCX: 00007f4d680b3b19 [ 3359.577034] RDX: 0000000020ffd000 RSI: 0000000020000480 RDI: 0000000000005e4e [ 3359.577968] RBP: 0000000020000480 R08: 0000000020000080 R09: 0000000020000080 [ 3359.578903] R10: 00000000200001c0 R11: 0000000000000202 R12: 0000000020000080 [ 3359.579839] R13: 0000000020ffd000 R14: 00000000200001c0 R15: 0000000020ffa000 [ 3359.581085] CPU: 1 PID: 20666 Comm: syz-executor.4 Tainted: G W 5.10.244 #1 [ 3359.582841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3359.584593] Call Trace: [ 3359.585156] dump_stack+0x107/0x167 [ 3359.585929] should_fail.cold+0x5/0xa [ 3359.586741] ? create_object.isra.0+0x3a/0xa30 [ 3359.587702] should_failslab+0x5/0x20 [ 3359.588519] kmem_cache_alloc+0x5b/0x310 [ 3359.589432] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3359.590840] create_object.isra.0+0x3a/0xa30 [ 3359.591770] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3359.592856] kmem_cache_alloc+0x159/0x310 [ 3359.593739] ptlock_alloc+0x1d/0x70 [ 3359.594511] pte_alloc_one+0x68/0x1a0 [ 3359.595312] __pte_alloc+0x1d/0x330 [ 3359.596086] remap_pfn_range_internal+0x9a3/0xf60 [ 3359.597104] ? lookup_memtype+0x5b/0x200 [ 3359.597993] ? apply_to_existing_page_range+0x40/0x40 [ 3359.599097] remap_pfn_range+0xcd/0x160 [ 3359.599941] ? remap_pfn_range_notrack+0x70/0x70 [ 3359.600957] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3359.602055] io_uring_mmap+0x398/0x530 [ 3359.602882] mmap_file+0x5e/0xe0 [ 3359.603599] mmap_region+0xc4d/0x1500 [ 3359.604424] do_mmap+0x868/0x1370 [ 3359.605166] vm_mmap_pgoff+0x198/0x1f0 [ 3359.605992] ? randomize_page+0xb0/0xb0 [ 3359.606845] ksys_mmap_pgoff+0x41c/0x560 [ 3359.607703] ? find_mergeable_anon_vma+0x250/0x250 [ 3359.608749] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3359.609849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3359.610936] do_syscall_64+0x33/0x40 [ 3359.611722] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3359.612809] RIP: 0033:0x7fed36701b62 [ 3359.613593] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3359.617470] RSP: 002b:00007fed33c770f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3359.619062] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fed36701b62 [ 3359.620581] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000 [ 3359.622088] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000 [ 3359.623588] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000080 [ 3359.625088] R13: 0000000020ffd000 R14: 00000000200002c0 R15: 0000000020ffa000 [ 3359.660406] FAULT_INJECTION: forcing a failure. [ 3359.660406] name failslab, interval 1, probability 0, space 0, times 0 [ 3359.662016] CPU: 0 PID: 20670 Comm: syz-executor.1 Tainted: G W 5.10.244 #1 [ 3359.663146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3359.664182] Call Trace: [ 3359.664526] dump_stack+0x107/0x167 [ 3359.664977] should_fail.cold+0x5/0xa [ 3359.665447] ? create_object.isra.0+0x3a/0xa30 [ 3359.666024] should_failslab+0x5/0x20 [ 3359.666504] kmem_cache_alloc+0x5b/0x310 [ 3359.667007] create_object.isra.0+0x3a/0xa30 [ 3359.667542] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3359.668188] kmem_cache_alloc+0x159/0x310 [ 3359.668735] anon_vma_fork+0xf1/0x640 [ 3359.669199] ? __vm_enough_memory+0x184/0x360 [ 3359.669749] copy_process+0x72cd/0x78b0 [ 3359.670290] ? __cleanup_sighand+0xb0/0xb0 [ 3359.670835] ? _copy_from_user+0xfb/0x1b0 [ 3359.671350] kernel_clone+0xe7/0x980 [ 3359.671809] ? lock_acquire+0x197/0x470 [ 3359.672323] ? create_io_thread+0xf0/0xf0 [ 3359.672865] ? ksys_write+0x21a/0x260 [ 3359.673331] ? lock_downgrade+0x6d0/0x6d0 [ 3359.673843] __do_sys_clone3+0x1e5/0x320 [ 3359.674372] ? __do_sys_clone+0x110/0x110 [ 3359.674913] ? rcu_read_lock_any_held+0x75/0xa0 [ 3359.675479] ? vfs_write+0x354/0xb10 [ 3359.675934] ? fput_many+0x2f/0x1a0 [ 3359.676391] ? ksys_write+0x1a9/0x260 [ 3359.676892] ? __ia32_sys_read+0xb0/0xb0 [ 3359.677401] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3359.678042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3359.678668] ? trace_hardirqs_on+0x5b/0x180 [ 3359.679204] do_syscall_64+0x33/0x40 [ 3359.679659] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3359.680292] RIP: 0033:0x7f55c06adb19 [ 3359.680747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3359.683005] RSP: 002b:00007f55bdc23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 3359.683933] RAX: ffffffffffffffda RBX: 00007f55c07c0f60 RCX: 00007f55c06adb19 [ 3359.684810] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000380 [ 3359.685726] RBP: 00007f55bdc231d0 R08: 0000000000000000 R09: 0000000000000000 [ 3359.686601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3359.687491] R13: 00007ffcbb0d12ff R14: 00007f55bdc23300 R15: 0000000000022000 VM DIAGNOSIS: 10:32:52 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff822e3e01 RDI=ffffffff879f71c0 RBP=ffffffff879f7180 RSP=ffff88804751f2e8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff879f71d8 R14=0000000000000001 R15=ffffffff879f71d0 RIP=ffffffff822e3e58 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fed33c77700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020ffa000 CR3=00000000416d2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=000000000ddd062a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff859917d2 RDX=1ffff11006a0eec1 RSI=ffff888035077d68 RDI=ffff888035077d68 RBP=ffff888035077605 RSP=ffff8880350774f8 R8 =ffffffff859917d7 R9 =ffff888035077d70 R10=0000000000032046 R11=1ffff11006a0eea7 R12=ffff888035077d70 R13=ffff8880350775d0 R14=1ffff11006a0eea7 R15=ffffffff859917d6 RIP=ffffffff81108c36 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb56f0b0480 CR3=000000000dae0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000418e9c5680000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000