0x0406 tx timeout [ 224.484055] Bluetooth: hci5: command 0x0406 tx timeout [ 224.484665] Bluetooth: hci3: command 0x0406 tx timeout [ 224.486772] Bluetooth: hci7: command 0x0406 tx timeout [ 224.487531] Bluetooth: hci6: command 0x0406 tx timeout 04:47:50 executing program 1: ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000140)={0x1, 0x1, 0x7fff}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2}, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x38, 0x32, 0x3, 0x1b, 0x4, 0x6, 0x2, 0x11b, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0x20d315) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x3) 04:47:50 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getflags(r0, 0x401) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x1f, 0x7fff, 0x3, 0x8]}, &(0x7f0000000240)=0x78) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:47:50 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x1e5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x40, 0x69, 0x3, 0x9b, 0x0, 0x7, 0x502, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x4, @perf_bp, 0x20, 0x4, 0xfff, 0x5, 0x6, 0x8001, 0x8001, 0x0, 0x401, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r0, 0xa) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x14000, 0x0) syz_io_uring_setup(0x3d08, &(0x7f0000000340)={0x0, 0x172c, 0x10, 0x3, 0x31a, 0x0, r4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000440)) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x40, 0x4, 0x5, 0x6, 0x0, 0x93, 0xa420, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0), 0xa}, 0x20, 0x7fffffff, 0x401, 0x3, 0x40, 0x3, 0x80, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0xb, r2, 0x1) r5 = open_tree(r4, &(0x7f0000000400)='./file0\x00', 0x801) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 04:47:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:47:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:47:50 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:47:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 04:47:50 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x20, 0x6, 0x7, 0x0, 0x400, 0x20, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x7}, 0x18000, 0x7d, 0xfff, 0x8, 0x9a, 0x1, 0x3, 0x0, 0x4, 0x0, 0xe53}, r1, 0xe, r0, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000140)={0x0, 0x0, 0x73, 0x0, 0x100}) 04:47:50 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 232.654400] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 04:47:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:47:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 04:47:50 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:47:50 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getflags(r0, 0x401) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x1f, 0x7fff, 0x3, 0x8]}, &(0x7f0000000240)=0x78) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:47:50 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffffffd, 0xb419}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/4107, 0x100b, 0x0) perf_event_open(&(0x7f0000001200)={0x3, 0x80, 0x20, 0x3, 0x56, 0x5, 0x0, 0x5, 0x20, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x453364a0, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x84e0, 0x2, 0x9, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x7b83}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000006c0)="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") openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001280)=ANY=[@ANYBLOB="89ccff105561a4a748d3c9d80000006d00000000"], 0x1c}}, 0x0) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000180)=""/43, 0x2b}], 0x1) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000001300)=@random="f29b85ff30622e20a6e2ee60b5ca0f", 0xf, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setxattr$security_selinux(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000440)='system_u:object_r:dhcpd_var_run_t:s0\x00', 0x25, 0x2) [ 232.766800] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 04:47:50 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 232.836732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:47:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) [ 232.961447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.963361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.965234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 233.652389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:48:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 04:48:06 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000002180)=[{&(0x7f0000001f00)=""/165, 0xa5}, {&(0x7f0000001fc0)=""/39, 0x27}, {&(0x7f0000002000)=""/40, 0x28}, {&(0x7f0000002040)=""/228, 0xe4}, {&(0x7f0000002140)=""/50, 0x32}], 0x5, &(0x7f0000002200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x40000001) keyctl$chown(0x4, 0x0, r3, r4) openat$incfs(0xffffffffffffffff, &(0x7f0000001e40)='.log\x00', 0x40100, 0x85) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)=""/85, 0x55}, {&(0x7f0000000200)=""/217, 0xd9}, {&(0x7f0000000300)=""/13, 0xd}], 0x3}}, {{&(0x7f0000000380), 0x6e, &(0x7f0000001880)=[{&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f00000005c0)=""/157, 0x9d}, {&(0x7f0000000680)=""/182, 0xb6}, {&(0x7f0000000740)=""/9, 0x9}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/149, 0x95}, {&(0x7f0000001840)=""/30, 0x1e}], 0x9, &(0x7f0000001940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/142, 0x8e}, {&(0x7f0000001b00)=""/54, 0x36}, {&(0x7f0000001b40)=""/54, 0x36}], 0x3, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0xa8}}], 0x3, 0x40, &(0x7f0000001d40)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001d80)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@access_uid={'access', 0x3d, r2}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_appraise}, {@uid_lt={'uid<', r5}}]}}) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004c0000440000000000069078ac1e0001ac1414bb441c0f010000000000000000ac14140000000000ac1414000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6900000090780000"], 0x0) 04:48:06 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000012e00)) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x89) 04:48:06 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x20, 0x6, 0x7, 0x0, 0x400, 0x20, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x7}, 0x18000, 0x7d, 0xfff, 0x8, 0x9a, 0x1, 0x3, 0x0, 0x4, 0x0, 0xe53}, r1, 0xe, r0, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000140)={0x0, 0x0, 0x73, 0x0, 0x100}) 04:48:06 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) r2 = mq_open(&(0x7f00000007c0)='\xc4fdn/\xda\x1ag\x92\x05\xdb\xe7\xf2\xaa5T\xb5\x0e@\xa5\x15M\x1b\xec\xbf\x97\x05\x00\x00\x00\x00\x00\xec\xa6t\xd7\x01\x81\xa7\x81\xc9\x8dNK\x02K\x89\xcc\xfd\xd4n\x06\x8e\xd3{\t\x1d\xf5f\x9e_\xb5sF\x90\xe0\xf4\xfc\xa7\x9a\x16{\x87K<\"\xb9\xea\xb3\xefh\xfd\v$\xda\xe8x\x1e\xe1\x97S)0q\xd3\xa0|\xe5\xd1\xd88\xfcZK.t\xe9\x831\xc9\xd9K\x9a\xfe\x14\x14yu\x86\xb2O\xffOO\xe4/\xb0\xc9\xbbB\x99\v\x19\x06\x95\xb5\xd3r\r\x91d0\x9b\xb8-\xbbx\xaf\x051*\x01\xa7\xfb\\\xc4\x1f\x1f\x81\x98\x9b\x1dz\xbc\xd2\xcdc\xa3\xda\xa0\x85\xccb\xe2\'\x04\xf3>\xc1f\xf0\xc5R\x04C\xbb\x9a\x94\xb6Si\x80\xf9\x02\xcans\xee(\x8f\xf8\xfb\xcf$YhQ\b\xa1:.\xc1O\xc8\x885\xf6V\xb8\xb3\x00}\xe4\x11`[\xda(\x94\xd7\r\x1eJ\xeb\x1f\xa4\xde\xd0\x9bo\x94y\x0e&\x01\x90#\xe2\xb3\b\xb0-\n\x90\xb8\x8a\xca\x95\xd2\xf7f\xbf\xdb\xcb~i\"\x98\xa24\xb4*;\xbb\x9f\xea\xf0}^\x16|5\x7fi\xc8\xb4t\xfbv:R\xec\x8b\x8d\xa6\a\x8e,\x96\x8f|W@{\x99w\x1fD\x90\xc3k\x925\r\xa4T\x91\x1a}\x14\x87Q\xdd\xac@6XOC5\xa5\xdcj\xddG\x16w\xbc\xe1\xb7\x19\xd6n1\x84m\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x83, &(0x7f0000000200)={0x6, 0x4, 0x4, 0x1}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c460104000100000000000000c0030003008c01000009010000000000004000000000000000a70300000000000000800000040038000200070001010500000000700000000008000000000000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000000000000000000000300000000000000010000000000000006000000040000004f96338ba86e73dfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e21a9596d60bac8aa405e66db71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000f53418f500"/658], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2d, 0x4, 0x1, 0x7ff, 0x0, @mcast1, @private1, 0x700, 0x20, 0x1f}}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x2001}}, 0x398) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) syz_io_uring_setup(0x3619, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x80, &(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, 0x80000, 0x1}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x810, r1, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x2007, @fd_index=0x8, 0x6, &(0x7f0000000040)=[{&(0x7f0000000680)=""/230, 0xe6}], 0x1, 0x5, 0x1, {0x0, r6}}, 0x101) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000001e00)=ANY=[]) dup2(0xffffffffffffffff, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) 04:48:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 04:48:06 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:06 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 248.607596] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 248.619906] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 248.630611] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 04:48:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) [ 248.644558] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 04:48:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000202050000000014000000068073616e652d32303030300000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20001) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000001008000"/20], 0x14}}, 0x4000000) 04:48:06 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:48:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r2 = accept(r0, &(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0x80) connect$802154_dgram(r2, &(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x2}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x4, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x2303, 0x0}}], 0x324, 0x0) 04:48:20 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r5, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000200)=0x4, 0x4) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x1010, r1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000340)=0xff) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) sendmmsg$inet6(r4, &(0x7f0000004c00)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x1ff, @mcast1, 0xffffffff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000300)="97d0e8f552e424e4916453cb03b48ea3fd6016a74632dc25f8a22d1142a457ef54a9629021f2f2", 0x27}, {&(0x7f0000000380)="55e7367a5ac4eec49741346fa44863774710bc0a0c37574187dfbf750437fcf78180399161f536df2377eb870ab5bdcdbbc74f976b5681f9e7b52f1ae2b6ed70db5f53203c33f2aecf6024fe21375c474e56516e4c6c4b36fbad66b0a4d3976cc8313fa3bed7306307a427424954b827b0918b5b1edfbfc1224e71ca90107a5e9462058422f5c92d32f98a8ae77831", 0x8f}], 0x2, &(0x7f0000002cc0)=[@pktinfo={{0x24, 0x29, 0x32, {@private0}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000540)="1001d3bf8fdfd98701ff5f1c7240275f049cbc6fcd5554e9330702525ebd94a56125fb51393e85b5871db801f060c32a63046e0aef64ffabdb5f0c704d64086a4394ac0d22e8d2caaa5a62e7a8ec4e1e0baee15b2dd6d0b91193d5f87c80", 0xfffffffffffffd4f}, {&(0x7f00000006c0)="2568830205612b714d25ae44a2d96a37e80045d5ca67d35b219434d1556257e8e369ca57772528891b36139cfa0fb4ce08ac5c8946b9875bc9f06088fc303d2dc5f493b6c9b1a3fc528df84a5f201788bbe9c51fd2c76d31ee5c4c4288df31eeee84dfbdf5dcd2f460bcaab9fd1d0118d4755cc1accb09fcf59867eeb7f90233ea92e8ca4d5b7799fa5d612d6caaf79f90630c134e6aa1fefaf16ac293dcf52e2719c070a001c6f52c621c67ce345352e2fc8ad3ac2968e7bc52a75181a64c99cd48fca4010296f88404cdf56001b41ce1a5e005e5387e872d88ec39667fc555b828c4096bd9d9d8b2", 0xe9}, {&(0x7f00000005c0)="1088a0b6e08eab7d6666dcdd67aabeaa023813624cf5ff4be605d7df2105f631990c", 0x22}, {&(0x7f0000000600)="bc396bf758455056df890110a58df8dae5", 0x11}, {&(0x7f00000007c0)="1099b081193661e39707afd738122ce798181a4adfc6688331890f92f770f4cb7a292ba42c68a898b93a49641c351a968826a8344e857aca98b2787df1c9e996be4e77e7ab29080ad7779d44707dc67324f7b4aa4e2d8518503e3e4bc7242b22d1ca2a3351e0b64408684ea035c8e477b40c1c6d91ca295fac4eb576c1c714b876aceb53b2191b541f38140ee6dbe3be11cb5606a6c1b0cad3b97647ab2abdcc36b44f60edc4dd127fbcb31aaa0ee9d6a4195ab6b663b8c5826dbfe219ab5712bc4adb1886f5e5a3424737685c0c9b4c4a1ea9b26029f6fe6e98a18a9f1e8a56ee68db3d841dfed1613db01fbcc355a0cf39dee27464b3c63e6e8ece62f677f1acdf620857cfeac53a089267e5d5c55a28ecf9bcf1679b6a4eda9c5be45afbffb143727d3287b3b7a23d38f0ed2447c4848cbc019ca9e821caa35fb2e81f3b7cc1fa74cde292275335d09a79c3c693506a196f0c1c7d7e6a61c05a060ec7f4ec9bae13ebbdea2895cd1e46eba8506be5aa2d931b94dadde681352d4334ec91961bb05ea966db294a7634099f3ce099db25a79a479ff5a1fa860d2798eda4d1c091052b13b060bfcecbec8deca46dd789d633a9e8c8db7bd614b3a74603745b454d3d14b817e3cf62bc21fe22ef2dfac2b3ba44cd834989c299716f5128ccac9c133f4a0bcec8f72a51c07b9e1473cab3bfd6242ee4d59fa41dfa0bf91b61c45837c7bde2b069c4b47a5b5034af67dbb070330cebf59136698a8fc0ba2bee419f33009f23801477230a04ba2a0662c161db8faa1d3bdc89eccb048a2df0390b4c9c64adc2f7ce42f58a9db41ceb541793c112505356e4a3cce12daa80da1e43a4ea1a9b89427d601571109793183baf8d04b6f9f2b2266d5a1edcb13e5b9c1ce50ed5d1c0833d739621cb9a4a784f821abcc3e4ad2ee0a6c1fcefb2fa69257758299d8f4670a7ff797123529816b417f6b845b07a4036790f0c0a385511cf90a8530067fbc87e20833e6253dc0fe8ec0f5169aaa58241437bb17298bfe903e6706f9f0df7e69e9ea8fbad80552c0c8bbe676945f1cd7f92cbe3c70827c8d13f01680e3712f2c1e71e61d115b50705376872917e7445692f4722393d6ae0077998fa4b4c93e1db3479b0c2f81dc6c73b8bbdddb3ff4d7612e6bcac8e5a4990b8b0cab7cc2e3b39adeb297b2446f145d9da867b472126ab948163196c16126245c472241aa82240a9ddd473959055a0796c91e3d78cf0dde8aeef0d6c7bee133a61d177332c7a65dd0f9757cd9f63a261a071cad76e696c5e3d39817d8369b4cb44143090c63f5534db91966875c1fd76e17298a9abc4ef126039cb2a61600ba0b3a4cb316d6468cc462e53f5e0a57cb43ad5e61cfcd5a565a1b96ca588c9a17e08bfb0131081ab8bb9b0ba12d49f83de0c1809e7adec889825b622456efafdcc1cc3937df6518c4d5eb771b4ad949f5b153411f6ffee6e98fcd10818192a634b84a6864a955815cbec68205c2c98dac92d533e19d0dd6b9ecdea1f1320ea73634eca08e981c744a164a7384aa3cd13447786efe6b104dadecbe6357540a7b59e10a2445df78beb5f0edcb44d1b7eed13b5f87e10103959aa336d952ec07e963fad6d300758a06801f3b3aa3873ddaf7516f07c946e080352a8142185bdd86eeffd051f8ccf3cab61e9dbed9d68d780478d566584e7abe22216083c17439405a160fc0d22ec2925048471d05f439c1099a56a9ebee393d2c2ea23df91517dc161c310a7a6a039493c876c54b61ed74bbb3bcba45d41f1276d87a962b57bfa16dc07a9a7505855ec01094808bb5c2212f38462740ebd2dcb9c5a68efc6c57d2448ae169c0cbf7d0ef1d75f25e5270216739dee512bccd69b917d5e01e046307e4a38cd6136ff6e7b13997a6a75402d7531cbb810f9b6005a10852cb05f12750d15ac86bd02d973ecf83f9dfcea7c45de1e10a220b9a360bb3281481a1f2e22f8860e014412f2eb6dd25af565b2f588b921fd8a203054cfb34ebe9f42048104965f40cebdabd0a7b6ef7b2439687603b24876784c41b37ad12dc5034704afcb1c44b9b2700da72754c0f7899dcc6ce30d713343d49912ca12d4f491dd4c4d57d7716a1c9dca384971e25a41f07ef4f4de62d38de7150f0c98867608ead71fd2a28fd06c5c6b9d972602ff1e11d8777870f84ea053531447674c3ad572691b67c3c5985094e17226f912caae5dd06c41325f1e943398e265e3b0ab4305adaec9801f334d0162ac786155423771d680ca0e8a6242b50e228707a0c9bcc0d9703ef992f55f35074b434eb8c8f7e05df4b2d0234abe7dbdf0470be8ca48b51514e09163c596ecb611b92ca79ba2a547b708eb26d94d1a14ef5d893bbd7a09869d68eb08ec0673a1f8997017f6f6e9e5d295480ee62fb46eafaa8681d5b199790f2ca1c2ebbbd644cd9ed9e00a7a5162829ddfd23d38c2814600d2882d8db85e4b0223bbde634a2c3a7acb05879fca502afccced62e6b10cd33b9b1af77cc6ad5762e3dc67f31ab651bb6d816164a653aea01a2fe636f0441680ba3c0b3b35546c7c1ad0f55cc23f7d394cebbe0b34b5052b00682f370e777545e9e435aa3faf4d2ea3f56fc53bd3d12ba16a1dfff92484fa85bbebd7aa4254d4e6e9fea4ededd097a616340a920d630f8910e9d2771cfb82327ef4696df33417dfa920b8bea5da18fa7e39e6cb3c3bff39e248ef2edd172b532e5116c2b98cad4ba9059d82eb77365324f33a831a836b7122b628f049b3129ab7c0fd002aa252aaf643a656fc5adfaaf595a4318ee19ca3c61ed19b16bfee4ab2650c747aa488d15b2824997f857a23edd4814ab56cb4d32c7e9240ade705242045fe949ffbeec98aa5c9a44c54c15c0dbb1f9181b4892a173e30e43db009ab5a54b334cd3023e83385a868551ecbe5d3e15743976c6a40b1c6a908a1387aed4e14c9f5d5098f0d417d9b57820cdc9d6a84cd0146c1e7274426262934a32b90778356db4ae069b1177207d619f726895527474248da7ad6e508107c64664090f4b6875ea755cb5bc4e65c3b9384be48cacf884be0192e29aa577e882ae70c7819136d7fada21eafe4254d9cdca6984a867b53796f32ee028de1777302b686c0b666a949a6a28a0c3bdf76016087ada48f17f5044b6df10a72ed23034aaf2a02f4b3126122d5ec856d0ed4e7b0f650510f4851c28633d12f6dfdce6c518771a1fd3aef963912f6ef91a78719dd16d30d1126b99f8c396c05bf818eae76e19dd0433c708d412c3a0a00c8d8a9f36952cc97152bf7016c0a03f2add60bebf3fe9e220ba4d88a983ef36e3e7e0853a45b35cbb25ff63050d59595e048ec827ed9caff5136d9d4825c011ec0edd381978607f86a9d0c2c064deb137b195a85b911566f8c188c58c894b6e2213e65e9e08111855079c6dce1a1b71acf1b1241bf84267801dd00c12503125e54972dd5598a01e7de4e4050d94388cce41f7120d62b54355e2695cd4318d80131ce65439a5c9cf5c1f9b7acb52b9bf50d5793fce3b92b99f985e838624c9a2b2aacc9de63aaa93cdb7f4f9c210ecfcd5c3cb1ffdc497ea3260b0b4f337f7b350a80bae487db959537bd0a19a48319a5b998d1ccefb08acd0e26e342dee3634966d78b09558c9365e86efe6eddd00029d264ee69e2b40431a38aa59c8a3d652c174755916617eb73a4555a443e6c6b71017e2cef58c97b7ac946fef21e1a603a5e84954143dbe6861fe3b78d5dad74404ea42a848a43e15cac9e6b3d4fee8170bce46f79509ee438c7cfb0f8c308467d8b29e09d63cdcf254f464ed06befe235b5279d1f1e5defab450324c1a84c4738847ecbd001ea01843db99920ba8a5bfbd4bb38684760817c7da06e70471afde111ae33cb842a51527c1fa00c7811f0815248eb17bb2b84fb22446502668cf6f2a9b3d6b0eadbc3bca95a2cf1bbd0f3f51af919589827d0faf69f7b3d3e360c5dac7d83706a4891fc3e8063aca4b0bef81cbaf859799440a2c312725033e856516d6a223a33588147774990d45b623d0ffdb914e5b934c34d836611d96eb9aa63fa8398dd02071425623a8f6c3b2dfd12f91a5b43c266daa23469d2385e24dae1c90dfa76df131f23f7ac24e4c868ae3d18f89893d656daf788a4a0d74853e12e47c8cf6277efc1f0dd9f5a4836b67685fc937d84f89899818445779fa60184c37ea2a91cf8e85d40e11fd7a71ea96b072558ff635709e26c224ae6a06ea69ed6142e40f1799ed00d9409f83605fefc1e1f7698134c95afa2cc43fb82ae302bbf9c6489aa9ce2a486d823058b0579ea4b89d7892f3becc2a20beaaa0535439dd7148c1aef84ec5d2e218c6dbe5516373e2c12c11dcc063d52f5f52d19d83fa6cb4fafb7db13a52e3927ab4ad59cce1480fd364885e4dd955cc6c7e6b1e32a309a4bafb9f02f38d7ea588eb54458eaeeb4e4b56820b8989c4be36c5434f054d3b6aacbe64bf44d33e8c917acb11bc26e40b95417500372780791f61b02b4c89180a107617b48db887e822d412a15ae7ff8759c5935796362654637e498b5a12777042883d64e741362c7823896b9063be34713e3edf7df6f7c2399ad355593eab9ac50dd89a639658e0a8d87368ef0175aba84a891905ed797dd4402bc3f4c7c8848ff13fbe11bbaffe91a1367719165e1e73983a8088b8eea8afde5add74db16fc955a78a193d71005ca50b6590903f71924df561500568dacf90fdb5d953f848ec5fdd45471e59ba729602a62ac8c1f8143bc7730798a0517e8caeb16193c0bd34d3e73361a8993fb6f2b8a182d6204b9465075118ff33ce89d4ccf37b65479b326825d2684994dacc4719f9e4af4def71a3245fe035eff7fa3c67e09a7113dbaadc8f4aa984b9f05121ca7665f2d78f3ab5ec1baf0b280be59307afe4c011797c0e795b3c8e88c5a0d5a41fc6b2b42191606c463c281747cc9abb97ba93e704f1428ac30016026628487e759e03d002b245e4b4e08130ee32ab65cf89701e5e238ae62080524eb436378d3872b6d1781cc5840c947a9d3f4560bab968f554e38391557c9065cc700962a504574355d7c8c8b8ff94fca9934a43457a0c2f67549fd23e6e002013fce4c8c602b3d67117be857329dbf7c025fd6e18b0d656885d5d9ee56356ab1e79748317b32a4cdf4994bd03231f234aa52a61f8eee51fae34d7ae558b3d752e545af793220ab2a374adf385f2d8a69c89d0fa60f2388b7b9d9f297f37050e6e16a3451204aeaef21012f36274283ee07fb837d3ada1958d233ef3a61b5486f6819a9ad8609ad275f62fe42e32f3d8da6b32f50994749a685fec78ab60937011e15f794cd65928d3a15908928d35791e945d444a333d3083710a14c12c8f6800b21c73d67b7e096994fb7cbf6083e2b894ec1bd042da9a2ed5a19f9cd280a8dd65c27df673c0a4d99bf7677e4d5b00e1ef0ab797fa9741fd0128a5525f38fa8bb421d27ad46a238922d84864cfcdd7b8f141e684064f305eba16d281544596f7a94011d58a423c377097e146edeee495a8775931ef00dcbca89e3c481d609023a74a35c6887e25904081cd10a591a650fde458ac6c7502fb90d38b38cd1031600e20d2a08bbaf9848fd8669c86d0a55feda351f774986e6c27e4fa26c31cc27d967271d95584c1e021884545be1b87558055668e53c5e16ea75e54b7977c88b3a6b34beeee44c189da0210d88c9583670b1dc759e6486c047e7de8533c12ee6a6fb527baaf2515bfbd27f6307038b773e546", 0x1000}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="e846eec1ea983162f17fe8e0b086e944eb9362a7c173ae1ef8f8dd3346d0a8b0f74962932315bb9e6d9f003c160e00a1916b35fb698859a783fe9f3e435e21e9c35405e4b6543471b3", 0x49}, {&(0x7f0000002840)="a5fc841bb70a7510c1be4ebb43ce8b7929bd2a32647f26d231fcc007d5fe1ea34124c0688834d5e448c249d31eb93d94f8eddc952d18568e47faa43d5975602964e547e34179c1", 0x47}, {&(0x7f00000028c0)="ce75ef84ab53c8946749259ce8941a5d", 0x10}, {&(0x7f0000002900)="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", 0xfc}], 0xa, &(0x7f0000004880)=[@tclass={{0x14, 0x29, 0x43, 0x6}}, @rthdrdstopts={{0x110, 0x29, 0x37, {0x32, 0x1e, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0x93, 0xd9, "e4db3fe2c19fc2ac5f9062f22a24348915e3b38ac914a9ec3e4b4cbb11d98af9eae07eb9d758efa3bc24e78e5581c0c62a552369092f7b18766e974783503c0d095bed1129ed08fdc543400f40eac314ffa82f91f953dc27ba07d7ff3a0545ba2f66fdb8ab8873d0db024f9309da141ec48b3ffe337cab447e5f7dbaaab3578c7f18b7f6f7271b62075601c10f25d0a8199f35361dae08fd447866cf7ba94a4b9d9c169039e9423deb3552d3af7821c3a3da4488df775740ba8ac3a18e3d704a6955c7c6590ad6bf2bb4b6427b3c488738d02d3ba9496377f0"}, @calipso={0x7, 0x10, {0x2, 0x2, 0x2, 0x8, [0x3f]}}, @enc_lim={0x4, 0x1, 0xa8}]}}}, @hopopts={{0x110, 0x29, 0x36, {0x58, 0x1e, '\x00', [@generic={0x40, 0x18, "5dde57c823890915a330949f53524b2e63f14c2ec7dd9bf6"}, @calipso={0x7, 0x58, {0x3, 0x14, 0xff, 0xad0, [0x80000000, 0x2, 0x100000000, 0x1, 0x80, 0x1, 0x8, 0x401, 0x20, 0xfff]}}, @generic={0x7, 0x75, "4fad36b52f16b7f8ed56b7a758b18eac5fb9754e626b31fb53c90b3c65d48019962cfe21a8348bf5cf63979f7fbac1a9925767e530f6de9df9356d3153ef430399bc7a42be904084276d3210cc187e7dd450d2f500bfa88fe0c6df59cdd4f9603763acb76b897041873b36f7309136c1cfb2066e3b"}, @pad1, @pad1]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x0, 0x0, 0x2}}}], 0x250}}, {{&(0x7f0000002d40)={0xa, 0x400, 0xdf93, @local, 0x8001}, 0x1c, &(0x7f0000002f80)}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002fc0)="797fa2ef2b6f9447e03ca2e096e3b2462a28dfdbb150b779919ddf5e1e9b9e5b34810918721b2dfbf49ec77cf6eb1a03443f3f97448cc62b92f45a772a2370ceedfb89ceb3d8bddcdcb876344f8715f386013c6848e9f807950b7403d243d3c79b11c4082f4793db9f49411e0436205134e6f805328221722fa57f48e2399337e9ed7bd80f5dee899765ace0f9193c5cf01ee9dc4cf0546e7731d44a56564245e867678e919e1644e110241cbdf45709bff46300465e69f2c5", 0xb9}, {&(0x7f0000003080)="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", 0x1000}, {&(0x7f0000004080)="97251aedd691fac18d5c4521aa759ae140540a09a6a4b7526da0367b6c8d463fdf8ef5c1214ba5f62318bd052c754814b6dd6de1d65d9d11057841f5b2e6fbf4184841f64159964b60f4334e4ed9810e0159c1097d555eb1f51d05782747e8abd94a2f9a72b54b7608638b31a93e17560190344ce7ffe241759af18560f77a005481eab00fddce71e29880e1b11b68939d315adacac605016c3980427c6396f633eb1d38e61b1ad3e030c2ab164e43d1edd1a91bcc09b40cdc1314401567347c857489ffb4bdcc83dfa68b55f020a16351737ab34b8b01a59680a6", 0xdb}, {&(0x7f0000002d80)="6365d7bd23f5849fd320d84ae166946daa644579178f65c6f322c0ac4701e39df7b7b263885c44aac50f545d358bf18f56dc20f02468a690e216", 0x3a}], 0x4, &(0x7f00000041c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x4}}}, @hopopts={{0x228, 0x29, 0x36, {0x2f, 0x41, '\x00', [@generic={0x3, 0xa0, "6e20c9d53e722c399acbd1242970be15cdad345278e4aabdbc6d83a6dc945b3f93051e8c057b1cb4b0a47ccad1fbf7096759e2b0e59d6ff47a87f2065448c9b3b15acf951e8094e889bb288788c5b1390effc17ba66b7933663fb1f53dda2b61023a1d62f829bf888231f13d82e0f1a93e2e7a178a6bb2089ad13d934bfc974b50e22a1ce2139e00b4d802837ead25d8709feb8426bebc389cb86dfd5b36a217"}, @enc_lim={0x4, 0x1, 0x5}, @generic={0x40, 0x32, "55f0d9ca3b1523a96995d3f0afb2d2b51c04f4c7f527232624ad32acfa0ff34028ce7ebb90e67b0f79c725635ce7c5782e01"}, @jumbo={0xc2, 0x4, 0x6f39}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @pad1, @calipso={0x7, 0x20, {0x2, 0x6, 0xfc, 0x1, [0x9, 0x0, 0x6]}}, @ra={0x5, 0x2, 0x3ff}, @generic={0x0, 0xdf, "cf9352784025707343cc480f2abe238e590490e58e9e5e3a14ae3004ed473eae7e5fa8b2e192ee4a37d2210be087b0e79918b95fc0b78e5e6356420621c80e19701f2279a1dd71eb2e17739699794c81f8ae138d8c63f419389334dfef556fe133f8ccd37ed6ebfa4fe2e5cc852aa22e7527187d72d9f1586d9b87213ffbd1a32c292017395b1b06afce3cfc899fffb1ea82b36215a378995910af6e78409c678192517cdcfef45e6d2e29ed0b41aee1bc1bd85b8c1ce5b676aa126c2f87b2565670c35110837575b67d9dd25c1500ff271cde5d3c4763df10f7f4b27bc0e9"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8001}}], 0x258}}, {{&(0x7f0000004440)={0xa, 0x4e21, 0x535, @private2, 0x5}, 0x1c, &(0x7f0000004680)=[{&(0x7f0000004480)="280199cceed14a787f79a5f33702191285a0b0d59a6eedbe67f09b96931e4ad734e227c6db6ad11218b00fc6b2e358fd7f2c2c80784d01a8e442444be960f33e98626aeb7a443609ee7b55ef22e8a2871e57203a5a0b091f86afc29ece75e052533292ca69f41f1cb5682d6cc53c8d", 0x6f}, {&(0x7f0000004500)="31a6a2d4e45a5f55b0a9dcea952a06704ae36803d366f19c78f13c41057ad37772a89737c81f9973d0d35ccea7328ce745b358bd4948b2faae235723", 0x3c}, {&(0x7f0000004540)="a0c7f580ce87662e59f342ff365ce515a102c490194d9db795193993de5f1af9330f401b95f4a2df44dfd7ae63bf447296035b9a99d85906c16e1c7b67ceafe8ec351162c7e6ed70d6ce8905b18ac4b86e3f3f54b44ecff1521e8d472cb5c895699ac2351bf6334267ea430304933f447663b8db6e04467137077a337c2e3caa9da430c0f32f41640b4af96394f4a70db78aa017c62dd13b36", 0x99}, {&(0x7f0000004600)="59d3370be17195aa9dd38f0d7f61e38d8122b7364f5b0e8199ba887f2e61a431bdbf1825753d73521adbb9356ec8ee24549af0faf643526eb0ed547a81cf52864ed5c3417906e45cb484cb15042a0454305a3e0e085661fd0619fb1766464eaa47c8f61572b4cbdefbecbf6fcb7721fc49", 0x71}], 0x4}}, {{&(0x7f00000046c0)={0xa, 0x4e23, 0x10001, @mcast1, 0x401}, 0x1c, &(0x7f0000002f00)=[{&(0x7f0000004700)="dd0c77b82ba8a28780b7fd763530c0bcd5a3c22c729b830e9c497a9574df1cfa39601d445afb586598141e3d5e33", 0x2e}, {&(0x7f0000004740)="7a26404255409c5454b376eb", 0xc}, {&(0x7f0000004780)="d5ab0bc6bf8a1b16821e2acc3774e3f8116eacee2d7b6792fb61851702bbfd5244ed9d244a98d847687cb70a00fad0d3b4aa91d201d2fcc428c15423070305b73820c9fc38a5ad5f66f5165208b37299e6a693a857e624f67c6f", 0x5a}, {&(0x7f0000004800)="1ac4f5c27b94f4fa4c3c18dd232cf46945347ad27c521a1d2677bca07059d297becdb8b27a8d6e25ac64812992be72476af34cedf6b879952f42b06d07269faada0415c38b9a1c28a83c1dc0fe17a1279d383c5d8aec301302c665dbd4acd00a40f84d183244437cff35068f37f6bcd5975c3470e3864a30", 0x78}, {&(0x7f0000000500)="a895a89e145942b0d7b45ca64edf55f3ab2a16d1d067d81f3bf1a5c4690373d2505858940268b7e4868067ac46ca4ccb", 0x30}, {&(0x7f0000002e00)="1a6bed03181aa4283918b28f0669f6d102998bb9d28f2b5c8b1ea1c711091006ba3553a58a1a2462e85f903db916a86db4281a5be6daf8768e8278216271ba53281bbb569a0bae567800da9f8c9ead65fb8fdc75ba8a7960980db30d48efedbbd98f0ab5a49d0ebf0474f69fe9176adecdc049313b5d918c89acc4c4796701061423af37b8df8646e98889a78b16cffc63e29affd61811e843fbd1fac06cb86803ffd0d38daf9fa7704f459980d9c7bdf8b24acfef3bd26c1dbd2b03134e5ce96300c4fe639855fa8dc1ce31bef7454df0586bd2dc3f3a648fb10c61fda0bf016f14f7227b64eb9806134d945daa16b2c773", 0xf2}], 0x6, &(0x7f00000050c0)=[@hopopts={{0xe0, 0x29, 0x36, {0x6c, 0x19, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x81, 0x2, [0x598]}}, @generic={0x4a, 0x15, "68603be2451ad1b5a2f16b0c0409423834c604facf"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3f}, @generic={0x60, 0x7f, "4d96ffaaa81e355a5772c6dd35f95e7b525ae5fa8ebc8d23dfefccd8fd89ea81127dcccf80a73f827004ceaf258867b8ab9ca08ff5b5799368a0e4e84a220f17e2574073780478befb03dab3fcd089beb3a22fe2dbfca57d66c87c404d66285421ad882bc1a663ac1ecd7cfd4136f7d1f0b84003f444094432181dab7d322b"}, @ra={0x5, 0x2, 0x5ff}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x81}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hopopts={{0x80, 0x29, 0x36, {0x2c, 0xc, '\x00', [@pad1, @ra={0x5, 0x2, 0x5}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xe}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1f65}}, @hopopts={{0x70, 0x29, 0x36, {0x0, 0xa, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x20, {0x1, 0x6, 0x1e, 0x8001, [0x7, 0x2, 0x9]}}, @jumbo={0xc2, 0x4, 0x8}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x248}}], 0x6, 0x10) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x20010, r6, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000004d80)={0x8, 0x4, 0x100, 0x80, 0x3, "5393099796fa812067ba9abff4b077b4b79461", 0x2, 0x800}) fcntl$getownex(r4, 0x10, &(0x7f0000000040)) ftruncate(r0, 0xfffffffffffffffb) io_uring_enter(r1, 0x800012d, 0x4, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 04:48:20 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x30, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x48c00}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000280)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ffffff7f000000002e2f26696c65300019abc9044c92d7499d1a10a504d425419053e13983593e276cba599e53f1676f65e7b5235c414a23c9722e420734704bd279c258370b06064e49e2f70e09ede3eca18fab60f280d8aa2d0fd6bfb0ce93d78a74ad89df"]) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0), 0x4) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000240)=0x40) lsetxattr$trusted_overlay_opaque(&(0x7f00000002c0)='\x00', &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r3, &(0x7f0000000080), 0x14) mkdir(&(0x7f0000000140)='./file0\x00', 0x50) sendmmsg$sock(r3, &(0x7f00000021c0)=[{{0x0, 0x2303, 0x0}}], 0x324, 0x0) 04:48:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 04:48:20 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r2, r1, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r3, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x20, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}}, 0x0) 04:48:20 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:20 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:20 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 262.726412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 04:48:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) [ 262.784458] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. 04:48:20 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:20 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 262.797433] ieee802154 phy0 wpan0: encryption failed: -22 04:48:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 04:48:20 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x240042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0xe0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(r1, 0x3, 0x0, 0x5) ftruncate(r1, 0x209) recvmmsg$unix(r1, &(0x7f0000000800)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000440)=""/151, 0x97}], 0x2, &(0x7f0000000540)}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/175, 0xaf}, {&(0x7f0000000700)=""/146, 0x92}], 0x2}}], 0x2, 0x10040, &(0x7f0000000880)={0x77359400}) r2 = syz_open_dev$vcsu(&(0x7f0000000940), 0x1ff, 0xe0f94dbedc66a781) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x40, 0x25, 0x7d, 0x3f, 0x0, 0x3, 0x46, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x20ec, 0x1, 0x8001, 0x0, 0x9, 0xfffff9a5, 0x8, 0x0, 0x0, 0x0, 0x78fa}, 0x0, 0x7, r2, 0x3) write$rfkill(r1, &(0x7f00000001c0)={0x6, 0x1, 0x1}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='$\x00') lseek(r0, 0x9, 0x4) r4 = openat(r0, &(0x7f0000000040)='\x00', 0x658900, 0x48) openat(r4, &(0x7f0000000180)='./file0\x00', 0x48000, 0x40) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2000}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000200)={[0x7]}, 0x8) 04:48:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) [ 263.097811] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.114439] ieee802154 phy0 wpan0: encryption failed: -22 04:48:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:48:35 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x30, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x48c00}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000280)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ffffff7f000000002e2f26696c65300019abc9044c92d7499d1a10a504d425419053e13983593e276cba599e53f1676f65e7b5235c414a23c9722e420734704bd279c258370b06064e49e2f70e09ede3eca18fab60f280d8aa2d0fd6bfb0ce93d78a74ad89df"]) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0), 0x4) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000240)=0x40) lsetxattr$trusted_overlay_opaque(&(0x7f00000002c0)='\x00', &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r3, &(0x7f0000000080), 0x14) mkdir(&(0x7f0000000140)='./file0\x00', 0x50) sendmmsg$sock(r3, &(0x7f00000021c0)=[{{0x0, 0x2303, 0x0}}], 0x324, 0x0) 04:48:35 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 277.689057] Zero length message leads to an empty skb 04:48:35 executing program 6: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, 0x0) getsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_int(r3, 0x0, 0x22, &(0x7f0000000140), &(0x7f0000000280)=0x4) creat(0x0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x510c, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0xfb4e, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x93, &(0x7f0000000180)=""/147}, &(0x7f0000000240)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 04:48:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 04:48:35 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r2 = accept(r0, &(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0x80) connect$802154_dgram(r2, &(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x2}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x4, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x2303, 0x0}}], 0x324, 0x0) 04:48:35 executing program 2: keyctl$revoke(0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000100)=0x1000, 0x4) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="ae13e6b493b68176d1b6658a291aeac122a241bec02030b1a036859fd8586c858f8bbebdf20798095aa90a16f64a99a45e0bae", 0x33}, {&(0x7f00000002c0)="91c0e44358b5892de623964cb99f2479b2391fea3a32d65af645775fd63cd1ccd44b8a1a554bdc86d7f040645fc56df106b073c422e1174cbe75d6f7511fc5208cca8c265af3fbe7d3486cbe71c967b9eb38a339e7bf7f61dd17c9d4515d4ca776101c781c37995febb6f6c9823a6279a51c82159a67ed96a11b3689ad3e08e08cb22e81d00d026efb61081b62d5cad4b6a8f8c4a88e1347eeed9b135884aabbd2001c91d9f4ac84f9f91b6ecb63ddcf5e4cb4db14ff4825", 0xb8}, {&(0x7f0000000140)="85030e7e0799baab9df9bf7b12f85bdc52e8d100d82e0439bce8f13cdccb8c6e758e5c40784aac2297c349e1928fd92e53488d07ed3c07e6d3316e40f0c06c2530", 0x41}, {&(0x7f00000001c0)="c4b70d669a5ace00238ddfb19dc090ef9533af753ea5655852bdc09fcc11b699e368bd70d7c7a82b6ad82625125fc9af3e7a388eabd7788b5f6433f0c5", 0x3d}, {&(0x7f0000001680)="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", 0x430}, {&(0x7f0000001ac0)="2b5954f5b32a6d2ed16ea2970d72e77bab5f74227607d826e1fec42076b52fcccce7aa80e64d430c25772be67016e2c8b1dae852b59be45ccf55f76ddf04c5250310b729d3ff4ee690b7da3bd9bcfae547454ca9e733a0b9862f4866222f639c620f796ba75e14c1fbfa12992ac63d8a084f585540a70cfaea2f01cc2321ee61868d4a3db7241348fef47aabf16e99c300f7f43cf5c1114be133dee877a0ffde63baba943b69b315665cbc8ea688204f8164cfd8c749b58c717afd19121fd5b5325c2308f3dfb666194a4827f3a85ab7bb4d45f25e857c929043aca3aeaff3d2b2d3e8a0d2a11bb797a7c6971e581d48685e237946e576c7d4a62a4fa6914311c5bd45f1ce6fdded47156925bbfb350d67b527348af30296c8102f196b0dc7b969ffe70a6259915beb9c5f56c4e49aee0794338986c9db8d99c99970c9863421c92336c1ca0d132427c511250d58fe6b3e4fe934496c60e91b8962d4a375ea7f915ddb770a5c72735b61b62bb494970cd0779ba451f55516d17b9c3e0bc5bf8dd6845d8d4156829a6d494909818f92c2041b92477e28412051e5b78290e45284ee96adbd43d77871ce5576cc47b21ee55915b7cebc4a4b80141f0e6dcc1b00451fc8ba82bfa324c6e3dcee36c443a70564871f29e58eb966a23c6ed3e40f402e974cd095457d1afe7c9ea90df797903b88308dfb68b3a08ff1d44c20de8892f461c1f3e4cc0ca7aa89d6b09bb6d0f0e7edb225be8827d654c75c0e912cec8651ff9e8ea4e0933ccca2f88e8f05aba05dd630bdfc32c7711e04047fa886257d4e38b420dc87ad8c16f76a5af4439104d569f9191eddd219309f9ca0da17372d2ac492459d5eb69a3258be216f468af096df067f527ee38253711f812de0e46064f47bf782f194027a8dfc620d54ee8e7167bed6132825b351ef65b7290d46b496d2bb456547cc0fd2d72b21913e8ac999ca3a3f95f0e391ffa016bc99fcab4e81f4d3805f2cd00c477a27b839330aa60995771efa29cc9e0ef5e4a81257b2a52e93afc4d64df8d7b75a1ce760417ed341258b88c55657c9fb315b8721adf675f4f543c4c9641cc906ecad62f2a8fed813583199bb2d8198192486f0c3bb8c85234410bb199d3e8ef09e0f83013987a3429f4591ec2a5c25cd0f4f9b3c3ef87e5331bfd0909d4e7e09c5cb9b9d01a36de6ac5c2d67c2fd7460bc22ba008687a2ca92afeae88ebbbf614609c25bd64d4594dfebc7d090614d634288d78c7d0d435995c610e2ab0f3f6ef0d17646117bd267f928047e4bcd229c44276d2b93880f57959e80a1203c4ada17018bc4810cb1f3e6bcef8fd2a7b62a5b3affc406290a5bf6a5b24af16257ec605741702d94b81ff89077d25581e7dec31665c3fef3987c8df3045f51ab660c583fee2aa1ea75aa4926f742ff8e18289d119e77449302c1d7d349cb9dcfc89751a828cfd3ccdccf09ac118113b09cde25fa1b2f0ea844f7dc12b3595e51487bf613bcb4076292eaaa633aa0a757a5312c0de2671079b53b8e6fdbd769445aa26bb95c93d3cf330683bfbb39443dde70dd11eb79269397cfa7a040fa746aa8fd376dbe70d0766f907db76d7310640f86bd549aee475c9f45336d90a763cc2ef05bd117dc371d6b1a8a53c343a91d2e44726f7afd6b8fc90a1c1a058c2cd7e319069e1cb1bd985d7950aebd5e733a6de977b7dba3fcae3676852b594e466cda0ee87daa464ff6c0ea6175f8312d74b6c90ce28422548df9ac9af012696757fc74da2523b9b28c65ff3b64062d8504fd56720f68fc70568048668f8b3e0f0f60f054bea3dd020e2dccfc16683aaf2ecf69ad0d41247a214ed0a28a0b3e5220f71605de334e3ab5b1da6ffa0ddd26fc603d609f261367ad9025996f3a87997f0fff4d146d24e5e3bbdac61735312e33408cfdf2db0a8a49c3294948881f560d44ca1e40049378fea7f000415b6e7c0d84cd84273179fd569ab4a138d00bb19f55ad964156d376eb9f3e8bc459ba04889a3e3ff70d55d5b5709cda5ae360912826f30f0e0d7ba1d97576664a81c78aa038a03bc09ea2395f62ef283a974b1a339cb3f23913b2f0414316624dfbe9af93d01c96c0092753925055b17257a3406de2a69a8228969e27f5f2d49f6e5e3689f4409b4851b741c1e3fb9dbc052769cfdf1557fdd4ea0822496605551e5de5c639bc2a5483a9070d692372ae61599c061b30c0ef7e6fb932404761195c61bf39feba2d6aa23142d2313fcd745a5e888c09b97c4ec9c8fddd57da4b90b23a16b1a8ac11ec8bb2b8e8a592ae10e3d201f7cb913526c1aed76618ccd55bc99cd0f3ec6ac43970133cbdf58402b49bb9c0c4887ae140dc39dc8f404518dbd8786257d082bb78a8674d2b262eae669cc3fe5f2a05f79b8ae12409bcf45b9594279e70990405fa88340f39a81d17a744f532329e700dfa316f19a8f0dfa795ada8b029ba59088d285a0e90877683f2f45eb6dd842beead9d4145beaddaa974b501c16eb15516148094256731120cda2b9a3619a2fadfb7fa0e4f9f3a34aa5a1b7961d7b956cd33a0d0993f98cf925ea464cac0d52239d49bd2a0c7f7cb996adf8fce53cf27124412d2fdb2dfdb377382c3b8bbadd9e0512454bea8d16da3d3a1df6386e37bc8e54a391e7e26bd6ad7cfc24976a2fd6bb4ca8dc1e5b5a2a9164a9201d160789f774b3cd02537bb57e1991bbcc70af148f788aac8ee97657e1092c1b62001e919075444e66db5dab4526371f872561e96299d8e4b0806ed45e397caf73fec28f8d2a6142be832063ce3b5ea35e23ab7450a8e0132b629a95f7215c002b6ff23983f732ec5b35c911778a15f4705d7509a5e609e45aecf123bddadf9e7501cc323fc0373f7b65b88358cd5472ae862c0642490216d9ade985c8ea1b63b6fbadeba7e5a336eb28f636e41a535adfd8aac8fe0e59112dc55fb1c8d4854f89adc6be243fcee65f01da93df10e20fcb1fa6aaa3bdbb0f9f2a4b37ba6d2b94cadfc492231086616a2a36f2aa8fa0bae429b3a789ccf535c68e52b138835b4888333cc51ef5ed19a2b0927510a70e7991c0121681de6046e116c98d5b3425854bb82375ceb29cb7dfa2d65d9d86f1a4ec0d97e38e2cf52223e47016b668d7923a01f680a21dc5577f09bb4fd28b599c1c2d1214eba817d7a44b50861067f85dd214dfef0b61dcbbe283a2c5efa2cd5848b30e164747850bd06f9746deff104b7188792c943c6adc96cdc7d78d8a1ac581256145faddd287cb3aab61dc9b473b7c4ed68bbec589f5a15b8f53fa084d3e8dadfc8d9eced73dc5f9137f81ce9565e67579339b83af4219953d9ed11ecfe317cc6cb19808441ad13cbc61df3f3cf8fad06117f2acf00182b05b18da74109d3efa7dc011c40580551d64eca45225ce26899686d186d6892f5377789b8ec00755da56da1ecc1fe9892f6a39130993e3b694314667bf0e3b64deda40c5877fb1402946288803fe8734f67d0387ab8d2a1313ba263831ceed148fcb1d83a28d7f0c59d8b1dd5af9d3b2c9344cb48bbb66b223b709899f651a3b1ff0ce9fa213b4de71395f67861e5b9568db93cf0bbe3f686754ae8b9b95fbd72e1adc7d061e9760d361ebc66d211b6d059226010a298eb443b4fe605c10910afbae699d2b4ea56f27b33724aed8b5683bf17675561868ae8fe77", 0xa38}], 0x6}}], 0x1, 0x0) 04:48:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100)={0x8e7}) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x2009c0, 0x10) syz_open_dev$mouse(&(0x7f0000000200), 0x10001, 0x74000) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x7, 0x26, 0x80, 0x5, 0x0, 0xca4, 0x91d90, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x208, 0xad1a, 0x760, 0x8, 0x5, 0x200, 0x5, 0x0, 0x7fff, 0x0, 0x1}, 0xffffffffffffffff, 0xf, r1, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x44100, 0x104) 04:48:35 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 04:48:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 04:48:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:48:35 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:35 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x640c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400000, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x20, 0xbe, 0xf0, 0x1, 0x0, 0x9, 0x41200, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x100, 0xa5, 0x3f, 0x3, 0xfffffffffffffffd, 0x3, 0xffff, 0x0, 0x7ff, 0x0, 0x5}, r0, 0xd, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000e, 0x30, 0xffffffffffffffff, 0x8000000) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000040)=0x20, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_setup(0x2a7b, &(0x7f0000000340)={0x0, 0x2000000, 0x4, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000001a2344346e04c95e9589282212bd1e9d6642adb58b32821e4af45d2ab7f902ddea9755b18aa680e7c106009e78566078ba9b02b02d1a2820b3076bb2e61d13892c02eaf8482a6755498fd90fda973b81eb6ee65cf3fd9ff12701df018069ebb75b606a57453040c7883255fa7c3fcd1775365c87ec99eb41defe8e923d829b2cd777def17bf903923a0d40c02882fee740234af3ca6e6c71df8892754b5ce4a68653e1663f758b3a0342115a92345b6f48d8a66721716a30c327bc9e4ec672d6cb6641a1b706caf6eb8cfca71a", @ANYRES16=0x0, @ANYBLOB="000827bd7000fddbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0700006e000000040092d5ecbd2b3d1911fa7cf6cf2fd7544b0c4dbb2db482bf0008"], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x240000d0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) 04:48:35 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @pid}]}]}, 0x28}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x24040040) 04:48:48 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 04:48:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:48:48 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = fork() r2 = clone3(&(0x7f00000014c0)={0x218900100, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000340), {0x32}, &(0x7f00000004c0)=""/4096, 0x1000, &(0x7f0000000380)=""/39, &(0x7f00000003c0)=[r1], 0x1, {r0}}, 0x58) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0xcb, 0x3, 0x9, 0x0, 0x401, 0x24, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x100000001, 0x9086, 0x3, 0x8, 0xe73a, 0x9, 0x0, 0x6, 0x0, 0x7}, r2, 0x1, r3, 0x3) 04:48:48 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000080)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x123\xbffR\x92\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r3, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) openat(r4, &(0x7f0000000000)='./file0\x00', 0x404000, 0x42) fork() syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x4, 0x3, 0x1}, 0x106) 04:48:48 executing program 2: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r3, 0x19520}, {r4, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x5, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @loopback}, 0x142}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x8, 0x3) sendfile(r1, r5, &(0x7f0000000140)=0x3fd, 0x1) lseek(r2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000000000/0x4000)=nil, &(0x7f000027e000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000413000/0x3000)=nil, &(0x7f00007e7000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000077f000/0x4000)=nil, &(0x7f00006d2000/0x3000)=nil, &(0x7f0000448000/0x3000)=nil, &(0x7f00006a7000/0x4000)=nil, &(0x7f00000001c0)="c3173e47a30bc6bef94a5ce14670c4db316e7e6093619269d1c67140df49acd9ad", 0x21, r1}, 0x68) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r2, 0x0) sendfile(r2, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 04:48:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 04:48:48 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x30, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x48c00}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000280)=0x2, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ffffff7f000000002e2f26696c65300019abc9044c92d7499d1a10a504d425419053e13983593e276cba599e53f1676f65e7b5235c414a23c9722e420734704bd279c258370b06064e49e2f70e09ede3eca18fab60f280d8aa2d0fd6bfb0ce93d78a74ad89df"]) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000000c0), 0x4) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000240)=0x40) lsetxattr$trusted_overlay_opaque(&(0x7f00000002c0)='\x00', &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r3, &(0x7f0000000080), 0x14) mkdir(&(0x7f0000000140)='./file0\x00', 0x50) sendmmsg$sock(r3, &(0x7f00000021c0)=[{{0x0, 0x2303, 0x0}}], 0x324, 0x0) 04:48:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 04:48:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 04:48:48 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x0, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:48 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000080)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x123\xbffR\x92\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r3, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) openat(r4, &(0x7f0000000000)='./file0\x00', 0x404000, 0x42) fork() syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x4, 0x3, 0x1}, 0x106) 04:48:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 04:48:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x0, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:48:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 04:48:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 04:48:48 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000080)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x123\xbffR\x92\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r3, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) openat(r4, &(0x7f0000000000)='./file0\x00', 0x404000, 0x42) fork() syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x4, 0x3, 0x1}, 0x106) 04:48:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffd}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) lseek(r1, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r6, r5, 0x0) copy_file_range(r4, 0x0, r6, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) setsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f00000005c0)="2fff095dacb98e3421c904eb136026e1f55965258a62657d59a73334826cd346ffac6738b578cdd2391f359b5bf911ed2bcbc245d58f3784e0dd5b8379daa7be81519876eb40891e83f9f84e7ff800c742d50f044bf9b9aed3ef06f2c3d3b9092b79d416e257c1da75277fe86af1b3e833e9b501e742919546e7769a0bdbe7a188159d6021", 0x85) 04:48:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x0, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 290.879603] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 04:48:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) [ 291.184553] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.280603] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.300713] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.357564] ieee802154 phy0 wpan0: encryption failed: -22 04:49:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f00000000000004002000", 0x1e, 0x1500}, {0x0}, {0x0}, {&(0x7f0000012000)}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}, {&(0x7f0000012500)}], 0x0, &(0x7f0000012a00)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000010000000000b50a07000000000008000000ac13f3b89a938900c5aee59421c91ec2aa22a010b36435cb16ad5db630bff7ba64b6f854", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x2c, 0x2) getgid() 04:49:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 04:49:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:49:05 executing program 2: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/221, 0xdd) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000080)={[{@shortname_winnt}]}) 04:49:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:05 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x202, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x5, 0x4, 0x1, 0x4, 0x0, 0x4, 0xc0842, 0x16, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x100, 0x6dd, 0x8392, 0x9, 0x4, 0x401, 0x5, 0x0, 0x8, 0x0, 0x9}, r0, 0x5, r1, 0x1) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) socket$packet(0x11, 0x2, 0x300) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c, 0x0) accept$inet6(r5, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, &(0x7f00000003c0)=0x1c) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mq_open(&(0x7f0000000180)='{\x00', 0x40, 0x151, &(0x7f00000001c0)={0xb, 0x5, 0xffffffffffff7ffd, 0x4}) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 04:49:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 04:49:05 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000080)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x123\xbffR\x92\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r3, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) openat(r4, &(0x7f0000000000)='./file0\x00', 0x404000, 0x42) fork() syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x4, 0x3, 0x1}, 0x106) [ 307.837367] loop4: detected capacity change from 0 to 524288 [ 307.854308] loop2: detected capacity change from 0 to 512 [ 307.880928] FAT-fs (loop2): Directory bread(block 5) failed [ 307.898793] FAT-fs (loop2): Directory bread(block 6) failed [ 307.910748] FAT-fs (loop2): Directory bread(block 7) failed 04:49:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) [ 307.919233] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 307.923951] FAT-fs (loop2): Directory bread(block 8) failed 04:49:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:49:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 04:49:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000e0f4655fe0f4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000ab7a0e3e026c4410ac9856e86774ba11010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000ddf4655fe0f4655fe0f4655f00000000000004002000", 0x1e, 0x1500}, {0x0}, {0x0}, {&(0x7f0000012000)}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}, {&(0x7f0000012500)}], 0x0, &(0x7f0000012a00)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02000000010000000000b50a07000000000008000000ac13f3b89a938900c5aee59421c91ec2aa22a010b36435cb16ad5db630bff7ba64b6f854", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x2c, 0x2) getgid() [ 308.111158] loop4: detected capacity change from 0 to 524288 [ 308.159655] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 04:49:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:22 executing program 1: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x47}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x90) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x17, "77004a6efdff00"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0/file0\x00'}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r3 = socket$inet(0x2, 0xa, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1c80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x430, 0x0, 0x0, 0x0, 0x0, 0x876}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r1, 0x0) 04:49:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:49:22 executing program 4: recvmsg$unix(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000000c0), 0x6e, &(0x7f00000019c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/100, 0x64}, {&(0x7f0000001740)=""/146, 0x92}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f0000001800)=""/253, 0xfd}, {&(0x7f0000001900)=""/168, 0xa8}, {&(0x7f0000000400)=""/37, 0x25}], 0x8, &(0x7f0000001a40)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000002c0)={0x40, 0x2, 0xfffffaf2, 0x6, 0xffffffff, 0x40}) ioprio_set$pid(0x0, 0x0, 0x4007) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0xde, 0xff, 0x6, 0x6, 0x0, 0x1ff, 0x900, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000180), 0xa}, 0x110, 0xef90, 0xb81, 0x4, 0xb5, 0x6, 0x8, 0x0, 0x338a}, 0x0, 0xc, r1, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80100002f0010002abd7000fbdbdf250c000000ab000080a925b39ad44cde8b3c9996baefe8def1320018fa915ac4b09a4aa10a28f1e7967cfefe44e1dae6f58677b6c89ffe8555d07fba0facebcef271382d6cf498a599f347513bbd252afc571cefe561fe162feaa133d3cab3182f37afb2ac264fd5545e57f5f2a24170f0e98287633320a4c0518b184e034b2efd9c7b01cbfae3801cc09516cdf73adb3b7b8752717cf72b02da004507b16da31bc75bacce95b154d88c3ee65173282a0008005600", @ANYRES32=0xee00, @ANYBLOB="04007e00ec005f00e2244d2ae6f692fa987a5086a3053ac84f72faef1dddd58e49a3e8e423d896188123a416b2298ab0c3cffb4db7b4976d5e8368e5148d9b5a42ab8a51a8b600cca6146b46ae3565f6e26d72b8cf044eae4bd15ed3547efa55d12b89c37c45b6e97f2d6a8c8589303b8db0a2f3cd7633c36ebddf49bc018f5b41f27a839ea4ef4bedebc93dfdf300bddbdbc73a5769174f80774859675e33a2a7c823721edc0004e2a56ffdc35dc0a7b5f5e7f136fe28fab83dcc4db100fde2d377698b0ef3c360cb4ec71b33e2cb38379f57c6d7ba40978b16b3775a8763c0700e04ae671225000000000000000000"], 0x1b8}, 0x1, 0x0, 0x0, 0x4080850}, 0x27d42afe833f9a99) syz_io_uring_setup(0x21, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x12e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000080)=r3, 0x1) capset(&(0x7f0000001ac0)={0x20080522, r0}, &(0x7f0000001b00)={0x988b, 0x3f, 0x9a2, 0x1a0, 0x4d, 0x6de}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002ec0)=0x20, 0x4) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_tables_targets\x00') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000003c0)=0x492, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@remote, @local}, &(0x7f0000000200)=0x8) 04:49:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:49:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 04:49:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) getresgid(0x0, 0x0, &(0x7f0000000200)) r4 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x361c00) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0xd7a}, 0x0, 0x0, 0x9, 0x6, 0x8, 0x1, 0x1, 0xff, 0xee}) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x100000001) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x8, 0x1) fallocate(r2, 0x0, 0x0, 0x8000) syz_io_uring_setup(0x20bc, &(0x7f0000000440)={0x0, 0x7264, 0x8, 0x0, 0x19, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) r7 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000400)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r10}}, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000180)={0x3ff, 0x5, 0x6}) 04:49:22 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000080)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x123\xbffR\x92\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r3, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) openat(r4, &(0x7f0000000000)='./file0\x00', 0x404000, 0x42) fork() syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) [ 324.098577] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 04:49:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 04:49:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301}, 0x14}}, 0x0) 04:49:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x0, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:49:22 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000080)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x123\xbffR\x92\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r3, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) openat(r4, &(0x7f0000000000)='./file0\x00', 0x404000, 0x42) fork() syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) 04:49:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x0, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:49:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301}, 0x14}}, 0x0) 04:49:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x0, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 329.252052] Bluetooth: hci0: command 0x0409 tx timeout [ 331.301060] Bluetooth: hci0: command 0x041b tx timeout [ 333.348034] Bluetooth: hci0: command 0x040f tx timeout [ 334.272287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.274386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.277752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 334.334987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.336844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.340156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 335.396029] Bluetooth: hci0: command 0x0419 tx timeout 04:49:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301}, 0x14}}, 0x0) 04:49:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:49:45 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x1, 0x4) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0xad) 04:49:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) getresgid(0x0, 0x0, &(0x7f0000000200)) r4 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x361c00) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0xd7a}, 0x0, 0x0, 0x9, 0x6, 0x8, 0x1, 0x1, 0xff, 0xee}) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x100000001) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x8, 0x1) fallocate(r2, 0x0, 0x0, 0x8000) syz_io_uring_setup(0x20bc, &(0x7f0000000440)={0x0, 0x7264, 0x8, 0x0, 0x19, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) r7 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000400)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r10}}, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000180)={0x3ff, 0x5, 0x6}) 04:49:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:49:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) getresgid(0x0, 0x0, &(0x7f0000000200)) r4 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x361c00) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0xd7a}, 0x0, 0x0, 0x9, 0x6, 0x8, 0x1, 0x1, 0xff, 0xee}) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x100000001) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x8, 0x1) fallocate(r2, 0x0, 0x0, 0x8000) syz_io_uring_setup(0x20bc, &(0x7f0000000440)={0x0, 0x7264, 0x8, 0x0, 0x19, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) r7 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000400)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r10}}, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000180)={0x3ff, 0x5, 0x6}) 04:49:45 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000080)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x123\xbffR\x92\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r3, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) openat(r4, &(0x7f0000000000)='./file0\x00', 0x404000, 0x42) fork() 04:49:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 04:49:45 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000080)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x123\xbffR\x92\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r3, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) fork() 04:49:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x0, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x800) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f3daa6b13c2e62f3556a3117deac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}, @lastused={0xc}]}, 0x184}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="425b52ee81368fcbc5ba1c2285c55336e631917a96d4720a0a9a691ebfef51adc5db1a16e0e6cacbaf54f7e3a83432120fc754dd5c971dbdc94c4560931e89a14e8f9447b2b4ae73f0f94058ec45d66f7242dd345c0ddd2ba5f4f908db0aae86c3391a0091737b41f03b8a4259372118576143ad9f0ce7abbf1aefd60c20211ddbf3e3540a3b412e005fa59afbaa7794f5b6a6a68b", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b000100696d0000000f0002006e6574646576736d8000e2ff0700010070636900110002c4b5156b303a30303a31302e3000000071668aa461a6c4d154bf032d3a53cf0008000b00aeffffffa2c570631ca8c9759c05f1dda5e0eca6f4008e0303cf0820de38674dd9285906fc20dbaa2f1a3bb70cfa116c118a62d87376beded2c76152f627550aaa638606f5ce7329fc18d3e7f1d7eec40406c52738fbd2f7fe24500f0b3788f4326733378a6247c882181b97a07b195288"], 0x84}}, 0x24048015) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xa4, r5, 0x312, 0x70bd28, 0x25dfdb7d, {}, [@ETHTOOL_A_FEATURES_WANTED={0x90, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xef44}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'cbc(aes)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\'d]:!..*[*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')]%\x1d\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x401}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="010300000100000018000000", @ANYRES32=r0, @ANYBLOB="a5030000000000002e2f66696c653000"]) syz_genetlink_get_family_id$batadv(0x0, r8) pipe(&(0x7f00000001c0)) [ 347.754877] FAULT_INJECTION: forcing a failure. [ 347.754877] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 347.757948] CPU: 1 PID: 5312 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 347.759729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 347.761482] Call Trace: [ 347.762083] dump_stack+0x107/0x167 [ 347.762905] should_fail.cold+0x5/0xa [ 347.763935] _copy_from_user+0x2e/0x1b0 [ 347.764952] __copy_msghdr_from_user+0x91/0x4b0 [ 347.766046] ? __ia32_sys_shutdown+0x80/0x80 [ 347.767204] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 347.768461] ? __lock_acquire+0x1657/0x5b00 [ 347.769585] ? __lock_acquire+0xbb1/0x5b00 [ 347.770601] sendmsg_copy_msghdr+0xa1/0x160 [ 347.771785] ? do_recvmmsg+0x6d0/0x6d0 [ 347.772712] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 347.773984] ? lock_downgrade+0x6d0/0x6d0 [ 347.774988] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 347.776275] ___sys_sendmsg+0xc6/0x170 [ 347.777319] ? sendmsg_copy_msghdr+0x160/0x160 [ 347.778466] ? __fget_files+0x2cf/0x520 [ 347.779519] ? lock_downgrade+0x6d0/0x6d0 [ 347.780484] ? find_held_lock+0x2c/0x110 [ 347.781445] ? __fget_files+0x2f8/0x520 [ 347.782456] ? __fget_light+0xea/0x290 [ 347.783406] __sys_sendmsg+0xe5/0x1b0 [ 347.784227] ? __sys_sendmsg_sock+0x40/0x40 [ 347.785223] ? rcu_read_lock_any_held+0x75/0xa0 [ 347.786205] ? fput_many+0x2f/0x1a0 [ 347.786970] ? ksys_write+0x1a9/0x260 [ 347.787971] ? __ia32_sys_read+0xb0/0xb0 [ 347.788829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 347.789981] ? syscall_enter_from_user_mode+0x1d/0x50 [ 347.791179] ? trace_hardirqs_on+0x5b/0x180 [ 347.792290] do_syscall_64+0x33/0x40 [ 347.793183] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 347.794569] RIP: 0033:0x7fd3d73bfb19 [ 347.795445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 347.800018] RSP: 002b:00007fd3d4935188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.801922] RAX: ffffffffffffffda RBX: 00007fd3d74d2f60 RCX: 00007fd3d73bfb19 [ 347.803751] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 347.805621] RBP: 00007fd3d49351d0 R08: 0000000000000000 R09: 0000000000000000 [ 347.807359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.809176] R13: 00007fffde70476f R14: 00007fd3d4935300 R15: 0000000000022000 04:49:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 1) 04:49:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x0, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x0, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x0, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301}, 0x14}}, 0x0) 04:49:59 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{r0, r1+10000000}, {r2, r3+60000000}}, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x9}, 0x1800, 0x0, 0x8, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x20, 0x7fff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r6 = dup3(0xffffffffffffffff, r4, 0x80000) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000500)) timer_create(0x3, &(0x7f0000000180)={0x0, 0x30, 0x2, @tid=r5}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000100)=0xfffffffffffff801) read(0xffffffffffffffff, &(0x7f0000000540)=""/102, 0x66) clock_gettime(0x0, &(0x7f0000000440)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xffffffff, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x81, {0x9, 0x21, 0x9, 0x20, 0x1, {0x22, 0x33d}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0xff, 0x1, 0xc8}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x0, 0x9, 0x1, 0xff, 0x40}, 0x6c, &(0x7f00000003c0)={0x5, 0xf, 0x6c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "13166eaf8dd03df26fd0f6c1fad9a9ae"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x2, 0x400}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x9, 0x3}, @generic={0x38, 0x10, 0x3, "b32e2f69d1ba3f8ba2138fb2b3c6be6c0b9079dd3c5017be9d0473e7e22053ce780dc9db7542e69dd61406e337760c4179da999bfc"}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3801}}]}) 04:49:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x0, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:59 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'], 0x8) r4 = signalfd4(r3, &(0x7f0000000380)={[0x7f]}, 0x8, 0x80800) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85", 0x3}], 0x1}}, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x840, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0xeb4, @private2, 0x4}, {0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x437c}, 0x6, [0xfffffffe, 0x9, 0x0, 0x4, 0xffffffff, 0x6, 0x101, 0x20]}, 0x5c) syz_open_procfs(0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, r4, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r6, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x4) 04:49:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 2) 04:49:59 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x800) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f3daa6b13c2e62f3556a3117deac2a0"}}, @extra_flags={0x8, 0x18, 0xfd}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in=@remote, 0xa, 0x8, 0x80}}, @lastused={0xc}]}, 0x184}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="425b52ee81368fcbc5ba1c2285c55336e631917a96d4720a0a9a691ebfef51adc5db1a16e0e6cacbaf54f7e3a83432120fc754dd5c971dbdc94c4560931e89a14e8f9447b2b4ae73f0f94058ec45d66f7242dd345c0ddd2ba5f4f908db0aae86c3391a0091737b41f03b8a4259372118576143ad9f0ce7abbf1aefd60c20211ddbf3e3540a3b412e005fa59afbaa7794f5b6a6a68b", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b000100696d0000000f0002006e6574646576736d8000e2ff0700010070636900110002c4b5156b303a30303a31302e3000000071668aa461a6c4d154bf032d3a53cf0008000b00aeffffffa2c570631ca8c9759c05f1dda5e0eca6f4008e0303cf0820de38674dd9285906fc20dbaa2f1a3bb70cfa116c118a62d87376beded2c76152f627550aaa638606f5ce7329fc18d3e7f1d7eec40406c52738fbd2f7fe24500f0b3788f4326733378a6247c882181b97a07b195288"], 0x84}}, 0x24048015) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xa4, r5, 0x312, 0x70bd28, 0x25dfdb7d, {}, [@ETHTOOL_A_FEATURES_WANTED={0x90, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xef44}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'cbc(aes)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\'d]:!..*[*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')]%\x1d\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x401}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="010300000100000018000000", @ANYRES32=r0, @ANYBLOB="a5030000000000002e2f66696c653000"]) syz_genetlink_get_family_id$batadv(0x0, r8) pipe(&(0x7f00000001c0)) 04:49:59 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000080)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x123\xbffR\x92\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r3, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) fork() [ 361.235672] FAULT_INJECTION: forcing a failure. [ 361.235672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.238241] CPU: 1 PID: 5355 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 361.239702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 361.241482] Call Trace: [ 361.242047] dump_stack+0x107/0x167 [ 361.242821] should_fail.cold+0x5/0xa [ 361.243636] _copy_from_user+0x2e/0x1b0 [ 361.244487] iovec_from_user+0x141/0x400 [ 361.245351] __import_iovec+0x67/0x590 [ 361.246175] ? __ia32_sys_shutdown+0x80/0x80 [ 361.247114] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 361.248245] import_iovec+0x83/0xb0 [ 361.249024] sendmsg_copy_msghdr+0x131/0x160 [ 361.249966] ? do_recvmmsg+0x6d0/0x6d0 [ 361.250806] ? lock_downgrade+0x6d0/0x6d0 [ 361.251687] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 361.252820] ___sys_sendmsg+0xc6/0x170 [ 361.253626] ? sendmsg_copy_msghdr+0x160/0x160 [ 361.254600] ? __fget_files+0x2cf/0x520 [ 361.255453] ? lock_downgrade+0x6d0/0x6d0 [ 361.256351] ? find_held_lock+0x2c/0x110 [ 361.257226] ? __fget_files+0x2f8/0x520 [ 361.258076] ? __fget_light+0xea/0x290 [ 361.258925] __sys_sendmsg+0xe5/0x1b0 [ 361.259734] ? __sys_sendmsg_sock+0x40/0x40 [ 361.260669] ? rcu_read_lock_any_held+0x75/0xa0 [ 361.261668] ? fput_many+0x2f/0x1a0 [ 361.262456] ? ksys_write+0x1a9/0x260 [ 361.263275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 361.264416] ? syscall_enter_from_user_mode+0x1d/0x50 [ 361.265506] ? trace_hardirqs_on+0x5b/0x180 [ 361.266424] do_syscall_64+0x33/0x40 [ 361.267217] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 361.268311] RIP: 0033:0x7fd3d73bfb19 [ 361.269108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 361.273037] RSP: 002b:00007fd3d4935188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.274650] RAX: ffffffffffffffda RBX: 00007fd3d74d2f60 RCX: 00007fd3d73bfb19 [ 361.276168] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 361.277675] RBP: 00007fd3d49351d0 R08: 0000000000000000 R09: 0000000000000000 [ 361.279191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.280719] R13: 00007fffde70476f R14: 00007fd3d4935300 R15: 0000000000022000 [ 361.299202] udc-core: couldn't find an available UDC or it's busy [ 361.300705] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 04:49:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x0, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:49:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301}, 0x14}}, 0x0) 04:49:59 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000080)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x123\xbffR\x92\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r3, 0x0) fork() 04:49:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x9}, 0x200, 0x0, 0x0, 0x0, 0x400, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) r3 = dup2(r1, r1) write$binfmt_elf64(r3, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x3c7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x266d40) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000200), 0x0) fcntl$addseals(r2, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x39, 0x1, 0x8}}) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x585942, 0x101) dup(0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000200)) close(r1) lseek(r5, 0x0, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x200f5ef, 0x0) 04:49:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:50:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:50:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x13, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x9, 0x0, 0x0, 0x0, @str='\xd9\xed\x86B\x00'}]}, 0x20}}, 0x2000c010) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r2, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x2, 0x8, 0x100000001}) 04:50:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:50:13 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) memfd_create(&(0x7f0000000080)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x123\xbffR\x92\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) fork() 04:50:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7b, r4}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r4}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x9, 0x2, 0x1, 0x8, 0x6, 0x7}, 0x20) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x190) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@local, 0x78, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x0, r8}) sendmmsg$inet(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="8e053f46f4b6ce4f66341d2fc83ff91d9e9b4d42f4f91c6d807525b0fd94785ef463ea97f44a424c7eab7ea3ecebbc1190f5a6f1693e8b96b89eb71598cc20e771d31d4989ce4b9a87da95622afe969643b1daf1ef350934ae6b25c512d69e518c3afcde70b453d6f9863666c53bfdd00031d1470aa2e647bdd3a8bb766a1e445d2d842e9c80b09783823ee22cf620fccfd7c9c868e81a7dfb5488986ed9114c27e61cbbbeaa68dce75e47df29c18fdf34f5d979e433cd3511", 0xb9}], 0x1, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @loopback}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0xa0}}], 0x1, 0x8010) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 04:50:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301}, 0x14}}, 0x0) [ 375.108785] FAULT_INJECTION: forcing a failure. [ 375.108785] name failslab, interval 1, probability 0, space 0, times 1 [ 375.110078] CPU: 0 PID: 5385 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 375.110852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 375.111795] Call Trace: [ 375.112109] dump_stack+0x107/0x167 [ 375.112533] should_fail.cold+0x5/0xa [ 375.112969] ? __alloc_skb+0x6d/0x5b0 [ 375.113406] should_failslab+0x5/0x20 [ 375.113838] kmem_cache_alloc_node+0x55/0x330 [ 375.114359] __alloc_skb+0x6d/0x5b0 [ 375.114778] netlink_sendmsg+0x998/0xe00 [ 375.115246] ? netlink_unicast+0xa00/0xa00 [ 375.115735] ? netlink_unicast+0xa00/0xa00 [ 375.116203] __sock_sendmsg+0x154/0x190 [ 375.116658] ____sys_sendmsg+0x70d/0x870 [ 375.117124] ? sock_write_iter+0x3d0/0x3d0 [ 375.117604] ? do_recvmmsg+0x6d0/0x6d0 [ 375.118058] ? lock_downgrade+0x6d0/0x6d0 [ 375.118529] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 375.119134] ___sys_sendmsg+0xf3/0x170 [ 375.119579] ? sendmsg_copy_msghdr+0x160/0x160 [ 375.120102] ? __fget_files+0x2cf/0x520 [ 375.120568] ? lock_downgrade+0x6d0/0x6d0 [ 375.121043] ? find_held_lock+0x2c/0x110 [ 375.121509] ? __fget_files+0x2f8/0x520 [ 375.121967] ? __fget_light+0xea/0x290 [ 375.122414] __sys_sendmsg+0xe5/0x1b0 [ 375.122848] ? __sys_sendmsg_sock+0x40/0x40 [ 375.123339] ? rcu_read_lock_any_held+0x75/0xa0 [ 375.123879] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 375.124488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 375.125079] ? trace_hardirqs_on+0x5b/0x180 [ 375.125572] do_syscall_64+0x33/0x40 [ 375.125999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 375.126588] RIP: 0033:0x7fd3d73bfb19 [ 375.127015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 375.129138] RSP: 002b:00007fd3d4935188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.129963] RAX: ffffffffffffffda RBX: 00007fd3d74d2f60 RCX: 00007fd3d73bfb19 [ 375.130776] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 375.131589] RBP: 00007fd3d49351d0 R08: 0000000000000000 R09: 0000000000000000 [ 375.132412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.133231] R13: 00007fffde70476f R14: 00007fd3d4935300 R15: 0000000000022000 04:50:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 3) 04:50:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgrp(0x0) r3 = pidfd_open(r2, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x0, 0x4, 0x7, 0xff, r2}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400000000000000000000000000000000000000001000"/245]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000faff15c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec46065bf6e5c2fd748b7382cb035aee7d07675"]}) dup3(r3, 0xffffffffffffffff, 0x0) r4 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x81) unshare(0x48020200) fcntl$addseals(r4, 0x409, 0xc) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$sock(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)="6be01f1a0d5ed98335e928702019ddd2b40570c6e02e1d983d538ceaec2949e98243d7eef877ac7e6083a13887c41df309ef47459fb3af2c5a175aa97179945f0cafb2", 0x43}, {&(0x7f0000000580)="1cf97700fb8829c0c08e39690644ee003e035cf56c40c2ff2a476e5dad5f20e57f771128d7a194d72e0283364162dce08078a903e4eebc6b76d4e8a8d21b55f6170692f081274e885e96cbb4ea79ecbfbded0d85ecf43125933767a999e5465c86f1a53c8c7ea7e57adb5b5a5ef3497afde611e61a37c760b609f19b6c0d89b015e537b47a5a2991645066eafe2e1b", 0x8f}, {&(0x7f0000000840)="0d964d8227fbe7787d48d6bdc5d4d3749b16c73305b958b41e6c3aff69d5891521c9459e704731dca758dcdd5485a4452f77bf4b6e1f398e15660ae48415b7dab468ec67a5f8608e61a249b56234fb3ae62cb2f9e576559870ac42559d34deab348d1e33d2f886cde5e3160cd033bf47b34ae06df3b20beb29d27220a404bcb1877d5afce9f0e9170095ed575dfb59336e3c4c1f9a53c795763dcbf8527325a99c1b9ac17b6bccfb13a721f2696438f57971c4c19f7008d98c634a288394939d73b02444d00981cd860c4561b153ef79bb0a8375a0e6a7cc8635362f268c6f99b926649593597cbc0a852228051296308c0d33b4b7da4e85325ead03d399dba100dd20e5bc75af49ea06ed3ab4baa1680fa0d903062f10a93846d993e4791ee085ddf3f69b6abd5b4bf20e68eefc08edc6ccd6b61e7efd9184ad42e2725c346354923f09dae0bccf17ee32df4de5f41ebe65d5a8c47b6219b36aa15f1cca3f9824dce15394fc8f4eec8ef4c30f3b47dd155dbc7ec8d78bd8c68bc18f6f9c899d6a03b707b6a4f576cb49ed7f7f7d88f29bb0ed7a15c6c29e1d715cce867b939786fa273949e43d4ad94e2cc470fef1862c3d532185995fd5ea5aedc0a61891920dd41a353b33cf15883e4d79b7a08e0b9d6e384d049098bb378c513361f0564c6e284b4674ca2e162934955715a50480c190c8f96cc15bfff34be7ff09858b3f3471fcf01f2daf362e047a03faeba06e9281046f6e1b0b7bfed580dafa72a7aeedfc950b289a667852d12b1ff06a6ac41c125c9adc164518b6aae558e3ebe219d3e0039e17d488ef2df1bbcb9287426c18ceec689b3f3122ba151d4e5fcaf901b40ce7fda4acf4e0628a276733f03fdaafec10e60cecb0adbb278d5e99995168a65bfb2dc6f9b33331a368151514e2b8152a4f2526f0330bdcd62e719436573c5b88189273765524416726be0281b57ac439f40caf9e7daef61ba3caf84eaa25144b71251a0c6744b90166bef4655f45ddee410ee8471ff9e8fa5ff17e74521688f86b223eeea8985124e3af2fbb23c588ba47e59a3c60a554f52de8ca3b4ea09c5c51446538bd6fa7153d5163417b04b1f9339b6028063b9a792cfd988e88131fb6c6d578f0e892884437322de9eb63b8717135f2d066edad880152ac5f0323eb81a7f0f458d3509dd9d3ea6a7a1c6f270795bb78655aba4ddaf48f656e29434a39b3a8de4b891c29a850d208003309a28e0fee2cb4552c263b1d0be052d0c5b8a2e2ac50ca47fca0c9907b5aa18618347d1219acc38b38e17386da724977364a54342906e2c04afa0fb67c56895515a13030dc0ed58f088fe3c64389421ada56a58d88083fed693cebdeb3063f2cbf82d0ca39fda5e52dcf7a91d65b7e03ca4894f5f8b3debdea42d57ade6e0666eec6757380e9018cc50aadf26a2ac352aabfaff390c9d78639f480b99de7bbc17addf07dd7ddc40ea8c994d6e369f5d488d8cc2f6ecf303d8f7ae7f3e49e269926825703ca6611ab1f1eda78982284355a8b03b7e60020e6902143df16f7b0e0c5b3b37b14b15058c69c85d8dc70f6ba50e023f8b5e8289c89bec8deee7a05ddbbc54ea822c4eac788f2a9824a44b0ae2106379a3888932ca7fd525a0d764a16edd8153cbec396e2fda7852173663dbb5af8381b29ee34b2b8299d3f1962b5b5900437bdcf6938057b60175e1547508b0922892ed48802b5f293b74afa33c91cc9c7678b9a74b9eda890c949784c57a7d31b7dfd9033b1d916d13890a7ea3d3718f598ba1ce9e6e99ac171460e15c643c176de08e6f63e25ce2c316cf5ecdf3d17e4b3bba32f47857d54974bb1ec91e0d5c64f1697e34409c7aa3052cb49c93ab1761ada17b5ef292589dad97158f13d221fed7a42b90ea9fc440289a7534649be14d3e9512260c53a854f2ba95245507c2205f8e04d6fbfffdcdad63b1eebfa6b4a13bf58ddef643602ebc6767d0318fc728b242112ac7c4fcc29dcaf3430136792776c8c08ee80da30ffa4076d7a6e026f8005311796e680d77a708cee82ade3628df3948f49ee00931d2ca4878cf8ffcab8e09c1af2552e23b0ea67157a5a2d9831775a89de2edc2db1c32a4c048ed56caa13dc64bcb58d712145a419d36fdc502e97aa53bfe9ba8a571203f06273826d29c2c0ffa930e3aa77ed9d976adbe4f2a6bb16bc8647b5b1f374f53707ba94bc713cc4e21cb0c268334b51f1185163a69088133dc872d9423b07ad494d9483466c138df673da6cfb03b94778bfdf0498926e634345d4b4aa376cb36ba6f1086d0864b329a999babb3fec126514c02e6d9fdcd5a55b178994b2be4030f374d33779828f881b7edf1ef6d0649d162a9a5475568a32becc9b2944c1fe336a8a9f6a4a5d6dacee7fa21e10159bb74d4021b6ea94b6816f5d8305af57e182a8d38e075a42dbbc2bd2adc8720ca7aa6548bd4e72dba487e27a47d8a5fa2e17c39c60643269ffeeb6852c2e88bf397563f167eaa869d77347ba5d139394ace2d52d68146c5886de05781358c97175b8a6f278b92bf82bf9042490fb088c34ee2374fe6e207b43197178db6cfbeda8be54d081fb480bb07dcfc4418cb2ab98a899eb6ce0a420bcc516df4411d3e3f1eb80658a1b0088fc74e00e9bdd4212cf0dbb8155e2a07964a2691301e5162d5992a8bdd5bc29ac94faae26ee5206f0d8a445e9877d8337c01aaf23c1b9e67d070a6ba5ebee1291387eb24107b9f7672955db384988ceb80f98dcba119eb3ec15447c289f73549c80cd722904f149ba67e108ca6227aecae226406f395ddceb76cd7d131da2c6b220cb2062d5988ee989abc361ba497394ed5104314771b4552f5e2b2b2fd8d1be71ee6f90b62bd28f2cb3e36560e7efd9806d5ac791d78320822e8fb88ff60700e7cfcd060c30846ef801b1a6bd3199c7131e4e334841e56fa1ae48500c2fe57b0521484ea68c2f263aac4d293d2b0f25706c335c3662d156c56b18753c9b784e747baed1699c24d6d3535f02d3b3ddc187a6a5c4b912cadfaa39e9a073fc9db735ebea1ec5f45a0c65604d3c7946f8ee8eb1ab718e229d58e2f1f5a99017069775898c8866fdc194c6549feeeb5702a087ac581e3c0b733fe0e834dfd0dbf632fb556d9164490b6657bb368596a7d807c529672ce444de5c1f7ba23637020383703d3dc903ec1b1c1b6941514b9625563b3b490081cb69f286a0d55db5309ffdc7ab1e9f5b8c33b38999e9cb9679363e6b606e12aec6416e477af3041c4b7ba65bf0caddcd402f65a32b021ebfe939e3bc13a27ace7e3d2c195e496ff52f0c3e4ef599960bed3c1487654ba9b53e99e569bba7747c2e4b689b9d9eb413e694e698b727906fcaf77d389a998089a8f3fe2d7af3c129330d9a8f7a46d7bbfeac08bb8ccb36bfc29ffececdade70f9378e1d1a764c58ac0e102cbb931ce38c252a96b5e75edfd40ce36017bdd62893437c25c8b68d19a39e0b27f47ba2909ecdffe1467bbf4fb7e1e424d9c698ac271555bd565696e767b7664f9ff780b41bf546c02744f567eeb34b701656529b4bb39c49e1f61ff83ea692326870f2c405d275dd5ee7c51b97933924862d91ee684e8ae96a3662f3d0e7848f805c1883eea15b60cde8a7203f880a94f4f45562cca165dcc9b5f043aaa2ba532213e20c0869c59aedd7677135c67c7d8dcbf04b868c4fa8f5227e007c0436b73b2907a8186fd0bd4d84b5ea04ebe771c7e03ff9c02c01454f37fb868f3ea7aacc853297691a9dbcefa80fff2aea2069b4020030955c5c0260abf1377a53240ad161eba17f50e7d0319f50a51b9e61baf18e26ef948e7c2169fbbac50ce9793a219f019fd0282ab3d0b5dd16dbe0fb406df498ddce6ae67a5b92c7406c65dc87c373ddc865f298b46bf842e62d087dbc4463cf2523aaee21dade5de781c4317a8f60ef540ba53ae4d2ba7c7fd447e3078c675fb8342fdaf092d0cb85c2db9147a7d41a9fadcb7e4030334cb784874d0032e8b573017f2dbe0740b6eb6e255a025f2867c58304e869b096562f056c7470e73728ab6e5dcd895f8ddf8437c4fee68ad3a753457658ba6adf2836c3a73cc045c7e26f4b7c5696c42eafa25e2bc05f110831f4a18a81b041ed04df897598ea5afe61212af7566ef70754e7d30dbbb64e5af1533169414b5c0a0cb01b3bab9a6f9bfd3f8b1da7838ab8e72399c2282b94dcdf6548e2e807a3d2f2b77474ccf2e3b9a7ac2f101af2631cd86057b589f2e4db7058b88ef69f370efec37a5c52b96291f4c70ff41fa32aa850eee44d35294f61475b5a4e41941939ae21f465244928559982a787db03ab5fc4200ddf7fe7732ef7ee763411117c52208367a6f06b0e407031b4f378c4a6c71ab46efad6ed07c39cd178484f44f30ca8a5aeb9956058b1b3a3891f4eca6fc09e94c5a79eece1da0b3e7de43b1c611499772760e985041cb20f91c05fc2f0cdd2f91e5826cd2c5e5bd10096dd247f6b5eef3a68b0c553666afe9607574b764230bf7243c8bafe4cfa798af09244366e788abe5f8b39723e9677ef8102466dda0a88b441e2e6c36734059f6bcaf5184092ec0f7143e00bc4c69f814a38373f9f5971f61c2f8988164110c6bcdcfaaa631c035a781f4df4f51c05b51481673b283669269e67342b4e336417f7c451328b4d6c8d55f826b77640ebd9d67fbb8fc40eab0b6daf45e839f579aad24bbbb97876a001092fedec1c0cb6595cae6cb433928cf9443eb3eeec18e6344da7d4bce9bd47ccdca72b40c6f8b08c567a2a1340f42a79d02414d14815cf48b4041174ec4062ecb8af1b4441824f5e58e4ddfd3caa5c52b8a891591eac6fcb00109ff63d7567806b5869a5d1d15d403e44e4653646cd04846b1fedbb3bedf37e7117e1cc61361be6c4bff216e868d75879e1c215f2a05fad36060d1991dbfe483b6d259600de2ff11238bea5d67f81f5f28f23b7f2e117dfd064e84dc9781a12fa8a24447ee2f78ef67a77e9477c081d1bd3f1ff4aef11062e6da8f6585d6ef65fed6137e851a4c238c6c0287dce71cf7b5f0a19aed73eb5719d0386db89cec1ee138e827b732fc860830f8fd61489c5d4aec891e8ce559afc04c95c64c5454ffbe56ba2f71ce95c0d9155d3a328da53e0d28d0dd8a184f1f5f68c9822430ecdfa8353c162e89fae295c7a6acabd5723b7af71490c4e326ca0224a3c2008736f7a51201dc012035323b6e1d950516333c4b76710f1d4526758503d42a349a58f7347e10ddbf586a9e4c3c1a15ec4fd4248d0e8706126ddbac3a69a0d55665d0274eb065b9d1a1149223a12cf1923ac4e0b2c3af88f2f2656ce3e870a76e7165f1a61ea72a72d49c89533db533c6f8f716e60cc54f3e136b049f4c76252d26caa6152427a8a094e9c3fa0ac3f7e37de714ccdc76bc0aca397a90c3e043e1d2a4cc483afad05be5872a58d61da266cd3f6f91db2e804619f4f51e8a94090acd166b07f01d4a5334674e8f109d55219d9c6a7271da21c1dab508038df9947cb10aea5236dca7a65f78d18ad7ccd73fc297e797a47627c7e563ef411866fd4758f92df7127e7e91d57624a8c3e46e2896521dc2e94c2aab966420702930acf84af1b1881911458beb10982991726033fa01fa99688d53845c5babeb60bd760a7890163bdbd28e34def8cc607f82c4ca3bf31d06227a0b7efc2c9da8b58cf3ed433ccee0169b0501f9a7ec064106867c7156b437f98313fbbb1b4e882ef07313fedf099503d2d8b0fd7fb603c1bafcb2a2", 0x1000}, {&(0x7f0000001840)="378352ad9b674a24cba3e1b6c7019ee6253d839e09db5c057b21483b0032ccbe84b929e1d9e38d79dcb2b42408fde711d5221dafbe095c9d9d1e0bca8c9fd4ab27e5cc3b64974d281e76232c11039b4086ef603b0efe42750515d67c99a8bfdaf4d0ca1a91b791a1c34585732ce0792080cb2d59c46b6b1f3a16c746e3b5441981310b64eb8437703d8a31c27c9511747c19bdf940573d36cd64623a9d88ffd959f69b5eda0a6f00f21497901fd9aa30d67fbcdc7e3ff072920c684b7cb40b0d506b", 0xc2}, {&(0x7f0000001940)="a8faf10441824c0132993008fe7c2cb32e670cc54a9209218087445125b94b286e2cefda6c3a20d4698a3248d7426c6559678aa244ddc3e8226c181d0ae5468baaba1fa496106283cafd1928f154f3c12e8bec50bc351c7ba8b362", 0x5b}, {&(0x7f0000000200)="750475bf4476238fb9a1f2d9eb65ae2cfd7e6336ca2e1079ac1c1fe3f3d62561301ac2a8a813c34c329532b4f8d2cf", 0x2f}], 0x6, &(0x7f0000001a40)=[@timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0xa8}, 0x10) recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000340)=""/136, 0x88}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000014000000200000066ffb52d9b929971c2b0f1da27c48b940b9886efc9124a419257cac6c26ebad52d958e055a0061c72857725c8451190d59f56be056b25991c86b2fce6e4af352402a250a71eadad7f5cd1124ebb00788577500c8c0ddb0b39d63b77ba156683f9c866c1d33c3a9bbf86ef0419176376630bbcefcfe88abb481384fce8d9641461213c781280815b296412f29c8c911c91b33a6fc4c9a7f13eecf286c1296c6102a8c1aa56c6b614c1ee599a0023c859f21ebfb9243b5830714c1bfc890bc26b34a0c1142dc2e6865040396d4a12eee933363b0ab0d70800db560a805e9059408aebf0e62c74a8e729c96", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xd8}, 0x1002) perf_event_open(&(0x7f0000001b40)={0x1, 0x80, 0x8, 0x4, 0x3, 0x3, 0x0, 0x0, 0x4, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x73ee, 0x4, @perf_bp={&(0x7f0000001b00), 0x4}, 0x200, 0x3, 0x4, 0x4, 0x4, 0x7f, 0x4, 0x0, 0x200, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x1) 04:50:13 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() [ 375.174812] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 04:50:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:50:13 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) fork() 04:50:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301}, 0x14}}, 0x0) 04:50:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 4) 04:50:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:50:13 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:50:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 1) [ 375.337930] FAULT_INJECTION: forcing a failure. [ 375.337930] name failslab, interval 1, probability 0, space 0, times 0 [ 375.340616] CPU: 1 PID: 5418 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 375.342201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 375.344131] Call Trace: [ 375.344763] dump_stack+0x107/0x167 [ 375.345616] should_fail.cold+0x5/0xa [ 375.346513] ? create_object.isra.0+0x3a/0xa30 [ 375.347576] should_failslab+0x5/0x20 [ 375.348483] kmem_cache_alloc+0x5b/0x310 [ 375.349439] create_object.isra.0+0x3a/0xa30 [ 375.350456] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 375.351650] kmem_cache_alloc_node+0x169/0x330 [ 375.352735] __alloc_skb+0x6d/0x5b0 [ 375.353597] netlink_sendmsg+0x998/0xe00 [ 375.354554] ? netlink_unicast+0xa00/0xa00 [ 375.355551] ? netlink_unicast+0xa00/0xa00 [ 375.356556] __sock_sendmsg+0x154/0x190 [ 375.357491] ____sys_sendmsg+0x70d/0x870 [ 375.358443] ? sock_write_iter+0x3d0/0x3d0 [ 375.359430] ? do_recvmmsg+0x6d0/0x6d0 [ 375.360360] ? lock_downgrade+0x6d0/0x6d0 [ 375.361331] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 375.362560] ___sys_sendmsg+0xf3/0x170 [ 375.363477] ? sendmsg_copy_msghdr+0x160/0x160 [ 375.364527] ? __fget_files+0x2cf/0x520 [ 375.365641] ? lock_downgrade+0x6d0/0x6d0 [ 375.366586] ? find_held_lock+0x2c/0x110 [ 375.367712] ? __fget_files+0x2f8/0x520 [ 375.368714] ? __fget_light+0xea/0x290 [ 375.369795] __sys_sendmsg+0xe5/0x1b0 [ 375.370732] ? __sys_sendmsg_sock+0x40/0x40 [ 375.371465] FAULT_INJECTION: forcing a failure. [ 375.371465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.371926] ? rcu_read_lock_any_held+0x75/0xa0 [ 375.371963] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 375.375426] ? syscall_enter_from_user_mode+0x1d/0x50 [ 375.376586] ? trace_hardirqs_on+0x5b/0x180 [ 375.377561] do_syscall_64+0x33/0x40 [ 375.378393] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 375.379734] RIP: 0033:0x7fd3d73bfb19 [ 375.380579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 375.384757] RSP: 002b:00007fd3d4935188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.386467] RAX: ffffffffffffffda RBX: 00007fd3d74d2f60 RCX: 00007fd3d73bfb19 [ 375.388061] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 375.389665] RBP: 00007fd3d49351d0 R08: 0000000000000000 R09: 0000000000000000 [ 375.391265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.392882] R13: 00007fffde70476f R14: 00007fd3d4935300 R15: 0000000000022000 [ 375.394516] CPU: 0 PID: 5421 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 375.395303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 375.396260] Call Trace: [ 375.396555] dump_stack+0x107/0x167 [ 375.396973] should_fail.cold+0x5/0xa [ 375.397386] _copy_from_user+0x2e/0x1b0 [ 375.397841] __copy_msghdr_from_user+0x91/0x4b0 [ 375.398364] ? __ia32_sys_shutdown+0x80/0x80 [ 375.398858] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 375.399444] ? __lock_acquire+0x1657/0x5b00 [ 375.399938] ? __lock_acquire+0xbb1/0x5b00 [ 375.400427] sendmsg_copy_msghdr+0xa1/0x160 [ 375.400888] ? do_recvmmsg+0x6d0/0x6d0 [ 375.401329] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 375.401926] ? lock_downgrade+0x6d0/0x6d0 [ 375.402394] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 375.402989] ___sys_sendmsg+0xc6/0x170 [ 375.403435] ? sendmsg_copy_msghdr+0x160/0x160 [ 375.403953] ? __fget_files+0x2cf/0x520 [ 375.404413] ? lock_downgrade+0x6d0/0x6d0 [ 375.404877] ? find_held_lock+0x2c/0x110 [ 375.405343] ? __fget_files+0x2f8/0x520 [ 375.405798] ? __fget_light+0xea/0x290 [ 375.406242] __sys_sendmsg+0xe5/0x1b0 [ 375.406678] ? __sys_sendmsg_sock+0x40/0x40 [ 375.407169] ? rcu_read_lock_any_held+0x75/0xa0 [ 375.407666] ? fput_many+0x2f/0x1a0 [ 375.408081] ? ksys_write+0x1a9/0x260 [ 375.408496] ? __ia32_sys_read+0xb0/0xb0 [ 375.408960] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 375.409563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 375.410111] ? trace_hardirqs_on+0x5b/0x180 [ 375.410598] do_syscall_64+0x33/0x40 [ 375.410998] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 375.411574] RIP: 0033:0x7f957b827b19 [ 375.411992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 375.413962] RSP: 002b:00007f9578d9d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.414824] RAX: ffffffffffffffda RBX: 00007f957b93af60 RCX: 00007f957b827b19 [ 375.415626] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 375.416436] RBP: 00007f9578d9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 375.417239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.418006] R13: 00007ffcc1909a8f R14: 00007f9578d9d300 R15: 0000000000022000 [ 388.176912] FAULT_INJECTION: forcing a failure. [ 388.176912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.179628] CPU: 0 PID: 5432 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 388.181087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 388.182844] Call Trace: [ 388.183404] dump_stack+0x107/0x167 [ 388.184181] should_fail.cold+0x5/0xa [ 388.185006] _copy_from_user+0x2e/0x1b0 [ 388.185846] iovec_from_user+0x141/0x400 [ 388.186704] __import_iovec+0x67/0x590 [ 388.187536] ? __ia32_sys_shutdown+0x80/0x80 [ 388.188478] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 388.189586] import_iovec+0x83/0xb0 [ 388.190353] sendmsg_copy_msghdr+0x131/0x160 [ 388.191278] ? do_recvmmsg+0x6d0/0x6d0 [ 388.192103] ? lock_downgrade+0x6d0/0x6d0 [ 388.192994] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 388.194102] ___sys_sendmsg+0xc6/0x170 [ 388.194918] ? sendmsg_copy_msghdr+0x160/0x160 [ 388.195881] ? __fget_files+0x2cf/0x520 [ 388.196723] ? lock_downgrade+0x6d0/0x6d0 [ 388.197589] ? find_held_lock+0x2c/0x110 [ 388.198435] ? __fget_files+0x2f8/0x520 [ 388.199274] ? __fget_light+0xea/0x290 [ 388.200098] __sys_sendmsg+0xe5/0x1b0 [ 388.200907] ? __sys_sendmsg_sock+0x40/0x40 [ 388.201814] ? rcu_read_lock_any_held+0x75/0xa0 [ 388.202782] ? fput_many+0x2f/0x1a0 [ 388.203553] ? ksys_write+0x1a9/0x260 [ 388.204367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 388.205474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 388.206555] ? trace_hardirqs_on+0x5b/0x180 [ 388.207467] do_syscall_64+0x33/0x40 04:50:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 2) 04:50:26 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) fork() 04:50:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r6, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r5, r4, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r7 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000140)={0x8, 0x10001, 0x4, 0x97ac, 0x40}) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r0, 0x0, r4, 0x2, 0x0, 0x1, {0x0, r10}}, 0x1) 04:50:26 executing program 4: io_uring_enter(0xffffffffffffffff, 0x7c05, 0x3c6e, 0x6b6d5939ebbba18e, &(0x7f0000000080)={[0x4]}, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 04:50:26 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:50:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301}, 0x14}}, 0x0) 04:50:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301}, 0x14}}, 0x0) 04:50:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 5) [ 388.208247] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 388.209564] RIP: 0033:0x7f957b827b19 [ 388.210356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 388.214226] RSP: 002b:00007f9578d9d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.215813] RAX: ffffffffffffffda RBX: 00007f957b93af60 RCX: 00007f957b827b19 [ 388.217318] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 388.218802] RBP: 00007f9578d9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 388.220288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.221803] R13: 00007ffcc1909a8f R14: 00007f9578d9d300 R15: 0000000000022000 04:50:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301}, 0x14}}, 0x0) [ 388.226784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.230650] FAULT_INJECTION: forcing a failure. [ 388.230650] name failslab, interval 1, probability 0, space 0, times 0 [ 388.233167] CPU: 0 PID: 5440 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 388.234612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 388.236338] Call Trace: [ 388.236881] dump_stack+0x107/0x167 [ 388.237638] should_fail.cold+0x5/0xa [ 388.238439] should_failslab+0x5/0x20 [ 388.239217] __kmalloc_node_track_caller+0x74/0x3b0 [ 388.240264] ? netlink_sendmsg+0x998/0xe00 [ 388.241161] __alloc_skb+0xb1/0x5b0 [ 388.241927] netlink_sendmsg+0x998/0xe00 [ 388.242774] ? netlink_unicast+0xa00/0xa00 [ 388.243674] ? netlink_unicast+0xa00/0xa00 [ 388.244561] __sock_sendmsg+0x154/0x190 [ 388.245392] ____sys_sendmsg+0x70d/0x870 [ 388.246244] ? sock_write_iter+0x3d0/0x3d0 [ 388.247119] ? do_recvmmsg+0x6d0/0x6d0 [ 388.247931] ? lock_downgrade+0x6d0/0x6d0 [ 388.248798] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 388.249893] ___sys_sendmsg+0xf3/0x170 [ 388.250708] ? sendmsg_copy_msghdr+0x160/0x160 [ 388.251658] ? __fget_files+0x2cf/0x520 [ 388.252521] ? lock_downgrade+0x6d0/0x6d0 [ 388.253382] ? find_held_lock+0x2c/0x110 [ 388.254239] ? __fget_files+0x2f8/0x520 [ 388.255054] ? __fget_light+0xea/0x290 [ 388.255870] __sys_sendmsg+0xe5/0x1b0 [ 388.256668] ? __sys_sendmsg_sock+0x40/0x40 [ 388.257556] ? rcu_read_lock_any_held+0x75/0xa0 [ 388.258537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 388.259631] ? syscall_enter_from_user_mode+0x1d/0x50 [ 388.260706] ? trace_hardirqs_on+0x5b/0x180 [ 388.261603] do_syscall_64+0x33/0x40 [ 388.262381] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 388.263435] RIP: 0033:0x7fd3d73bfb19 [ 388.264195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 388.267998] RSP: 002b:00007fd3d4935188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.269618] RAX: ffffffffffffffda RBX: 00007fd3d74d2f60 RCX: 00007fd3d73bfb19 [ 388.271089] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 388.272572] RBP: 00007fd3d49351d0 R08: 0000000000000000 R09: 0000000000000000 [ 388.274061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.275659] R13: 00007fffde70476f R14: 00007fd3d4935300 R15: 0000000000022000 [ 388.281133] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.292216] loop4: detected capacity change from 0 to 2048 [ 388.298682] EXT4-fs (loop4): quotafile must be on filesystem root 04:50:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301}, 0x14}}, 0x0) 04:50:26 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:50:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r6, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r5, r4, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r7 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000140)={0x8, 0x10001, 0x4, 0x97ac, 0x40}) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r0, 0x0, r4, 0x2, 0x0, 0x1, {0x0, r10}}, 0x1) 04:50:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301}, 0x14}}, 0x0) 04:50:26 executing program 4: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000001c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="c00000001309010226bd7000fedbdf25010000008ebaec44d1daaef3b762369c57ce02d670f73df2ff0ca6abf1c874a3d026e78e707b9d5bcd9bf09facbe96be5921896f6cc31e54a94f06d780a6b40f9245cccd8c5ea6a7ac38bce72acbf22301ee68f817dafbfb590daa2c0e9bb4491d21dcadb5815465852b2c620bae9bcc88ea3e17016b419b9a73e8b049bbb90cc35000817c8f25ab30c2e00cf9b1faa36f9ddf0cfe556c825276c0906c44be5214dd0ddd9440b415410854f90fd239377b57c55ccd06535fabb4af94ebadd4e00de533b9f97f23c17fb399f5c52ca2f1dbed58e6a8fc5bb6415f40ee8169bac704e3f944481192644b81ebf7613ee88ed1b8f820950100000000000000269f14b4dca62db65724e9b4b14026157345df1b1f3f1fcca203e6025ead4a70998190ddf882050caeb3821d996c394a0f7b24b4627fefd1981d1060237f876c9c8b0a4dcbf9e18edaefb7e7d89749e1576d851c74699a8772aab2e50f4180568da998650c9af93ed1f1acf662096af06aff7472f9b8de171ddd00000000000000"], 0xc0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x8, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r3, 0x6, 0xafc, 0xffffffff}) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x8, 0x3) r5 = accept$packet(r2, 0x0, &(0x7f0000000240)) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000380)='macsec0\x00', 0x10) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 04:50:26 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) fork() 04:50:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 6) [ 388.450182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:50:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 3) 04:50:26 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) fork() 04:50:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 1) [ 388.548399] FAULT_INJECTION: forcing a failure. [ 388.548399] name failslab, interval 1, probability 0, space 0, times 0 [ 388.550812] CPU: 1 PID: 5466 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 388.552256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 388.554026] Call Trace: [ 388.554585] dump_stack+0x107/0x167 [ 388.555364] should_fail.cold+0x5/0xa [ 388.556171] ? create_object.isra.0+0x3a/0xa30 [ 388.557129] should_failslab+0x5/0x20 [ 388.557933] kmem_cache_alloc+0x5b/0x310 [ 388.558795] create_object.isra.0+0x3a/0xa30 [ 388.559712] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 388.560821] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 388.561886] ? netlink_sendmsg+0x998/0xe00 [ 388.562774] __alloc_skb+0xb1/0x5b0 [ 388.563543] netlink_sendmsg+0x998/0xe00 [ 388.564425] ? netlink_unicast+0xa00/0xa00 [ 388.565318] ? netlink_unicast+0xa00/0xa00 [ 388.566217] __sock_sendmsg+0x154/0x190 [ 388.567049] ____sys_sendmsg+0x70d/0x870 [ 388.567915] ? sock_write_iter+0x3d0/0x3d0 [ 388.568820] ? do_recvmmsg+0x6d0/0x6d0 [ 388.569647] ? lock_downgrade+0x6d0/0x6d0 [ 388.570510] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 388.571606] ___sys_sendmsg+0xf3/0x170 [ 388.572433] ? sendmsg_copy_msghdr+0x160/0x160 [ 388.573395] ? __fget_files+0x2cf/0x520 [ 388.574222] ? lock_downgrade+0x6d0/0x6d0 [ 388.575085] ? find_held_lock+0x2c/0x110 [ 388.575945] ? __fget_files+0x2f8/0x520 [ 388.576790] ? __fget_light+0xea/0x290 [ 388.577611] __sys_sendmsg+0xe5/0x1b0 [ 388.578410] ? __sys_sendmsg_sock+0x40/0x40 [ 388.579323] ? rcu_read_lock_any_held+0x75/0xa0 [ 388.580310] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 388.581421] ? syscall_enter_from_user_mode+0x1d/0x50 [ 388.582505] ? trace_hardirqs_on+0x5b/0x180 [ 388.583423] do_syscall_64+0x33/0x40 [ 388.584205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 388.585302] RIP: 0033:0x7fd3d73bfb19 [ 388.586087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 388.589966] RSP: 002b:00007fd3d4935188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.591573] RAX: ffffffffffffffda RBX: 00007fd3d74d2f60 RCX: 00007fd3d73bfb19 [ 388.593068] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 388.594566] RBP: 00007fd3d49351d0 R08: 0000000000000000 R09: 0000000000000000 [ 388.596060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.597578] R13: 00007fffde70476f R14: 00007fd3d4935300 R15: 0000000000022000 [ 388.605490] FAULT_INJECTION: forcing a failure. [ 388.605490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.608042] CPU: 1 PID: 5471 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 388.609502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 388.611245] Call Trace: [ 388.611802] dump_stack+0x107/0x167 [ 388.612580] should_fail.cold+0x5/0xa [ 388.613387] _copy_from_user+0x2e/0x1b0 [ 388.614217] __copy_msghdr_from_user+0x91/0x4b0 [ 388.615196] ? __ia32_sys_shutdown+0x80/0x80 [ 388.616114] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 388.617227] ? __lock_acquire+0x1657/0x5b00 [ 388.618141] ? __lock_acquire+0xbb1/0x5b00 [ 388.619040] sendmsg_copy_msghdr+0xa1/0x160 [ 388.619953] ? do_recvmmsg+0x6d0/0x6d0 [ 388.620774] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 388.621873] ? lock_downgrade+0x6d0/0x6d0 [ 388.622741] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 388.623843] ___sys_sendmsg+0xc6/0x170 [ 388.624670] ? sendmsg_copy_msghdr+0x160/0x160 [ 388.625630] ? __fget_files+0x2cf/0x520 [ 388.626463] ? lock_downgrade+0x6d0/0x6d0 [ 388.627327] ? find_held_lock+0x2c/0x110 [ 388.628189] ? __fget_files+0x2f8/0x520 [ 388.629042] ? __fget_light+0xea/0x290 [ 388.629872] __sys_sendmsg+0xe5/0x1b0 [ 388.630683] ? __sys_sendmsg_sock+0x40/0x40 [ 388.631582] ? rcu_read_lock_any_held+0x75/0xa0 [ 388.632565] ? fput_many+0x2f/0x1a0 [ 388.633331] ? ksys_write+0x1a9/0x260 [ 388.634126] ? __ia32_sys_read+0xb0/0xb0 [ 388.634977] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 388.636070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 388.637165] ? trace_hardirqs_on+0x5b/0x180 [ 388.638075] do_syscall_64+0x33/0x40 [ 388.639023] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 388.640209] RIP: 0033:0x7fbd3de11b19 [ 388.641001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 388.644854] RSP: 002b:00007fbd3b387188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.646696] RAX: ffffffffffffffda RBX: 00007fbd3df24f60 RCX: 00007fbd3de11b19 [ 388.648549] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 04:50:26 executing program 6: syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() [ 388.650168] RBP: 00007fbd3b3871d0 R08: 0000000000000000 R09: 0000000000000000 [ 388.651788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.653297] R13: 00007ffcc3c4c65f R14: 00007fbd3b387300 R15: 0000000000022000 [ 388.673614] FAULT_INJECTION: forcing a failure. [ 388.673614] name failslab, interval 1, probability 0, space 0, times 0 [ 388.676214] CPU: 1 PID: 5476 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 388.677670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 388.679589] Call Trace: [ 388.680142] dump_stack+0x107/0x167 [ 388.681049] should_fail.cold+0x5/0xa [ 388.681853] ? __alloc_skb+0x6d/0x5b0 [ 388.682653] should_failslab+0x5/0x20 [ 388.683453] kmem_cache_alloc_node+0x55/0x330 [ 388.684588] __alloc_skb+0x6d/0x5b0 [ 388.685442] netlink_sendmsg+0x998/0xe00 [ 388.686496] ? netlink_unicast+0xa00/0xa00 [ 388.687390] ? netlink_unicast+0xa00/0xa00 [ 388.688284] __sock_sendmsg+0x154/0x190 [ 388.689130] ____sys_sendmsg+0x70d/0x870 [ 388.689983] ? sock_write_iter+0x3d0/0x3d0 [ 388.690868] ? do_recvmmsg+0x6d0/0x6d0 [ 388.691703] ? lock_downgrade+0x6d0/0x6d0 [ 388.692692] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 388.693801] ___sys_sendmsg+0xf3/0x170 [ 388.694618] ? sendmsg_copy_msghdr+0x160/0x160 [ 388.695589] ? __fget_files+0x2cf/0x520 [ 388.696429] ? lock_downgrade+0x6d0/0x6d0 [ 388.697419] ? find_held_lock+0x2c/0x110 [ 388.698282] ? __fget_files+0x2f8/0x520 [ 388.699129] ? __fget_light+0xea/0x290 [ 388.700056] __sys_sendmsg+0xe5/0x1b0 [ 388.700880] ? __sys_sendmsg_sock+0x40/0x40 [ 388.702073] ? rcu_read_lock_any_held+0x75/0xa0 [ 388.703301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 388.704485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 388.705564] ? trace_hardirqs_on+0x5b/0x180 [ 388.706470] do_syscall_64+0x33/0x40 [ 388.707253] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 388.708336] RIP: 0033:0x7f957b827b19 [ 388.709119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 388.712976] RSP: 002b:00007f9578d9d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.714732] RAX: ffffffffffffffda RBX: 00007f957b93af60 RCX: 00007f957b827b19 [ 388.716223] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 388.717717] RBP: 00007f9578d9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 388.719380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.721135] R13: 00007ffcc1909a8f R14: 00007f9578d9d300 R15: 0000000000022000 04:50:39 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) fork() 04:50:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r6, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r5, r4, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r7 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000140)={0x8, 0x10001, 0x4, 0x97ac, 0x40}) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r0, 0x0, r4, 0x2, 0x0, 0x1, {0x0, r10}}, 0x1) 04:50:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 4) 04:50:39 executing program 6: syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() [ 401.239620] FAULT_INJECTION: forcing a failure. [ 401.239620] name failslab, interval 1, probability 0, space 0, times 0 [ 401.242121] CPU: 1 PID: 5493 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 401.243548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 401.245299] Call Trace: [ 401.245856] dump_stack+0x107/0x167 [ 401.246808] should_fail.cold+0x5/0xa [ 401.247458] FAULT_INJECTION: forcing a failure. [ 401.247458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.247606] ? create_object.isra.0+0x3a/0xa30 [ 401.250345] should_failslab+0x5/0x20 [ 401.251149] kmem_cache_alloc+0x5b/0x310 [ 401.252001] create_object.isra.0+0x3a/0xa30 [ 401.252922] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 401.253996] kmem_cache_alloc_node+0x169/0x330 [ 401.254942] __alloc_skb+0x6d/0x5b0 [ 401.255707] netlink_sendmsg+0x998/0xe00 [ 401.256556] ? netlink_unicast+0xa00/0xa00 [ 401.257441] ? netlink_unicast+0xa00/0xa00 [ 401.258314] __sock_sendmsg+0x154/0x190 [ 401.259137] ____sys_sendmsg+0x70d/0x870 [ 401.259974] ? sock_write_iter+0x3d0/0x3d0 [ 401.260864] ? do_recvmmsg+0x6d0/0x6d0 [ 401.261680] ? lock_downgrade+0x6d0/0x6d0 [ 401.262545] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 401.263643] ___sys_sendmsg+0xf3/0x170 [ 401.264482] ? sendmsg_copy_msghdr+0x160/0x160 [ 401.265446] ? __fget_files+0x2cf/0x520 [ 401.266271] ? lock_downgrade+0x6d0/0x6d0 [ 401.267124] ? find_held_lock+0x2c/0x110 [ 401.268001] ? __fget_files+0x2f8/0x520 [ 401.268834] ? __fget_light+0xea/0x290 [ 401.269645] __sys_sendmsg+0xe5/0x1b0 [ 401.270458] ? __sys_sendmsg_sock+0x40/0x40 [ 401.271354] ? rcu_read_lock_any_held+0x75/0xa0 [ 401.272350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 401.273465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 401.274545] ? trace_hardirqs_on+0x5b/0x180 [ 401.275463] do_syscall_64+0x33/0x40 [ 401.276250] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 401.277335] RIP: 0033:0x7f957b827b19 [ 401.278120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 401.282015] RSP: 002b:00007f9578d9d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.283614] RAX: ffffffffffffffda RBX: 00007f957b93af60 RCX: 00007f957b827b19 [ 401.285123] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 401.286635] RBP: 00007f9578d9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 401.288147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.289665] R13: 00007ffcc1909a8f R14: 00007f9578d9d300 R15: 0000000000022000 [ 401.291210] CPU: 0 PID: 5495 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 401.292351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 401.293731] Call Trace: [ 401.294169] dump_stack+0x107/0x167 [ 401.294770] should_fail.cold+0x5/0xa [ 401.295402] _copy_from_iter_full+0x201/0xa60 [ 401.296136] ? __virt_addr_valid+0x170/0x5d0 [ 401.296884] ? __check_object_size+0x319/0x440 [ 401.297647] netlink_sendmsg+0x879/0xe00 [ 401.298327] ? netlink_unicast+0xa00/0xa00 [ 401.299028] ? netlink_unicast+0xa00/0xa00 [ 401.299731] __sock_sendmsg+0x154/0x190 [ 401.300389] ____sys_sendmsg+0x70d/0x870 [ 401.301084] ? sock_write_iter+0x3d0/0x3d0 [ 401.301785] ? do_recvmmsg+0x6d0/0x6d0 [ 401.302435] ? lock_downgrade+0x6d0/0x6d0 [ 401.303123] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 401.303984] ___sys_sendmsg+0xf3/0x170 [ 401.304638] ? sendmsg_copy_msghdr+0x160/0x160 [ 401.305392] ? __fget_files+0x2cf/0x520 [ 401.306023] ? lock_downgrade+0x6d0/0x6d0 [ 401.306661] ? find_held_lock+0x2c/0x110 [ 401.307309] ? __fget_files+0x2f8/0x520 [ 401.307950] ? __fget_light+0xea/0x290 [ 401.308602] __sys_sendmsg+0xe5/0x1b0 [ 401.309226] ? __sys_sendmsg_sock+0x40/0x40 [ 401.309928] ? rcu_read_lock_any_held+0x75/0xa0 [ 401.310676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 401.311500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 401.312308] ? trace_hardirqs_on+0x5b/0x180 [ 401.313012] do_syscall_64+0x33/0x40 [ 401.313598] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 401.314398] RIP: 0033:0x7fd3d73bfb19 [ 401.314979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 401.317890] RSP: 002b:00007fd3d4935188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.319085] RAX: ffffffffffffffda RBX: 00007fd3d74d2f60 RCX: 00007fd3d73bfb19 [ 401.320209] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 401.321353] RBP: 00007fd3d49351d0 R08: 0000000000000000 R09: 0000000000000000 [ 401.322477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.323592] R13: 00007fffde70476f R14: 00007fd3d4935300 R15: 0000000000022000 [ 401.330474] FAULT_INJECTION: forcing a failure. [ 401.330474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.332387] CPU: 0 PID: 5496 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 401.333483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 401.334776] Call Trace: [ 401.335189] dump_stack+0x107/0x167 [ 401.335759] should_fail.cold+0x5/0xa [ 401.336358] _copy_from_user+0x2e/0x1b0 [ 401.337016] iovec_from_user+0x141/0x400 [ 401.337660] __import_iovec+0x67/0x590 [ 401.338269] ? __ia32_sys_shutdown+0x80/0x80 [ 401.338956] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 401.339762] import_iovec+0x83/0xb0 [ 401.340336] sendmsg_copy_msghdr+0x131/0x160 [ 401.341043] ? do_recvmmsg+0x6d0/0x6d0 [ 401.341656] ? lock_downgrade+0x6d0/0x6d0 [ 401.342310] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 401.343134] ___sys_sendmsg+0xc6/0x170 [ 401.343749] ? sendmsg_copy_msghdr+0x160/0x160 [ 401.344485] ? __fget_files+0x2cf/0x520 [ 401.345118] ? lock_downgrade+0x6d0/0x6d0 [ 401.345767] ? find_held_lock+0x2c/0x110 [ 401.346391] ? __fget_files+0x2f8/0x520 [ 401.347026] ? __fget_light+0xea/0x290 [ 401.347640] __sys_sendmsg+0xe5/0x1b0 [ 401.348240] ? __sys_sendmsg_sock+0x40/0x40 [ 401.348937] ? rcu_read_lock_any_held+0x75/0xa0 [ 401.349672] ? fput_many+0x2f/0x1a0 [ 401.350243] ? ksys_write+0x1a9/0x260 [ 401.350849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 401.351673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 401.352460] ? trace_hardirqs_on+0x5b/0x180 [ 401.353162] do_syscall_64+0x33/0x40 [ 401.353748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 401.354549] RIP: 0033:0x7fbd3de11b19 [ 401.355132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 401.358044] RSP: 002b:00007fbd3b387188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.359240] RAX: ffffffffffffffda RBX: 00007fbd3df24f60 RCX: 00007fbd3de11b19 [ 401.360361] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 401.361507] RBP: 00007fbd3b3871d0 R08: 0000000000000000 R09: 0000000000000000 [ 401.362632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.363748] R13: 00007ffcc3c4c65f R14: 00007fbd3b387300 R15: 0000000000022000 [ 401.365625] FAULT_INJECTION: forcing a failure. [ 401.365625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.367479] CPU: 0 PID: 5502 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 401.368559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 401.369842] Call Trace: [ 401.370251] dump_stack+0x107/0x167 [ 401.370820] should_fail.cold+0x5/0xa [ 401.371416] _copy_from_user+0x2e/0x1b0 [ 401.372051] __copy_msghdr_from_user+0x91/0x4b0 [ 401.372822] ? __ia32_sys_shutdown+0x80/0x80 [ 401.373502] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 401.374316] ? __lock_acquire+0x1657/0x5b00 [ 401.374988] ? __lock_acquire+0xbb1/0x5b00 [ 401.375650] sendmsg_copy_msghdr+0xa1/0x160 [ 401.376317] ? do_recvmmsg+0x6d0/0x6d0 [ 401.376946] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 401.377760] ? lock_downgrade+0x6d0/0x6d0 [ 401.378406] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 401.379232] ___sys_sendmsg+0xc6/0x170 [ 401.379838] ? sendmsg_copy_msghdr+0x160/0x160 [ 401.380567] ? __fget_files+0x2cf/0x520 [ 401.381188] ? lock_downgrade+0x6d0/0x6d0 [ 401.381829] ? find_held_lock+0x2c/0x110 [ 401.382469] ? __fget_files+0x2f8/0x520 [ 401.383079] ? __fget_light+0xea/0x290 [ 401.383694] __sys_sendmsg+0xe5/0x1b0 [ 401.384273] ? __sys_sendmsg_sock+0x40/0x40 [ 401.384977] ? rcu_read_lock_any_held+0x75/0xa0 [ 401.385699] ? fput_many+0x2f/0x1a0 [ 401.386270] ? ksys_write+0x1a9/0x260 [ 401.386860] ? __ia32_sys_read+0xb0/0xb0 [ 401.387495] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 401.388312] ? syscall_enter_from_user_mode+0x1d/0x50 [ 401.389134] ? trace_hardirqs_on+0x5b/0x180 [ 401.389803] do_syscall_64+0x33/0x40 [ 401.390384] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 401.391181] RIP: 0033:0x7fbec8a71b19 [ 401.391761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 401.394700] RSP: 002b:00007fbec5fe7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.395952] RAX: ffffffffffffffda RBX: 00007fbec8b84f60 RCX: 00007fbec8a71b19 [ 401.397143] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 401.398311] RBP: 00007fbec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 401.399478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.400663] R13: 00007ffe51e97cef R14: 00007fbec5fe7300 R15: 0000000000022000 04:50:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 7) 04:50:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 2) 04:50:39 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000010000001800000024ebb7bee390388c99e55b9abc2598bc6b57c10f3d11286e78a3cb7012abf4bfc993d3544d6f8bfdffd71898e739d01ea7b5c87f5aa8821d5b2ff9ea8e790f83197481ef0d5204aaa14d09056571a019d67880a65fc3a08ebbaf5777ccb66fb4331d79e3907938457e08", @ANYRES32=r0, @ANYBLOB="203300b432248c7be494d04afada66696c65cb300052a64d2efd3c4680bd42f0d873c761340f99b4a20b644a94c56c4559efad426e56cf03c582402ec2918c86e2308436c9828c395645545266ee27fc84a28ce969ba5f39808d6881b4b8c991ec920346e265c9f36c4a91f7e7e52c2f1cadd306a87b5369cf7a01426b4cffffffff00000000cd178e16c5d3095a68ab20d7dcb85e6e490bd3a11bf36ba3c63a69b948444516c8"]) r2 = signalfd4(r1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x6f10, &(0x7f0000000980)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000001c0), 0x1000000000000328) r4 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x3e0, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000006c0)=ANY=[@ANYBLOB="0177c52e3f608dcf00000001a895162c1d5e1a0060edba5d4def106639efbd16de29ea4a99a159f8245eeaf9187af0b382c4ad7f5a84c3365c530d1a4bbc9476fb40fb7211225357b2a1772d63b1c649963dccd6400c8133a2fa9b2a3cec1a196951ddf4c8a5503ecbb779cc9d", @ANYRES32=r4, @ANYBLOB="f8ffffff000000002e2f6d6e702f5e696c653000a8b3794934c487f0dbaadb2c379545c6421e516f5e05a86c1bcb3a519c25e8ea807cfca92d98ed70c230c651de360792b9e2fff3394e4a46b8f460dae5fcb8b5880ae5f78ace17b1"]) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa63fd6a5717620d2}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index, 0x800, 0x0, 0x0, 0x10, 0x0, {0x1}}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r4, 0x58ab, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7e13, &(0x7f00000002c0)={0x0, 0x8028, 0xb84ce79827f56a75, 0x1, 0x3b4, 0x0, r4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000340)) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./mnt/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 04:50:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 1) 04:50:39 executing program 6: syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:50:39 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) fork() 04:50:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 3) [ 401.466853] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 401.516094] FAULT_INJECTION: forcing a failure. [ 401.516094] name failslab, interval 1, probability 0, space 0, times 0 [ 401.517870] CPU: 0 PID: 5516 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 401.518902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 401.520135] Call Trace: [ 401.520560] dump_stack+0x107/0x167 [ 401.521107] should_fail.cold+0x5/0xa [ 401.521679] ? __alloc_skb+0x6d/0x5b0 [ 401.522247] should_failslab+0x5/0x20 [ 401.522824] kmem_cache_alloc_node+0x55/0x330 [ 401.523495] __alloc_skb+0x6d/0x5b0 [ 401.524044] netlink_sendmsg+0x998/0xe00 [ 401.524684] ? netlink_unicast+0xa00/0xa00 [ 401.525383] ? netlink_unicast+0xa00/0xa00 [ 401.525993] __sock_sendmsg+0x154/0x190 [ 401.526583] ____sys_sendmsg+0x70d/0x870 [ 401.527189] ? sock_write_iter+0x3d0/0x3d0 [ 401.527813] ? do_recvmmsg+0x6d0/0x6d0 [ 401.528390] ? SOFTIRQ_verbose+0x10/0x10 [ 401.529020] ? lock_downgrade+0x6d0/0x6d0 [ 401.529633] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 401.530405] ? SOFTIRQ_verbose+0x10/0x10 [ 401.531006] ___sys_sendmsg+0xf3/0x170 [ 401.531589] ? sendmsg_copy_msghdr+0x160/0x160 [ 401.532249] ? __fget_files+0x2cf/0x520 [ 401.532860] ? lock_downgrade+0x6d0/0x6d0 [ 401.533471] ? find_held_lock+0x2c/0x110 [ 401.534083] ? __fget_files+0x2f8/0x520 [ 401.534675] ? __fget_light+0xea/0x290 [ 401.535255] __sys_sendmsg+0xe5/0x1b0 [ 401.535817] ? __sys_sendmsg_sock+0x40/0x40 [ 401.536455] ? rcu_read_lock_any_held+0x75/0xa0 [ 401.537172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 401.537945] ? syscall_enter_from_user_mode+0x1d/0x50 [ 401.538680] ? trace_hardirqs_on+0x5b/0x180 [ 401.539317] do_syscall_64+0x33/0x40 [ 401.539851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 401.540632] RIP: 0033:0x7fbd3de11b19 [ 401.541178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 401.543887] RSP: 002b:00007fbd3b387188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.545027] RAX: ffffffffffffffda RBX: 00007fbd3df24f60 RCX: 00007fbd3de11b19 [ 401.546078] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 401.547124] RBP: 00007fbd3b3871d0 R08: 0000000000000000 R09: 0000000000000000 [ 401.548178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.549247] R13: 00007ffcc3c4c65f R14: 00007fbd3b387300 R15: 0000000000022000 [ 417.990486] FAULT_INJECTION: forcing a failure. [ 417.990486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.993075] CPU: 0 PID: 5525 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 417.994520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 417.996265] Call Trace: [ 417.996842] dump_stack+0x107/0x167 [ 417.997605] should_fail.cold+0x5/0xa [ 417.998407] _copy_from_user+0x2e/0x1b0 [ 417.999242] iovec_from_user+0x141/0x400 [ 418.000095] __import_iovec+0x67/0x590 [ 418.000925] ? __ia32_sys_shutdown+0x80/0x80 [ 418.001844] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 418.003156] import_iovec+0x83/0xb0 [ 418.003922] sendmsg_copy_msghdr+0x131/0x160 [ 418.004860] ? do_recvmmsg+0x6d0/0x6d0 [ 418.005686] ? lock_downgrade+0x6d0/0x6d0 [ 418.006562] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 418.007353] FAULT_INJECTION: forcing a failure. [ 418.007353] name failslab, interval 1, probability 0, space 0, times 0 [ 418.007663] ___sys_sendmsg+0xc6/0x170 [ 418.010081] ? sendmsg_copy_msghdr+0x160/0x160 [ 418.011037] ? __fget_files+0x2cf/0x520 [ 418.011870] ? lock_downgrade+0x6d0/0x6d0 [ 418.012742] ? find_held_lock+0x2c/0x110 [ 418.013601] ? __fget_files+0x2f8/0x520 [ 418.014439] ? __fget_light+0xea/0x290 [ 418.015267] __sys_sendmsg+0xe5/0x1b0 [ 418.016063] ? __sys_sendmsg_sock+0x40/0x40 [ 418.016970] ? rcu_read_lock_any_held+0x75/0xa0 [ 418.017938] ? fput_many+0x2f/0x1a0 [ 418.018698] ? ksys_write+0x1a9/0x260 [ 418.019495] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 418.020597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 418.021686] ? trace_hardirqs_on+0x5b/0x180 [ 418.022690] do_syscall_64+0x33/0x40 [ 418.023567] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 418.024807] RIP: 0033:0x7fbec8a71b19 [ 418.025688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 418.030055] RSP: 002b:00007fbec5fe7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.031859] RAX: ffffffffffffffda RBX: 00007fbec8b84f60 RCX: 00007fbec8a71b19 [ 418.033581] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 418.035302] RBP: 00007fbec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 418.037037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.038748] R13: 00007ffe51e97cef R14: 00007fbec5fe7300 R15: 0000000000022000 [ 418.040489] CPU: 1 PID: 5536 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 418.041510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 04:50:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 2) 04:50:55 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000400)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}, {&(0x7f0000000100)="674a0d4dccba1d0af46fe61271f445c4500c2dcce57b58e4b86b43f805d787da915df639d0494b02ab55bf7c2c7ea5", 0x2f, 0x4}, {&(0x7f0000000240)="8db3d0297f5b93065cb27b5f48c629b0b3c5ad9a5e1d", 0x16, 0x7}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa43, 0x0) r3 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000040), 0x40000000}, {&(0x7f0000000340)=""/164, 0xa4}], 0x3) ftruncate(r1, 0xffff) pwrite64(r3, &(0x7f0000000300)="02f1fc9a3858e8df81c649c440eb08101c05bb79e3abfc019d47701eed90611d071f8b64d5c56ae8c197ade6c3bd3e5fa4308da33e39e3710d91c2a091210cfb1155017bccd685bd0b838236ca857a8c63d930b9855bb01f9aef0b74fdfc07f458881d42e62373", 0x67, 0x6) flock(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x100000001) bind(0xffffffffffffffff, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) move_mount(r5, &(0x7f00000004c0)='./file1\x00', r6, &(0x7f0000000540)='./file1\x00', 0x21) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40004, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000640)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r0, r7, &(0x7f0000000680)=0x800, 0x100000001) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000480)={0x7e, 0x1, 0x9, 0x0, 0x3f, 0x8}) sendfile(r1, r5, 0x0, 0x80000001) 04:50:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r6, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r5, r4, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r7 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000140)={0x8, 0x10001, 0x4, 0x97ac, 0x40}) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r0, 0x0, r4, 0x2, 0x0, 0x1, {0x0, r10}}, 0x1) 04:50:55 executing program 5: syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:50:55 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:50:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 5) 04:50:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 4) 04:50:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 8) [ 418.042730] Call Trace: [ 418.043199] dump_stack+0x107/0x167 [ 418.043831] should_fail.cold+0x5/0xa [ 418.044371] ? create_object.isra.0+0x3a/0xa30 [ 418.045016] should_failslab+0x5/0x20 [ 418.045548] kmem_cache_alloc+0x5b/0x310 [ 418.046127] create_object.isra.0+0x3a/0xa30 [ 418.046750] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 418.047471] kmem_cache_alloc_node+0x169/0x330 [ 418.048115] __alloc_skb+0x6d/0x5b0 [ 418.048627] netlink_sendmsg+0x998/0xe00 [ 418.049219] ? netlink_unicast+0xa00/0xa00 [ 418.049826] ? netlink_unicast+0xa00/0xa00 [ 418.050422] __sock_sendmsg+0x154/0x190 [ 418.050980] ____sys_sendmsg+0x70d/0x870 [ 418.051554] ? sock_write_iter+0x3d0/0x3d0 [ 418.052143] ? do_recvmmsg+0x6d0/0x6d0 [ 418.052695] ? lock_downgrade+0x6d0/0x6d0 [ 418.053279] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 418.054025] ___sys_sendmsg+0xf3/0x170 [ 418.054575] ? sendmsg_copy_msghdr+0x160/0x160 [ 418.055229] ? __fget_files+0x2cf/0x520 [ 418.055796] ? lock_downgrade+0x6d0/0x6d0 [ 418.056385] ? find_held_lock+0x2c/0x110 [ 418.056961] ? __fget_files+0x2f8/0x520 [ 418.057518] ? __fget_light+0xea/0x290 [ 418.058066] __sys_sendmsg+0xe5/0x1b0 [ 418.058220] FAULT_INJECTION: forcing a failure. [ 418.058220] name failslab, interval 1, probability 0, space 0, times 0 [ 418.058604] ? __sys_sendmsg_sock+0x40/0x40 [ 418.061840] ? rcu_read_lock_any_held+0x75/0xa0 [ 418.062501] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 418.063244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 418.063978] ? trace_hardirqs_on+0x5b/0x180 [ 418.064580] do_syscall_64+0x33/0x40 [ 418.065120] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 418.065840] RIP: 0033:0x7fbd3de11b19 [ 418.066363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 418.068948] RSP: 002b:00007fbd3b387188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.069999] RAX: ffffffffffffffda RBX: 00007fbd3df24f60 RCX: 00007fbd3de11b19 [ 418.070986] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 418.071965] RBP: 00007fbd3b3871d0 R08: 0000000000000000 R09: 0000000000000000 [ 418.072971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.073957] R13: 00007ffcc3c4c65f R14: 00007fbd3b387300 R15: 0000000000022000 [ 418.074972] CPU: 0 PID: 5538 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 418.076583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 418.078543] Call Trace: [ 418.079168] dump_stack+0x107/0x167 [ 418.080029] should_fail.cold+0x5/0xa [ 418.080940] should_failslab+0x5/0x20 [ 418.081836] __kmalloc_node_track_caller+0x74/0x3b0 [ 418.083015] ? netlink_sendmsg+0x998/0xe00 [ 418.084054] __alloc_skb+0xb1/0x5b0 [ 418.084968] netlink_sendmsg+0x998/0xe00 [ 418.085935] ? netlink_unicast+0xa00/0xa00 [ 418.086944] ? netlink_unicast+0xa00/0xa00 [ 418.087943] __sock_sendmsg+0x154/0x190 [ 418.088900] ____sys_sendmsg+0x70d/0x870 [ 418.089875] ? sock_write_iter+0x3d0/0x3d0 [ 418.090864] ? do_recvmmsg+0x6d0/0x6d0 [ 418.091787] ? lock_downgrade+0x6d0/0x6d0 [ 418.092776] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 418.094021] ___sys_sendmsg+0xf3/0x170 [ 418.094936] ? sendmsg_copy_msghdr+0x160/0x160 [ 418.096010] ? __fget_files+0x2cf/0x520 [ 418.096962] ? lock_downgrade+0x6d0/0x6d0 [ 418.097940] ? find_held_lock+0x2c/0x110 [ 418.098906] ? __fget_files+0x2f8/0x520 [ 418.099853] ? __fget_light+0xea/0x290 [ 418.100784] __sys_sendmsg+0xe5/0x1b0 [ 418.101675] ? __sys_sendmsg_sock+0x40/0x40 [ 418.102682] ? rcu_read_lock_any_held+0x75/0xa0 [ 418.103794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 418.105031] ? syscall_enter_from_user_mode+0x1d/0x50 [ 418.106237] ? trace_hardirqs_on+0x5b/0x180 [ 418.107256] do_syscall_64+0x33/0x40 [ 418.108136] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 418.109351] RIP: 0033:0x7f957b827b19 [ 418.110223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 418.114525] RSP: 002b:00007f9578d9d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.116302] RAX: ffffffffffffffda RBX: 00007f957b93af60 RCX: 00007f957b827b19 [ 418.117972] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 418.119636] RBP: 00007f9578d9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 418.121303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.122968] R13: 00007ffcc1909a8f R14: 00007f9578d9d300 R15: 0000000000022000 [ 418.125697] FAULT_INJECTION: forcing a failure. [ 418.125697] name failslab, interval 1, probability 0, space 0, times 0 [ 418.127566] CPU: 1 PID: 5537 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 418.128591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 418.129788] Call Trace: [ 418.130152] dump_stack+0x107/0x167 [ 418.130663] should_fail.cold+0x5/0xa [ 418.131185] ? genl_start+0x1e6/0x670 [ 418.131703] should_failslab+0x5/0x20 [ 418.132223] kmem_cache_alloc_trace+0x55/0x320 [ 418.132859] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 418.133542] ? netlink_lookup+0x270/0x500 [ 418.134107] genl_start+0x1e6/0x670 [ 418.134607] __netlink_dump_start+0x592/0x8e0 [ 418.135223] ? genl_family_rcv_msg_doit+0x330/0x330 [ 418.135906] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 418.136595] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 418.137303] ? genl_rcv+0x40/0x40 [ 418.137772] ? mutex_lock_io_nested+0xf30/0xf30 [ 418.138417] ? genl_family_rcv_msg_doit+0x330/0x330 [ 418.139095] ? genl_unlock+0x20/0x20 [ 418.139598] ? genl_parallel_done+0xc0/0xc0 [ 418.140190] ? genl_op_from_small+0x23/0x3d0 [ 418.140345] loop4: detected capacity change from 0 to 33559552 [ 418.140802] ? genl_get_cmd+0x3cf/0x480 [ 418.142719] genl_rcv_msg+0x44d/0x5a0 [ 418.143246] ? genl_get_cmd+0x480/0x480 [ 418.143792] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 418.144428] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 418.145128] ? lock_release+0x680/0x680 [ 418.145667] ? netlink_deliver_tap+0xf4/0xcc0 [ 418.146317] netlink_rcv_skb+0x14b/0x430 [ 418.146870] ? genl_get_cmd+0x480/0x480 [ 418.147416] ? netlink_ack+0xab0/0xab0 [ 418.147953] ? netlink_deliver_tap+0x1c4/0xcc0 [ 418.148587] ? is_vmalloc_addr+0x7b/0xb0 [ 418.149149] genl_rcv+0x24/0x40 [ 418.149601] netlink_unicast+0x6ce/0xa00 [ 418.150162] ? netlink_attachskb+0xab0/0xab0 [ 418.150763] netlink_sendmsg+0x90f/0xe00 [ 418.151330] ? netlink_unicast+0xa00/0xa00 [ 418.151920] ? netlink_unicast+0xa00/0xa00 [ 418.152498] __sock_sendmsg+0x154/0x190 [ 418.153055] ____sys_sendmsg+0x70d/0x870 [ 418.153603] ? sock_write_iter+0x3d0/0x3d0 [ 418.154188] ? do_recvmmsg+0x6d0/0x6d0 [ 418.154724] ? lock_downgrade+0x6d0/0x6d0 [ 418.155289] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 418.156017] ___sys_sendmsg+0xf3/0x170 [ 418.156545] ? sendmsg_copy_msghdr+0x160/0x160 [ 418.157176] ? __fget_files+0x2cf/0x520 [ 418.157711] ? lock_downgrade+0x6d0/0x6d0 [ 418.158269] ? find_held_lock+0x2c/0x110 [ 418.158822] ? __fget_files+0x2f8/0x520 [ 418.159363] ? __fget_light+0xea/0x290 [ 418.159893] __sys_sendmsg+0xe5/0x1b0 [ 418.160408] ? __sys_sendmsg_sock+0x40/0x40 [ 418.160990] ? rcu_read_lock_any_held+0x75/0xa0 [ 418.161630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 418.162334] ? syscall_enter_from_user_mode+0x1d/0x50 [ 418.163026] ? trace_hardirqs_on+0x5b/0x180 [ 418.163611] do_syscall_64+0x33/0x40 [ 418.164111] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 418.164802] RIP: 0033:0x7fd3d73bfb19 [ 418.165299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 418.167815] RSP: 002b:00007fd3d4935188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.168853] RAX: ffffffffffffffda RBX: 00007fd3d74d2f60 RCX: 00007fd3d73bfb19 [ 418.169819] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 418.170795] RBP: 00007fd3d49351d0 R08: 0000000000000000 R09: 0000000000000000 [ 418.171743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.172721] R13: 00007fffde70476f R14: 00007fd3d4935300 R15: 0000000000022000 04:50:56 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() [ 418.188144] FAT-fs (loop4): invalid media value (0x29) [ 418.188883] FAT-fs (loop4): Can't find a valid FAT filesystem 04:50:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 3) 04:50:56 executing program 5: syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:50:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 6) [ 418.251359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 418.278574] FAULT_INJECTION: forcing a failure. [ 418.278574] name failslab, interval 1, probability 0, space 0, times 0 [ 418.280096] CPU: 1 PID: 5552 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 418.280985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 418.282046] Call Trace: [ 418.282390] dump_stack+0x107/0x167 [ 418.282865] should_fail.cold+0x5/0xa [ 418.283365] ? __alloc_skb+0x6d/0x5b0 [ 418.283859] should_failslab+0x5/0x20 [ 418.284351] kmem_cache_alloc_node+0x55/0x330 [ 418.284933] __alloc_skb+0x6d/0x5b0 [ 418.285398] netlink_sendmsg+0x998/0xe00 [ 418.285922] ? netlink_unicast+0xa00/0xa00 [ 418.286471] ? netlink_unicast+0xa00/0xa00 [ 418.287010] __sock_sendmsg+0x154/0x190 [ 418.287514] ____sys_sendmsg+0x70d/0x870 [ 418.288038] ? sock_write_iter+0x3d0/0x3d0 [ 418.288579] ? do_recvmmsg+0x6d0/0x6d0 [ 418.289092] ? lock_downgrade+0x6d0/0x6d0 [ 418.289621] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 418.290293] ___sys_sendmsg+0xf3/0x170 [ 418.290792] ? sendmsg_copy_msghdr+0x160/0x160 [ 418.291378] ? __fget_files+0x2cf/0x520 [ 418.291882] ? lock_downgrade+0x6d0/0x6d0 [ 418.292418] ? find_held_lock+0x2c/0x110 [ 418.292949] ? __fget_files+0x2f8/0x520 [ 418.293470] ? __fget_light+0xea/0x290 [ 418.293975] __sys_sendmsg+0xe5/0x1b0 [ 418.294466] ? __sys_sendmsg_sock+0x40/0x40 [ 418.295024] ? rcu_read_lock_any_held+0x75/0xa0 [ 418.295631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 418.296303] ? syscall_enter_from_user_mode+0x1d/0x50 [ 418.296964] ? trace_hardirqs_on+0x5b/0x180 [ 418.297520] do_syscall_64+0x33/0x40 [ 418.297991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 418.298657] RIP: 0033:0x7fbec8a71b19 [ 418.299129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 418.301459] RSP: 002b:00007fbec5fe7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.302432] RAX: ffffffffffffffda RBX: 00007fbec8b84f60 RCX: 00007fbec8a71b19 [ 418.303328] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 418.304242] RBP: 00007fbec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 418.305162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.306075] R13: 00007ffe51e97cef R14: 00007fbec5fe7300 R15: 0000000000022000 04:50:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 5) [ 418.331255] FAULT_INJECTION: forcing a failure. [ 418.331255] name failslab, interval 1, probability 0, space 0, times 0 [ 418.334204] CPU: 0 PID: 5553 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 418.335802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 418.337688] Call Trace: [ 418.338287] dump_stack+0x107/0x167 [ 418.339114] should_fail.cold+0x5/0xa [ 418.339979] ? create_object.isra.0+0x3a/0xa30 [ 418.341131] should_failslab+0x5/0x20 [ 418.342026] kmem_cache_alloc+0x5b/0x310 [ 418.342954] create_object.isra.0+0x3a/0xa30 [ 418.343950] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 418.345119] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 418.346271] ? netlink_sendmsg+0x998/0xe00 [ 418.347234] __alloc_skb+0xb1/0x5b0 [ 418.348065] netlink_sendmsg+0x998/0xe00 [ 418.348999] ? netlink_unicast+0xa00/0xa00 [ 418.349967] ? netlink_unicast+0xa00/0xa00 [ 418.350930] __sock_sendmsg+0x154/0x190 [ 418.351848] ____sys_sendmsg+0x70d/0x870 [ 418.352811] ? sock_write_iter+0x3d0/0x3d0 [ 418.353796] ? do_recvmmsg+0x6d0/0x6d0 [ 418.354698] ? lock_downgrade+0x6d0/0x6d0 [ 418.355657] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 418.356869] ___sys_sendmsg+0xf3/0x170 [ 418.357764] ? sendmsg_copy_msghdr+0x160/0x160 [ 418.358809] ? __fget_files+0x2cf/0x520 [ 418.359716] ? lock_downgrade+0x6d0/0x6d0 [ 418.360675] ? find_held_lock+0x2c/0x110 [ 418.361609] ? __fget_files+0x2f8/0x520 [ 418.362526] ? __fget_light+0xea/0x290 [ 418.363431] __sys_sendmsg+0xe5/0x1b0 [ 418.364303] ? __sys_sendmsg_sock+0x40/0x40 [ 418.365301] ? rcu_read_lock_any_held+0x75/0xa0 [ 418.366376] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 418.367574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 418.368756] ? trace_hardirqs_on+0x5b/0x180 [ 418.369744] do_syscall_64+0x33/0x40 [ 418.370605] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 418.371773] RIP: 0033:0x7f957b827b19 [ 418.372617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 418.376844] RSP: 002b:00007f9578d9d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.378570] RAX: ffffffffffffffda RBX: 00007f957b93af60 RCX: 00007f957b827b19 [ 418.380189] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 418.381829] RBP: 00007f9578d9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 418.383446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.385073] R13: 00007ffcc1909a8f R14: 00007f9578d9d300 R15: 0000000000022000 04:50:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 4) 04:50:56 executing program 5: syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:50:56 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:50:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 9) [ 418.425271] FAULT_INJECTION: forcing a failure. [ 418.425271] name failslab, interval 1, probability 0, space 0, times 0 [ 418.426658] CPU: 1 PID: 5561 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 418.427465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 418.428441] Call Trace: [ 418.428789] dump_stack+0x107/0x167 [ 418.429223] should_fail.cold+0x5/0xa [ 418.429678] should_failslab+0x5/0x20 [ 418.430130] __kmalloc_node_track_caller+0x74/0x3b0 [ 418.430719] ? netlink_sendmsg+0x998/0xe00 [ 418.431225] __alloc_skb+0xb1/0x5b0 [ 418.431659] netlink_sendmsg+0x998/0xe00 [ 418.432141] ? netlink_unicast+0xa00/0xa00 [ 418.432648] ? netlink_unicast+0xa00/0xa00 [ 418.433158] __sock_sendmsg+0x154/0x190 [ 418.433627] ____sys_sendmsg+0x70d/0x870 [ 418.434107] ? sock_write_iter+0x3d0/0x3d0 [ 418.434605] ? do_recvmmsg+0x6d0/0x6d0 [ 418.435067] ? lock_downgrade+0x6d0/0x6d0 [ 418.435552] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 418.436175] ___sys_sendmsg+0xf3/0x170 [ 418.436639] ? sendmsg_copy_msghdr+0x160/0x160 [ 418.437187] ? __fget_files+0x2cf/0x520 [ 418.437655] ? lock_downgrade+0x6d0/0x6d0 [ 418.438141] ? find_held_lock+0x2c/0x110 [ 418.438625] ? __fget_files+0x2f8/0x520 [ 418.439096] ? __fget_light+0xea/0x290 [ 418.439559] __sys_sendmsg+0xe5/0x1b0 [ 418.440007] ? __sys_sendmsg_sock+0x40/0x40 [ 418.440518] ? rcu_read_lock_any_held+0x75/0xa0 [ 418.441090] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 418.441709] ? syscall_enter_from_user_mode+0x1d/0x50 [ 418.442311] ? trace_hardirqs_on+0x5b/0x180 [ 418.442818] do_syscall_64+0x33/0x40 [ 418.443253] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 418.443855] RIP: 0033:0x7fbd3de11b19 [ 418.444293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 418.446465] RSP: 002b:00007fbd3b387188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.447357] RAX: ffffffffffffffda RBX: 00007fbd3df24f60 RCX: 00007fbd3de11b19 [ 418.448188] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 418.449030] RBP: 00007fbd3b3871d0 R08: 0000000000000000 R09: 0000000000000000 [ 418.449861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.450691] R13: 00007ffcc3c4c65f R14: 00007fbd3b387300 R15: 0000000000022000 [ 418.463107] FAULT_INJECTION: forcing a failure. [ 418.463107] name failslab, interval 1, probability 0, space 0, times 0 [ 418.465686] CPU: 0 PID: 5564 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 418.467233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 418.469143] Call Trace: [ 418.469744] dump_stack+0x107/0x167 [ 418.470575] should_fail.cold+0x5/0xa [ 418.471445] ? create_object.isra.0+0x3a/0xa30 [ 418.472479] should_failslab+0x5/0x20 [ 418.473354] kmem_cache_alloc+0x5b/0x310 [ 418.474283] create_object.isra.0+0x3a/0xa30 [ 418.475280] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 418.476435] kmem_cache_alloc_node+0x169/0x330 [ 418.477493] __alloc_skb+0x6d/0x5b0 [ 418.478318] netlink_sendmsg+0x998/0xe00 [ 418.479247] ? netlink_unicast+0xa00/0xa00 [ 418.479285] FAULT_INJECTION: forcing a failure. [ 418.479285] name failslab, interval 1, probability 0, space 0, times 0 [ 418.480207] ? netlink_unicast+0xa00/0xa00 [ 418.480234] __sock_sendmsg+0x154/0x190 [ 418.483363] ____sys_sendmsg+0x70d/0x870 [ 418.484293] ? sock_write_iter+0x3d0/0x3d0 [ 418.485270] ? do_recvmmsg+0x6d0/0x6d0 [ 418.486161] ? lock_downgrade+0x6d0/0x6d0 [ 418.487114] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 418.488321] ___sys_sendmsg+0xf3/0x170 [ 418.489217] ? sendmsg_copy_msghdr+0x160/0x160 [ 418.490259] ? __fget_files+0x2cf/0x520 [ 418.491164] ? lock_downgrade+0x6d0/0x6d0 [ 418.492112] ? find_held_lock+0x2c/0x110 [ 418.493054] ? __fget_files+0x2f8/0x520 [ 418.493972] ? __fget_light+0xea/0x290 [ 418.494870] __sys_sendmsg+0xe5/0x1b0 [ 418.495736] ? __sys_sendmsg_sock+0x40/0x40 [ 418.496725] ? rcu_read_lock_any_held+0x75/0xa0 [ 418.497805] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 418.498998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 418.500200] ? trace_hardirqs_on+0x5b/0x180 [ 418.501211] do_syscall_64+0x33/0x40 [ 418.502056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 418.503216] RIP: 0033:0x7fbec8a71b19 [ 418.504058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 418.508252] RSP: 002b:00007fbec5fe7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.509986] RAX: ffffffffffffffda RBX: 00007fbec8b84f60 RCX: 00007fbec8a71b19 [ 418.511598] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 418.513220] RBP: 00007fbec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 418.514832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.516439] R13: 00007ffe51e97cef R14: 00007fbec5fe7300 R15: 0000000000022000 [ 418.518076] CPU: 1 PID: 5566 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 418.519042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 418.519986] Call Trace: [ 418.520290] dump_stack+0x107/0x167 [ 418.520710] should_fail.cold+0x5/0xa [ 418.521144] ? create_object.isra.0+0x3a/0xa30 [ 418.521777] should_failslab+0x5/0x20 [ 418.522215] kmem_cache_alloc+0x5b/0x310 [ 418.522676] ? lock_downgrade+0x6d0/0x6d0 [ 418.523153] create_object.isra.0+0x3a/0xa30 [ 418.523656] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 418.524233] kmem_cache_alloc_trace+0x151/0x320 [ 418.524795] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 418.525467] genl_start+0x1e6/0x670 [ 418.525883] __netlink_dump_start+0x592/0x8e0 [ 418.526394] ? genl_family_rcv_msg_doit+0x330/0x330 [ 418.526965] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 418.527530] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 418.528096] ? genl_rcv+0x40/0x40 [ 418.528492] ? mutex_lock_io_nested+0xf30/0xf30 [ 418.529036] ? genl_family_rcv_msg_doit+0x330/0x330 [ 418.529603] ? genl_unlock+0x20/0x20 [ 418.530024] ? genl_parallel_done+0xc0/0xc0 [ 418.530517] ? genl_op_from_small+0x23/0x3d0 [ 418.531018] ? genl_get_cmd+0x3cf/0x480 [ 418.531472] genl_rcv_msg+0x44d/0x5a0 [ 418.531907] ? genl_get_cmd+0x480/0x480 [ 418.532358] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 418.532882] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 418.533448] ? lock_release+0x680/0x680 [ 418.533899] ? netlink_deliver_tap+0xf4/0xcc0 [ 418.534410] netlink_rcv_skb+0x14b/0x430 [ 418.534872] ? genl_get_cmd+0x480/0x480 [ 418.535324] ? netlink_ack+0xab0/0xab0 [ 418.535771] ? netlink_deliver_tap+0x1c4/0xcc0 [ 418.536290] ? is_vmalloc_addr+0x7b/0xb0 [ 418.536760] genl_rcv+0x24/0x40 [ 418.537140] netlink_unicast+0x6ce/0xa00 [ 418.537625] ? netlink_attachskb+0xab0/0xab0 [ 418.538140] netlink_sendmsg+0x90f/0xe00 [ 418.538604] ? netlink_unicast+0xa00/0xa00 [ 418.539086] ? netlink_unicast+0xa00/0xa00 [ 418.539570] __sock_sendmsg+0x154/0x190 [ 418.540023] ____sys_sendmsg+0x70d/0x870 [ 418.540488] ? sock_write_iter+0x3d0/0x3d0 [ 418.540977] ? do_recvmmsg+0x6d0/0x6d0 [ 418.541422] ? lock_downgrade+0x6d0/0x6d0 [ 418.541900] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 418.542499] ___sys_sendmsg+0xf3/0x170 [ 418.542946] ? sendmsg_copy_msghdr+0x160/0x160 [ 418.543473] ? __fget_files+0x2cf/0x520 [ 418.543927] ? lock_downgrade+0x6d0/0x6d0 [ 418.544400] ? find_held_lock+0x2c/0x110 [ 418.544877] ? __fget_files+0x2f8/0x520 [ 418.545332] ? __fget_light+0xea/0x290 [ 418.545780] __sys_sendmsg+0xe5/0x1b0 [ 418.546224] ? __sys_sendmsg_sock+0x40/0x40 [ 418.546718] ? rcu_read_lock_any_held+0x75/0xa0 [ 418.547257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 418.547851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 418.548434] ? trace_hardirqs_on+0x5b/0x180 [ 418.548934] do_syscall_64+0x33/0x40 [ 418.549359] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 418.549939] RIP: 0033:0x7fd3d73bfb19 [ 418.550359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 418.552443] RSP: 002b:00007fd3d4935188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.553320] RAX: ffffffffffffffda RBX: 00007fd3d74d2f60 RCX: 00007fd3d73bfb19 [ 418.554127] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 418.554934] RBP: 00007fd3d49351d0 R08: 0000000000000000 R09: 0000000000000000 [ 418.555741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.556551] R13: 00007fffde70476f R14: 00007fd3d4935300 R15: 0000000000022000 [ 418.730518] loop4: detected capacity change from 0 to 33559552 [ 418.736315] FAT-fs (loop4): invalid media value (0x29) [ 418.736923] FAT-fs (loop4): Can't find a valid FAT filesystem 04:51:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 6) [ 431.022830] FAULT_INJECTION: forcing a failure. [ 431.022830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.024241] CPU: 1 PID: 5581 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 431.025045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 431.025981] Call Trace: [ 431.026294] dump_stack+0x107/0x167 [ 431.026719] should_fail.cold+0x5/0xa [ 431.026926] FAULT_INJECTION: forcing a failure. [ 431.026926] name failslab, interval 1, probability 0, space 0, times 0 [ 431.027155] _copy_from_iter_full+0x201/0xa60 [ 431.027167] ? __virt_addr_valid+0x170/0x5d0 [ 431.027179] ? __check_object_size+0x319/0x440 [ 431.027198] netlink_sendmsg+0x879/0xe00 [ 431.032007] ? netlink_unicast+0xa00/0xa00 [ 431.032508] ? netlink_unicast+0xa00/0xa00 [ 431.033016] __sock_sendmsg+0x154/0x190 [ 431.033480] ____sys_sendmsg+0x70d/0x870 [ 431.033959] ? sock_write_iter+0x3d0/0x3d0 [ 431.034450] ? do_recvmmsg+0x6d0/0x6d0 [ 431.034900] ? lock_downgrade+0x6d0/0x6d0 [ 431.035381] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 431.035990] ___sys_sendmsg+0xf3/0x170 [ 431.036444] ? sendmsg_copy_msghdr+0x160/0x160 [ 431.036981] ? __fget_files+0x2cf/0x520 [ 431.037441] ? lock_downgrade+0x6d0/0x6d0 [ 431.037921] ? find_held_lock+0x2c/0x110 [ 431.038382] ? __fget_files+0x2f8/0x520 [ 431.038850] ? __fget_light+0xea/0x290 [ 431.039306] __sys_sendmsg+0xe5/0x1b0 [ 431.039745] ? __sys_sendmsg_sock+0x40/0x40 [ 431.040244] ? rcu_read_lock_any_held+0x75/0xa0 [ 431.040789] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 431.041408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 431.041991] ? trace_hardirqs_on+0x5b/0x180 [ 431.042494] do_syscall_64+0x33/0x40 [ 431.042912] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 431.043503] RIP: 0033:0x7f957b827b19 [ 431.043938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.046056] RSP: 002b:00007f9578d9d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.046938] RAX: ffffffffffffffda RBX: 00007f957b93af60 RCX: 00007f957b827b19 [ 431.047744] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 431.048565] RBP: 00007f9578d9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 431.049395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.050213] R13: 00007ffcc1909a8f R14: 00007f9578d9d300 R15: 0000000000022000 [ 431.051037] CPU: 0 PID: 5583 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 431.052798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 431.054932] Call Trace: [ 431.055613] dump_stack+0x107/0x167 [ 431.056546] should_fail.cold+0x5/0xa [ 431.057536] ? create_object.isra.0+0x3a/0xa30 [ 431.058703] should_failslab+0x5/0x20 [ 431.059686] kmem_cache_alloc+0x5b/0x310 [ 431.060731] create_object.isra.0+0x3a/0xa30 [ 431.061872] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 431.063175] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 431.064478] ? netlink_sendmsg+0x998/0xe00 [ 431.065574] __alloc_skb+0xb1/0x5b0 [ 431.066519] netlink_sendmsg+0x998/0xe00 [ 431.067564] ? netlink_unicast+0xa00/0xa00 [ 431.068668] ? netlink_unicast+0xa00/0xa00 [ 431.069757] __sock_sendmsg+0x154/0x190 [ 431.070774] ____sys_sendmsg+0x70d/0x870 [ 431.071816] ? sock_write_iter+0x3d0/0x3d0 [ 431.072901] ? do_recvmmsg+0x6d0/0x6d0 [ 431.073909] ? lock_downgrade+0x6d0/0x6d0 [ 431.074972] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 431.076317] ___sys_sendmsg+0xf3/0x170 [ 431.077337] ? sendmsg_copy_msghdr+0x160/0x160 [ 431.078407] ? __fget_files+0x2cf/0x520 [ 431.079318] ? lock_downgrade+0x6d0/0x6d0 [ 431.080277] ? find_held_lock+0x2c/0x110 [ 431.081241] ? __fget_files+0x2f8/0x520 [ 431.082159] ? __fget_light+0xea/0x290 [ 431.083055] __sys_sendmsg+0xe5/0x1b0 [ 431.083924] ? __sys_sendmsg_sock+0x40/0x40 [ 431.084918] ? rcu_read_lock_any_held+0x75/0xa0 [ 431.085977] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 431.087149] ? syscall_enter_from_user_mode+0x1d/0x50 [ 431.088301] ? trace_hardirqs_on+0x5b/0x180 [ 431.089280] do_syscall_64+0x33/0x40 [ 431.090116] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 431.091285] RIP: 0033:0x7fbd3de11b19 [ 431.092120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.096279] RSP: 002b:00007fbd3b387188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.097996] RAX: ffffffffffffffda RBX: 00007fbd3df24f60 RCX: 00007fbd3de11b19 [ 431.099604] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 431.101218] RBP: 00007fbd3b3871d0 R08: 0000000000000000 R09: 0000000000000000 [ 431.102837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.104451] R13: 00007ffcc3c4c65f R14: 00007fbd3b387300 R15: 0000000000022000 04:51:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 7) 04:51:09 executing program 5: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 5) 04:51:09 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000400)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}, {&(0x7f0000000100)="674a0d4dccba1d0af46fe61271f445c4500c2dcce57b58e4b86b43f805d787da915df639d0494b02ab55bf7c2c7ea5", 0x2f, 0x4}, {&(0x7f0000000240)="8db3d0297f5b93065cb27b5f48c629b0b3c5ad9a5e1d", 0x16, 0x7}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa43, 0x0) r3 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000040), 0x40000000}, {&(0x7f0000000340)=""/164, 0xa4}], 0x3) ftruncate(r1, 0xffff) pwrite64(r3, &(0x7f0000000300)="02f1fc9a3858e8df81c649c440eb08101c05bb79e3abfc019d47701eed90611d071f8b64d5c56ae8c197ade6c3bd3e5fa4308da33e39e3710d91c2a091210cfb1155017bccd685bd0b838236ca857a8c63d930b9855bb01f9aef0b74fdfc07f458881d42e62373", 0x67, 0x6) flock(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x100000001) bind(0xffffffffffffffff, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) move_mount(r5, &(0x7f00000004c0)='./file1\x00', r6, &(0x7f0000000540)='./file1\x00', 0x21) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40004, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000640)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r0, r7, &(0x7f0000000680)=0x800, 0x100000001) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000480)={0x7e, 0x1, 0x9, 0x0, 0x3f, 0x8}) sendfile(r1, r5, 0x0, 0x80000001) 04:51:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 10) 04:51:09 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r5, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r4, r3, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r6 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000140)={0x8, 0x10001, 0x4, 0x97ac, 0x40}) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) [ 431.121069] FAULT_INJECTION: forcing a failure. [ 431.121069] name failslab, interval 1, probability 0, space 0, times 0 [ 431.124119] CPU: 0 PID: 5582 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 431.125973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 431.128174] Call Trace: [ 431.128900] dump_stack+0x107/0x167 [ 431.129900] should_fail.cold+0x5/0xa [ 431.130965] should_failslab+0x5/0x20 [ 431.132046] __kmalloc_node_track_caller+0x74/0x3b0 [ 431.132288] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.133393] ? netlink_sendmsg+0x998/0xe00 [ 431.133428] __alloc_skb+0xb1/0x5b0 [ 431.136471] netlink_sendmsg+0x998/0xe00 [ 431.137583] ? netlink_unicast+0xa00/0xa00 [ 431.138733] ? netlink_unicast+0xa00/0xa00 [ 431.139886] __sock_sendmsg+0x154/0x190 [ 431.140967] ____sys_sendmsg+0x70d/0x870 [ 431.142066] ? sock_write_iter+0x3d0/0x3d0 [ 431.143210] ? do_recvmmsg+0x6d0/0x6d0 [ 431.144122] ? lock_downgrade+0x6d0/0x6d0 [ 431.145088] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 431.146268] ___sys_sendmsg+0xf3/0x170 [ 431.147144] ? sendmsg_copy_msghdr+0x160/0x160 [ 431.148200] ? __fget_files+0x2cf/0x520 [ 431.149112] ? lock_downgrade+0x6d0/0x6d0 [ 431.150037] ? find_held_lock+0x2c/0x110 [ 431.150962] ? __fget_files+0x2f8/0x520 [ 431.151871] ? __fget_light+0xea/0x290 [ 431.152775] __sys_sendmsg+0xe5/0x1b0 [ 431.153639] ? __sys_sendmsg_sock+0x40/0x40 [ 431.154603] ? rcu_read_lock_any_held+0x75/0xa0 [ 431.155661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 431.156850] ? syscall_enter_from_user_mode+0x1d/0x50 [ 431.157993] ? trace_hardirqs_on+0x5b/0x180 [ 431.158964] do_syscall_64+0x33/0x40 [ 431.159791] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 431.160944] RIP: 0033:0x7fbec8a71b19 [ 431.161771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.165899] RSP: 002b:00007fbec5fe7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.167598] RAX: ffffffffffffffda RBX: 00007fbec8b84f60 RCX: 00007fbec8a71b19 [ 431.169200] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 431.170796] RBP: 00007fbec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 431.172384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.173983] R13: 00007ffe51e97cef R14: 00007fbec5fe7300 R15: 0000000000022000 04:51:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 8) 04:51:09 executing program 5: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() [ 431.184172] loop4: detected capacity change from 0 to 33559552 [ 431.197690] FAULT_INJECTION: forcing a failure. [ 431.197690] name failslab, interval 1, probability 0, space 0, times 0 [ 431.200438] CPU: 0 PID: 5592 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 431.202019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 431.203889] Call Trace: [ 431.204484] dump_stack+0x107/0x167 [ 431.205315] should_fail.cold+0x5/0xa 04:51:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r5, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r4, r3, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r6 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000140)={0x8, 0x10001, 0x4, 0x97ac, 0x40}) [ 431.206173] ? __alloc_skb+0x6d/0x5b0 [ 431.207165] should_failslab+0x5/0x20 [ 431.208210] kmem_cache_alloc_node+0x55/0x330 [ 431.209536] __alloc_skb+0x6d/0x5b0 [ 431.210599] netlink_dump+0x195/0x11f0 [ 431.211737] ? trace_hardirqs_on+0x5b/0x180 [ 431.212984] ? netlink_deliver_tap+0xcc0/0xcc0 [ 431.214304] ? kasan_unpoison_shadow+0x33/0x50 [ 431.215511] ? genl_start+0x452/0x670 [ 431.216400] __netlink_dump_start+0x62e/0x8e0 [ 431.217451] ? genl_family_rcv_msg_doit+0x330/0x330 [ 431.218769] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 431.219908] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 431.221032] ? genl_rcv+0x40/0x40 [ 431.221811] ? mutex_lock_io_nested+0xf30/0xf30 [ 431.222870] ? genl_family_rcv_msg_doit+0x330/0x330 [ 431.223976] ? genl_unlock+0x20/0x20 [ 431.224817] ? genl_parallel_done+0xc0/0xc0 [ 431.225794] ? genl_op_from_small+0x23/0x3d0 [ 431.226787] ? genl_get_cmd+0x3cf/0x480 [ 431.227689] genl_rcv_msg+0x44d/0x5a0 [ 431.228553] ? genl_get_cmd+0x480/0x480 [ 431.229452] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 431.230479] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 431.231604] ? lock_release+0x680/0x680 [ 431.232505] ? asm_common_interrupt+0x1e/0x40 [ 431.233529] netlink_rcv_skb+0x14b/0x430 [ 431.234445] ? genl_get_cmd+0x480/0x480 [ 431.235346] ? netlink_ack+0xab0/0xab0 [ 431.236238] ? netlink_deliver_tap+0x1c4/0xcc0 [ 431.237284] ? is_vmalloc_addr+0x7b/0xb0 [ 431.238197] genl_rcv+0x24/0x40 [ 431.238934] netlink_unicast+0x6ce/0xa00 [ 431.239852] ? netlink_attachskb+0xab0/0xab0 [ 431.240866] netlink_sendmsg+0x90f/0xe00 [ 431.241786] ? netlink_unicast+0xa00/0xa00 [ 431.242751] ? netlink_unicast+0xa00/0xa00 [ 431.243707] __sock_sendmsg+0x154/0x190 [ 431.244618] ____sys_sendmsg+0x70d/0x870 [ 431.245541] ? sock_write_iter+0x3d0/0x3d0 [ 431.246488] ? do_recvmmsg+0x6d0/0x6d0 [ 431.247370] ? lock_downgrade+0x6d0/0x6d0 [ 431.248317] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 431.249508] ___sys_sendmsg+0xf3/0x170 [ 431.250383] ? sendmsg_copy_msghdr+0x160/0x160 [ 431.251412] ? __fget_files+0x2cf/0x520 [ 431.252301] ? lock_downgrade+0x6d0/0x6d0 [ 431.253243] ? find_held_lock+0x2c/0x110 [ 431.254178] ? __fget_files+0x2f8/0x520 [ 431.255078] ? __fget_light+0xea/0x290 [ 431.255963] __sys_sendmsg+0xe5/0x1b0 [ 431.256834] ? __sys_sendmsg_sock+0x40/0x40 [ 431.257790] ? rcu_read_lock_any_held+0x75/0xa0 [ 431.258857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 431.260038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 431.261203] ? trace_hardirqs_on+0x5b/0x180 [ 431.262183] do_syscall_64+0x33/0x40 [ 431.263017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 431.264176] RIP: 0033:0x7fd3d73bfb19 [ 431.265021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.269183] RSP: 002b:00007fd3d4935188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.270896] RAX: ffffffffffffffda RBX: 00007fd3d74d2f60 RCX: 00007fd3d73bfb19 [ 431.272500] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 431.274110] RBP: 00007fd3d49351d0 R08: 0000000000000000 R09: 0000000000000000 [ 431.275714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.277330] R13: 00007fffde70476f R14: 00007fd3d4935300 R15: 0000000000022000 [ 431.299136] FAULT_INJECTION: forcing a failure. [ 431.299136] name failslab, interval 1, probability 0, space 0, times 0 [ 431.301692] CPU: 0 PID: 5602 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 431.303236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 431.303373] FAT-fs (loop4): invalid media value (0x29) [ 431.305108] Call Trace: [ 431.305133] dump_stack+0x107/0x167 [ 431.305155] should_fail.cold+0x5/0xa [ 431.305735] FAT-fs (loop4): Can't find a valid FAT filesystem [ 431.306320] ? genl_start+0x1e6/0x670 [ 431.306339] should_failslab+0x5/0x20 [ 431.310755] kmem_cache_alloc_trace+0x55/0x320 [ 431.312081] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 431.313520] ? netlink_lookup+0x270/0x500 [ 431.314726] genl_start+0x1e6/0x670 [ 431.315803] __netlink_dump_start+0x592/0x8e0 [ 431.317113] ? genl_family_rcv_msg_doit+0x330/0x330 [ 431.318360] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 431.319511] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 431.320762] ? genl_rcv+0x40/0x40 [ 431.321562] ? mutex_lock_io_nested+0xf30/0xf30 [ 431.322623] ? genl_family_rcv_msg_doit+0x330/0x330 [ 431.323740] ? genl_unlock+0x20/0x20 [ 431.324575] ? genl_parallel_done+0xc0/0xc0 04:51:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 6) [ 431.325582] ? genl_op_from_small+0x23/0x3d0 [ 431.326725] ? genl_get_cmd+0x3cf/0x480 [ 431.327630] genl_rcv_msg+0x44d/0x5a0 [ 431.328504] ? genl_get_cmd+0x480/0x480 [ 431.329413] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 431.330442] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 431.331577] ? lock_release+0x680/0x680 [ 431.332472] ? netlink_deliver_tap+0xf4/0xcc0 [ 431.333501] netlink_rcv_skb+0x14b/0x430 [ 431.334419] ? genl_get_cmd+0x480/0x480 [ 431.335318] ? netlink_ack+0xab0/0xab0 [ 431.336200] ? netlink_deliver_tap+0x1c4/0xcc0 [ 431.337237] ? is_vmalloc_addr+0x7b/0xb0 [ 431.338150] genl_rcv+0x24/0x40 [ 431.338890] netlink_unicast+0x6ce/0xa00 [ 431.339809] ? netlink_attachskb+0xab0/0xab0 [ 431.340820] netlink_sendmsg+0x90f/0xe00 [ 431.341747] ? netlink_unicast+0xa00/0xa00 [ 431.342708] ? netlink_unicast+0xa00/0xa00 [ 431.343659] __sock_sendmsg+0x154/0x190 [ 431.344559] ____sys_sendmsg+0x70d/0x870 [ 431.345486] ? sock_write_iter+0x3d0/0x3d0 [ 431.346440] ? do_recvmmsg+0x6d0/0x6d0 [ 431.347317] ? lock_downgrade+0x6d0/0x6d0 [ 431.348252] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 431.349449] ___sys_sendmsg+0xf3/0x170 [ 431.350345] ? sendmsg_copy_msghdr+0x160/0x160 [ 431.351382] ? __fget_files+0x2cf/0x520 [ 431.352015] FAULT_INJECTION: forcing a failure. [ 431.352015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.352280] ? lock_downgrade+0x6d0/0x6d0 [ 431.354492] ? find_held_lock+0x2c/0x110 [ 431.355415] ? __fget_files+0x2f8/0x520 [ 431.356311] ? __fget_light+0xea/0x290 [ 431.357213] __sys_sendmsg+0xe5/0x1b0 [ 431.358078] ? __sys_sendmsg_sock+0x40/0x40 [ 431.359041] ? rcu_read_lock_any_held+0x75/0xa0 [ 431.360106] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 431.361297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 431.362453] ? trace_hardirqs_on+0x5b/0x180 [ 431.363421] do_syscall_64+0x33/0x40 [ 431.364261] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 431.365416] RIP: 0033:0x7f957b827b19 [ 431.366250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.370413] RSP: 002b:00007f9578d9d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.372122] RAX: ffffffffffffffda RBX: 00007f957b93af60 RCX: 00007f957b827b19 [ 431.373732] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 431.375340] RBP: 00007f9578d9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 431.376948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.378565] R13: 00007ffcc1909a8f R14: 00007f9578d9d300 R15: 0000000000022000 [ 431.380205] CPU: 1 PID: 5607 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 431.381012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 431.381944] Call Trace: 04:51:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 7) [ 431.382244] dump_stack+0x107/0x167 [ 431.382851] should_fail.cold+0x5/0xa [ 431.383317] _copy_from_iter_full+0x201/0xa60 [ 431.383824] ? __virt_addr_valid+0x170/0x5d0 [ 431.384321] ? __check_object_size+0x319/0x440 [ 431.384843] netlink_sendmsg+0x879/0xe00 [ 431.385301] ? netlink_unicast+0xa00/0xa00 [ 431.385780] ? netlink_unicast+0xa00/0xa00 [ 431.386256] __sock_sendmsg+0x154/0x190 [ 431.386792] ____sys_sendmsg+0x70d/0x870 [ 431.387395] ? sock_write_iter+0x3d0/0x3d0 [ 431.387871] ? do_recvmmsg+0x6d0/0x6d0 [ 431.388311] ? lock_downgrade+0x6d0/0x6d0 [ 431.388778] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 431.389399] ___sys_sendmsg+0xf3/0x170 [ 431.389977] ? sendmsg_copy_msghdr+0x160/0x160 [ 431.390642] ? __fget_files+0x2cf/0x520 [ 431.391091] ? lock_downgrade+0x6d0/0x6d0 [ 431.391557] ? find_held_lock+0x2c/0x110 [ 431.392020] ? __fget_files+0x2f8/0x520 [ 431.392472] ? __fget_light+0xea/0x290 [ 431.392922] __sys_sendmsg+0xe5/0x1b0 [ 431.393352] ? __sys_sendmsg_sock+0x40/0x40 [ 431.393836] ? rcu_read_lock_any_held+0x75/0xa0 [ 431.394369] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 431.394957] ? syscall_enter_from_user_mode+0x1d/0x50 [ 431.395538] ? trace_hardirqs_on+0x5b/0x180 [ 431.396025] do_syscall_64+0x33/0x40 [ 431.396446] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 431.397030] RIP: 0033:0x7fbd3de11b19 [ 431.397451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.399511] RSP: 002b:00007fbd3b387188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.400366] RAX: ffffffffffffffda RBX: 00007fbd3df24f60 RCX: 00007fbd3de11b19 [ 431.401179] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 431.401982] RBP: 00007fbd3b3871d0 R08: 0000000000000000 R09: 0000000000000000 [ 431.402786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.403588] R13: 00007ffcc3c4c65f R14: 00007fbd3b387300 R15: 0000000000022000 [ 431.404582] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:51:09 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:09 executing program 5: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() [ 431.443408] FAULT_INJECTION: forcing a failure. [ 431.443408] name failslab, interval 1, probability 0, space 0, times 0 [ 431.444927] CPU: 1 PID: 5610 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 431.445697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 431.446628] Call Trace: [ 431.446930] dump_stack+0x107/0x167 [ 431.447369] should_fail.cold+0x5/0xa [ 431.447929] ? create_object.isra.0+0x3a/0xa30 [ 431.448535] should_failslab+0x5/0x20 [ 431.449029] kmem_cache_alloc+0x5b/0x310 [ 431.449491] create_object.isra.0+0x3a/0xa30 [ 431.449986] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 431.450562] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 431.451134] ? netlink_sendmsg+0x998/0xe00 [ 431.451617] __alloc_skb+0xb1/0x5b0 [ 431.452029] netlink_sendmsg+0x998/0xe00 [ 431.452492] ? netlink_unicast+0xa00/0xa00 [ 431.452982] ? netlink_unicast+0xa00/0xa00 [ 431.453465] __sock_sendmsg+0x154/0x190 [ 431.453912] ____sys_sendmsg+0x70d/0x870 [ 431.454371] ? sock_write_iter+0x3d0/0x3d0 [ 431.454844] ? do_recvmmsg+0x6d0/0x6d0 [ 431.455287] ? lock_downgrade+0x6d0/0x6d0 [ 431.455752] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 431.456346] ___sys_sendmsg+0xf3/0x170 [ 431.456786] ? sendmsg_copy_msghdr+0x160/0x160 [ 431.457310] ? __fget_files+0x2cf/0x520 [ 431.457757] ? lock_downgrade+0x6d0/0x6d0 [ 431.458225] ? find_held_lock+0x2c/0x110 [ 431.458686] ? __fget_files+0x2f8/0x520 [ 431.459136] ? __fget_light+0xea/0x290 [ 431.459577] __sys_sendmsg+0xe5/0x1b0 [ 431.460007] ? __sys_sendmsg_sock+0x40/0x40 [ 431.460495] ? rcu_read_lock_any_held+0x75/0xa0 [ 431.461034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 431.461626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 431.462208] ? trace_hardirqs_on+0x5b/0x180 [ 431.462694] do_syscall_64+0x33/0x40 [ 431.463112] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 431.463690] RIP: 0033:0x7fbec8a71b19 [ 431.464108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.466188] RSP: 002b:00007fbec5fe7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.467045] RAX: ffffffffffffffda RBX: 00007fbec8b84f60 RCX: 00007fbec8a71b19 [ 431.467847] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 431.468648] RBP: 00007fbec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 431.469461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.470262] R13: 00007ffe51e97cef R14: 00007fbec5fe7300 R15: 0000000000022000 04:51:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r5, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r4, r3, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r6 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:51:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 11) 04:51:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 9) [ 431.556452] FAULT_INJECTION: forcing a failure. [ 431.556452] name failslab, interval 1, probability 0, space 0, times 0 [ 431.557807] CPU: 1 PID: 5618 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 431.558581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 431.559515] Call Trace: [ 431.559820] dump_stack+0x107/0x167 [ 431.560233] should_fail.cold+0x5/0xa [ 431.560665] ? create_object.isra.0+0x3a/0xa30 [ 431.561193] should_failslab+0x5/0x20 [ 431.561623] kmem_cache_alloc+0x5b/0x310 [ 431.562081] ? lock_downgrade+0x6d0/0x6d0 [ 431.562557] create_object.isra.0+0x3a/0xa30 [ 431.563053] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 431.563622] kmem_cache_alloc_trace+0x151/0x320 [ 431.564147] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 431.564710] genl_start+0x1e6/0x670 [ 431.565136] __netlink_dump_start+0x592/0x8e0 [ 431.565639] ? genl_family_rcv_msg_doit+0x330/0x330 [ 431.566200] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 431.566761] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 431.567324] ? genl_rcv+0x40/0x40 [ 431.567714] ? mutex_lock_io_nested+0xf30/0xf30 [ 431.568240] ? genl_family_rcv_msg_doit+0x330/0x330 [ 431.568792] ? genl_unlock+0x20/0x20 [ 431.569218] ? genl_parallel_done+0xc0/0xc0 [ 431.569708] ? genl_op_from_small+0x23/0x3d0 [ 431.570205] ? genl_get_cmd+0x3cf/0x480 [ 431.570659] genl_rcv_msg+0x44d/0x5a0 [ 431.571090] ? genl_get_cmd+0x480/0x480 [ 431.571536] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 431.572048] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 431.572610] ? lock_release+0x680/0x680 [ 431.573065] ? netlink_deliver_tap+0xf4/0xcc0 [ 431.573579] netlink_rcv_skb+0x14b/0x430 [ 431.574038] ? genl_get_cmd+0x480/0x480 [ 431.574485] ? netlink_ack+0xab0/0xab0 [ 431.574932] ? netlink_deliver_tap+0x1c4/0xcc0 [ 431.575448] ? is_vmalloc_addr+0x7b/0xb0 [ 431.575907] genl_rcv+0x24/0x40 [ 431.576276] netlink_unicast+0x6ce/0xa00 [ 431.576736] ? netlink_attachskb+0xab0/0xab0 [ 431.577244] netlink_sendmsg+0x90f/0xe00 [ 431.577707] ? netlink_unicast+0xa00/0xa00 [ 431.578186] ? netlink_unicast+0xa00/0xa00 [ 431.578664] __sock_sendmsg+0x154/0x190 [ 431.579114] ____sys_sendmsg+0x70d/0x870 [ 431.579572] ? sock_write_iter+0x3d0/0x3d0 [ 431.580050] ? do_recvmmsg+0x6d0/0x6d0 [ 431.580492] ? lock_downgrade+0x6d0/0x6d0 [ 431.580963] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 431.581571] ___sys_sendmsg+0xf3/0x170 [ 431.582012] ? sendmsg_copy_msghdr+0x160/0x160 [ 431.582529] ? __fget_files+0x2cf/0x520 [ 431.582977] ? lock_downgrade+0x6d0/0x6d0 [ 431.583443] ? find_held_lock+0x2c/0x110 [ 431.583906] ? __fget_files+0x2f8/0x520 [ 431.584359] ? __fget_light+0xea/0x290 [ 431.584799] __sys_sendmsg+0xe5/0x1b0 [ 431.585236] ? __sys_sendmsg_sock+0x40/0x40 [ 431.585723] ? rcu_read_lock_any_held+0x75/0xa0 [ 431.586254] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 431.586849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 431.587427] ? trace_hardirqs_on+0x5b/0x180 [ 431.587914] do_syscall_64+0x33/0x40 [ 431.588336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 431.588920] RIP: 0033:0x7f957b827b19 [ 431.589337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.591406] RSP: 002b:00007f9578d9d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.592266] RAX: ffffffffffffffda RBX: 00007f957b93af60 RCX: 00007f957b827b19 [ 431.593079] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 431.593885] RBP: 00007f9578d9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 431.594688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.595491] R13: 00007ffcc1909a8f R14: 00007f9578d9d300 R15: 0000000000022000 [ 431.600289] FAULT_INJECTION: forcing a failure. [ 431.600289] name failslab, interval 1, probability 0, space 0, times 0 [ 431.601587] CPU: 1 PID: 5619 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 431.602358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 431.603296] Call Trace: [ 431.603597] dump_stack+0x107/0x167 [ 431.604007] should_fail.cold+0x5/0xa [ 431.604440] ? create_object.isra.0+0x3a/0xa30 [ 431.604964] should_failslab+0x5/0x20 [ 431.605395] kmem_cache_alloc+0x5b/0x310 [ 431.605853] ? __sys_sendmsg+0xe5/0x1b0 [ 431.606299] ? do_syscall_64+0x33/0x40 [ 431.606739] create_object.isra.0+0x3a/0xa30 [ 431.607231] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 431.607803] kmem_cache_alloc_node+0x169/0x330 [ 431.608318] __alloc_skb+0x6d/0x5b0 [ 431.608730] netlink_dump+0x195/0x11f0 [ 431.609179] ? trace_hardirqs_on+0x5b/0x180 [ 431.609663] ? netlink_deliver_tap+0xcc0/0xcc0 [ 431.610177] ? kasan_unpoison_shadow+0x33/0x50 [ 431.610695] ? genl_start+0x452/0x670 [ 431.611128] __netlink_dump_start+0x62e/0x8e0 [ 431.611634] ? genl_family_rcv_msg_doit+0x330/0x330 [ 431.612200] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 431.612757] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 431.613331] ? genl_rcv+0x40/0x40 [ 431.613722] ? mutex_lock_io_nested+0xf30/0xf30 [ 431.614248] ? genl_family_rcv_msg_doit+0x330/0x330 [ 431.614808] ? genl_unlock+0x20/0x20 [ 431.615226] ? genl_parallel_done+0xc0/0xc0 [ 431.615714] ? genl_op_from_small+0x23/0x3d0 [ 431.616209] ? genl_get_cmd+0x3cf/0x480 [ 431.616659] genl_rcv_msg+0x44d/0x5a0 [ 431.617096] ? genl_get_cmd+0x480/0x480 [ 431.617540] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 431.618054] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 431.618615] ? lock_release+0x680/0x680 [ 431.619063] ? netlink_deliver_tap+0xf4/0xcc0 [ 431.619568] netlink_rcv_skb+0x14b/0x430 [ 431.620024] ? genl_get_cmd+0x480/0x480 [ 431.620470] ? netlink_ack+0xab0/0xab0 [ 431.620922] ? netlink_deliver_tap+0x1c4/0xcc0 [ 431.621436] ? is_vmalloc_addr+0x7b/0xb0 [ 431.621897] genl_rcv+0x24/0x40 [ 431.622265] netlink_unicast+0x6ce/0xa00 [ 431.622726] ? netlink_attachskb+0xab0/0xab0 [ 431.623227] netlink_sendmsg+0x90f/0xe00 [ 431.623689] ? netlink_unicast+0xa00/0xa00 [ 431.624170] ? netlink_unicast+0xa00/0xa00 [ 431.624648] __sock_sendmsg+0x154/0x190 [ 431.625103] ____sys_sendmsg+0x70d/0x870 [ 431.625563] ? sock_write_iter+0x3d0/0x3d0 [ 431.626036] ? do_recvmmsg+0x6d0/0x6d0 [ 431.626474] ? lock_downgrade+0x6d0/0x6d0 [ 431.626942] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 431.627536] ___sys_sendmsg+0xf3/0x170 [ 431.627976] ? sendmsg_copy_msghdr+0x160/0x160 [ 431.628492] ? __fget_files+0x2cf/0x520 [ 431.628948] ? lock_downgrade+0x6d0/0x6d0 [ 431.629418] ? find_held_lock+0x2c/0x110 [ 431.629879] ? __fget_files+0x2f8/0x520 [ 431.630328] ? __fget_light+0xea/0x290 [ 431.630770] __sys_sendmsg+0xe5/0x1b0 [ 431.631200] ? __sys_sendmsg_sock+0x40/0x40 [ 431.631688] ? rcu_read_lock_any_held+0x75/0xa0 [ 431.632221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 431.632810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 431.633393] ? trace_hardirqs_on+0x5b/0x180 [ 431.633879] do_syscall_64+0x33/0x40 [ 431.634300] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 431.634875] RIP: 0033:0x7fd3d73bfb19 [ 431.635292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 431.637372] RSP: 002b:00007fd3d4935188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.638229] RAX: ffffffffffffffda RBX: 00007fd3d74d2f60 RCX: 00007fd3d73bfb19 [ 431.639028] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 431.639830] RBP: 00007fd3d49351d0 R08: 0000000000000000 R09: 0000000000000000 [ 431.640629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.641438] R13: 00007fffde70476f R14: 00007fd3d4935300 R15: 0000000000022000 [ 431.662316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:51:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 7) 04:51:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r5, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r4, r3, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r6 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 04:51:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 12) 04:51:24 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000400)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}, {&(0x7f0000000100)="674a0d4dccba1d0af46fe61271f445c4500c2dcce57b58e4b86b43f805d787da915df639d0494b02ab55bf7c2c7ea5", 0x2f, 0x4}, {&(0x7f0000000240)="8db3d0297f5b93065cb27b5f48c629b0b3c5ad9a5e1d", 0x16, 0x7}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa43, 0x0) r3 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000040), 0x40000000}, {&(0x7f0000000340)=""/164, 0xa4}], 0x3) ftruncate(r1, 0xffff) pwrite64(r3, &(0x7f0000000300)="02f1fc9a3858e8df81c649c440eb08101c05bb79e3abfc019d47701eed90611d071f8b64d5c56ae8c197ade6c3bd3e5fa4308da33e39e3710d91c2a091210cfb1155017bccd685bd0b838236ca857a8c63d930b9855bb01f9aef0b74fdfc07f458881d42e62373", 0x67, 0x6) flock(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x100000001) bind(0xffffffffffffffff, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) move_mount(r5, &(0x7f00000004c0)='./file1\x00', r6, &(0x7f0000000540)='./file1\x00', 0x21) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40004, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000640)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r0, r7, &(0x7f0000000680)=0x800, 0x100000001) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000480)={0x7e, 0x1, 0x9, 0x0, 0x3f, 0x8}) sendfile(r1, r5, 0x0, 0x80000001) 04:51:24 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:24 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 8) 04:51:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 10) [ 446.398926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 446.412558] FAULT_INJECTION: forcing a failure. [ 446.412558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.414086] CPU: 1 PID: 5635 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 446.414952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 446.416001] Call Trace: [ 446.416343] dump_stack+0x107/0x167 [ 446.416814] should_fail.cold+0x5/0xa [ 446.417313] _copy_from_iter_full+0x201/0xa60 [ 446.417883] ? __virt_addr_valid+0x170/0x5d0 [ 446.418441] ? __check_object_size+0x319/0x440 [ 446.419021] netlink_sendmsg+0x879/0xe00 [ 446.419535] ? netlink_unicast+0xa00/0xa00 [ 446.420076] ? netlink_unicast+0xa00/0xa00 [ 446.420619] __sock_sendmsg+0x154/0x190 [ 446.421129] ____sys_sendmsg+0x70d/0x870 [ 446.421655] ? sock_write_iter+0x3d0/0x3d0 [ 446.422188] ? do_recvmmsg+0x6d0/0x6d0 [ 446.422681] ? lock_downgrade+0x6d0/0x6d0 [ 446.423204] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 446.423867] ___sys_sendmsg+0xf3/0x170 [ 446.424358] ? sendmsg_copy_msghdr+0x160/0x160 [ 446.424938] ? __fget_files+0x2cf/0x520 [ 446.425446] ? lock_downgrade+0x6d0/0x6d0 [ 446.425967] ? find_held_lock+0x2c/0x110 [ 446.426484] ? __fget_files+0x2f8/0x520 [ 446.426992] ? __fget_light+0xea/0x290 [ 446.427488] __sys_sendmsg+0xe5/0x1b0 [ 446.427973] ? __sys_sendmsg_sock+0x40/0x40 [ 446.428519] ? rcu_read_lock_any_held+0x75/0xa0 [ 446.429124] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 446.429388] loop4: detected capacity change from 0 to 33559552 [ 446.429786] ? syscall_enter_from_user_mode+0x1d/0x50 [ 446.429806] ? trace_hardirqs_on+0x5b/0x180 [ 446.432462] do_syscall_64+0x33/0x40 [ 446.432930] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 446.433634] RIP: 0033:0x7fbec8a71b19 [ 446.434100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 446.436420] RSP: 002b:00007fbec5fe7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.437380] RAX: ffffffffffffffda RBX: 00007fbec8b84f60 RCX: 00007fbec8a71b19 [ 446.438267] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 446.439155] RBP: 00007fbec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 446.440043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.440934] R13: 00007ffe51e97cef R14: 00007fbec5fe7300 R15: 0000000000022000 [ 446.450568] FAULT_INJECTION: forcing a failure. [ 446.450568] name failslab, interval 1, probability 0, space 0, times 0 [ 446.452010] CPU: 1 PID: 5642 Comm: syz-executor.0 Not tainted 5.10.244 #1 [ 446.452856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 446.453915] Call Trace: [ 446.454248] dump_stack+0x107/0x167 [ 446.454707] should_fail.cold+0x5/0xa [ 446.455186] ? genl_start+0x1e6/0x670 [ 446.455664] should_failslab+0x5/0x20 [ 446.456138] kmem_cache_alloc_trace+0x55/0x320 [ 446.456710] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 446.457341] ? netlink_lookup+0x270/0x500 [ 446.457870] genl_start+0x1e6/0x670 [ 446.458328] __netlink_dump_start+0x592/0x8e0 [ 446.458882] ? genl_family_rcv_msg_doit+0x330/0x330 [ 446.459507] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 446.460125] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 446.460741] ? genl_rcv+0x40/0x40 [ 446.461183] ? mutex_lock_io_nested+0xf30/0xf30 [ 446.461777] ? genl_family_rcv_msg_doit+0x330/0x330 [ 446.462393] ? genl_unlock+0x20/0x20 [ 446.462857] ? genl_parallel_done+0xc0/0xc0 [ 446.463394] ? genl_op_from_small+0x23/0x3d0 [ 446.463941] ? genl_get_cmd+0x3cf/0x480 [ 446.464438] genl_rcv_msg+0x44d/0x5a0 [ 446.464913] ? genl_get_cmd+0x480/0x480 [ 446.465417] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 446.465982] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 446.466615] ? lock_release+0x680/0x680 [ 446.467108] ? netlink_deliver_tap+0xf4/0xcc0 [ 446.467667] netlink_rcv_skb+0x14b/0x430 [ 446.468170] ? genl_get_cmd+0x480/0x480 [ 446.468663] ? netlink_ack+0xab0/0xab0 [ 446.469161] ? netlink_deliver_tap+0x1c4/0xcc0 [ 446.469726] ? is_vmalloc_addr+0x7b/0xb0 [ 446.470238] genl_rcv+0x24/0x40 [ 446.470647] netlink_unicast+0x6ce/0xa00 [ 446.471164] ? netlink_attachskb+0xab0/0xab0 [ 446.471713] netlink_sendmsg+0x90f/0xe00 [ 446.472224] ? netlink_unicast+0xa00/0xa00 [ 446.472759] ? netlink_unicast+0xa00/0xa00 [ 446.473308] __sock_sendmsg+0x154/0x190 [ 446.473805] ____sys_sendmsg+0x70d/0x870 [ 446.474314] ? sock_write_iter+0x3d0/0x3d0 [ 446.474847] ? do_recvmmsg+0x6d0/0x6d0 [ 446.475333] ? lock_downgrade+0x6d0/0x6d0 [ 446.475848] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 446.476500] ___sys_sendmsg+0xf3/0x170 [ 446.476979] ? sendmsg_copy_msghdr+0x160/0x160 [ 446.477558] ? __fget_files+0x2cf/0x520 [ 446.478048] ? lock_downgrade+0x6d0/0x6d0 [ 446.478554] ? find_held_lock+0x2c/0x110 [ 446.479057] ? __fget_files+0x2f8/0x520 [ 446.479552] ? __fget_light+0xea/0x290 [ 446.480034] __sys_sendmsg+0xe5/0x1b0 [ 446.480502] ? __sys_sendmsg_sock+0x40/0x40 [ 446.481039] ? rcu_read_lock_any_held+0x75/0xa0 [ 446.481620] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 446.482263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 446.482899] ? trace_hardirqs_on+0x5b/0x180 [ 446.483432] do_syscall_64+0x33/0x40 [ 446.483898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 446.484528] RIP: 0033:0x7fbd3de11b19 [ 446.484997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 446.487264] RSP: 002b:00007fbd3b387188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.488201] RAX: ffffffffffffffda RBX: 00007fbd3df24f60 RCX: 00007fbd3de11b19 [ 446.489086] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 446.489962] RBP: 00007fbd3b3871d0 R08: 0000000000000000 R09: 0000000000000000 [ 446.490836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.491713] R13: 00007ffcc3c4c65f R14: 00007fbd3b387300 R15: 0000000000022000 [ 446.494315] FAULT_INJECTION: forcing a failure. [ 446.494315] name failslab, interval 1, probability 0, space 0, times 0 [ 446.495711] CPU: 1 PID: 5643 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 446.496558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 446.497585] Call Trace: [ 446.497912] dump_stack+0x107/0x167 [ 446.498359] should_fail.cold+0x5/0xa [ 446.498833] ? __alloc_skb+0x6d/0x5b0 [ 446.499298] should_failslab+0x5/0x20 [ 446.499765] kmem_cache_alloc_node+0x55/0x330 [ 446.500321] __alloc_skb+0x6d/0x5b0 [ 446.500774] netlink_dump+0x195/0x11f0 [ 446.501264] ? trace_hardirqs_on+0x5b/0x180 [ 446.501789] ? netlink_deliver_tap+0xcc0/0xcc0 [ 446.502350] ? kasan_unpoison_shadow+0x33/0x50 [ 446.502922] ? genl_start+0x452/0x670 [ 446.503393] __netlink_dump_start+0x62e/0x8e0 [ 446.503939] ? genl_family_rcv_msg_doit+0x330/0x330 [ 446.504553] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 446.505178] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 446.505796] ? genl_rcv+0x40/0x40 [ 446.506223] ? mutex_lock_io_nested+0xf30/0xf30 [ 446.506796] ? genl_family_rcv_msg_doit+0x330/0x330 [ 446.507404] ? genl_unlock+0x20/0x20 [ 446.507858] ? genl_parallel_done+0xc0/0xc0 [ 446.508395] ? genl_op_from_small+0x23/0x3d0 [ 446.508938] ? genl_get_cmd+0x3cf/0x480 [ 446.509440] genl_rcv_msg+0x44d/0x5a0 [ 446.509906] ? genl_get_cmd+0x480/0x480 [ 446.510395] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 446.510950] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 446.511570] ? lock_release+0x680/0x680 [ 446.512055] ? netlink_deliver_tap+0xf4/0xcc0 [ 446.512610] netlink_rcv_skb+0x14b/0x430 [ 446.513116] ? genl_get_cmd+0x480/0x480 [ 446.513606] ? netlink_ack+0xab0/0xab0 [ 446.514087] ? netlink_deliver_tap+0x1c4/0xcc0 [ 446.514649] ? is_vmalloc_addr+0x7b/0xb0 [ 446.515153] genl_rcv+0x24/0x40 [ 446.515572] netlink_unicast+0x6ce/0xa00 [ 446.516073] ? netlink_attachskb+0xab0/0xab0 [ 446.516622] netlink_sendmsg+0x90f/0xe00 [ 446.517133] ? netlink_unicast+0xa00/0xa00 [ 446.517654] ? netlink_unicast+0xa00/0xa00 [ 446.518179] __sock_sendmsg+0x154/0x190 [ 446.518664] ____sys_sendmsg+0x70d/0x870 [ 446.519162] ? sock_write_iter+0x3d0/0x3d0 [ 446.519678] ? do_recvmmsg+0x6d0/0x6d0 [ 446.520153] ? lock_downgrade+0x6d0/0x6d0 [ 446.520664] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 446.521315] ___sys_sendmsg+0xf3/0x170 [ 446.521796] ? sendmsg_copy_msghdr+0x160/0x160 [ 446.522355] ? __fget_files+0x2cf/0x520 [ 446.522852] ? lock_downgrade+0x6d0/0x6d0 [ 446.523354] ? find_held_lock+0x2c/0x110 [ 446.523859] ? __fget_files+0x2f8/0x520 [ 446.524348] ? __fget_light+0xea/0x290 [ 446.524833] __sys_sendmsg+0xe5/0x1b0 [ 446.525307] ? __sys_sendmsg_sock+0x40/0x40 [ 446.525832] ? rcu_read_lock_any_held+0x75/0xa0 [ 446.526404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 446.527047] ? syscall_enter_from_user_mode+0x1d/0x50 [ 446.527668] ? trace_hardirqs_on+0x5b/0x180 [ 446.528196] do_syscall_64+0x33/0x40 [ 446.528654] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 446.529299] RIP: 0033:0x7f957b827b19 [ 446.529755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 446.532001] RSP: 002b:00007f9578d9d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.532926] RAX: ffffffffffffffda RBX: 00007f957b93af60 RCX: 00007f957b827b19 [ 446.533816] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 446.534683] RBP: 00007f9578d9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 446.535548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.536413] R13: 00007ffcc1909a8f R14: 00007f9578d9d300 R15: 0000000000022000 [ 446.540956] FAT-fs (loop4): invalid media value (0x29) [ 446.541744] FAT-fs (loop4): Can't find a valid FAT filesystem 04:51:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r5, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r4, r3, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000280)) [ 446.554146] FAULT_INJECTION: forcing a failure. [ 446.554146] name failslab, interval 1, probability 0, space 0, times 0 [ 446.555554] CPU: 1 PID: 5647 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 446.556431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 446.557435] Call Trace: [ 446.557750] dump_stack+0x107/0x167 [ 446.558187] should_fail.cold+0x5/0xa [ 446.558645] should_failslab+0x5/0x20 [ 446.559101] __kmalloc_node_track_caller+0x74/0x3b0 [ 446.559692] ? netlink_dump+0x195/0x11f0 [ 446.560181] __alloc_skb+0xb1/0x5b0 [ 446.560618] netlink_dump+0x195/0x11f0 [ 446.561097] ? trace_hardirqs_on+0x5b/0x180 [ 446.561614] ? netlink_deliver_tap+0xcc0/0xcc0 [ 446.562162] ? kasan_unpoison_shadow+0x33/0x50 [ 446.562712] ? genl_start+0x452/0x670 [ 446.563172] __netlink_dump_start+0x62e/0x8e0 [ 446.563710] ? genl_family_rcv_msg_doit+0x330/0x330 [ 446.564312] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 446.564915] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 446.565521] ? genl_rcv+0x40/0x40 [ 446.565952] ? mutex_lock_io_nested+0xf30/0xf30 [ 446.566513] ? genl_family_rcv_msg_doit+0x330/0x330 [ 446.567114] ? genl_unlock+0x20/0x20 [ 446.567554] ? genl_parallel_done+0xc0/0xc0 [ 446.568082] ? genl_op_from_small+0x23/0x3d0 [ 446.568605] ? genl_get_cmd+0x3cf/0x480 [ 446.569097] genl_rcv_msg+0x44d/0x5a0 [ 446.569562] ? genl_get_cmd+0x480/0x480 [ 446.570041] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 446.570585] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 446.571188] ? lock_release+0x680/0x680 [ 446.571659] ? netlink_deliver_tap+0xf4/0xcc0 [ 446.572196] netlink_rcv_skb+0x14b/0x430 [ 446.572690] ? genl_get_cmd+0x480/0x480 [ 446.573174] ? netlink_ack+0xab0/0xab0 [ 446.573645] ? netlink_deliver_tap+0x1c4/0xcc0 [ 446.574193] ? is_vmalloc_addr+0x7b/0xb0 [ 446.574684] genl_rcv+0x24/0x40 [ 446.575077] netlink_unicast+0x6ce/0xa00 [ 446.575563] ? netlink_attachskb+0xab0/0xab0 [ 446.576095] netlink_sendmsg+0x90f/0xe00 [ 446.576582] ? netlink_unicast+0xa00/0xa00 [ 446.577099] ? netlink_unicast+0xa00/0xa00 [ 446.577600] __sock_sendmsg+0x154/0x190 [ 446.578075] ____sys_sendmsg+0x70d/0x870 [ 446.578560] ? sock_write_iter+0x3d0/0x3d0 [ 446.579061] ? do_recvmmsg+0x6d0/0x6d0 [ 446.579527] ? lock_downgrade+0x6d0/0x6d0 [ 446.580023] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 446.580654] ___sys_sendmsg+0xf3/0x170 [ 446.581132] ? sendmsg_copy_msghdr+0x160/0x160 [ 446.581681] ? __fget_files+0x2cf/0x520 [ 446.582159] ? lock_downgrade+0x6d0/0x6d0 [ 446.582655] ? find_held_lock+0x2c/0x110 [ 446.583143] ? __fget_files+0x2f8/0x520 [ 446.583623] ? __fget_light+0xea/0x290 [ 446.584096] __sys_sendmsg+0xe5/0x1b0 [ 446.584557] ? __sys_sendmsg_sock+0x40/0x40 [ 446.585081] ? rcu_read_lock_any_held+0x75/0xa0 [ 446.585640] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 446.586263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 446.586874] ? trace_hardirqs_on+0x5b/0x180 [ 446.587391] do_syscall_64+0x33/0x40 [ 446.587842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 446.588448] RIP: 0033:0x7fd3d73bfb19 [ 446.588891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 446.591064] RSP: 002b:00007fd3d4935188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.591963] RAX: ffffffffffffffda RBX: 00007fd3d74d2f60 RCX: 00007fd3d73bfb19 [ 446.592808] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 446.593678] RBP: 00007fd3d49351d0 R08: 0000000000000000 R09: 0000000000000000 [ 446.594518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.595359] R13: 00007fffde70476f R14: 00007fd3d4935300 R15: 0000000000022000 04:51:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 8) 04:51:24 executing program 6: r0 = syz_io_uring_setup(0x132, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:24 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() [ 446.660681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 446.674281] FAULT_INJECTION: forcing a failure. [ 446.674281] name failslab, interval 1, probability 0, space 0, times 0 [ 446.675883] CPU: 1 PID: 5653 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 446.676668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 446.677621] Call Trace: [ 446.677924] dump_stack+0x107/0x167 [ 446.678340] should_fail.cold+0x5/0xa [ 446.678776] ? genl_start+0x1e6/0x670 [ 446.679206] should_failslab+0x5/0x20 [ 446.679641] kmem_cache_alloc_trace+0x55/0x320 [ 446.680160] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 446.680721] ? netlink_lookup+0x270/0x500 [ 446.681205] genl_start+0x1e6/0x670 [ 446.681622] __netlink_dump_start+0x592/0x8e0 [ 446.682132] ? genl_family_rcv_msg_doit+0x330/0x330 [ 446.682702] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 446.683271] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 446.683844] ? genl_rcv+0x40/0x40 [ 446.684239] ? mutex_lock_io_nested+0xf30/0xf30 [ 446.684775] ? genl_family_rcv_msg_doit+0x330/0x330 [ 446.685346] ? genl_unlock+0x20/0x20 [ 446.685771] ? genl_parallel_done+0xc0/0xc0 [ 446.686267] ? genl_op_from_small+0x23/0x3d0 [ 446.686764] ? genl_get_cmd+0x3cf/0x480 [ 446.687219] genl_rcv_msg+0x44d/0x5a0 [ 446.687651] ? genl_get_cmd+0x480/0x480 [ 446.688106] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 446.688624] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 446.689208] ? lock_release+0x680/0x680 [ 446.689660] ? netlink_deliver_tap+0xf4/0xcc0 [ 446.690176] netlink_rcv_skb+0x14b/0x430 [ 446.690635] ? genl_get_cmd+0x480/0x480 [ 446.691088] ? netlink_ack+0xab0/0xab0 [ 446.691533] ? netlink_deliver_tap+0x1c4/0xcc0 [ 446.692054] ? is_vmalloc_addr+0x7b/0xb0 [ 446.692516] genl_rcv+0x24/0x40 [ 446.692889] netlink_unicast+0x6ce/0xa00 [ 446.693356] ? netlink_attachskb+0xab0/0xab0 [ 446.693860] netlink_sendmsg+0x90f/0xe00 [ 446.694322] ? netlink_unicast+0xa00/0xa00 [ 446.694807] ? netlink_unicast+0xa00/0xa00 [ 446.695287] __sock_sendmsg+0x154/0x190 [ 446.695743] ____sys_sendmsg+0x70d/0x870 [ 446.696205] ? sock_write_iter+0x3d0/0x3d0 [ 446.696684] ? do_recvmmsg+0x6d0/0x6d0 [ 446.697134] ? lock_downgrade+0x6d0/0x6d0 [ 446.697606] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 446.698202] ___sys_sendmsg+0xf3/0x170 [ 446.698646] ? sendmsg_copy_msghdr+0x160/0x160 [ 446.699163] ? __fget_files+0x2cf/0x520 [ 446.699617] ? lock_downgrade+0x6d0/0x6d0 [ 446.700084] ? find_held_lock+0x2c/0x110 [ 446.700550] ? __fget_files+0x2f8/0x520 [ 446.701011] ? __fget_light+0xea/0x290 [ 446.701463] __sys_sendmsg+0xe5/0x1b0 [ 446.701901] ? __sys_sendmsg_sock+0x40/0x40 [ 446.702392] ? rcu_read_lock_any_held+0x75/0xa0 [ 446.702923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 446.703519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 446.704099] ? trace_hardirqs_on+0x5b/0x180 [ 446.704595] do_syscall_64+0x33/0x40 [ 446.705036] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 446.705619] RIP: 0033:0x7fbec8a71b19 [ 446.706044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 446.708137] RSP: 002b:00007fbec5fe7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.709010] RAX: ffffffffffffffda RBX: 00007fbec8b84f60 RCX: 00007fbec8a71b19 [ 446.709819] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 446.710625] RBP: 00007fbec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 446.711437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.712245] R13: 00007ffe51e97cef R14: 00007fbec5fe7300 R15: 0000000000022000 04:51:24 executing program 6: r0 = syz_io_uring_setup(0x132, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:24 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 11) 04:51:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r5, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r4, r3, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) 04:51:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 13) [ 446.838955] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:51:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 9) [ 446.891753] FAULT_INJECTION: forcing a failure. [ 446.891753] name failslab, interval 1, probability 0, space 0, times 0 [ 446.894184] CPU: 0 PID: 5672 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 446.895771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 446.897522] Call Trace: [ 446.898080] dump_stack+0x107/0x167 [ 446.898851] should_fail.cold+0x5/0xa [ 446.899655] ? create_object.isra.0+0x3a/0xa30 [ 446.900612] should_failslab+0x5/0x20 [ 446.901427] kmem_cache_alloc+0x5b/0x310 [ 446.902289] create_object.isra.0+0x3a/0xa30 [ 446.903221] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 446.904295] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 446.905374] ? netlink_dump+0x195/0x11f0 [ 446.906232] __alloc_skb+0xb1/0x5b0 [ 446.906993] netlink_dump+0x195/0x11f0 [ 446.907817] ? trace_hardirqs_on+0x5b/0x180 [ 446.908729] ? netlink_deliver_tap+0xcc0/0xcc0 [ 446.909694] ? kasan_unpoison_shadow+0x33/0x50 [ 446.910663] ? genl_start+0x452/0x670 [ 446.911472] __netlink_dump_start+0x62e/0x8e0 [ 446.912410] ? genl_family_rcv_msg_doit+0x330/0x330 [ 446.913476] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 446.914515] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 446.915568] ? genl_rcv+0x40/0x40 [ 446.916296] ? mutex_lock_io_nested+0xf30/0xf30 [ 446.917314] ? genl_family_rcv_msg_doit+0x330/0x330 [ 446.918361] ? genl_unlock+0x20/0x20 [ 446.919141] ? genl_parallel_done+0xc0/0xc0 [ 446.920052] ? genl_op_from_small+0x23/0x3d0 [ 446.920977] ? genl_get_cmd+0x3cf/0x480 [ 446.921840] genl_rcv_msg+0x44d/0x5a0 [ 446.922643] ? genl_get_cmd+0x480/0x480 [ 446.923484] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 446.924441] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 446.925512] ? lock_release+0x680/0x680 [ 446.926347] ? netlink_deliver_tap+0xf4/0xcc0 [ 446.927294] netlink_rcv_skb+0x14b/0x430 [ 446.928147] ? genl_get_cmd+0x480/0x480 [ 446.929000] ? netlink_ack+0xab0/0xab0 [ 446.929827] ? netlink_deliver_tap+0x1c4/0xcc0 [ 446.930786] ? is_vmalloc_addr+0x7b/0xb0 [ 446.931653] genl_rcv+0x24/0x40 [ 446.932352] netlink_unicast+0x6ce/0xa00 [ 446.933228] ? netlink_attachskb+0xab0/0xab0 [ 446.934164] netlink_sendmsg+0x90f/0xe00 [ 446.935024] ? netlink_unicast+0xa00/0xa00 [ 446.935928] ? netlink_unicast+0xa00/0xa00 [ 446.936823] __sock_sendmsg+0x154/0x190 [ 446.937669] ____sys_sendmsg+0x70d/0x870 [ 446.938527] ? sock_write_iter+0x3d0/0x3d0 [ 446.939421] ? do_recvmmsg+0x6d0/0x6d0 [ 446.940252] ? lock_downgrade+0x6d0/0x6d0 [ 446.941137] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 446.942244] ___sys_sendmsg+0xf3/0x170 [ 446.943065] ? sendmsg_copy_msghdr+0x160/0x160 [ 446.944034] ? __fget_files+0x2cf/0x520 [ 446.944870] ? lock_downgrade+0x6d0/0x6d0 [ 446.945751] ? find_held_lock+0x2c/0x110 [ 446.946626] ? __fget_files+0x2f8/0x520 [ 446.947476] ? __fget_light+0xea/0x290 [ 446.948303] __sys_sendmsg+0xe5/0x1b0 [ 446.949122] ? __sys_sendmsg_sock+0x40/0x40 [ 446.950036] ? rcu_read_lock_any_held+0x75/0xa0 [ 446.951033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 446.952155] ? syscall_enter_from_user_mode+0x1d/0x50 [ 446.953243] ? trace_hardirqs_on+0x5b/0x180 [ 446.954158] do_syscall_64+0x33/0x40 [ 446.954945] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 446.956020] RIP: 0033:0x7fd3d73bfb19 [ 446.956801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 446.960681] RSP: 002b:00007fd3d4935188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.962300] RAX: ffffffffffffffda RBX: 00007fd3d74d2f60 RCX: 00007fd3d73bfb19 [ 446.963811] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 446.965326] RBP: 00007fd3d49351d0 R08: 0000000000000000 R09: 0000000000000000 [ 446.966826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.968331] R13: 00007fffde70476f R14: 00007fd3d4935300 R15: 0000000000022000 [ 446.971965] FAULT_INJECTION: forcing a failure. [ 446.971965] name failslab, interval 1, probability 0, space 0, times 0 [ 446.973308] CPU: 1 PID: 5674 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 446.974075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 446.975011] Call Trace: [ 446.975315] dump_stack+0x107/0x167 [ 446.975724] should_fail.cold+0x5/0xa [ 446.976158] ? create_object.isra.0+0x3a/0xa30 [ 446.976678] should_failslab+0x5/0x20 [ 446.977115] kmem_cache_alloc+0x5b/0x310 [ 446.977576] ? __sys_sendmsg+0xe5/0x1b0 [ 446.978019] ? do_syscall_64+0x33/0x40 [ 446.978463] create_object.isra.0+0x3a/0xa30 [ 446.978956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 446.979523] kmem_cache_alloc_node+0x169/0x330 [ 446.980042] __alloc_skb+0x6d/0x5b0 [ 446.980453] netlink_dump+0x195/0x11f0 [ 446.980901] ? trace_hardirqs_on+0x5b/0x180 [ 446.981390] ? netlink_deliver_tap+0xcc0/0xcc0 [ 446.981906] ? kasan_unpoison_shadow+0x33/0x50 [ 446.982417] ? genl_start+0x452/0x670 [ 446.982850] __netlink_dump_start+0x62e/0x8e0 [ 446.983356] ? genl_family_rcv_msg_doit+0x330/0x330 [ 446.983917] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 446.984475] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 446.985055] ? genl_rcv+0x40/0x40 [ 446.985448] ? mutex_lock_io_nested+0xf30/0xf30 [ 446.985976] ? genl_family_rcv_msg_doit+0x330/0x330 [ 446.986545] ? genl_unlock+0x20/0x20 [ 446.986965] ? genl_parallel_done+0xc0/0xc0 [ 446.987453] ? genl_op_from_small+0x23/0x3d0 [ 446.987950] ? genl_get_cmd+0x3cf/0x480 [ 446.988404] genl_rcv_msg+0x44d/0x5a0 [ 446.988830] ? genl_get_cmd+0x480/0x480 [ 446.989287] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 446.989796] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 446.990367] ? lock_release+0x680/0x680 [ 446.990812] ? netlink_deliver_tap+0xf4/0xcc0 [ 446.991318] netlink_rcv_skb+0x14b/0x430 [ 446.991774] ? genl_get_cmd+0x480/0x480 [ 446.992219] ? netlink_ack+0xab0/0xab0 [ 446.992666] ? netlink_deliver_tap+0x1c4/0xcc0 [ 446.993204] ? is_vmalloc_addr+0x7b/0xb0 [ 446.993659] genl_rcv+0x24/0x40 [ 446.994034] netlink_unicast+0x6ce/0xa00 [ 446.994497] ? netlink_attachskb+0xab0/0xab0 [ 446.994997] netlink_sendmsg+0x90f/0xe00 [ 446.995460] ? netlink_unicast+0xa00/0xa00 [ 446.995944] ? netlink_unicast+0xa00/0xa00 [ 446.996431] __sock_sendmsg+0x154/0x190 [ 446.996886] ____sys_sendmsg+0x70d/0x870 [ 446.997368] ? sock_write_iter+0x3d0/0x3d0 [ 446.997845] ? do_recvmmsg+0x6d0/0x6d0 [ 446.998288] ? lock_downgrade+0x6d0/0x6d0 [ 446.998751] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 446.999353] ___sys_sendmsg+0xf3/0x170 [ 446.999795] ? sendmsg_copy_msghdr+0x160/0x160 [ 447.000311] ? __fget_files+0x2cf/0x520 [ 447.000754] ? lock_downgrade+0x6d0/0x6d0 [ 447.001238] ? find_held_lock+0x2c/0x110 [ 447.001710] ? __fget_files+0x2f8/0x520 [ 447.002159] ? __fget_light+0xea/0x290 [ 447.002609] __sys_sendmsg+0xe5/0x1b0 [ 447.003042] ? __sys_sendmsg_sock+0x40/0x40 [ 447.003529] ? rcu_read_lock_any_held+0x75/0xa0 [ 447.004066] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 447.004682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 447.005266] ? trace_hardirqs_on+0x5b/0x180 [ 447.005756] do_syscall_64+0x33/0x40 [ 447.006182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 447.006757] RIP: 0033:0x7f957b827b19 [ 447.007178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 447.009283] RSP: 002b:00007f9578d9d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.010148] RAX: ffffffffffffffda RBX: 00007f957b93af60 RCX: 00007f957b827b19 [ 447.010950] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 447.011747] RBP: 00007f9578d9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 447.012548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 447.013367] R13: 00007ffcc1909a8f R14: 00007f9578d9d300 R15: 0000000000022000 [ 449.764027] Bluetooth: hci0: command 0x0406 tx timeout 04:51:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 9) 04:51:38 executing program 6: r0 = syz_io_uring_setup(0x132, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r5, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r4, r3, 0x0) 04:51:38 executing program 5: r0 = syz_io_uring_setup(0x132, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:38 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000400)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}, {&(0x7f0000000100)="674a0d4dccba1d0af46fe61271f445c4500c2dcce57b58e4b86b43f805d787da915df639d0494b02ab55bf7c2c7ea5", 0x2f, 0x4}, {&(0x7f0000000240)="8db3d0297f5b93065cb27b5f48c629b0b3c5ad9a5e1d", 0x16, 0x7}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa43, 0x0) r3 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000040), 0x40000000}, {&(0x7f0000000340)=""/164, 0xa4}], 0x3) ftruncate(r1, 0xffff) pwrite64(r3, &(0x7f0000000300)="02f1fc9a3858e8df81c649c440eb08101c05bb79e3abfc019d47701eed90611d071f8b64d5c56ae8c197ade6c3bd3e5fa4308da33e39e3710d91c2a091210cfb1155017bccd685bd0b838236ca857a8c63d930b9855bb01f9aef0b74fdfc07f458881d42e62373", 0x67, 0x6) flock(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x100000001) bind(0xffffffffffffffff, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) move_mount(r5, &(0x7f00000004c0)='./file1\x00', r6, &(0x7f0000000540)='./file1\x00', 0x21) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40004, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000640)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r0, r7, &(0x7f0000000680)=0x800, 0x100000001) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000480)={0x7e, 0x1, 0x9, 0x0, 0x3f, 0x8}) sendfile(r1, r5, 0x0, 0x80000001) 04:51:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 12) 04:51:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 14) 04:51:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 460.346514] FAULT_INJECTION: forcing a failure. [ 460.346514] name failslab, interval 1, probability 0, space 0, times 0 [ 460.349086] CPU: 0 PID: 5689 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 460.349573] FAULT_INJECTION: forcing a failure. [ 460.349573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.350504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 460.350510] Call Trace: [ 460.350533] dump_stack+0x107/0x167 [ 460.350553] should_fail.cold+0x5/0xa [ 460.350575] should_failslab+0x5/0x20 [ 460.350601] __kmalloc_node_track_caller+0x74/0x3b0 [ 460.350617] ? netlink_dump+0x195/0x11f0 [ 460.359455] __alloc_skb+0xb1/0x5b0 [ 460.360207] netlink_dump+0x195/0x11f0 [ 460.361003] ? trace_hardirqs_on+0x5b/0x180 [ 460.361897] ? netlink_deliver_tap+0xcc0/0xcc0 [ 460.362837] ? kasan_unpoison_shadow+0x33/0x50 [ 460.363775] ? genl_start+0x452/0x670 [ 460.364556] __netlink_dump_start+0x62e/0x8e0 [ 460.365482] ? genl_family_rcv_msg_doit+0x330/0x330 [ 460.366498] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 460.367514] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 460.368529] ? genl_rcv+0x40/0x40 [ 460.369235] ? mutex_lock_io_nested+0xf30/0xf30 [ 460.370190] ? genl_family_rcv_msg_doit+0x330/0x330 [ 460.371202] ? genl_unlock+0x20/0x20 [ 460.371959] ? genl_parallel_done+0xc0/0xc0 [ 460.372834] ? genl_op_from_small+0x23/0x3d0 [ 460.373732] ? genl_get_cmd+0x3cf/0x480 [ 460.374549] genl_rcv_msg+0x44d/0x5a0 [ 460.375330] ? genl_get_cmd+0x480/0x480 [ 460.376149] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 460.377077] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 460.378117] ? lock_release+0x680/0x680 [ 460.378929] ? netlink_deliver_tap+0xf4/0xcc0 [ 460.379841] netlink_rcv_skb+0x14b/0x430 [ 460.380667] ? genl_get_cmd+0x480/0x480 [ 460.381495] ? netlink_ack+0xab0/0xab0 [ 460.382292] ? netlink_deliver_tap+0x1c4/0xcc0 [ 460.383235] ? is_vmalloc_addr+0x7b/0xb0 [ 460.384059] genl_rcv+0x24/0x40 [ 460.384737] netlink_unicast+0x6ce/0xa00 [ 460.385575] ? netlink_attachskb+0xab0/0xab0 [ 460.386479] netlink_sendmsg+0x90f/0xe00 [ 460.387317] ? netlink_unicast+0xa00/0xa00 [ 460.388182] ? netlink_unicast+0xa00/0xa00 [ 460.389045] __sock_sendmsg+0x154/0x190 [ 460.389866] ____sys_sendmsg+0x70d/0x870 [ 460.390694] ? sock_write_iter+0x3d0/0x3d0 [ 460.391557] ? do_recvmmsg+0x6d0/0x6d0 [ 460.392364] ? lock_downgrade+0x6d0/0x6d0 [ 460.393230] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 460.394317] ___sys_sendmsg+0xf3/0x170 [ 460.395119] ? sendmsg_copy_msghdr+0x160/0x160 [ 460.396066] ? __fget_files+0x2cf/0x520 [ 460.396879] ? lock_downgrade+0x6d0/0x6d0 [ 460.397738] ? find_held_lock+0x2c/0x110 [ 460.398584] ? __fget_files+0x2f8/0x520 [ 460.399398] ? __fget_light+0xea/0x290 [ 460.400200] __sys_sendmsg+0xe5/0x1b0 [ 460.400975] ? __sys_sendmsg_sock+0x40/0x40 [ 460.401859] ? rcu_read_lock_any_held+0x75/0xa0 [ 460.402821] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 460.403896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 460.404942] ? trace_hardirqs_on+0x5b/0x180 [ 460.405833] do_syscall_64+0x33/0x40 [ 460.406588] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 460.407623] RIP: 0033:0x7f957b827b19 [ 460.408381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 460.412134] RSP: 002b:00007f9578d9d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.413702] RAX: ffffffffffffffda RBX: 00007f957b93af60 RCX: 00007f957b827b19 [ 460.415159] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 460.416614] RBP: 00007f9578d9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 460.418085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.419549] R13: 00007ffcc1909a8f R14: 00007f9578d9d300 R15: 0000000000022000 [ 460.421036] CPU: 1 PID: 5690 Comm: syz-executor.7 Not tainted 5.10.244 #1 [ 460.422579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 460.424454] Call Trace: [ 460.425055] dump_stack+0x107/0x167 [ 460.425874] should_fail.cold+0x5/0xa [ 460.426742] _copy_to_user+0x2e/0x180 [ 460.427592] simple_read_from_buffer+0xcc/0x160 [ 460.428620] proc_fail_nth_read+0x198/0x230 [ 460.429302] loop4: detected capacity change from 0 to 33559552 [ 460.429605] ? proc_sessionid_read+0x230/0x230 [ 460.431827] ? security_file_permission+0xb1/0xe0 [ 460.432895] ? proc_sessionid_read+0x230/0x230 [ 460.433962] vfs_read+0x228/0x620 [ 460.434721] ksys_read+0x12d/0x260 [ 460.435492] ? vfs_write+0xb10/0xb10 [ 460.436325] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 460.437494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 460.438651] do_syscall_64+0x33/0x40 [ 460.439499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 460.440656] RIP: 0033:0x7fd3d737269c [ 460.441504] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 460.442963] FAT-fs (loop4): invalid media value (0x29) [ 460.445683] RSP: 002b:00007fd3d4935170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 460.445702] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007fd3d737269c [ 460.445720] RDX: 000000000000000f RSI: 00007fd3d49351e0 RDI: 0000000000000004 [ 460.446823] FAT-fs (loop4): Can't find a valid FAT filesystem [ 460.448489] RBP: 00007fd3d49351d0 R08: 0000000000000000 R09: 0000000000000000 [ 460.448500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.448510] R13: 00007fffde70476f R14: 00007fd3d4935300 R15: 0000000000022000 [ 460.457538] FAULT_INJECTION: forcing a failure. [ 460.457538] name failslab, interval 1, probability 0, space 0, times 0 [ 460.460298] CPU: 1 PID: 5697 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 460.461843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 460.463696] Call Trace: [ 460.464303] dump_stack+0x107/0x167 [ 460.465107] should_fail.cold+0x5/0xa [ 460.465960] ? create_object.isra.0+0x3a/0xa30 [ 460.466975] should_failslab+0x5/0x20 [ 460.467816] kmem_cache_alloc+0x5b/0x310 [ 460.468730] ? lock_downgrade+0x6d0/0x6d0 [ 460.469695] create_object.isra.0+0x3a/0xa30 [ 460.470691] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 460.471806] kmem_cache_alloc_trace+0x151/0x320 [ 460.472846] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 460.473944] genl_start+0x1e6/0x670 [ 460.474743] __netlink_dump_start+0x592/0x8e0 [ 460.475754] ? genl_family_rcv_msg_doit+0x330/0x330 [ 460.476871] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 460.477966] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 460.479050] ? genl_rcv+0x40/0x40 [ 460.479809] ? mutex_lock_io_nested+0xf30/0xf30 [ 460.480853] ? genl_family_rcv_msg_doit+0x330/0x330 [ 460.481998] ? genl_unlock+0x20/0x20 [ 460.482849] ? genl_parallel_done+0xc0/0xc0 [ 460.483819] ? genl_op_from_small+0x23/0x3d0 [ 460.484818] ? genl_get_cmd+0x3cf/0x480 [ 460.485717] genl_rcv_msg+0x44d/0x5a0 [ 460.486546] ? genl_get_cmd+0x480/0x480 [ 460.487438] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 460.488453] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 460.489613] ? lock_release+0x680/0x680 [ 460.490500] ? netlink_deliver_tap+0xf4/0xcc0 [ 460.491521] netlink_rcv_skb+0x14b/0x430 [ 460.492450] ? genl_get_cmd+0x480/0x480 [ 460.493360] ? netlink_ack+0xab0/0xab0 [ 460.494237] ? netlink_deliver_tap+0x1c4/0xcc0 [ 460.495265] ? is_vmalloc_addr+0x7b/0xb0 [ 460.496182] genl_rcv+0x24/0x40 [ 460.496905] netlink_unicast+0x6ce/0xa00 [ 460.497842] ? netlink_attachskb+0xab0/0xab0 [ 460.498861] netlink_sendmsg+0x90f/0xe00 [ 460.499786] ? netlink_unicast+0xa00/0xa00 [ 460.500760] ? netlink_unicast+0xa00/0xa00 [ 460.501749] __sock_sendmsg+0x154/0x190 [ 460.502649] ____sys_sendmsg+0x70d/0x870 [ 460.503554] ? sock_write_iter+0x3d0/0x3d0 [ 460.504494] ? do_recvmmsg+0x6d0/0x6d0 [ 460.505401] ? lock_downgrade+0x6d0/0x6d0 [ 460.506328] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 460.507530] ___sys_sendmsg+0xf3/0x170 [ 460.508421] ? sendmsg_copy_msghdr+0x160/0x160 [ 460.509470] ? __fget_files+0x2cf/0x520 [ 460.510369] ? lock_downgrade+0x6d0/0x6d0 [ 460.511305] ? find_held_lock+0x2c/0x110 [ 460.512244] ? __fget_files+0x2f8/0x520 [ 460.513160] ? __fget_light+0xea/0x290 [ 460.514041] __sys_sendmsg+0xe5/0x1b0 [ 460.514897] ? __sys_sendmsg_sock+0x40/0x40 [ 460.515851] ? rcu_read_lock_any_held+0x75/0xa0 [ 460.516902] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 460.518087] ? syscall_enter_from_user_mode+0x1d/0x50 [ 460.519223] ? trace_hardirqs_on+0x5b/0x180 [ 460.520188] do_syscall_64+0x33/0x40 [ 460.521016] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 460.522167] RIP: 0033:0x7fbec8a71b19 [ 460.522984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 460.527045] RSP: 002b:00007fbec5fe7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.528625] RAX: ffffffffffffffda RBX: 00007fbec8b84f60 RCX: 00007fbec8a71b19 [ 460.530115] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 460.531589] RBP: 00007fbec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 460.533061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.534564] R13: 00007ffe51e97cef R14: 00007fbec5fe7300 R15: 0000000000022000 [ 460.550306] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 472.837775] FAULT_INJECTION: forcing a failure. [ 472.837775] name failslab, interval 1, probability 0, space 0, times 0 [ 472.839274] CPU: 1 PID: 5710 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 472.840093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 472.841088] Call Trace: [ 472.841434] dump_stack+0x107/0x167 [ 472.841877] should_fail.cold+0x5/0xa [ 472.842343] ? __alloc_skb+0x6d/0x5b0 [ 472.842801] should_failslab+0x5/0x20 [ 472.843261] kmem_cache_alloc_node+0x55/0x330 [ 472.843806] __alloc_skb+0x6d/0x5b0 [ 472.844250] netlink_dump+0x195/0x11f0 [ 472.844718] ? trace_hardirqs_on+0x5b/0x180 [ 472.845235] ? netlink_deliver_tap+0xcc0/0xcc0 [ 472.845787] ? kasan_unpoison_shadow+0x33/0x50 [ 472.846341] ? genl_start+0x452/0x670 [ 472.846800] __netlink_dump_start+0x62e/0x8e0 [ 472.847338] ? genl_family_rcv_msg_doit+0x330/0x330 [ 472.847932] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 472.848526] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 472.849120] ? genl_rcv+0x40/0x40 [ 472.849543] ? mutex_lock_io_nested+0xf30/0xf30 [ 472.850098] ? genl_family_rcv_msg_doit+0x330/0x330 [ 472.850689] ? genl_unlock+0x20/0x20 [ 472.851132] ? genl_parallel_done+0xc0/0xc0 [ 472.851651] ? genl_op_from_small+0x23/0x3d0 [ 472.852175] ? genl_get_cmd+0x3cf/0x480 [ 472.852657] genl_rcv_msg+0x44d/0x5a0 [ 472.853116] ? genl_get_cmd+0x480/0x480 [ 472.853606] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 472.854149] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 472.854750] ? lock_release+0x680/0x680 [ 472.855226] ? netlink_deliver_tap+0xf4/0xcc0 [ 472.855764] netlink_rcv_skb+0x14b/0x430 [ 472.856255] ? genl_get_cmd+0x480/0x480 [ 472.856730] ? netlink_ack+0xab0/0xab0 [ 472.857202] ? netlink_deliver_tap+0x1c4/0xcc0 [ 472.857758] ? is_vmalloc_addr+0x7b/0xb0 [ 472.858245] genl_rcv+0x24/0x40 [ 472.858638] netlink_unicast+0x6ce/0xa00 [ 472.859128] ? netlink_attachskb+0xab0/0xab0 [ 472.859662] netlink_sendmsg+0x90f/0xe00 [ 472.860152] ? netlink_unicast+0xa00/0xa00 [ 472.860675] ? netlink_unicast+0xa00/0xa00 [ 472.861181] __sock_sendmsg+0x154/0x190 [ 472.861667] ____sys_sendmsg+0x70d/0x870 [ 472.862153] ? sock_write_iter+0x3d0/0x3d0 [ 472.862659] ? do_recvmmsg+0x6d0/0x6d0 [ 472.863128] ? lock_downgrade+0x6d0/0x6d0 [ 472.863627] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 472.864254] ___sys_sendmsg+0xf3/0x170 [ 472.864721] ? sendmsg_copy_msghdr+0x160/0x160 [ 472.865268] ? __fget_files+0x2cf/0x520 [ 472.865747] ? lock_downgrade+0x6d0/0x6d0 [ 472.866239] ? find_held_lock+0x2c/0x110 [ 472.866726] ? __fget_files+0x2f8/0x520 [ 472.867212] ? __fget_light+0xea/0x290 [ 472.867677] __sys_sendmsg+0xe5/0x1b0 [ 472.868127] ? __sys_sendmsg_sock+0x40/0x40 [ 472.868641] ? rcu_read_lock_any_held+0x75/0xa0 [ 472.869205] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 472.869831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 472.870443] ? trace_hardirqs_on+0x5b/0x180 [ 472.870951] do_syscall_64+0x33/0x40 [ 472.871395] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 472.872005] RIP: 0033:0x7fbec8a71b19 [ 472.872449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 472.874626] RSP: 002b:00007fbec5fe7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.875520] RAX: ffffffffffffffda RBX: 00007fbec8b84f60 RCX: 00007fbec8a71b19 [ 472.876365] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 472.877206] RBP: 00007fbec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 472.878051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.878891] R13: 00007ffe51e97cef R14: 00007fbec5fe7300 R15: 0000000000022000 04:51:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:51:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r5, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r4, r3, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r6 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:51:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:51:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r4, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) 04:51:50 executing program 5: r0 = syz_io_uring_setup(0x132, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 13) 04:51:50 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 10) [ 472.898446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 472.907500] FAULT_INJECTION: forcing a failure. [ 472.907500] name failslab, interval 1, probability 0, space 0, times 0 [ 472.909996] CPU: 0 PID: 5719 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 472.911449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 472.913195] Call Trace: [ 472.913769] dump_stack+0x107/0x167 [ 472.914541] should_fail.cold+0x5/0xa [ 472.915347] ? create_object.isra.0+0x3a/0xa30 [ 472.916332] should_failslab+0x5/0x20 [ 472.917136] kmem_cache_alloc+0x5b/0x310 [ 472.918012] create_object.isra.0+0x3a/0xa30 [ 472.918940] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 472.920022] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 472.921089] ? netlink_dump+0x195/0x11f0 [ 472.921972] __alloc_skb+0xb1/0x5b0 [ 472.922745] netlink_dump+0x195/0x11f0 [ 472.923575] ? trace_hardirqs_on+0x5b/0x180 [ 472.924488] ? netlink_deliver_tap+0xcc0/0xcc0 [ 472.925462] ? kasan_unpoison_shadow+0x33/0x50 [ 472.926438] ? genl_start+0x452/0x670 [ 472.927252] __netlink_dump_start+0x62e/0x8e0 [ 472.928201] ? genl_family_rcv_msg_doit+0x330/0x330 [ 472.929257] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 472.930320] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 472.931374] ? genl_rcv+0x40/0x40 [ 472.932104] ? mutex_lock_io_nested+0xf30/0xf30 [ 472.933091] ? genl_family_rcv_msg_doit+0x330/0x330 [ 472.934150] ? genl_unlock+0x20/0x20 [ 472.934933] ? genl_parallel_done+0xc0/0xc0 [ 472.935844] ? genl_op_from_small+0x23/0x3d0 [ 472.936775] ? genl_get_cmd+0x3cf/0x480 [ 472.937636] genl_rcv_msg+0x44d/0x5a0 [ 472.938445] ? genl_get_cmd+0x480/0x480 [ 472.939283] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 472.940251] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 472.941332] ? lock_release+0x680/0x680 [ 472.942185] ? netlink_deliver_tap+0xf4/0xcc0 [ 472.943142] netlink_rcv_skb+0x14b/0x430 [ 472.944007] ? genl_get_cmd+0x480/0x480 [ 472.944853] ? netlink_ack+0xab0/0xab0 [ 472.945699] ? netlink_deliver_tap+0x1c4/0xcc0 [ 472.946664] ? is_vmalloc_addr+0x7b/0xb0 [ 472.947527] genl_rcv+0x24/0x40 [ 472.948220] netlink_unicast+0x6ce/0xa00 [ 472.949080] ? netlink_attachskb+0xab0/0xab0 [ 472.950033] netlink_sendmsg+0x90f/0xe00 [ 472.950895] ? netlink_unicast+0xa00/0xa00 [ 472.951804] ? netlink_unicast+0xa00/0xa00 [ 472.952701] __sock_sendmsg+0x154/0x190 [ 472.953573] ____sys_sendmsg+0x70d/0x870 [ 472.954432] ? sock_write_iter+0x3d0/0x3d0 [ 472.955329] ? do_recvmmsg+0x6d0/0x6d0 [ 472.956164] ? lock_downgrade+0x6d0/0x6d0 [ 472.957056] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 472.958196] ___sys_sendmsg+0xf3/0x170 [ 472.959033] ? sendmsg_copy_msghdr+0x160/0x160 [ 472.960006] ? __fget_files+0x2cf/0x520 [ 472.960844] ? lock_downgrade+0x6d0/0x6d0 [ 472.961727] ? find_held_lock+0x2c/0x110 [ 472.962593] ? __fget_files+0x2f8/0x520 [ 472.963442] ? __fget_light+0xea/0x290 [ 472.964271] __sys_sendmsg+0xe5/0x1b0 [ 472.965078] ? __sys_sendmsg_sock+0x40/0x40 [ 472.966007] ? rcu_read_lock_any_held+0x75/0xa0 [ 472.967012] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 472.968130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 472.969220] ? trace_hardirqs_on+0x5b/0x180 [ 472.970146] do_syscall_64+0x33/0x40 [ 472.970935] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 472.972033] RIP: 0033:0x7f957b827b19 [ 472.972819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 472.976704] RSP: 002b:00007f9578d9d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.978316] RAX: ffffffffffffffda RBX: 00007f957b93af60 RCX: 00007f957b827b19 [ 472.979811] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 472.981337] RBP: 00007f9578d9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 472.982853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.984356] R13: 00007ffcc1909a8f R14: 00007f9578d9d300 R15: 0000000000022000 04:51:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 11) 04:51:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r5, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r4, r3, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r6 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:51:51 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:51:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 473.040320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 473.051503] FAULT_INJECTION: forcing a failure. [ 473.051503] name failslab, interval 1, probability 0, space 0, times 0 [ 473.054095] CPU: 1 PID: 5729 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 473.055635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 473.057663] Call Trace: [ 473.058263] dump_stack+0x107/0x167 [ 473.059090] should_fail.cold+0x5/0xa [ 473.059959] ? create_object.isra.0+0x3a/0xa30 [ 473.060993] should_failslab+0x5/0x20 [ 473.061886] kmem_cache_alloc+0x5b/0x310 [ 473.062811] ? __sys_sendmsg+0xe5/0x1b0 [ 473.063725] ? do_syscall_64+0x33/0x40 [ 473.064633] create_object.isra.0+0x3a/0xa30 [ 473.065649] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 473.066821] kmem_cache_alloc_node+0x169/0x330 [ 473.067878] __alloc_skb+0x6d/0x5b0 [ 473.068724] netlink_dump+0x195/0x11f0 [ 473.069628] ? trace_hardirqs_on+0x5b/0x180 [ 473.070618] ? netlink_deliver_tap+0xcc0/0xcc0 [ 473.071673] ? kasan_unpoison_shadow+0x33/0x50 [ 473.072742] ? genl_start+0x452/0x670 [ 473.073671] __netlink_dump_start+0x62e/0x8e0 [ 473.074721] ? genl_family_rcv_msg_doit+0x330/0x330 [ 473.075884] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 473.077042] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 473.078176] ? genl_rcv+0x40/0x40 [ 473.078957] ? mutex_lock_io_nested+0xf30/0xf30 [ 473.080063] ? genl_family_rcv_msg_doit+0x330/0x330 [ 473.081184] ? genl_unlock+0x20/0x20 [ 473.082030] ? genl_parallel_done+0xc0/0xc0 [ 473.083034] ? genl_op_from_small+0x23/0x3d0 [ 473.084031] ? genl_get_cmd+0x3cf/0x480 [ 473.084926] genl_rcv_msg+0x44d/0x5a0 [ 473.085836] ? genl_get_cmd+0x480/0x480 [ 473.086783] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 473.087871] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 473.089030] ? lock_release+0x680/0x680 [ 473.089899] ? netlink_deliver_tap+0xf4/0xcc0 [ 473.090875] netlink_rcv_skb+0x14b/0x430 [ 473.091753] ? genl_get_cmd+0x480/0x480 [ 473.092615] ? netlink_ack+0xab0/0xab0 [ 473.093478] ? netlink_deliver_tap+0x1c4/0xcc0 [ 473.094464] ? is_vmalloc_addr+0x7b/0xb0 [ 473.095345] genl_rcv+0x24/0x40 [ 473.096055] netlink_unicast+0x6ce/0xa00 [ 473.096936] ? netlink_attachskb+0xab0/0xab0 [ 473.097908] netlink_sendmsg+0x90f/0xe00 [ 473.098809] ? netlink_unicast+0xa00/0xa00 [ 473.099740] ? netlink_unicast+0xa00/0xa00 [ 473.100654] __sock_sendmsg+0x154/0x190 [ 473.101525] ____sys_sendmsg+0x70d/0x870 [ 473.102410] ? sock_write_iter+0x3d0/0x3d0 [ 473.103322] ? do_recvmmsg+0x6d0/0x6d0 [ 473.104175] ? lock_downgrade+0x6d0/0x6d0 [ 473.104474] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 473.105074] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 473.105111] ___sys_sendmsg+0xf3/0x170 [ 473.108855] ? sendmsg_copy_msghdr+0x160/0x160 [ 473.109863] ? __fget_files+0x2cf/0x520 [ 473.110730] ? lock_downgrade+0x6d0/0x6d0 [ 473.111623] ? find_held_lock+0x2c/0x110 [ 473.112514] ? __fget_files+0x2f8/0x520 [ 473.113404] ? __fget_light+0xea/0x290 [ 473.114251] __sys_sendmsg+0xe5/0x1b0 [ 473.115061] ? __sys_sendmsg_sock+0x40/0x40 [ 473.115975] ? rcu_read_lock_any_held+0x75/0xa0 [ 473.116979] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 473.118098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 473.119192] ? trace_hardirqs_on+0x5b/0x180 [ 473.120106] do_syscall_64+0x33/0x40 [ 473.120895] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 473.121981] RIP: 0033:0x7fbec8a71b19 [ 473.122762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 473.126666] RSP: 002b:00007fbec5fe7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.128269] RAX: ffffffffffffffda RBX: 00007fbec8b84f60 RCX: 00007fbec8a71b19 [ 473.129804] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 473.131314] RBP: 00007fbec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 473.132818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.134372] R13: 00007ffe51e97cef R14: 00007fbec5fe7300 R15: 0000000000022000 04:51:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r5, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r4, r3, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r6 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:51:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:51:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:51:51 executing program 5: r0 = syz_io_uring_setup(0x132, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r3, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) [ 473.220194] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 04:51:51 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:51:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:51:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r5, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r4, r3, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) r6 = syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) [ 473.336303] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 04:52:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 12) 04:52:04 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r5, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r4, r3, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) syz_io_uring_setup(0x3ca3, &(0x7f0000000500), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000280)) 04:52:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 14) 04:52:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) 04:52:04 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 486.906425] FAULT_INJECTION: forcing a failure. [ 486.906425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.909079] CPU: 0 PID: 5772 Comm: syz-executor.1 Not tainted 5.10.244 #1 [ 486.910592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 486.912418] Call Trace: [ 486.912997] dump_stack+0x107/0x167 [ 486.913804] should_fail.cold+0x5/0xa [ 486.914651] _copy_to_user+0x2e/0x180 [ 486.915503] simple_read_from_buffer+0xcc/0x160 [ 486.916533] proc_fail_nth_read+0x198/0x230 [ 486.917494] ? proc_sessionid_read+0x230/0x230 [ 486.918502] ? security_file_permission+0xb1/0xe0 [ 486.919568] ? proc_sessionid_read+0x230/0x230 [ 486.920577] vfs_read+0x228/0x620 [ 486.921349] ksys_read+0x12d/0x260 [ 486.922160] ? vfs_write+0xb10/0xb10 [ 486.922979] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 486.924135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 486.925265] do_syscall_64+0x33/0x40 04:52:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) [ 486.926085] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 486.927300] RIP: 0033:0x7f957b7da69c [ 486.928112] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 486.932137] RSP: 002b:00007f9578d9d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 486.933848] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007f957b7da69c [ 486.935402] RDX: 000000000000000f RSI: 00007f9578d9d1e0 RDI: 0000000000000004 [ 486.936955] RBP: 00007f9578d9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 486.938510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.940061] R13: 00007ffcc1909a8f R14: 00007f9578d9d300 R15: 0000000000022000 04:52:04 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() [ 486.950807] FAULT_INJECTION: forcing a failure. [ 486.950807] name failslab, interval 1, probability 0, space 0, times 0 [ 486.952225] CPU: 1 PID: 5777 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 486.953066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 486.954095] Call Trace: [ 486.954425] dump_stack+0x107/0x167 [ 486.954877] should_fail.cold+0x5/0xa [ 486.955346] should_failslab+0x5/0x20 [ 486.955819] __kmalloc_node_track_caller+0x74/0x3b0 [ 486.956432] ? netlink_dump+0x195/0x11f0 [ 486.956935] __alloc_skb+0xb1/0x5b0 [ 486.957386] netlink_dump+0x195/0x11f0 [ 486.957862] ? trace_hardirqs_on+0x5b/0x180 [ 486.958392] ? netlink_deliver_tap+0xcc0/0xcc0 [ 486.958952] ? kasan_unpoison_shadow+0x33/0x50 [ 486.959516] ? genl_start+0x452/0x670 [ 486.959990] __netlink_dump_start+0x62e/0x8e0 [ 486.960542] ? genl_family_rcv_msg_doit+0x330/0x330 [ 486.961151] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 486.961771] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 486.962370] ? genl_rcv+0x40/0x40 [ 486.962793] ? mutex_lock_io_nested+0xf30/0xf30 [ 486.963368] ? genl_family_rcv_msg_doit+0x330/0x330 [ 486.963978] ? genl_unlock+0x20/0x20 [ 486.964421] ? genl_parallel_done+0xc0/0xc0 [ 486.964951] ? genl_op_from_small+0x23/0x3d0 [ 486.965494] ? genl_get_cmd+0x3cf/0x480 [ 486.965982] genl_rcv_msg+0x44d/0x5a0 [ 486.966447] ? genl_get_cmd+0x480/0x480 [ 486.966934] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 486.967480] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 486.968092] ? lock_release+0x680/0x680 [ 486.968575] ? netlink_deliver_tap+0xf4/0xcc0 [ 486.969112] netlink_rcv_skb+0x14b/0x430 [ 486.969620] ? genl_get_cmd+0x480/0x480 [ 486.970105] ? netlink_ack+0xab0/0xab0 [ 486.970585] ? netlink_deliver_tap+0x1c4/0xcc0 [ 486.971143] ? is_vmalloc_addr+0x7b/0xb0 [ 486.971625] genl_rcv+0x24/0x40 [ 486.972027] netlink_unicast+0x6ce/0xa00 [ 486.972515] ? netlink_attachskb+0xab0/0xab0 [ 486.973056] netlink_sendmsg+0x90f/0xe00 [ 486.973568] ? netlink_unicast+0xa00/0xa00 [ 486.974092] ? netlink_unicast+0xa00/0xa00 [ 486.974609] __sock_sendmsg+0x154/0x190 [ 486.975096] ____sys_sendmsg+0x70d/0x870 [ 486.975595] ? sock_write_iter+0x3d0/0x3d0 [ 486.976106] ? do_recvmmsg+0x6d0/0x6d0 [ 486.976583] ? lock_downgrade+0x6d0/0x6d0 [ 486.977090] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 486.977731] ___sys_sendmsg+0xf3/0x170 [ 486.978208] ? sendmsg_copy_msghdr+0x160/0x160 [ 486.978765] ? __fget_files+0x2cf/0x520 [ 486.979257] ? lock_downgrade+0x6d0/0x6d0 [ 486.979762] ? find_held_lock+0x2c/0x110 [ 486.980263] ? __fget_files+0x2f8/0x520 [ 486.980752] ? __fget_light+0xea/0x290 [ 486.981231] __sys_sendmsg+0xe5/0x1b0 [ 486.981705] ? __sys_sendmsg_sock+0x40/0x40 [ 486.982235] ? rcu_read_lock_any_held+0x75/0xa0 [ 486.982812] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 486.983454] ? syscall_enter_from_user_mode+0x1d/0x50 [ 486.984075] ? trace_hardirqs_on+0x5b/0x180 [ 486.984599] do_syscall_64+0x33/0x40 [ 486.985049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 486.985678] RIP: 0033:0x7fbec8a71b19 [ 486.986129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 486.988353] RSP: 002b:00007fbec5fe7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.989283] RAX: ffffffffffffffda RBX: 00007fbec8b84f60 RCX: 00007fbec8a71b19 [ 486.990137] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 486.990979] RBP: 00007fbec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 486.991819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.992660] R13: 00007ffe51e97cef R14: 00007fbec5fe7300 R15: 0000000000022000 04:52:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xec0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 487.024947] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 04:52:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r5, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r4, r3, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) 04:52:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 13) 04:52:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 04:52:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:17 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:17 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 499.225008] FAULT_INJECTION: forcing a failure. [ 499.225008] name failslab, interval 1, probability 0, space 0, times 0 [ 499.226408] CPU: 0 PID: 5801 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 499.227243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 499.228237] Call Trace: [ 499.228559] dump_stack+0x107/0x167 [ 499.229005] should_fail.cold+0x5/0xa [ 499.229465] ? create_object.isra.0+0x3a/0xa30 [ 499.230031] should_failslab+0x5/0x20 [ 499.230492] kmem_cache_alloc+0x5b/0x310 [ 499.230981] create_object.isra.0+0x3a/0xa30 [ 499.231506] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 499.232122] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 499.232731] ? netlink_dump+0x195/0x11f0 [ 499.233229] __alloc_skb+0xb1/0x5b0 [ 499.233676] netlink_dump+0x195/0x11f0 [ 499.234145] ? trace_hardirqs_on+0x5b/0x180 [ 499.234673] ? netlink_deliver_tap+0xcc0/0xcc0 [ 499.235224] ? kasan_unpoison_shadow+0x33/0x50 [ 499.235775] ? genl_start+0x452/0x670 [ 499.236240] __netlink_dump_start+0x62e/0x8e0 [ 499.236789] ? genl_family_rcv_msg_doit+0x330/0x330 [ 499.237400] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 499.238012] genl_family_rcv_msg_dumpit+0x2b3/0x310 [ 499.238614] ? genl_rcv+0x40/0x40 [ 499.239037] ? mutex_lock_io_nested+0xf30/0xf30 [ 499.239600] ? genl_family_rcv_msg_doit+0x330/0x330 [ 499.240199] ? genl_unlock+0x20/0x20 [ 499.240652] ? genl_parallel_done+0xc0/0xc0 [ 499.241174] ? genl_op_from_small+0x23/0x3d0 [ 499.241710] ? genl_get_cmd+0x3cf/0x480 [ 499.242192] genl_rcv_msg+0x44d/0x5a0 [ 499.242667] ? genl_get_cmd+0x480/0x480 [ 499.243149] ? hwsim_dump_radio_nl+0x9f0/0x9f0 [ 499.243702] ? mac80211_hwsim_get_radio+0x6a0/0x6a0 [ 499.244305] ? lock_release+0x680/0x680 [ 499.244784] ? netlink_deliver_tap+0xf4/0xcc0 [ 499.245324] netlink_rcv_skb+0x14b/0x430 [ 499.245829] ? genl_get_cmd+0x480/0x480 [ 499.246303] ? netlink_ack+0xab0/0xab0 [ 499.246774] ? netlink_deliver_tap+0x1c4/0xcc0 [ 499.247324] ? is_vmalloc_addr+0x7b/0xb0 [ 499.247816] genl_rcv+0x24/0x40 [ 499.248217] netlink_unicast+0x6ce/0xa00 [ 499.248703] ? netlink_attachskb+0xab0/0xab0 [ 499.249246] netlink_sendmsg+0x90f/0xe00 [ 499.249758] ? netlink_unicast+0xa00/0xa00 [ 499.250277] ? netlink_unicast+0xa00/0xa00 [ 499.250785] __sock_sendmsg+0x154/0x190 [ 499.251262] ____sys_sendmsg+0x70d/0x870 [ 499.251747] ? sock_write_iter+0x3d0/0x3d0 [ 499.252264] ? do_recvmmsg+0x6d0/0x6d0 [ 499.252734] ? lock_downgrade+0x6d0/0x6d0 [ 499.253233] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 499.253897] ___sys_sendmsg+0xf3/0x170 [ 499.254365] ? sendmsg_copy_msghdr+0x160/0x160 [ 499.254921] ? __fget_files+0x2cf/0x520 [ 499.255404] ? lock_downgrade+0x6d0/0x6d0 [ 499.255903] ? find_held_lock+0x2c/0x110 [ 499.256402] ? __fget_files+0x2f8/0x520 [ 499.256883] ? __fget_light+0xea/0x290 [ 499.257368] __sys_sendmsg+0xe5/0x1b0 [ 499.257836] ? __sys_sendmsg_sock+0x40/0x40 [ 499.258355] ? rcu_read_lock_any_held+0x75/0xa0 [ 499.258928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 499.259559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 499.260185] ? trace_hardirqs_on+0x5b/0x180 [ 499.260704] do_syscall_64+0x33/0x40 [ 499.261156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 499.261781] RIP: 0033:0x7fbec8a71b19 [ 499.262224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 499.264420] RSP: 002b:00007fbec5fe7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.265333] RAX: ffffffffffffffda RBX: 00007fbec8b84f60 RCX: 00007fbec8a71b19 [ 499.266188] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 499.267038] RBP: 00007fbec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 499.267895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.268747] R13: 00007ffe51e97cef R14: 00007fbec5fe7300 R15: 0000000000022000 04:52:17 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:17 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xc00e, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:52:17 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x8b, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 499.405293] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 04:52:17 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() [ 499.496453] FAULT_INJECTION: forcing a failure. [ 499.496453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.497897] CPU: 0 PID: 5840 Comm: syz-executor.3 Not tainted 5.10.244 #1 [ 499.498679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 499.499629] Call Trace: [ 499.499945] dump_stack+0x107/0x167 [ 499.500375] should_fail.cold+0x5/0xa [ 499.500825] _copy_to_user+0x2e/0x180 [ 499.501278] simple_read_from_buffer+0xcc/0x160 [ 499.501828] proc_fail_nth_read+0x198/0x230 [ 499.502332] ? proc_sessionid_read+0x230/0x230 [ 499.502861] ? security_file_permission+0xb1/0xe0 [ 499.503433] ? proc_sessionid_read+0x230/0x230 [ 499.503974] vfs_read+0x228/0x620 [ 499.504384] ksys_read+0x12d/0x260 [ 499.504805] ? vfs_write+0xb10/0xb10 [ 499.505248] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 499.505894] ? syscall_enter_from_user_mode+0x1d/0x50 [ 499.506503] do_syscall_64+0x33/0x40 [ 499.506938] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 499.507537] RIP: 0033:0x7fbec8a2469c [ 499.507968] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 499.510101] RSP: 002b:00007fbec5fe7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 499.510990] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007fbec8a2469c [ 499.511820] RDX: 000000000000000f RSI: 00007fbec5fe71e0 RDI: 0000000000000004 [ 499.512645] RBP: 00007fbec5fe71d0 R08: 0000000000000000 R09: 0000000000000000 [ 499.513465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.514293] R13: 00007ffe51e97cef R14: 00007fbec5fe7300 R15: 0000000000022000 04:52:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r5, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) close_range(r4, r3, 0x0) 04:52:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (fail_nth: 14) 04:52:17 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) 04:52:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xec0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 499.546610] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 04:52:35 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r4, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="61fe01000400000000000000"], 0x28}}, 0x0) 04:52:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x80000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:35 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x10, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) [ 517.276494] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 04:52:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x8b00, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:52:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x32, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:47 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_enter(r3, 0x5320, 0x4d8d, 0x3, &(0x7f0000000080), 0x8) 04:52:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:47 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x10, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xc00e, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:52:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) 04:52:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:47 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) 04:52:47 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x10, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:47 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:52:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:52:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:52:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xc00e0000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xec0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:03 executing program 6: syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, r0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:53:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x80000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 04:53:03 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:53:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:03 executing program 2: pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:53:03 executing program 2: pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:53:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:53:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x8d, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x3200, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:15 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x10, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:53:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x110, r0, 0x8000000) 04:53:15 executing program 6: syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, r0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:53:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:15 executing program 2: pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:53:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:15 executing program 6: syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, r0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:53:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xec0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 557.397650] cgroup: fork rejected by pids controller in /syz6 04:53:29 executing program 2: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:53:29 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:53:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xc00e, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000011c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x5, 0x0, 0xfffffffe, 0x6, 0x1, {0x0, r2}}, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:53:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:29 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x10, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:53:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x8d00, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x8b000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:29 executing program 2: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:53:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:53:29 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x10, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:53:40 executing program 5: syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, r0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:53:40 executing program 2: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:53:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xc00e, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x80000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:53:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:40 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:53:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:40 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) [ 582.812748] cgroup: fork rejected by pids controller in /syz5 04:53:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x3, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xc00e0000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:53:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:40 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:53:56 executing program 6: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() 04:53:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x80000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:56 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:53:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:56 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:53:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xf, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:56 executing program 5: syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, r0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:53:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xc0, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:56 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:53:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, 0x0, 0x0, 0x300) 04:53:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xe90, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:56 executing program 5: syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, r0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:53:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x32000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:53:56 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:54:10 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:54:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, 0x0, 0x0, 0x300) 04:54:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:54:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xec0, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:10 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:54:10 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:54:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, 0x0, 0x0, 0x300) 04:54:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xc00e0000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x33fe0, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:54:10 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:54:10 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:54:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x20003854, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x0) 04:54:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:22 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() 04:54:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x0) 04:54:22 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') memfd_create(&(0x7f0000001180)='net/protocols\x00', 0x2) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:54:22 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:54:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x7ffff000, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xf, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x8d000000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x11, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:39 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:54:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xfffffdef, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x0) 04:54:39 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:54:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x80000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xc00e0000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0xf, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:39 executing program 6: pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:54:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xc0, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:39 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:54:39 executing program 5: r0 = syz_io_uring_setup(0x132, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:54:39 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000400)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}, {&(0x7f0000000100)="674a0d4dccba1d0af46fe61271f445c4500c2dcce57b58e4b86b43f805d787da915df639d0494b02ab55bf7c2c7ea5", 0x2f, 0x4}, {&(0x7f0000000240)="8db3d0297f5b93065cb27b5f48c629b0b3c5ad9a5e1d", 0x16, 0x7}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa43, 0x0) r3 = syz_io_uring_setup(0x1841, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000040), 0x40000000}, {&(0x7f0000000340)=""/164, 0xa4}], 0x3) ftruncate(r1, 0xffff) pwrite64(r3, &(0x7f0000000300)="02f1fc9a3858e8df81c649c440eb08101c05bb79e3abfc019d47701eed90611d071f8b64d5c56ae8c197ade6c3bd3e5fa4308da33e39e3710d91c2a091210cfb1155017bccd685bd0b838236ca857a8c63d930b9855bb01f9aef0b74fdfc07f458881d42e62373", 0x67, 0x6) flock(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x100000001) bind(0xffffffffffffffff, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) move_mount(r5, &(0x7f00000004c0)='./file1\x00', r6, &(0x7f0000000540)='./file1\x00', 0x21) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40004, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000640)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r0, r7, &(0x7f0000000680)=0x800, 0x100000001) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000480)={0x7e, 0x1, 0x9, 0x0, 0x3f, 0x8}) sendfile(r1, r5, 0x0, 0x80000001) 04:54:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 641.753609] loop2: detected capacity change from 0 to 33559552 [ 641.773001] FAT-fs (loop2): invalid media value (0x29) [ 641.774169] FAT-fs (loop2): Can't find a valid FAT filesystem 04:54:39 executing program 6: pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:54:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x306, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, 0x0, 0x0, 0x300) 04:54:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 1) 04:54:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xe8c, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:54 executing program 5: r0 = syz_io_uring_setup(0x132, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:54:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x308, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:54 executing program 6: pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:54:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:54:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, 0x0, 0x0, 0x300) [ 656.248343] FAULT_INJECTION: forcing a failure. [ 656.248343] name failslab, interval 1, probability 0, space 0, times 0 [ 656.250987] CPU: 0 PID: 6278 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 656.252411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 656.254100] Call Trace: [ 656.254661] dump_stack+0x107/0x167 [ 656.255403] should_fail.cold+0x5/0xa [ 656.256226] ? kvmalloc_node+0x119/0x170 [ 656.257066] should_failslab+0x5/0x20 [ 656.257845] __kmalloc_node+0x76/0x420 [ 656.258651] kvmalloc_node+0x119/0x170 [ 656.259460] seq_read_iter+0x9d6/0x12b0 [ 656.260290] seq_read+0x3dd/0x5b0 [ 656.261004] ? seq_read_iter+0x12b0/0x12b0 [ 656.261877] ? find_held_lock+0x2c/0x110 [ 656.262727] ? fsnotify_perm.part.0+0x22d/0x620 [ 656.263693] ? seq_read_iter+0x12b0/0x12b0 [ 656.264567] proc_reg_read+0x22a/0x300 [ 656.265363] ? proc_reg_write+0x300/0x300 [ 656.266221] vfs_read+0x228/0x620 [ 656.266927] __x64_sys_pread64+0x201/0x260 [ 656.267819] ? ksys_pread64+0x1b0/0x1b0 [ 656.268633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 656.269734] ? syscall_enter_from_user_mode+0x1d/0x50 [ 656.270802] do_syscall_64+0x33/0x40 [ 656.271575] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 656.272616] RIP: 0033:0x7fdd62eb7b19 [ 656.273383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 656.277155] RSP: 002b:00007fdd6042d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 656.278742] RAX: ffffffffffffffda RBX: 00007fdd62fcaf60 RCX: 00007fdd62eb7b19 [ 656.280211] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 656.281674] RBP: 00007fdd6042d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 656.283134] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 656.284614] R13: 00007fffc2c3003f R14: 00007fdd6042d300 R15: 0000000000022000 04:54:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xec0, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x33fe0, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, 0x0, 0x0, 0x300) 04:55:08 executing program 5: r0 = syz_io_uring_setup(0x132, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) fork() 04:55:08 executing program 6: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:55:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xf, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 2) 04:55:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x15, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 670.899840] FAULT_INJECTION: forcing a failure. [ 670.899840] name failslab, interval 1, probability 0, space 0, times 0 [ 670.902140] CPU: 1 PID: 6304 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 670.903515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 670.905190] Call Trace: [ 670.905722] dump_stack+0x107/0x167 [ 670.906460] should_fail.cold+0x5/0xa [ 670.907237] ? create_object.isra.0+0x3a/0xa30 [ 670.908161] should_failslab+0x5/0x20 [ 670.908920] kmem_cache_alloc+0x5b/0x310 [ 670.909735] create_object.isra.0+0x3a/0xa30 [ 670.910606] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 670.911631] __kmalloc_node+0x1ae/0x420 [ 670.912441] kvmalloc_node+0x119/0x170 [ 670.913242] seq_read_iter+0x9d6/0x12b0 [ 670.914036] seq_read+0x3dd/0x5b0 [ 670.914728] ? seq_read_iter+0x12b0/0x12b0 [ 670.915593] ? find_held_lock+0x2c/0x110 [ 670.916420] ? fsnotify_perm.part.0+0x22d/0x620 [ 670.917347] ? seq_read_iter+0x12b0/0x12b0 [ 670.918201] proc_reg_read+0x22a/0x300 [ 670.918975] ? proc_reg_write+0x300/0x300 [ 670.919810] vfs_read+0x228/0x620 [ 670.920506] __x64_sys_pread64+0x201/0x260 [ 670.921341] ? ksys_pread64+0x1b0/0x1b0 [ 670.922143] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 670.923190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 670.924226] do_syscall_64+0x33/0x40 [ 670.924966] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 670.925985] RIP: 0033:0x7fdd62eb7b19 [ 670.926721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 670.930798] RSP: 002b:00007fdd6042d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 670.932523] RAX: ffffffffffffffda RBX: 00007fdd62fcaf60 RCX: 00007fdd62eb7b19 [ 670.934127] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 670.935737] RBP: 00007fdd6042d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 670.937339] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 670.938949] R13: 00007fffc2c3003f R14: 00007fdd6042d300 R15: 0000000000022000 04:55:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x0) 04:55:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xc0, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x20003854, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:09 executing program 6: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:55:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x2, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x0) 04:55:09 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 1) 04:55:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xe8c, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 671.063776] FAULT_INJECTION: forcing a failure. [ 671.063776] name failslab, interval 1, probability 0, space 0, times 0 [ 671.065187] CPU: 0 PID: 6324 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 671.065966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 671.066910] Call Trace: [ 671.067218] dump_stack+0x107/0x167 [ 671.067658] should_fail.cold+0x5/0xa [ 671.068103] ? copy_process+0x3305/0x78b0 [ 671.068579] should_failslab+0x5/0x20 [ 671.069018] kmem_cache_alloc_node+0x55/0x330 [ 671.069531] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 671.070134] copy_process+0x3305/0x78b0 [ 671.070589] ? __lock_acquire+0xbb1/0x5b00 [ 671.071081] ? lock_downgrade+0x6d0/0x6d0 [ 671.071555] ? __cleanup_sighand+0xb0/0xb0 [ 671.072061] ? lock_acquire+0x197/0x470 [ 671.072516] ? find_held_lock+0x2c/0x110 [ 671.072982] kernel_clone+0xe7/0x980 [ 671.073407] ? lock_downgrade+0x6d0/0x6d0 [ 671.073881] ? find_held_lock+0x2c/0x110 [ 671.074347] ? create_io_thread+0xf0/0xf0 [ 671.074825] ? ksys_write+0x12d/0x260 [ 671.075261] ? __mutex_unlock_slowpath+0xe1/0x600 [ 671.075829] __do_sys_fork+0x8a/0xc0 [ 671.076255] ? kernel_thread+0xf0/0xf0 [ 671.076707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 671.077307] ? syscall_enter_from_user_mode+0x1d/0x50 [ 671.077897] ? trace_hardirqs_on+0x5b/0x180 [ 671.078390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 671.078980] do_syscall_64+0x33/0x40 [ 671.079405] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 671.080006] RIP: 0033:0x7f0161ef8b19 [ 671.080434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 671.082536] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 671.083406] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 671.084238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 671.085054] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 671.085866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.086680] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:55:09 executing program 6: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:55:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x7ffff000, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 683.702523] FAULT_INJECTION: forcing a failure. [ 683.702523] name failslab, interval 1, probability 0, space 0, times 0 [ 683.703838] CPU: 1 PID: 6342 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 683.704574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 683.705461] Call Trace: [ 683.705747] dump_stack+0x107/0x167 [ 683.706138] should_fail.cold+0x5/0xa [ 683.706551] ? create_object.isra.0+0x3a/0xa30 [ 683.707039] should_failslab+0x5/0x20 [ 683.707449] kmem_cache_alloc+0x5b/0x310 [ 683.707893] create_object.isra.0+0x3a/0xa30 [ 683.708365] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 683.708910] kmem_cache_alloc_node+0x169/0x330 [ 683.709405] copy_process+0x3305/0x78b0 [ 683.709836] ? __lock_acquire+0xbb1/0x5b00 [ 683.710298] ? lock_downgrade+0x6d0/0x6d0 [ 683.710759] ? __cleanup_sighand+0xb0/0xb0 [ 683.711218] ? lock_acquire+0x197/0x470 [ 683.711653] ? find_held_lock+0x2c/0x110 [ 683.712099] kernel_clone+0xe7/0x980 [ 683.712505] ? lock_downgrade+0x6d0/0x6d0 [ 683.712948] ? find_held_lock+0x2c/0x110 [ 683.713384] ? create_io_thread+0xf0/0xf0 [ 683.713835] ? ksys_write+0x12d/0x260 04:55:21 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 2) 04:55:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x8, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:21 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:55:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0xffffffff, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 683.714249] ? __mutex_unlock_slowpath+0xe1/0x600 [ 683.715025] __do_sys_fork+0x8a/0xc0 [ 683.715437] ? kernel_thread+0xf0/0xf0 [ 683.715870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 683.716432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 683.717003] ? trace_hardirqs_on+0x5b/0x180 [ 683.717467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 683.718032] do_syscall_64+0x33/0x40 [ 683.718435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 683.718989] RIP: 0033:0x7f0161ef8b19 [ 683.719390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 683.721412] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 683.722227] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 683.723000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 04:55:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x0) [ 683.723791] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 683.724706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.725474] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:55:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 3) 04:55:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xec0, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 683.738142] FAULT_INJECTION: forcing a failure. [ 683.738142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.739431] CPU: 1 PID: 6351 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 683.740189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 683.741075] Call Trace: [ 683.741364] dump_stack+0x107/0x167 [ 683.741770] should_fail.cold+0x5/0xa [ 683.742181] _copy_to_iter+0x264/0x12d0 [ 683.742613] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 683.743202] ? _copy_from_iter_nocache+0xd60/0xd60 [ 683.743758] ? __check_heap_object+0x31/0x110 [ 683.744242] ? __check_object_size+0x319/0x440 [ 683.744739] seq_read_iter+0x71a/0x12b0 [ 683.745175] seq_read+0x3dd/0x5b0 [ 683.745545] ? seq_read_iter+0x12b0/0x12b0 [ 683.746011] ? find_held_lock+0x2c/0x110 [ 683.746458] ? fsnotify_perm.part.0+0x22d/0x620 [ 683.746957] ? seq_read_iter+0x12b0/0x12b0 [ 683.747424] proc_reg_read+0x22a/0x300 [ 683.748116] ? proc_reg_write+0x300/0x300 [ 683.749174] vfs_read+0x228/0x620 [ 683.750054] __x64_sys_pread64+0x201/0x260 04:55:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xfffffdef, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 683.751106] ? ksys_pread64+0x1b0/0x1b0 [ 683.752197] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 683.753292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 683.754368] do_syscall_64+0x33/0x40 [ 683.755166] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 683.756260] RIP: 0033:0x7fdd62eb7b19 [ 683.757042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 683.760898] RSP: 002b:00007fdd6042d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 683.762501] RAX: ffffffffffffffda RBX: 00007fdd62fcaf60 RCX: 00007fdd62eb7b19 [ 683.764010] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 683.765499] RBP: 00007fdd6042d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 683.766993] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 683.768493] R13: 00007fffc2c3003f R14: 00007fdd6042d300 R15: 0000000000022000 04:55:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:21 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) [ 683.882696] FAULT_INJECTION: forcing a failure. [ 683.882696] name failslab, interval 1, probability 0, space 0, times 0 [ 683.885261] CPU: 1 PID: 6357 Comm: syz-executor.4 Not tainted 5.10.244 #1 04:55:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x33fe0, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0xf, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xe, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 1) [ 683.886740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 683.888666] Call Trace: [ 683.889238] dump_stack+0x107/0x167 [ 683.890217] should_fail.cold+0x5/0xa [ 683.891237] ? kvmalloc_node+0x119/0x170 [ 683.892329] should_failslab+0x5/0x20 [ 683.893348] __kmalloc_node+0x76/0x420 [ 683.894398] kvmalloc_node+0x119/0x170 [ 683.895234] seq_read_iter+0x9d6/0x12b0 [ 683.896164] seq_read+0x3dd/0x5b0 [ 683.896923] ? seq_read_iter+0x12b0/0x12b0 [ 683.897939] ? find_held_lock+0x2c/0x110 [ 683.898816] ? fsnotify_perm.part.0+0x22d/0x620 [ 683.899829] ? seq_read_iter+0x12b0/0x12b0 [ 683.900741] proc_reg_read+0x22a/0x300 [ 683.901580] ? proc_reg_write+0x300/0x300 [ 683.902472] vfs_read+0x228/0x620 [ 683.903222] __x64_sys_pread64+0x201/0x260 [ 683.904141] ? ksys_pread64+0x1b0/0x1b0 [ 683.904997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 683.906123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 683.907231] do_syscall_64+0x33/0x40 [ 683.908043] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 683.909144] RIP: 0033:0x7f367fa99b19 [ 683.909942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 683.913987] RSP: 002b:00007f367d00f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 683.915720] RAX: ffffffffffffffda RBX: 00007f367fbacf60 RCX: 00007f367fa99b19 [ 683.917300] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 683.918871] RBP: 00007f367d00f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 683.920464] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 683.922002] R13: 00007ffd878ce0cf R14: 00007f367d00f300 R15: 0000000000022000 04:55:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 4) 04:55:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:22 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 3) [ 683.990973] FAULT_INJECTION: forcing a failure. [ 683.990973] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 683.994040] CPU: 0 PID: 6369 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 683.995480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 683.997237] Call Trace: [ 683.997799] dump_stack+0x107/0x167 [ 683.998567] should_fail.cold+0x5/0xa [ 683.999375] __alloc_pages_nodemask+0x182/0x600 [ 684.000373] ? add_mm_counter_fast+0x220/0x220 [ 684.001342] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 684.002602] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 684.003697] ? lock_downgrade+0x6d0/0x6d0 [ 684.004573] ? mark_held_locks+0x9e/0xe0 [ 684.005435] alloc_pages_vma+0xbb/0x410 [ 684.006274] handle_mm_fault+0x152f/0x3500 [ 684.007190] ? __pmd_alloc+0x630/0x630 [ 684.008025] ? vmacache_find+0x55/0x2a0 [ 684.008865] ? vmacache_update+0xce/0x140 [ 684.009744] do_user_addr_fault+0x56e/0xc60 [ 684.010659] exc_page_fault+0xa2/0x1a0 [ 684.011479] asm_exc_page_fault+0x1e/0x30 [ 684.012379] RIP: 0010:copy_user_generic_string+0x2c/0x40 [ 684.013514] Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca e9 43 4d 1d 02 0f 1f 00 0f 01 [ 684.017383] RSP: 0018:ffff8880497f7aa8 EFLAGS: 00050202 [ 684.018498] RAX: 0000000000000001 RBX: 000000000000004a RCX: 0000000000000009 [ 684.019997] RDX: 0000000000000002 RSI: ffff8880456f802c RDI: 0000000020002100 [ 684.021486] RBP: 0000000020002100 R08: 0000000000000000 R09: ffff8880456f8075 [ 684.022995] R10: ffffed1008adf00e R11: 0000000000000001 R12: ffff8880456f802c [ 684.024500] R13: 000000002000214a R14: 00007ffffffff000 R15: 0000000000000000 [ 684.024687] FAULT_INJECTION: forcing a failure. [ 684.024687] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 684.026026] copyout.part.0+0x10b/0x140 [ 684.026084] _copy_to_iter+0x293/0x12d0 [ 684.030220] ? wait_for_completion_io+0x270/0x270 [ 684.031238] ? _copy_from_iter_nocache+0xd60/0xd60 [ 684.032283] ? __virt_addr_valid+0x170/0x5d0 [ 684.033206] ? __check_object_size+0x319/0x440 [ 684.034168] seq_read_iter+0x71a/0x12b0 [ 684.035018] seq_read+0x3dd/0x5b0 [ 684.035756] ? seq_read_iter+0x12b0/0x12b0 [ 684.036645] ? find_held_lock+0x2c/0x110 [ 684.037520] ? fsnotify_perm.part.0+0x22d/0x620 [ 684.038520] ? seq_read_iter+0x12b0/0x12b0 [ 684.039409] proc_reg_read+0x22a/0x300 [ 684.040237] ? proc_reg_write+0x300/0x300 [ 684.041107] vfs_read+0x228/0x620 [ 684.041827] __x64_sys_pread64+0x201/0x260 [ 684.042718] ? ksys_pread64+0x1b0/0x1b0 [ 684.043555] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 684.044669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 684.045755] do_syscall_64+0x33/0x40 [ 684.046535] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 684.047607] RIP: 0033:0x7fdd62eb7b19 [ 684.048397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 684.052261] RSP: 002b:00007fdd6042d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 684.053867] RAX: ffffffffffffffda RBX: 00007fdd62fcaf60 RCX: 00007fdd62eb7b19 [ 684.055359] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 684.056871] RBP: 00007fdd6042d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 684.058367] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 684.059872] R13: 00007fffc2c3003f R14: 00007fdd6042d300 R15: 0000000000022000 [ 684.061400] CPU: 1 PID: 6371 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 684.062879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 684.064645] Call Trace: [ 684.065209] dump_stack+0x107/0x167 [ 684.065981] should_fail.cold+0x5/0xa [ 684.066791] __alloc_pages_nodemask+0x182/0x600 [ 684.067786] ? lock_downgrade+0x6d0/0x6d0 [ 684.068660] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 684.069921] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 684.071011] ? kmem_cache_alloc_node+0x2bc/0x330 04:55:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xf, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x302, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 684.072013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 684.073246] copy_process+0x62b/0x78b0 [ 684.074078] ? __lock_acquire+0xbb1/0x5b00 [ 684.074983] ? lock_downgrade+0x6d0/0x6d0 [ 684.075878] ? __cleanup_sighand+0xb0/0xb0 [ 684.076788] ? lock_acquire+0x197/0x470 [ 684.077657] ? find_held_lock+0x2c/0x110 [ 684.078515] kernel_clone+0xe7/0x980 [ 684.079324] ? lock_downgrade+0x6d0/0x6d0 [ 684.080227] ? find_held_lock+0x2c/0x110 [ 684.081107] ? create_io_thread+0xf0/0xf0 [ 684.082008] ? ksys_write+0x12d/0x260 [ 684.082852] ? __mutex_unlock_slowpath+0xe1/0x600 [ 684.083914] __do_sys_fork+0x8a/0xc0 [ 684.084722] ? kernel_thread+0xf0/0xf0 [ 684.085571] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 684.086708] ? syscall_enter_from_user_mode+0x1d/0x50 [ 684.087819] ? trace_hardirqs_on+0x5b/0x180 [ 684.088749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 684.089853] do_syscall_64+0x33/0x40 [ 684.090653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 684.091799] RIP: 0033:0x7f0161ef8b19 [ 684.092598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 684.097127] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 684.098814] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 684.100459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 684.102029] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 684.103580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.105122] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:55:45 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:55:45 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 4) 04:55:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 5) 04:55:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xc0, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x20003854, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xec0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 2) 04:55:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 707.065234] FAULT_INJECTION: forcing a failure. [ 707.065234] name failslab, interval 1, probability 0, space 0, times 0 [ 707.066431] FAULT_INJECTION: forcing a failure. [ 707.066431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.067647] CPU: 1 PID: 6389 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 707.071568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 707.073353] Call Trace: [ 707.073918] dump_stack+0x107/0x167 [ 707.074688] should_fail.cold+0x5/0xa [ 707.075494] ? prepare_creds+0x25/0x5e0 [ 707.076340] should_failslab+0x5/0x20 [ 707.077160] kmem_cache_alloc+0x5b/0x310 [ 707.078019] ? lock_downgrade+0x6d0/0x6d0 [ 707.078897] prepare_creds+0x25/0x5e0 [ 707.079701] copy_creds+0x72/0x580 [ 707.080464] copy_process+0xfef/0x78b0 [ 707.081291] ? __lock_acquire+0xbb1/0x5b00 [ 707.082184] ? lock_downgrade+0x6d0/0x6d0 [ 707.083072] ? __cleanup_sighand+0xb0/0xb0 [ 707.083982] ? lock_acquire+0x197/0x470 [ 707.084856] ? find_held_lock+0x2c/0x110 [ 707.085724] kernel_clone+0xe7/0x980 [ 707.086509] ? lock_downgrade+0x6d0/0x6d0 [ 707.087391] ? find_held_lock+0x2c/0x110 [ 707.088262] ? create_io_thread+0xf0/0xf0 [ 707.089145] ? ksys_write+0x12d/0x260 [ 707.089952] ? __mutex_unlock_slowpath+0xe1/0x600 [ 707.090980] __do_sys_fork+0x8a/0xc0 [ 707.091767] ? kernel_thread+0xf0/0xf0 [ 707.092613] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 707.093721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 707.094815] ? trace_hardirqs_on+0x5b/0x180 [ 707.095733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 707.096832] do_syscall_64+0x33/0x40 [ 707.097621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 707.098705] RIP: 0033:0x7f0161ef8b19 [ 707.099487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 707.103394] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 707.105022] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 707.106527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 707.108045] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 707.109562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.111066] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 [ 707.112612] CPU: 0 PID: 6388 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 707.114110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 707.115902] Call Trace: [ 707.116515] dump_stack+0x107/0x167 [ 707.117302] should_fail.cold+0x5/0xa [ 707.118135] _copy_to_iter+0x264/0x12d0 [ 707.119005] ? __mutex_unlock_slowpath+0xe1/0x600 [ 707.120061] ? _copy_from_iter_nocache+0xd60/0xd60 [ 707.121137] ? __virt_addr_valid+0x170/0x5d0 [ 707.122094] ? __check_object_size+0x319/0x440 [ 707.123089] seq_read_iter+0xdcb/0x12b0 [ 707.123967] seq_read+0x3dd/0x5b0 [ 707.124751] ? seq_read_iter+0x12b0/0x12b0 [ 707.125697] ? find_held_lock+0x2c/0x110 [ 707.126603] ? fsnotify_perm.part.0+0x22d/0x620 [ 707.127717] ? seq_read_iter+0x12b0/0x12b0 [ 707.128654] proc_reg_read+0x22a/0x300 [ 707.129505] ? proc_reg_write+0x300/0x300 [ 707.130398] vfs_read+0x228/0x620 [ 707.131153] __x64_sys_pread64+0x201/0x260 [ 707.132075] ? ksys_pread64+0x1b0/0x1b0 [ 707.132948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 707.134088] ? syscall_enter_from_user_mode+0x1d/0x50 [ 707.135196] do_syscall_64+0x33/0x40 [ 707.136016] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 707.137128] RIP: 0033:0x7fdd62eb7b19 [ 707.137940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 707.141911] RSP: 002b:00007fdd6042d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 707.143563] RAX: ffffffffffffffda RBX: 00007fdd62fcaf60 RCX: 00007fdd62eb7b19 [ 707.145102] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 707.146653] RBP: 00007fdd6042d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 707.148188] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 707.149745] R13: 00007fffc2c3003f R14: 00007fdd6042d300 R15: 0000000000022000 04:55:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xe90, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x306, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 707.171654] FAULT_INJECTION: forcing a failure. [ 707.171654] name failslab, interval 1, probability 0, space 0, times 0 [ 707.174145] CPU: 0 PID: 6397 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 707.175633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 707.177429] Call Trace: [ 707.178013] dump_stack+0x107/0x167 [ 707.178804] should_fail.cold+0x5/0xa [ 707.179624] ? create_object.isra.0+0x3a/0xa30 [ 707.180629] should_failslab+0x5/0x20 [ 707.181444] kmem_cache_alloc+0x5b/0x310 [ 707.182337] create_object.isra.0+0x3a/0xa30 [ 707.183520] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 707.184904] __kmalloc_node+0x1ae/0x420 [ 707.185986] kvmalloc_node+0x119/0x170 [ 707.186858] seq_read_iter+0x9d6/0x12b0 [ 707.187733] seq_read+0x3dd/0x5b0 [ 707.188496] ? seq_read_iter+0x12b0/0x12b0 [ 707.189393] ? find_held_lock+0x2c/0x110 [ 707.190282] ? fsnotify_perm.part.0+0x22d/0x620 [ 707.191298] ? seq_read_iter+0x12b0/0x12b0 [ 707.192220] proc_reg_read+0x22a/0x300 [ 707.193062] ? proc_reg_write+0x300/0x300 [ 707.193957] vfs_read+0x228/0x620 [ 707.194726] __x64_sys_pread64+0x201/0x260 [ 707.195639] ? ksys_pread64+0x1b0/0x1b0 [ 707.196518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 707.197638] ? syscall_enter_from_user_mode+0x1d/0x50 [ 707.198761] do_syscall_64+0x33/0x40 [ 707.199573] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 707.200692] RIP: 0033:0x7f367fa99b19 [ 707.201494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 707.205496] RSP: 002b:00007f367d00f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 707.207127] RAX: ffffffffffffffda RBX: 00007f367fbacf60 RCX: 00007f367fa99b19 [ 707.208687] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 707.210208] RBP: 00007f367d00f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 707.211757] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 707.213279] R13: 00007ffd878ce0cf R14: 00007f367d00f300 R15: 0000000000022000 04:55:45 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, 0x0, 0x0, 0x300) 04:55:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf00, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x308, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:55:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xec0, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 3) 04:56:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x33fe0, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xc00e, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x7ffff000, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 6) 04:56:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, 0x0, 0x0, 0x300) 04:56:00 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 5) [ 722.709069] FAULT_INJECTION: forcing a failure. [ 722.709069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.710555] CPU: 1 PID: 6432 Comm: syz-executor.2 Not tainted 5.10.244 #1 [ 722.711398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.712450] Call Trace: [ 722.712779] dump_stack+0x107/0x167 [ 722.713235] should_fail.cold+0x5/0xa [ 722.713708] _copy_to_user+0x2e/0x180 [ 722.714047] FAULT_INJECTION: forcing a failure. [ 722.714047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.714184] simple_read_from_buffer+0xcc/0x160 [ 722.714201] proc_fail_nth_read+0x198/0x230 [ 722.716558] ? proc_sessionid_read+0x230/0x230 [ 722.717120] ? security_file_permission+0xb1/0xe0 [ 722.717719] ? proc_sessionid_read+0x230/0x230 [ 722.718282] vfs_read+0x228/0x620 [ 722.718713] ksys_read+0x12d/0x260 [ 722.719153] ? vfs_write+0xb10/0xb10 [ 722.719619] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 722.720276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 722.720918] do_syscall_64+0x33/0x40 [ 722.721378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 722.722022] RIP: 0033:0x7fdd62e6a69c [ 722.722492] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 722.724778] RSP: 002b:00007fdd6042d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 722.725714] RAX: ffffffffffffffda RBX: 00000000000005d2 RCX: 00007fdd62e6a69c [ 722.726610] RDX: 000000000000000f RSI: 00007fdd6042d1e0 RDI: 0000000000000004 [ 722.727483] RBP: 00007fdd6042d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.728369] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 722.729249] R13: 00007fffc2c3003f R14: 00007fdd6042d300 R15: 0000000000022000 [ 722.730142] CPU: 0 PID: 6425 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 722.730895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.731784] Call Trace: [ 722.732076] dump_stack+0x107/0x167 [ 722.732476] should_fail.cold+0x5/0xa [ 722.732890] _copy_to_iter+0x264/0x12d0 [ 722.733320] ? wait_for_completion_io+0x270/0x270 [ 722.733385] FAULT_INJECTION: forcing a failure. [ 722.733385] name failslab, interval 1, probability 0, space 0, times 0 [ 722.733843] ? _copy_from_iter_nocache+0xd60/0xd60 [ 722.735728] ? __virt_addr_valid+0x170/0x5d0 [ 722.736210] ? __check_object_size+0x319/0x440 [ 722.736700] seq_read_iter+0x71a/0x12b0 [ 722.737133] seq_read+0x3dd/0x5b0 [ 722.737503] ? seq_read_iter+0x12b0/0x12b0 [ 722.737956] ? find_held_lock+0x2c/0x110 [ 722.738400] ? fsnotify_perm.part.0+0x22d/0x620 [ 722.738898] ? seq_read_iter+0x12b0/0x12b0 [ 722.739351] proc_reg_read+0x22a/0x300 [ 722.739767] ? proc_reg_write+0x300/0x300 [ 722.740218] vfs_read+0x228/0x620 [ 722.740589] __x64_sys_pread64+0x201/0x260 [ 722.741040] ? ksys_pread64+0x1b0/0x1b0 [ 722.741467] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 722.742027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 722.742577] do_syscall_64+0x33/0x40 [ 722.742975] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 722.743521] RIP: 0033:0x7f367fa99b19 [ 722.743920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.745884] RSP: 002b:00007f367d00f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 722.746697] RAX: ffffffffffffffda RBX: 00007f367fbacf60 RCX: 00007f367fa99b19 [ 722.747458] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 722.748224] RBP: 00007f367d00f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.748986] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 722.749744] R13: 00007ffd878ce0cf R14: 00007f367d00f300 R15: 0000000000022000 [ 722.750525] CPU: 1 PID: 6430 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 722.751380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.752397] Call Trace: [ 722.752722] dump_stack+0x107/0x167 [ 722.753165] should_fail.cold+0x5/0xa [ 722.753626] ? create_object.isra.0+0x3a/0xa30 [ 722.754180] should_failslab+0x5/0x20 [ 722.754640] kmem_cache_alloc+0x5b/0x310 [ 722.755133] create_object.isra.0+0x3a/0xa30 [ 722.755665] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 722.756290] kmem_cache_alloc+0x159/0x310 [ 722.756796] prepare_creds+0x25/0x5e0 [ 722.757259] copy_creds+0x72/0x580 [ 722.757694] copy_process+0xfef/0x78b0 [ 722.758171] ? __lock_acquire+0xbb1/0x5b00 [ 722.758692] ? lock_downgrade+0x6d0/0x6d0 [ 722.759203] ? __cleanup_sighand+0xb0/0xb0 [ 722.759724] ? lock_acquire+0x197/0x470 [ 722.760221] ? find_held_lock+0x2c/0x110 [ 722.760719] kernel_clone+0xe7/0x980 [ 722.761173] ? lock_downgrade+0x6d0/0x6d0 [ 722.761676] ? find_held_lock+0x2c/0x110 [ 722.762172] ? create_io_thread+0xf0/0xf0 [ 722.762678] ? ksys_write+0x12d/0x260 [ 722.763143] ? __mutex_unlock_slowpath+0xe1/0x600 [ 722.763736] __do_sys_fork+0x8a/0xc0 [ 722.764197] ? kernel_thread+0xf0/0xf0 [ 722.764679] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 722.765323] ? syscall_enter_from_user_mode+0x1d/0x50 [ 722.765943] ? trace_hardirqs_on+0x5b/0x180 [ 722.766478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 722.767109] do_syscall_64+0x33/0x40 [ 722.767560] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 722.768176] RIP: 0033:0x7f0161ef8b19 [ 722.768639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.770849] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 722.771765] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 722.772636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 722.773491] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.774345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.775200] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:56:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, 0x0, 0x0, 0x300) 04:56:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x2, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf000, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x20003854, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xfffffdef, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 4) 04:56:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x7ffff000, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x80000, 0x0, {0x6}}, 0x14}}, 0x0) [ 722.858583] FAULT_INJECTION: forcing a failure. [ 722.858583] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 722.860012] CPU: 1 PID: 6445 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 722.860823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.861800] Call Trace: [ 722.862115] dump_stack+0x107/0x167 [ 722.862542] should_fail.cold+0x5/0xa [ 722.862991] __alloc_pages_nodemask+0x182/0x600 [ 722.863533] ? add_mm_counter_fast+0x220/0x220 [ 722.864072] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 722.864784] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 722.865395] ? lock_downgrade+0x6d0/0x6d0 [ 722.865884] ? mark_held_locks+0x9e/0xe0 [ 722.866361] alloc_pages_vma+0xbb/0x410 [ 722.866828] handle_mm_fault+0x152f/0x3500 [ 722.867329] ? __pmd_alloc+0x630/0x630 [ 722.867790] ? vmacache_find+0x55/0x2a0 [ 722.868258] ? vmacache_update+0xce/0x140 [ 722.868751] do_user_addr_fault+0x56e/0xc60 [ 722.869262] exc_page_fault+0xa2/0x1a0 [ 722.869716] asm_exc_page_fault+0x1e/0x30 [ 722.870197] RIP: 0010:copy_user_generic_string+0x2c/0x40 [ 722.870836] Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca e9 43 4d 1d 02 0f 1f 00 0f 01 [ 722.872995] RSP: 0018:ffff888049807aa8 EFLAGS: 00050202 [ 722.873623] RAX: 0000000000000001 RBX: 000000000000004a RCX: 0000000000000009 [ 722.874451] RDX: 0000000000000002 RSI: ffff8880492e402c RDI: 0000000020002100 [ 722.875278] RBP: 0000000020002100 R08: 0000000000000000 R09: ffff8880492e4075 [ 722.876097] R10: ffffed100925c80e R11: 0000000000000001 R12: ffff8880492e402c [ 722.876928] R13: 000000002000214a R14: 00007ffffffff000 R15: 0000000000000000 [ 722.877766] copyout.part.0+0x10b/0x140 [ 722.878227] _copy_to_iter+0x293/0x12d0 [ 722.878686] ? wait_for_completion_io+0x270/0x270 [ 722.879249] ? _copy_from_iter_nocache+0xd60/0xd60 [ 722.879813] ? __virt_addr_valid+0x170/0x5d0 [ 722.880379] ? __check_object_size+0x319/0x440 [ 722.880911] seq_read_iter+0x71a/0x12b0 [ 722.881377] seq_read+0x3dd/0x5b0 [ 722.881778] ? seq_read_iter+0x12b0/0x12b0 [ 722.882264] ? find_held_lock+0x2c/0x110 [ 722.882742] ? fsnotify_perm.part.0+0x22d/0x620 [ 722.883282] ? seq_read_iter+0x12b0/0x12b0 [ 722.883768] proc_reg_read+0x22a/0x300 [ 722.884228] ? proc_reg_write+0x300/0x300 [ 722.884703] vfs_read+0x228/0x620 [ 722.885109] __x64_sys_pread64+0x201/0x260 [ 722.885596] ? ksys_pread64+0x1b0/0x1b0 [ 722.886058] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 722.886664] ? syscall_enter_from_user_mode+0x1d/0x50 [ 722.887260] do_syscall_64+0x33/0x40 [ 722.887688] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 722.888286] RIP: 0033:0x7f367fa99b19 [ 722.888712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.890829] RSP: 002b:00007f367d00f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 722.891701] RAX: ffffffffffffffda RBX: 00007f367fbacf60 RCX: 00007f367fa99b19 [ 722.892528] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 722.893343] RBP: 00007f367d00f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.894168] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 722.894988] R13: 00007ffd878ce0cf R14: 00007f367d00f300 R15: 0000000000022000 04:56:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 5) 04:56:13 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 6) 04:56:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:56:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x8, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0xf, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0xfffffdef, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf0ffff, 0x0, {0x6}}, 0x14}}, 0x0) [ 735.738855] FAULT_INJECTION: forcing a failure. [ 735.738855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.741537] CPU: 1 PID: 6459 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 735.743015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 735.744809] Call Trace: [ 735.745384] dump_stack+0x107/0x167 [ 735.746169] should_fail.cold+0x5/0xa [ 735.746993] _copy_to_iter+0x264/0x12d0 [ 735.747863] ? __mutex_unlock_slowpath+0xe1/0x600 [ 735.748908] ? _copy_from_iter_nocache+0xd60/0xd60 [ 735.749970] ? __virt_addr_valid+0x170/0x5d0 [ 735.750930] ? __check_object_size+0x319/0x440 [ 735.751916] seq_read_iter+0xdcb/0x12b0 [ 735.752808] seq_read+0x3dd/0x5b0 [ 735.753555] ? seq_read_iter+0x12b0/0x12b0 [ 735.754464] ? find_held_lock+0x2c/0x110 [ 735.755354] ? fsnotify_perm.part.0+0x22d/0x620 [ 735.756381] ? seq_read_iter+0x12b0/0x12b0 [ 735.757293] proc_reg_read+0x22a/0x300 [ 735.758145] ? proc_reg_write+0x300/0x300 [ 735.759035] vfs_read+0x228/0x620 [ 735.759784] __x64_sys_pread64+0x201/0x260 [ 735.760715] ? ksys_pread64+0x1b0/0x1b0 [ 735.761584] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 735.762711] ? syscall_enter_from_user_mode+0x1d/0x50 [ 735.763839] do_syscall_64+0x33/0x40 [ 735.764655] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 735.765772] RIP: 0033:0x7f367fa99b19 [ 735.766570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 735.770525] RSP: 002b:00007f367d00f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 735.772163] RAX: ffffffffffffffda RBX: 00007f367fbacf60 RCX: 00007f367fa99b19 [ 735.773697] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 735.775223] RBP: 00007f367d00f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 735.776765] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 735.778290] R13: 00007ffd878ce0cf R14: 00007f367d00f300 R15: 0000000000022000 [ 735.808628] FAULT_INJECTION: forcing a failure. [ 735.808628] name failslab, interval 1, probability 0, space 0, times 0 [ 735.810046] CPU: 0 PID: 6471 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 735.810891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 735.811943] Call Trace: [ 735.812282] dump_stack+0x107/0x167 [ 735.812760] should_fail.cold+0x5/0xa [ 735.813217] ? security_prepare_creds+0x112/0x190 [ 735.813812] should_failslab+0x5/0x20 [ 735.814286] __kmalloc+0x72/0x390 [ 735.814699] security_prepare_creds+0x112/0x190 [ 735.815279] prepare_creds+0x452/0x5e0 [ 735.815761] copy_creds+0x72/0x580 [ 735.816191] copy_process+0xfef/0x78b0 [ 735.816692] ? __lock_acquire+0xbb1/0x5b00 [ 735.817222] ? lock_downgrade+0x6d0/0x6d0 [ 735.817741] ? __cleanup_sighand+0xb0/0xb0 [ 735.818248] ? lock_acquire+0x197/0x470 [ 735.818742] ? find_held_lock+0x2c/0x110 [ 735.819227] kernel_clone+0xe7/0x980 [ 735.819685] ? lock_downgrade+0x6d0/0x6d0 [ 735.820175] ? find_held_lock+0x2c/0x110 [ 735.820693] ? create_io_thread+0xf0/0xf0 [ 735.821210] ? ksys_write+0x12d/0x260 [ 735.821686] ? __mutex_unlock_slowpath+0xe1/0x600 [ 735.822286] __do_sys_fork+0x8a/0xc0 [ 735.822727] ? kernel_thread+0xf0/0xf0 [ 735.823220] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 735.823842] ? syscall_enter_from_user_mode+0x1d/0x50 [ 735.824487] ? trace_hardirqs_on+0x5b/0x180 [ 735.825029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 735.825631] do_syscall_64+0x33/0x40 [ 735.826091] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 735.826693] RIP: 0033:0x7f0161ef8b19 [ 735.827147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 735.829312] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 735.830252] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 735.831125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 735.831991] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 735.832870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.833747] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:56:13 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x0) 04:56:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x302, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:13 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x0) 04:56:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0x4a, 0x300) 04:56:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x1000000, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0x5d2, 0x300) 04:56:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0xf, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:29 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 7) 04:56:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 6) 04:56:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x2000000, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:29 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x0) 04:56:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x306, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x8b, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0x200030f3, 0x300) [ 751.182268] FAULT_INJECTION: forcing a failure. [ 751.182268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.185291] CPU: 0 PID: 6497 Comm: syz-executor.4 Not tainted 5.10.244 #1 [ 751.187039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 751.189157] Call Trace: [ 751.189824] dump_stack+0x107/0x167 [ 751.190755] should_fail.cold+0x5/0xa [ 751.191732] _copy_to_user+0x2e/0x180 [ 751.192727] simple_read_from_buffer+0xcc/0x160 [ 751.193915] proc_fail_nth_read+0x198/0x230 [ 751.195017] ? proc_sessionid_read+0x230/0x230 [ 751.196175] ? security_file_permission+0xb1/0xe0 [ 751.197431] ? proc_sessionid_read+0x230/0x230 [ 751.198594] vfs_read+0x228/0x620 [ 751.199482] ksys_read+0x12d/0x260 [ 751.200389] ? vfs_write+0xb10/0xb10 [ 751.201353] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 751.202695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 751.204009] do_syscall_64+0x33/0x40 [ 751.204961] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 751.206290] RIP: 0033:0x7f367fa4c69c [ 751.207266] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 751.212001] RSP: 002b:00007f367d00f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 751.213763] RAX: ffffffffffffffda RBX: 00000000000005d2 RCX: 00007f367fa4c69c [ 751.215273] RDX: 000000000000000f RSI: 00007f367d00f1e0 RDI: 0000000000000004 [ 751.216793] RBP: 00007f367d00f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.218307] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 751.219810] R13: 00007ffd878ce0cf R14: 00007f367d00f300 R15: 0000000000022000 [ 751.239687] FAULT_INJECTION: forcing a failure. [ 751.239687] name failslab, interval 1, probability 0, space 0, times 0 04:56:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x308, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x306, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 751.242107] CPU: 0 PID: 6495 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 751.243737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 751.245558] Call Trace: [ 751.246133] dump_stack+0x107/0x167 [ 751.246926] should_fail.cold+0x5/0xa [ 751.247762] ? create_object.isra.0+0x3a/0xa30 [ 751.248872] should_failslab+0x5/0x20 [ 751.249709] kmem_cache_alloc+0x5b/0x310 [ 751.250599] create_object.isra.0+0x3a/0xa30 [ 751.251553] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 751.252669] __kmalloc+0x16e/0x390 [ 751.253457] security_prepare_creds+0x112/0x190 [ 751.254473] prepare_creds+0x452/0x5e0 [ 751.255330] copy_creds+0x72/0x580 [ 751.256115] copy_process+0xfef/0x78b0 [ 751.256990] ? __lock_acquire+0xbb1/0x5b00 [ 751.257927] ? lock_downgrade+0x6d0/0x6d0 [ 751.258841] ? __cleanup_sighand+0xb0/0xb0 [ 751.259779] ? lock_acquire+0x197/0x470 [ 751.260666] ? find_held_lock+0x2c/0x110 [ 751.261547] kernel_clone+0xe7/0x980 [ 751.262355] ? lock_downgrade+0x6d0/0x6d0 [ 751.263248] ? find_held_lock+0x2c/0x110 [ 751.264127] ? create_io_thread+0xf0/0xf0 [ 751.265040] ? ksys_write+0x12d/0x260 [ 751.265867] ? __mutex_unlock_slowpath+0xe1/0x600 [ 751.266935] __do_sys_fork+0x8a/0xc0 [ 751.267747] ? kernel_thread+0xf0/0xf0 [ 751.268645] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 751.269786] ? syscall_enter_from_user_mode+0x1d/0x50 [ 751.270896] ? trace_hardirqs_on+0x5b/0x180 [ 751.271834] ? syscall_enter_from_user_mode+0x1d/0x50 [ 751.272964] do_syscall_64+0x33/0x40 [ 751.273770] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 751.274883] RIP: 0033:0x7f0161ef8b19 [ 751.275697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 751.279707] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 751.281366] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 751.282909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 751.284451] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.286013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.287577] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:56:43 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 8) 04:56:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x308, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x76) 04:56:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf0, 0x0, {0x6}}, 0x14}}, 0x0) [ 765.285785] FAULT_INJECTION: forcing a failure. [ 765.285785] name failslab, interval 1, probability 0, space 0, times 0 04:56:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:56:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf000000, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 1) [ 765.289004] CPU: 0 PID: 6524 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 765.290948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 765.293275] Call Trace: [ 765.294016] dump_stack+0x107/0x167 [ 765.295046] should_fail.cold+0x5/0xa [ 765.296121] ? __delayacct_tsk_init+0x1b/0x80 [ 765.297389] should_failslab+0x5/0x20 [ 765.298449] kmem_cache_alloc+0x5b/0x310 [ 765.299578] ? prepare_creds+0x466/0x5e0 [ 765.300733] __delayacct_tsk_init+0x1b/0x80 [ 765.301935] copy_process+0x3399/0x78b0 [ 765.303047] ? __lock_acquire+0xbb1/0x5b00 [ 765.304239] ? lock_downgrade+0x6d0/0x6d0 [ 765.305414] ? __cleanup_sighand+0xb0/0xb0 [ 765.306598] ? lock_acquire+0x197/0x470 [ 765.307724] ? find_held_lock+0x2c/0x110 [ 765.308865] kernel_clone+0xe7/0x980 [ 765.309904] ? lock_downgrade+0x6d0/0x6d0 [ 765.311053] ? find_held_lock+0x2c/0x110 [ 765.312174] ? create_io_thread+0xf0/0xf0 [ 765.313308] ? ksys_write+0x12d/0x260 [ 765.314350] ? __mutex_unlock_slowpath+0xe1/0x600 [ 765.315682] __do_sys_fork+0x8a/0xc0 [ 765.316721] ? kernel_thread+0xf0/0xf0 [ 765.317804] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 765.319257] ? syscall_enter_from_user_mode+0x1d/0x50 [ 765.320668] ? trace_hardirqs_on+0x5b/0x180 [ 765.321864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 765.323287] do_syscall_64+0x33/0x40 [ 765.324315] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 765.325735] RIP: 0033:0x7f0161ef8b19 [ 765.326748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 765.331755] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 765.333770] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 765.335405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 765.337083] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 765.338767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.340404] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:56:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xec0, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0x4a, 0x300) 04:56:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf00, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0x5d2, 0x300) [ 765.365678] FAULT_INJECTION: forcing a failure. [ 765.365678] name failslab, interval 1, probability 0, space 0, times 0 [ 765.368226] CPU: 0 PID: 6538 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 765.369773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 04:56:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) [ 765.371643] Call Trace: [ 765.372365] dump_stack+0x107/0x167 [ 765.373194] should_fail.cold+0x5/0xa [ 765.374038] ? kvmalloc_node+0x119/0x170 [ 765.374953] should_failslab+0x5/0x20 [ 765.375805] __kmalloc_node+0x76/0x420 [ 765.376696] kvmalloc_node+0x119/0x170 [ 765.377573] seq_read_iter+0x9d6/0x12b0 [ 765.378484] seq_read+0x3dd/0x5b0 [ 765.379258] ? seq_read_iter+0x12b0/0x12b0 [ 765.380200] ? find_held_lock+0x2c/0x110 [ 765.381124] ? fsnotify_perm.part.0+0x22d/0x620 [ 765.382156] ? seq_read_iter+0x12b0/0x12b0 [ 765.383095] proc_reg_read+0x22a/0x300 [ 765.383955] ? proc_reg_write+0x300/0x300 [ 765.384887] vfs_read+0x228/0x620 [ 765.385662] __x64_sys_pread64+0x201/0x260 [ 765.386594] ? ksys_pread64+0x1b0/0x1b0 [ 765.387477] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 765.388636] ? syscall_enter_from_user_mode+0x1d/0x50 [ 765.389782] do_syscall_64+0x33/0x40 [ 765.390611] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 765.391761] RIP: 0033:0x7fc9de732b19 [ 765.392579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 765.396604] RSP: 002b:00007fc9dbca8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 765.398281] RAX: ffffffffffffffda RBX: 00007fc9de845f60 RCX: 00007fc9de732b19 [ 765.399836] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 765.401411] RBP: 00007fc9dbca81d0 R08: 0000000000000000 R09: 0000000000000000 [ 765.402973] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 765.404529] R13: 00007fff35611f7f R14: 00007fc9dbca8300 R15: 0000000000022000 04:56:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x8b00, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0x200030f3, 0x300) 04:56:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x2, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x9effffff, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:58 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 9) 04:56:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xc00e, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xf4) 04:56:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x2, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 2) 04:56:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x76) 04:56:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x8, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xc00e0000, 0x0, {0x6}}, 0x14}}, 0x0) [ 780.581943] FAULT_INJECTION: forcing a failure. [ 780.581943] name failslab, interval 1, probability 0, space 0, times 0 [ 780.584261] CPU: 1 PID: 6567 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 780.585618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 780.587239] Call Trace: [ 780.587765] dump_stack+0x107/0x167 [ 780.588489] should_fail.cold+0x5/0xa [ 780.589247] ? create_object.isra.0+0x3a/0xa30 [ 780.590152] should_failslab+0x5/0x20 [ 780.590908] kmem_cache_alloc+0x5b/0x310 [ 780.591700] create_object.isra.0+0x3a/0xa30 [ 780.592550] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 780.593557] __kmalloc_node+0x1ae/0x420 [ 780.594336] kvmalloc_node+0x119/0x170 [ 780.595095] seq_read_iter+0x9d6/0x12b0 [ 780.595893] seq_read+0x3dd/0x5b0 [ 780.596573] ? seq_read_iter+0x12b0/0x12b0 [ 780.597397] ? find_held_lock+0x2c/0x110 [ 780.598212] ? fsnotify_perm.part.0+0x22d/0x620 [ 780.599131] ? seq_read_iter+0x12b0/0x12b0 [ 780.599969] proc_reg_read+0x22a/0x300 [ 780.600730] ? proc_reg_write+0x300/0x300 [ 780.601559] vfs_read+0x228/0x620 [ 780.602243] __x64_sys_pread64+0x201/0x260 [ 780.602924] FAULT_INJECTION: forcing a failure. [ 780.602924] name failslab, interval 1, probability 0, space 0, times 0 [ 780.603058] ? ksys_pread64+0x1b0/0x1b0 [ 780.603080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 780.603108] ? syscall_enter_from_user_mode+0x1d/0x50 [ 780.608101] do_syscall_64+0x33/0x40 [ 780.608841] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 780.609872] RIP: 0033:0x7fc9de732b19 [ 780.610606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 780.614248] RSP: 002b:00007fc9dbca8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 780.615736] RAX: ffffffffffffffda RBX: 00007fc9de845f60 RCX: 00007fc9de732b19 [ 780.617141] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 780.618538] RBP: 00007fc9dbca81d0 R08: 0000000000000000 R09: 0000000000000000 [ 780.619952] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 780.621358] R13: 00007fff35611f7f R14: 00007fc9dbca8300 R15: 0000000000022000 [ 780.622796] CPU: 0 PID: 6573 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 780.624190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 780.625861] Call Trace: [ 780.626399] dump_stack+0x107/0x167 [ 780.627130] should_fail.cold+0x5/0xa [ 780.627900] ? create_object.isra.0+0x3a/0xa30 [ 780.628814] should_failslab+0x5/0x20 [ 780.629597] kmem_cache_alloc+0x5b/0x310 [ 780.630404] create_object.isra.0+0x3a/0xa30 [ 780.631268] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 780.632277] kmem_cache_alloc+0x159/0x310 [ 780.633116] __delayacct_tsk_init+0x1b/0x80 [ 780.633972] copy_process+0x3399/0x78b0 [ 780.634781] ? __lock_acquire+0xbb1/0x5b00 [ 780.635636] ? lock_downgrade+0x6d0/0x6d0 [ 780.636474] ? __cleanup_sighand+0xb0/0xb0 [ 780.637329] ? lock_acquire+0x197/0x470 [ 780.638129] ? find_held_lock+0x2c/0x110 [ 780.638946] kernel_clone+0xe7/0x980 [ 780.639685] ? lock_downgrade+0x6d0/0x6d0 [ 780.640510] ? find_held_lock+0x2c/0x110 [ 780.641330] ? create_io_thread+0xf0/0xf0 [ 780.642157] ? ksys_write+0x12d/0x260 [ 780.642925] ? __mutex_unlock_slowpath+0xe1/0x600 [ 780.643892] __do_sys_fork+0x8a/0xc0 [ 780.644632] ? kernel_thread+0xf0/0xf0 [ 780.645417] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 780.646467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 780.647492] ? trace_hardirqs_on+0x5b/0x180 [ 780.648352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 780.649387] do_syscall_64+0x33/0x40 [ 780.650123] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 780.651138] RIP: 0033:0x7f0161ef8b19 [ 780.651877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 780.655537] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 780.657062] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 780.658478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 780.659915] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 780.661336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.662766] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:56:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x8, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xf4) 04:56:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf000, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x172) 04:56:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf0ffffff, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 3) [ 780.832312] FAULT_INJECTION: forcing a failure. [ 780.832312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.834757] CPU: 0 PID: 6591 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 780.836116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 780.837777] Call Trace: [ 780.838307] dump_stack+0x107/0x167 [ 780.839034] should_fail.cold+0x5/0xa [ 780.839802] _copy_to_iter+0x264/0x12d0 [ 780.840601] ? wait_for_completion_io+0x270/0x270 [ 780.841583] ? _copy_from_iter_nocache+0xd60/0xd60 [ 780.842580] ? __virt_addr_valid+0x170/0x5d0 [ 780.843469] ? __check_object_size+0x319/0x440 [ 780.844388] seq_read_iter+0x71a/0x12b0 [ 780.845204] seq_read+0x3dd/0x5b0 [ 780.845895] ? seq_read_iter+0x12b0/0x12b0 [ 780.846739] ? find_held_lock+0x2c/0x110 [ 780.847568] ? fsnotify_perm.part.0+0x22d/0x620 [ 780.848502] ? seq_read_iter+0x12b0/0x12b0 [ 780.849360] proc_reg_read+0x22a/0x300 [ 780.850136] ? proc_reg_write+0x300/0x300 [ 780.850968] vfs_read+0x228/0x620 [ 780.851669] __x64_sys_pread64+0x201/0x260 [ 780.852521] ? ksys_pread64+0x1b0/0x1b0 [ 780.853331] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 780.854383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 780.855412] do_syscall_64+0x33/0x40 [ 780.856158] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 780.857191] RIP: 0033:0x7fc9de732b19 [ 780.857930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 780.861630] RSP: 002b:00007fc9dbca8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 780.863159] RAX: ffffffffffffffda RBX: 00007fc9de845f60 RCX: 00007fc9de732b19 [ 780.864585] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 780.866027] RBP: 00007fc9dbca81d0 R08: 0000000000000000 R09: 0000000000000000 [ 780.867444] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 780.868876] R13: 00007fff35611f7f R14: 00007fc9dbca8300 R15: 0000000000022000 04:56:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x80000, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xfffff000, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:58 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 10) 04:56:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x172) 04:56:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x8d, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x1e8) 04:56:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf0ffff, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x32, 0x0, {0x6}}, 0x14}}, 0x0) 04:56:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf0, 0x0, {0x6}}, 0x14}}, 0x0) [ 781.008367] FAULT_INJECTION: forcing a failure. [ 781.008367] name failslab, interval 1, probability 0, space 0, times 0 [ 781.010015] CPU: 1 PID: 6608 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 781.010982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 781.012163] Call Trace: [ 781.012555] dump_stack+0x107/0x167 [ 781.013084] should_fail.cold+0x5/0xa [ 781.013625] ? create_object.isra.0+0x3a/0xa30 [ 781.014277] should_failslab+0x5/0x20 [ 781.014815] kmem_cache_alloc+0x5b/0x310 [ 781.015393] create_object.isra.0+0x3a/0xa30 [ 781.016015] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 781.016739] __kmalloc+0x16e/0x390 [ 781.017258] security_prepare_creds+0x112/0x190 [ 781.017919] prepare_creds+0x452/0x5e0 [ 781.018475] copy_creds+0x72/0x580 [ 781.018981] copy_process+0xfef/0x78b0 [ 781.019549] ? __lock_acquire+0xbb1/0x5b00 [ 781.020157] ? lock_downgrade+0x6d0/0x6d0 [ 781.020743] ? __cleanup_sighand+0xb0/0xb0 [ 781.021351] ? lock_acquire+0x197/0x470 [ 781.021914] ? find_held_lock+0x2c/0x110 [ 781.022492] kernel_clone+0xe7/0x980 [ 781.023018] ? lock_downgrade+0x6d0/0x6d0 [ 781.023605] ? find_held_lock+0x2c/0x110 [ 781.024178] ? create_io_thread+0xf0/0xf0 [ 781.024768] ? ksys_write+0x12d/0x260 [ 781.025317] ? __mutex_unlock_slowpath+0xe1/0x600 [ 781.026005] __do_sys_fork+0x8a/0xc0 [ 781.026532] ? kernel_thread+0xf0/0xf0 [ 781.027095] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 781.027839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 781.028568] ? trace_hardirqs_on+0x5b/0x180 [ 781.029187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 781.029910] do_syscall_64+0x33/0x40 [ 781.030441] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 781.031168] RIP: 0033:0x7f0161ef8b19 [ 781.031687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 781.034271] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 781.035339] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 781.036330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 781.037328] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 781.038315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 781.039314] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:57:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 4) 04:57:10 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 11) 04:57:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf0, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x25e) 04:57:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xffffff7f, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x1e8) 04:57:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x1000000, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xec0, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xffffff9e, 0x0, {0x6}}, 0x14}}, 0x0) [ 792.435524] FAULT_INJECTION: forcing a failure. [ 792.435524] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 792.437023] CPU: 1 PID: 6635 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 792.437849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 792.438866] Call Trace: [ 792.439191] dump_stack+0x107/0x167 [ 792.439630] should_fail.cold+0x5/0xa [ 792.440095] __alloc_pages_nodemask+0x182/0x600 [ 792.440657] ? add_mm_counter_fast+0x220/0x220 [ 792.441213] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 792.441936] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 792.442368] FAULT_INJECTION: forcing a failure. [ 792.442368] name failslab, interval 1, probability 0, space 0, times 0 [ 792.442563] ? lock_downgrade+0x6d0/0x6d0 [ 792.442583] ? mark_held_locks+0x9e/0xe0 [ 792.445917] alloc_pages_vma+0xbb/0x410 [ 792.446396] handle_mm_fault+0x152f/0x3500 [ 792.446901] ? __schedule+0x82c/0x1ea0 [ 792.447364] ? __pmd_alloc+0x630/0x630 [ 792.447833] ? vmacache_find+0x55/0x2a0 [ 792.448307] ? vmacache_update+0xce/0x140 [ 792.448806] do_user_addr_fault+0x56e/0xc60 [ 792.449337] exc_page_fault+0xa2/0x1a0 [ 792.449802] asm_exc_page_fault+0x1e/0x30 [ 792.450299] RIP: 0010:copy_user_generic_string+0x2c/0x40 [ 792.450946] Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca e9 43 4d 1d 02 0f 1f 00 0f 01 [ 792.453135] RSP: 0018:ffff8880089c7aa8 EFLAGS: 00050202 [ 792.453778] RAX: 0000000000000001 RBX: 000000000000004a RCX: 0000000000000009 [ 792.454628] RDX: 0000000000000002 RSI: ffff888009b6c02c RDI: 0000000020002100 [ 792.455483] RBP: 0000000020002100 R08: 0000000000000000 R09: ffff888009b6c075 [ 792.456333] R10: ffffed100136d80e R11: 0000000000000001 R12: ffff888009b6c02c [ 792.457200] R13: 000000002000214a R14: 00007ffffffff000 R15: 0000000000000000 [ 792.458069] copyout.part.0+0x10b/0x140 [ 792.458546] _copy_to_iter+0x293/0x12d0 [ 792.459025] ? wait_for_completion_io+0x270/0x270 [ 792.459601] ? _copy_from_iter_nocache+0xd60/0xd60 [ 792.460186] ? __virt_addr_valid+0x170/0x5d0 [ 792.460708] ? __check_object_size+0x319/0x440 [ 792.461257] seq_read_iter+0x71a/0x12b0 [ 792.461735] seq_read+0x3dd/0x5b0 [ 792.462145] ? seq_read_iter+0x12b0/0x12b0 [ 792.462645] ? find_held_lock+0x2c/0x110 [ 792.463133] ? fsnotify_perm.part.0+0x22d/0x620 [ 792.463689] ? seq_read_iter+0x12b0/0x12b0 [ 792.464189] proc_reg_read+0x22a/0x300 [ 792.464651] ? proc_reg_write+0x300/0x300 [ 792.465147] vfs_read+0x228/0x620 [ 792.465561] __x64_sys_pread64+0x201/0x260 [ 792.466061] ? ksys_pread64+0x1b0/0x1b0 [ 792.466534] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 792.467159] ? syscall_enter_from_user_mode+0x1d/0x50 [ 792.467767] do_syscall_64+0x33/0x40 [ 792.468206] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 792.468811] RIP: 0033:0x7fc9de732b19 [ 792.469258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 792.471437] RSP: 002b:00007fc9dbca8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 792.472335] RAX: ffffffffffffffda RBX: 00007fc9de845f60 RCX: 00007fc9de732b19 [ 792.473192] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 792.474035] RBP: 00007fc9dbca81d0 R08: 0000000000000000 R09: 0000000000000000 [ 792.474877] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 792.475724] R13: 00007fff35611f7f R14: 00007fc9dbca8300 R15: 0000000000022000 [ 792.476596] CPU: 0 PID: 6636 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 792.478086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 792.479844] Call Trace: [ 792.480413] dump_stack+0x107/0x167 [ 792.481195] should_fail.cold+0x5/0xa [ 792.481997] ? create_object.isra.0+0x3a/0xa30 [ 792.482960] should_failslab+0x5/0x20 [ 792.483763] kmem_cache_alloc+0x5b/0x310 [ 792.484658] create_object.isra.0+0x3a/0xa30 [ 792.485585] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 792.486651] kmem_cache_alloc+0x159/0x310 04:57:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x2d4) [ 792.487525] dup_fd+0x89/0xe40 [ 792.488337] ? audit_filter_inodes+0x40/0x40 [ 792.489257] ? security_task_alloc+0xe6/0x260 04:57:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xfffffff0, 0x0, {0x6}}, 0x14}}, 0x0) [ 792.490202] copy_process+0x197c/0x78b0 [ 792.491078] ? __lock_acquire+0xbb1/0x5b00 [ 792.491956] ? __cleanup_sighand+0xb0/0xb0 [ 792.492825] ? lock_acquire+0x197/0x470 [ 792.493648] ? find_held_lock+0x2c/0x110 [ 792.494472] kernel_clone+0xe7/0x980 [ 792.495231] ? lock_downgrade+0x6d0/0x6d0 [ 792.496101] ? find_held_lock+0x2c/0x110 [ 792.496923] ? create_io_thread+0xf0/0xf0 [ 792.497770] ? ksys_write+0x12d/0x260 [ 792.498545] ? __mutex_unlock_slowpath+0xe1/0x600 [ 792.499527] __do_sys_fork+0x8a/0xc0 [ 792.500277] ? kernel_thread+0xf0/0xf0 [ 792.501119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 792.502184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 792.503266] ? trace_hardirqs_on+0x5b/0x180 [ 792.504171] ? syscall_enter_from_user_mode+0x1d/0x50 [ 792.505234] do_syscall_64+0x33/0x40 [ 792.506017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 792.507100] RIP: 0033:0x7f0161ef8b19 [ 792.507893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 792.511758] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 792.513382] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 792.514881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 792.516371] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 792.517886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 792.519387] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:57:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf00, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xec0, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xffffffff, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:22 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 5) 04:57:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x25e) [ 804.272561] FAULT_INJECTION: forcing a failure. [ 804.272561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.275229] CPU: 0 PID: 6658 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 804.276742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 804.278591] Call Trace: [ 804.279180] dump_stack+0x107/0x167 [ 804.279988] should_fail.cold+0x5/0xa [ 804.280205] FAULT_INJECTION: forcing a failure. [ 804.280205] name failslab, interval 1, probability 0, space 0, times 0 [ 804.280837] _copy_to_iter+0x264/0x12d0 [ 804.283176] ? __mutex_unlock_slowpath+0xe1/0x600 [ 804.284247] ? _copy_from_iter_nocache+0xd60/0xd60 [ 804.285350] ? __virt_addr_valid+0x170/0x5d0 [ 804.286328] ? __check_object_size+0x319/0x440 [ 804.287348] seq_read_iter+0xdcb/0x12b0 [ 804.288246] seq_read+0x3dd/0x5b0 [ 804.289016] ? seq_read_iter+0x12b0/0x12b0 [ 804.289963] ? find_held_lock+0x2c/0x110 [ 804.290880] ? fsnotify_perm.part.0+0x22d/0x620 [ 804.291916] ? seq_read_iter+0x12b0/0x12b0 [ 804.292853] proc_reg_read+0x22a/0x300 [ 804.293734] ? proc_reg_write+0x300/0x300 [ 804.294657] vfs_read+0x228/0x620 [ 804.295431] __x64_sys_pread64+0x201/0x260 [ 804.296367] ? ksys_pread64+0x1b0/0x1b0 [ 804.297264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 804.298426] ? syscall_enter_from_user_mode+0x1d/0x50 [ 804.299563] do_syscall_64+0x33/0x40 [ 804.300384] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 804.301523] RIP: 0033:0x7fc9de732b19 [ 804.302341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 804.306392] RSP: 002b:00007fc9dbca8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 804.308065] RAX: ffffffffffffffda RBX: 00007fc9de845f60 RCX: 00007fc9de732b19 [ 804.309639] RDX: 0000000000000ff3 RSI: 0000000020002100 RDI: 0000000000000003 [ 804.311209] RBP: 00007fc9dbca81d0 R08: 0000000000000000 R09: 0000000000000000 [ 804.312778] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 804.314355] R13: 00007fff35611f7f R14: 00007fc9dbca8300 R15: 0000000000022000 04:57:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x302) 04:57:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x8d00, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:22 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 12) 04:57:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf00, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x2000000, 0x0, {0x6}}, 0x14}}, 0x0) [ 804.315956] CPU: 1 PID: 6666 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 804.317041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 804.318113] Call Trace: [ 804.318441] dump_stack+0x107/0x167 [ 804.318887] should_fail.cold+0x5/0xa [ 804.319355] ? alloc_fdtable+0x9e/0x2c0 [ 804.319856] should_failslab+0x5/0x20 [ 804.320326] kmem_cache_alloc_trace+0x55/0x320 [ 804.320880] ? rwlock_bug.part.0+0x90/0x90 [ 804.321413] alloc_fdtable+0x9e/0x2c0 [ 804.321878] dup_fd+0x92d/0xe40 [ 804.322291] copy_process+0x197c/0x78b0 [ 804.322779] ? __lock_acquire+0xbb1/0x5b00 [ 804.323306] ? __cleanup_sighand+0xb0/0xb0 [ 804.323824] ? lock_acquire+0x197/0x470 [ 804.324313] ? find_held_lock+0x2c/0x110 [ 804.324812] kernel_clone+0xe7/0x980 [ 804.325279] ? lock_downgrade+0x6d0/0x6d0 [ 804.325781] ? find_held_lock+0x2c/0x110 [ 804.326274] ? create_io_thread+0xf0/0xf0 [ 804.326782] ? ksys_write+0x12d/0x260 [ 804.327252] ? __mutex_unlock_slowpath+0xe1/0x600 [ 804.327845] __do_sys_fork+0x8a/0xc0 [ 804.328302] ? kernel_thread+0xf0/0xf0 [ 804.328793] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 804.329448] ? syscall_enter_from_user_mode+0x1d/0x50 [ 804.330076] ? trace_hardirqs_on+0x5b/0x180 [ 804.330603] ? syscall_enter_from_user_mode+0x1d/0x50 [ 804.331234] do_syscall_64+0x33/0x40 [ 804.331690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 804.332314] RIP: 0033:0x7f0161ef8b19 [ 804.332771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 804.335038] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 804.335965] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 804.336830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 804.337719] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 804.338586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 804.339449] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:57:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x2d4) 04:57:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xc00e, 0x0, {0x6}}, 0x14}}, 0x0) [ 816.771715] FAULT_INJECTION: forcing a failure. [ 816.771715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.773130] CPU: 1 PID: 6685 Comm: syz-executor.6 Not tainted 5.10.244 #1 [ 816.773910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 816.774851] Call Trace: [ 816.775156] dump_stack+0x107/0x167 [ 816.775582] should_fail.cold+0x5/0xa [ 816.776024] _copy_to_user+0x2e/0x180 04:57:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) (fail_nth: 6) 04:57:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf000000, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf000, 0x0, {0x6}}, 0x14}}, 0x0) [ 816.776469] simple_read_from_buffer+0xcc/0x160 [ 816.777274] proc_fail_nth_read+0x198/0x230 [ 816.777769] ? proc_sessionid_read+0x230/0x230 [ 816.778290] ? security_file_permission+0xb1/0xe0 [ 816.778843] ? proc_sessionid_read+0x230/0x230 [ 816.779361] vfs_read+0x228/0x620 [ 816.779760] ksys_read+0x12d/0x260 [ 816.780167] ? vfs_write+0xb10/0xb10 [ 816.780592] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 816.781187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 816.781906] do_syscall_64+0x33/0x40 [ 816.782330] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 816.782917] RIP: 0033:0x7fc9de6e569c [ 816.783339] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 816.785446] RSP: 002b:00007fc9dbca8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 816.786318] RAX: ffffffffffffffda RBX: 00000000000005d2 RCX: 00007fc9de6e569c [ 816.787130] RDX: 000000000000000f RSI: 00007fc9dbca81e0 RDI: 0000000000000004 [ 816.787945] RBP: 00007fc9dbca81d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.788760] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 816.789581] R13: 00007fff35611f7f R14: 00007fc9dbca8300 R15: 0000000000022000 04:57:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x303) 04:57:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x2, {0x6}}, 0x14}}, 0x0) 04:57:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x3200, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x302) 04:57:34 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 13) [ 816.809307] FAULT_INJECTION: forcing a failure. [ 816.809307] name failslab, interval 1, probability 0, space 0, times 0 [ 816.812384] CPU: 0 PID: 6695 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 816.813951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 816.815827] Call Trace: [ 816.816423] dump_stack+0x107/0x167 [ 816.817252] should_fail.cold+0x5/0xa [ 816.818130] ? create_object.isra.0+0x3a/0xa30 [ 816.819168] should_failslab+0x5/0x20 [ 816.820034] kmem_cache_alloc+0x5b/0x310 [ 816.820955] create_object.isra.0+0x3a/0xa30 [ 816.821966] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 816.823124] kmem_cache_alloc_trace+0x151/0x320 [ 816.824177] ? rwlock_bug.part.0+0x90/0x90 [ 816.825137] alloc_fdtable+0x9e/0x2c0 [ 816.826014] dup_fd+0x92d/0xe40 [ 816.826773] copy_process+0x197c/0x78b0 [ 816.827682] ? __lock_acquire+0xbb1/0x5b00 [ 816.828661] ? __cleanup_sighand+0xb0/0xb0 [ 816.829642] ? lock_acquire+0x197/0x470 [ 816.830563] ? find_held_lock+0x2c/0x110 [ 816.831490] kernel_clone+0xe7/0x980 [ 816.832342] ? lock_downgrade+0x6d0/0x6d0 [ 816.833285] ? find_held_lock+0x2c/0x110 [ 816.834214] ? create_io_thread+0xf0/0xf0 [ 816.835162] ? ksys_write+0x12d/0x260 [ 816.836034] ? __mutex_unlock_slowpath+0xe1/0x600 [ 816.837140] __do_sys_fork+0x8a/0xc0 [ 816.837996] ? kernel_thread+0xf0/0xf0 [ 816.838884] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 816.839939] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 816.841133] ? syscall_enter_from_user_mode+0x1d/0x50 [ 816.842308] ? trace_hardirqs_on+0x5b/0x180 [ 816.843286] ? syscall_enter_from_user_mode+0x1d/0x50 [ 816.844450] do_syscall_64+0x33/0x40 [ 816.845304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 816.846469] RIP: 0033:0x7f0161ef8b19 [ 816.847316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 816.851483] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 816.853215] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 816.854833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 816.856436] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.858057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 816.859668] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:57:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xc00e, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf000, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 04:57:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x8b000000, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x303) 04:57:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x80000, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x8, {0x6}}, 0x14}}, 0x0) 04:57:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x80000, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x304) 04:57:35 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0x4a, 0x300) 04:57:35 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 14) 04:57:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf0ffff, 0x0, {0x6}}, 0x14}}, 0x0) [ 817.026674] FAULT_INJECTION: forcing a failure. [ 817.026674] name failslab, interval 1, probability 0, space 0, times 0 [ 817.028052] CPU: 1 PID: 6721 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 817.028829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 817.029796] Call Trace: [ 817.030106] dump_stack+0x107/0x167 [ 817.030523] should_fail.cold+0x5/0xa [ 817.030957] ? kvmalloc_node+0x119/0x170 [ 817.031427] should_failslab+0x5/0x20 [ 817.031862] __kmalloc_node+0x76/0x420 [ 817.032313] kvmalloc_node+0x119/0x170 [ 817.032762] alloc_fdtable+0xed/0x2c0 [ 817.033201] dup_fd+0x92d/0xe40 [ 817.033593] copy_process+0x197c/0x78b0 [ 817.034052] ? __lock_acquire+0xbb1/0x5b00 [ 817.034547] ? __cleanup_sighand+0xb0/0xb0 [ 817.035034] ? lock_acquire+0x197/0x470 [ 817.035492] ? find_held_lock+0x2c/0x110 [ 817.035964] kernel_clone+0xe7/0x980 [ 817.036389] ? lock_downgrade+0x6d0/0x6d0 [ 817.036866] ? find_held_lock+0x2c/0x110 [ 817.037429] ? create_io_thread+0xf0/0xf0 [ 817.037908] ? ksys_write+0x12d/0x260 [ 817.038349] ? __mutex_unlock_slowpath+0xe1/0x600 [ 817.038901] __do_sys_fork+0x8a/0xc0 [ 817.039325] ? kernel_thread+0xf0/0xf0 [ 817.039775] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 817.040374] ? syscall_enter_from_user_mode+0x1d/0x50 [ 817.040967] ? trace_hardirqs_on+0x5b/0x180 [ 817.041470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 817.042056] do_syscall_64+0x33/0x40 [ 817.042486] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 817.043072] RIP: 0033:0x7f0161ef8b19 [ 817.043496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.045604] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 817.046483] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 817.047297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 817.048106] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.048925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 817.049743] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:57:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x304) 04:57:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x9effffff, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x305) 04:57:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xc00e0000, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf0ffff, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:49 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 15) 04:57:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf, {0x6}}, 0x14}}, 0x0) 04:57:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x1000000, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0x5d2, 0x300) 04:57:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x306) 04:57:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x305) [ 831.321483] FAULT_INJECTION: forcing a failure. [ 831.321483] name failslab, interval 1, probability 0, space 0, times 0 [ 831.324411] CPU: 1 PID: 6750 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 831.326132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 831.328226] Call Trace: [ 831.328914] dump_stack+0x107/0x167 [ 831.329855] should_fail.cold+0x5/0xa [ 831.330651] ? create_object.isra.0+0x3a/0xa30 [ 831.331590] should_failslab+0x5/0x20 [ 831.332381] kmem_cache_alloc+0x5b/0x310 [ 831.333233] create_object.isra.0+0x3a/0xa30 [ 831.334144] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 831.335203] __kmalloc_node+0x1ae/0x420 [ 831.336028] kvmalloc_node+0x119/0x170 [ 831.336841] alloc_fdtable+0xed/0x2c0 [ 831.337651] dup_fd+0x92d/0xe40 [ 831.338358] copy_process+0x197c/0x78b0 [ 831.339204] ? __lock_acquire+0xbb1/0x5b00 [ 831.340096] ? __cleanup_sighand+0xb0/0xb0 [ 831.340980] ? lock_acquire+0x197/0x470 [ 831.341820] ? find_held_lock+0x2c/0x110 [ 831.342676] kernel_clone+0xe7/0x980 [ 831.343444] ? lock_downgrade+0x6d0/0x6d0 [ 831.344296] ? find_held_lock+0x2c/0x110 [ 831.345126] ? create_io_thread+0xf0/0xf0 [ 831.345994] ? ksys_write+0x12d/0x260 [ 831.346786] ? __mutex_unlock_slowpath+0xe1/0x600 [ 831.347792] __do_sys_fork+0x8a/0xc0 [ 831.348557] ? kernel_thread+0xf0/0xf0 [ 831.349371] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 831.350454] ? syscall_enter_from_user_mode+0x1d/0x50 [ 831.351511] ? trace_hardirqs_on+0x5b/0x180 [ 831.352398] ? syscall_enter_from_user_mode+0x1d/0x50 [ 831.353460] do_syscall_64+0x33/0x40 [ 831.354232] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 831.355280] RIP: 0033:0x7f0161ef8b19 [ 831.356052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 831.359812] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 831.361367] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 831.362842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 831.364319] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 831.365792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 831.367271] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:57:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x306) 04:57:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf0, {0x6}}, 0x14}}, 0x0) 04:57:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0x200030f3, 0x300) 04:57:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf0ffffff, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x2000000, 0x0, {0x6}}, 0x14}}, 0x0) 04:57:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x1000000, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:03 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 16) 04:58:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x2000000, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:03 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x76) 04:58:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf000000, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x307) 04:58:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x307) 04:58:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xfffff000, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xec0, {0x6}}, 0x14}}, 0x0) [ 845.768105] FAULT_INJECTION: forcing a failure. [ 845.768105] name failslab, interval 1, probability 0, space 0, times 0 [ 845.770618] CPU: 0 PID: 6775 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 845.772063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 845.773842] Call Trace: [ 845.774452] dump_stack+0x107/0x167 [ 845.775233] should_fail.cold+0x5/0xa [ 845.776038] ? kvmalloc_node+0x119/0x170 [ 845.776894] should_failslab+0x5/0x20 [ 845.777706] __kmalloc_node+0x76/0x420 [ 845.778531] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 845.779621] kvmalloc_node+0x119/0x170 [ 845.780447] alloc_fdtable+0x159/0x2c0 [ 845.781275] dup_fd+0x92d/0xe40 [ 845.781999] copy_process+0x197c/0x78b0 [ 845.782847] ? __lock_acquire+0xbb1/0x5b00 [ 845.783763] ? __cleanup_sighand+0xb0/0xb0 [ 845.784670] ? lock_acquire+0x197/0x470 [ 845.785519] ? find_held_lock+0x2c/0x110 [ 845.786398] kernel_clone+0xe7/0x980 [ 845.787187] ? lock_downgrade+0x6d0/0x6d0 [ 845.788061] ? find_held_lock+0x2c/0x110 [ 845.788918] ? create_io_thread+0xf0/0xf0 [ 845.789824] ? ksys_write+0x12d/0x260 [ 845.790633] ? __mutex_unlock_slowpath+0xe1/0x600 [ 845.791666] __do_sys_fork+0x8a/0xc0 [ 845.792452] ? kernel_thread+0xf0/0xf0 [ 845.793289] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 845.794459] ? syscall_enter_from_user_mode+0x1d/0x50 [ 845.795553] ? trace_hardirqs_on+0x5b/0x180 [ 845.796467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 845.797554] do_syscall_64+0x33/0x40 [ 845.798361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 845.799446] RIP: 0033:0x7f0161ef8b19 [ 845.800231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 845.804139] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 845.805749] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 845.807266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 845.808774] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 845.810303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 845.811809] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:58:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf000000, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x309) 04:58:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xffffff7f, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x309) 04:58:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf00, {0x6}}, 0x14}}, 0x0) 04:58:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x8d000000, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:03 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xf4) 04:58:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xffffff9e, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xfffffff0, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:18 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 17) 04:58:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x9effffff, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x172) 04:58:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x32000000, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x30a) 04:58:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xc00e, {0x6}}, 0x14}}, 0x0) [ 860.244784] FAULT_INJECTION: forcing a failure. [ 860.244784] name failslab, interval 1, probability 0, space 0, times 0 [ 860.247241] CPU: 0 PID: 6814 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 860.248697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 860.250489] Call Trace: [ 860.251062] dump_stack+0x107/0x167 [ 860.251847] should_fail.cold+0x5/0xa [ 860.252655] ? create_object.isra.0+0x3a/0xa30 [ 860.253631] should_failslab+0x5/0x20 [ 860.254443] kmem_cache_alloc+0x5b/0x310 [ 860.255306] create_object.isra.0+0x3a/0xa30 [ 860.256233] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 860.257319] __kmalloc_node+0x1ae/0x420 [ 860.258186] kvmalloc_node+0x119/0x170 [ 860.259017] alloc_fdtable+0xed/0x2c0 [ 860.259819] dup_fd+0x92d/0xe40 [ 860.260592] copy_process+0x197c/0x78b0 [ 860.261450] ? __lock_acquire+0xbb1/0x5b00 [ 860.262394] ? __cleanup_sighand+0xb0/0xb0 [ 860.263307] ? lock_acquire+0x197/0x470 [ 860.264164] ? find_held_lock+0x2c/0x110 [ 860.265032] kernel_clone+0xe7/0x980 [ 860.265836] ? lock_downgrade+0x6d0/0x6d0 [ 860.266722] ? find_held_lock+0x2c/0x110 [ 860.267600] ? create_io_thread+0xf0/0xf0 [ 860.268472] ? ksys_write+0x12d/0x260 [ 860.269285] ? __mutex_unlock_slowpath+0xe1/0x600 [ 860.270313] __do_sys_fork+0x8a/0xc0 [ 860.271098] ? kernel_thread+0xf0/0xf0 [ 860.271937] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 04:58:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x30a) [ 860.273044] ? syscall_enter_from_user_mode+0x1d/0x50 [ 860.274254] ? trace_hardirqs_on+0x5b/0x180 [ 860.275174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 860.276260] do_syscall_64+0x33/0x40 [ 860.277050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 860.278142] RIP: 0033:0x7f0161ef8b19 [ 860.278925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 860.282835] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 860.284444] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 860.285956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 860.287466] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 860.288951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 860.290453] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:58:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xc00e0000, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf000, {0x6}}, 0x14}}, 0x0) 04:58:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x348) 04:58:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x348) 04:58:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x9effffff, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x1e8) 04:58:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xffffffff, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x80000, {0x6}}, 0x14}}, 0x0) 04:58:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x34a) 04:58:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x34a) 04:58:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf0ffffff, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf0ffff, {0x6}}, 0x14}}, 0x0) 04:58:31 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 18) 04:58:31 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x25e) 04:58:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x34c) 04:58:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x34c) 04:58:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xc00e0000, 0x0, {0x6}}, 0x14}}, 0x0) [ 873.685657] FAULT_INJECTION: forcing a failure. [ 873.685657] name failslab, interval 1, probability 0, space 0, times 0 [ 873.690608] CPU: 0 PID: 6860 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 873.692448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 873.694698] Call Trace: [ 873.695403] dump_stack+0x107/0x167 [ 873.696374] should_fail.cold+0x5/0xa [ 873.697394] ? copy_fs_struct+0x45/0x340 [ 873.698501] should_failslab+0x5/0x20 [ 873.699513] kmem_cache_alloc+0x5b/0x310 [ 873.700599] copy_fs_struct+0x45/0x340 [ 873.701635] copy_process+0x34b5/0x78b0 [ 873.702736] ? __lock_acquire+0xbb1/0x5b00 [ 873.703894] ? __cleanup_sighand+0xb0/0xb0 [ 873.705044] ? lock_acquire+0x197/0x470 [ 873.706147] ? find_held_lock+0x2c/0x110 [ 873.707234] kernel_clone+0xe7/0x980 [ 873.708234] ? lock_downgrade+0x6d0/0x6d0 [ 873.709334] ? find_held_lock+0x2c/0x110 [ 873.710440] ? create_io_thread+0xf0/0xf0 [ 873.711552] ? ksys_write+0x12d/0x260 [ 873.712571] ? __mutex_unlock_slowpath+0xe1/0x600 [ 873.713863] __do_sys_fork+0x8a/0xc0 [ 873.714908] ? kernel_thread+0xf0/0xf0 [ 873.715974] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 873.717381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 873.718794] ? trace_hardirqs_on+0x5b/0x180 [ 873.719960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 873.721339] do_syscall_64+0x33/0x40 [ 873.722371] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 873.723642] RIP: 0033:0x7f0161ef8b19 [ 873.724535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 873.728753] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 873.730400] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 873.731924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 873.733446] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 873.734988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 873.736508] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:58:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x1000000, {0x6}}, 0x14}}, 0x0) 04:58:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x368) 04:58:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xf0ffffff, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x368) 04:58:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x36c) 04:58:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xfffff000, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x2000000, {0x6}}, 0x14}}, 0x0) 04:58:45 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x2d4) 04:58:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x2, {0x6}}, 0x14}}, 0x0) 04:58:45 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 19) 04:58:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xfffff000, 0x0, {0x6}}, 0x14}}, 0x0) [ 887.639534] FAULT_INJECTION: forcing a failure. [ 887.639534] name failslab, interval 1, probability 0, space 0, times 0 [ 887.642119] CPU: 1 PID: 6891 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 887.643563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 887.645300] Call Trace: [ 887.645849] dump_stack+0x107/0x167 [ 887.646635] should_fail.cold+0x5/0xa [ 887.647429] ? create_object.isra.0+0x3a/0xa30 [ 887.648379] should_failslab+0x5/0x20 [ 887.649178] kmem_cache_alloc+0x5b/0x310 [ 887.650033] create_object.isra.0+0x3a/0xa30 [ 887.650951] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 887.652018] __kmalloc_node+0x1ae/0x420 [ 887.652849] kvmalloc_node+0x119/0x170 [ 887.653663] alloc_fdtable+0x159/0x2c0 [ 887.654491] dup_fd+0x92d/0xe40 [ 887.655193] copy_process+0x197c/0x78b0 [ 887.656028] ? __lock_acquire+0xbb1/0x5b00 [ 887.656931] ? __cleanup_sighand+0xb0/0xb0 [ 887.657830] ? lock_acquire+0x197/0x470 [ 887.658676] ? find_held_lock+0x2c/0x110 [ 887.659532] kernel_clone+0xe7/0x980 [ 887.660309] ? lock_downgrade+0x6d0/0x6d0 [ 887.661178] ? find_held_lock+0x2c/0x110 [ 887.662033] ? create_io_thread+0xf0/0xf0 [ 887.662935] ? ksys_write+0x12d/0x260 [ 887.663743] ? __mutex_unlock_slowpath+0xe1/0x600 [ 887.664762] __do_sys_fork+0x8a/0xc0 [ 887.665543] ? kernel_thread+0xf0/0xf0 [ 887.666381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 887.667479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 887.668550] ? trace_hardirqs_on+0x5b/0x180 [ 887.669455] ? syscall_enter_from_user_mode+0x1d/0x50 [ 887.670542] do_syscall_64+0x33/0x40 [ 887.671321] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 887.672389] RIP: 0033:0x7f0161ef8b19 [ 887.673169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 887.677040] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 887.678627] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 887.680121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 887.681608] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 887.683098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 887.684582] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:58:45 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x302) 04:58:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xffffff7f, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x374) 04:58:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x36c) 04:58:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xffffff7f, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x8, {0x6}}, 0x14}}, 0x0) 04:58:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf000000, {0x6}}, 0x14}}, 0x0) 04:58:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xffffff9e, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x37a) 04:58:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x374) 04:58:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xfffffff0, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x500) 04:58:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xffffff9e, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x303) 04:58:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x9effffff, {0x6}}, 0x14}}, 0x0) 04:58:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf, {0x6}}, 0x14}}, 0x0) 04:58:59 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 20) [ 901.279955] FAULT_INJECTION: forcing a failure. [ 901.279955] name failslab, interval 1, probability 0, space 0, times 0 [ 901.282309] CPU: 1 PID: 6932 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 901.283694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 901.285367] Call Trace: [ 901.285911] dump_stack+0x107/0x167 [ 901.286649] should_fail.cold+0x5/0xa [ 901.287415] ? copy_process+0x1ae7/0x78b0 [ 901.288239] should_failslab+0x5/0x20 [ 901.289002] kmem_cache_alloc+0x5b/0x310 [ 901.289806] ? _raw_spin_unlock+0x1a/0x30 [ 901.290645] copy_process+0x1ae7/0x78b0 [ 901.291443] ? __lock_acquire+0xbb1/0x5b00 [ 901.292310] ? __cleanup_sighand+0xb0/0xb0 [ 901.293167] ? lock_acquire+0x197/0x470 [ 901.293971] ? find_held_lock+0x2c/0x110 [ 901.294801] kernel_clone+0xe7/0x980 [ 901.295540] ? lock_downgrade+0x6d0/0x6d0 [ 901.296364] ? find_held_lock+0x2c/0x110 [ 901.297172] ? create_io_thread+0xf0/0xf0 [ 901.298007] ? ksys_write+0x12d/0x260 [ 901.298782] ? __mutex_unlock_slowpath+0xe1/0x600 [ 901.299749] __do_sys_fork+0x8a/0xc0 [ 901.300498] ? kernel_thread+0xf0/0xf0 [ 901.301287] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 901.302358] ? syscall_enter_from_user_mode+0x1d/0x50 [ 901.303389] ? trace_hardirqs_on+0x5b/0x180 [ 901.304253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 901.305275] do_syscall_64+0x33/0x40 [ 901.306020] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 901.307044] RIP: 0033:0x7f0161ef8b19 [ 901.307788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 901.311467] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 901.312969] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 901.314379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 901.315789] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 901.317191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 901.318608] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:58:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xffffffff, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xfffffff0, 0x0, {0x6}}, 0x14}}, 0x0) 04:58:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xc00e0000, {0x6}}, 0x14}}, 0x0) 04:58:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x37a) 04:58:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x8b, {0x6}}, 0x14}}, 0x0) 04:58:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x600) 04:58:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x304) 04:58:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf0, {0x6}}, 0x14}}, 0x0) 04:59:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xec0, {0x6}}, 0x14}}, 0x0) 04:59:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf0ffffff, {0x6}}, 0x14}}, 0x0) 04:59:11 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 21) 04:59:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x500) 04:59:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:59:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0xffffffff, 0x0, {0x6}}, 0x14}}, 0x0) 04:59:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x700) 04:59:11 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x305) [ 913.816636] FAULT_INJECTION: forcing a failure. [ 913.816636] name failslab, interval 1, probability 0, space 0, times 0 [ 913.819336] CPU: 1 PID: 6975 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 913.820872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 913.822740] Call Trace: [ 913.823327] dump_stack+0x107/0x167 [ 913.824141] should_fail.cold+0x5/0xa [ 913.824996] ? create_object.isra.0+0x3a/0xa30 [ 913.826011] should_failslab+0x5/0x20 [ 913.826894] kmem_cache_alloc+0x5b/0x310 [ 913.827804] create_object.isra.0+0x3a/0xa30 [ 913.828788] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 913.829920] kmem_cache_alloc+0x159/0x310 [ 913.830851] ? _raw_spin_unlock+0x1a/0x30 [ 913.831774] copy_process+0x1ae7/0x78b0 [ 913.832662] ? __lock_acquire+0xbb1/0x5b00 [ 913.833618] ? __cleanup_sighand+0xb0/0xb0 [ 913.834570] ? lock_acquire+0x197/0x470 [ 913.835456] ? find_held_lock+0x2c/0x110 [ 913.836349] kernel_clone+0xe7/0x980 [ 913.837172] ? lock_downgrade+0x6d0/0x6d0 [ 913.838079] ? find_held_lock+0x2c/0x110 [ 913.838978] ? create_io_thread+0xf0/0xf0 [ 913.839899] ? ksys_write+0x12d/0x260 [ 913.840738] ? __mutex_unlock_slowpath+0xe1/0x600 [ 913.841802] __do_sys_fork+0x8a/0xc0 [ 913.842628] ? kernel_thread+0xf0/0xf0 [ 913.843504] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 913.844655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 913.845794] ? trace_hardirqs_on+0x5b/0x180 [ 913.846750] ? syscall_enter_from_user_mode+0x1d/0x50 [ 913.847879] do_syscall_64+0x33/0x40 [ 913.848695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 913.849829] RIP: 0033:0x7f0161ef8b19 [ 913.850653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 913.854670] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 913.856325] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 913.857875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 913.859438] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 913.860986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 913.862544] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:59:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x2, {0x6}}, 0x14}}, 0x0) 04:59:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xfffff000, {0x6}}, 0x14}}, 0x0) 04:59:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x600) 04:59:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf00, {0x6}}, 0x14}}, 0x0) 04:59:11 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x306) 04:59:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x900) 04:59:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 04:59:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x8b00, {0x6}}, 0x14}}, 0x0) 04:59:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x2, {0x6}}, 0x14}}, 0x0) 04:59:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x8, {0x6}}, 0x14}}, 0x0) 04:59:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x700) 04:59:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf, {0x6}}, 0x14}}, 0x0) 04:59:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xc00e, {0x6}}, 0x14}}, 0x0) 04:59:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xffffff7f, {0x6}}, 0x14}}, 0x0) 04:59:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xb0e) 04:59:26 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x307) 04:59:26 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 22) 04:59:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x8, {0x6}}, 0x14}}, 0x0) [ 928.571429] FAULT_INJECTION: forcing a failure. [ 928.571429] name failslab, interval 1, probability 0, space 0, times 0 [ 928.574616] CPU: 1 PID: 7018 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 928.576077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 928.577837] Call Trace: [ 928.578398] dump_stack+0x107/0x167 [ 928.579181] should_fail.cold+0x5/0xa [ 928.579993] ? copy_process+0x1ae7/0x78b0 [ 928.580872] should_failslab+0x5/0x20 [ 928.581683] kmem_cache_alloc+0x5b/0x310 [ 928.582536] ? _raw_spin_unlock+0x1a/0x30 [ 928.583426] copy_process+0x1ae7/0x78b0 [ 928.584272] ? __lock_acquire+0xbb1/0x5b00 [ 928.585182] ? __cleanup_sighand+0xb0/0xb0 [ 928.586079] ? lock_acquire+0x197/0x470 [ 928.586929] ? find_held_lock+0x2c/0x110 [ 928.587788] kernel_clone+0xe7/0x980 [ 928.588571] ? lock_downgrade+0x6d0/0x6d0 [ 928.589446] ? find_held_lock+0x2c/0x110 [ 928.590324] ? create_io_thread+0xf0/0xf0 [ 928.591264] ? ksys_write+0x12d/0x260 [ 928.592100] ? __mutex_unlock_slowpath+0xe1/0x600 [ 928.593150] __do_sys_fork+0x8a/0xc0 [ 928.593962] ? kernel_thread+0xf0/0xf0 [ 928.594828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 928.595962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 928.597075] ? trace_hardirqs_on+0x5b/0x180 [ 928.598019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 928.599141] do_syscall_64+0x33/0x40 [ 928.599947] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 928.601056] RIP: 0033:0x7f0161ef8b19 [ 928.601860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 928.605865] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 928.607740] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 928.609281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 928.610830] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 928.612372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 928.613913] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:59:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x900) 04:59:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x32, {0x6}}, 0x14}}, 0x0) 04:59:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf000, {0x6}}, 0x14}}, 0x0) 04:59:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x120d) 04:59:26 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x309) 04:59:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xffffff9e, {0x6}}, 0x14}}, 0x0) 04:59:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf, {0x6}}, 0x14}}, 0x0) 04:59:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x80000, {0x6}}, 0x14}}, 0x0) 04:59:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf0, {0x6}}, 0x14}}, 0x0) 04:59:26 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x30a) 04:59:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xb0e) 04:59:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x348) 04:59:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf0ffff, {0x6}}, 0x14}}, 0x0) 04:59:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x1f0d) 04:59:42 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 23) 04:59:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xfffffff0, {0x6}}, 0x14}}, 0x0) 04:59:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x8d, {0x6}}, 0x14}}, 0x0) 04:59:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xec0, {0x6}}, 0x14}}, 0x0) [ 944.832776] FAULT_INJECTION: forcing a failure. [ 944.832776] name failslab, interval 1, probability 0, space 0, times 0 [ 944.835213] CPU: 1 PID: 7057 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 944.836641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.838379] Call Trace: [ 944.838950] dump_stack+0x107/0x167 [ 944.839717] should_fail.cold+0x5/0xa [ 944.840519] ? create_object.isra.0+0x3a/0xa30 [ 944.841472] should_failslab+0x5/0x20 [ 944.842268] kmem_cache_alloc+0x5b/0x310 [ 944.843134] create_object.isra.0+0x3a/0xa30 [ 944.844053] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 944.845122] kmem_cache_alloc+0x159/0x310 [ 944.845993] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 944.847115] copy_process+0x1c65/0x78b0 [ 944.847957] ? __lock_acquire+0xbb1/0x5b00 [ 944.848862] ? __cleanup_sighand+0xb0/0xb0 [ 944.849758] ? lock_acquire+0x197/0x470 [ 944.850596] ? find_held_lock+0x2c/0x110 [ 944.851461] kernel_clone+0xe7/0x980 [ 944.852241] ? lock_downgrade+0x6d0/0x6d0 [ 944.853108] ? find_held_lock+0x2c/0x110 [ 944.853954] ? create_io_thread+0xf0/0xf0 [ 944.854834] ? ksys_write+0x12d/0x260 [ 944.855639] ? __mutex_unlock_slowpath+0xe1/0x600 [ 944.856655] __do_sys_fork+0x8a/0xc0 [ 944.857440] ? kernel_thread+0xf0/0xf0 [ 944.858277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 944.859390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.860469] ? trace_hardirqs_on+0x5b/0x180 [ 944.861378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.862463] do_syscall_64+0x33/0x40 [ 944.863251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 944.864324] RIP: 0033:0x7f0161ef8b19 [ 944.865107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.868976] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 944.870569] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 944.872072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 944.873555] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 944.875047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.876533] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:59:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf00, {0x6}}, 0x14}}, 0x0) 04:59:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x34a) 04:59:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x1000000, {0x6}}, 0x14}}, 0x0) 04:59:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x260c) 04:59:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf0, {0x6}}, 0x14}}, 0x0) 04:59:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x2000000, {0x6}}, 0x14}}, 0x0) 04:59:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x330c) 04:59:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x3200, {0x6}}, 0x14}}, 0x0) 04:59:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xffffffff, {0x6}}, 0x14}}, 0x0) 04:59:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x120d) 04:59:57 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 24) 04:59:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x34c) [ 959.442432] FAULT_INJECTION: forcing a failure. [ 959.442432] name failslab, interval 1, probability 0, space 0, times 0 [ 959.444909] CPU: 0 PID: 7092 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 959.446386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 959.448179] Call Trace: [ 959.448749] dump_stack+0x107/0x167 [ 959.449542] should_fail.cold+0x5/0xa [ 959.450363] ? create_object.isra.0+0x3a/0xa30 [ 959.451352] should_failslab+0x5/0x20 [ 959.452171] kmem_cache_alloc+0x5b/0x310 [ 959.453050] create_object.isra.0+0x3a/0xa30 [ 959.454003] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 959.455108] kmem_cache_alloc+0x159/0x310 [ 959.456001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 959.457130] copy_process+0x1c65/0x78b0 [ 959.457999] ? __lock_acquire+0xbb1/0x5b00 [ 959.458940] ? __cleanup_sighand+0xb0/0xb0 [ 959.459865] ? lock_acquire+0x197/0x470 [ 959.460729] ? find_held_lock+0x2c/0x110 [ 959.461603] kernel_clone+0xe7/0x980 [ 959.462406] ? lock_downgrade+0x6d0/0x6d0 [ 959.463305] ? find_held_lock+0x2c/0x110 [ 959.464180] ? create_io_thread+0xf0/0xf0 [ 959.465075] ? ksys_write+0x12d/0x260 [ 959.465900] ? __mutex_unlock_slowpath+0xe1/0x600 [ 959.466979] __do_sys_fork+0x8a/0xc0 [ 959.467785] ? kernel_thread+0xf0/0xf0 [ 959.468635] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 959.469760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 959.470864] ? trace_hardirqs_on+0x5b/0x180 [ 959.471801] ? syscall_enter_from_user_mode+0x1d/0x50 [ 959.472910] do_syscall_64+0x33/0x40 [ 959.473708] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 959.474805] RIP: 0033:0x7f0161ef8b19 [ 959.475618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 959.479607] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 959.481244] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 959.482768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 959.484306] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 959.485837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 959.487374] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 04:59:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 04:59:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf000000, {0x6}}, 0x14}}, 0x0) 04:59:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x368) 04:59:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x1f0d) 04:59:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xec0, {0x6}}, 0x14}}, 0x0) 04:59:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x3a0b) 04:59:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xc00e, {0x6}}, 0x14}}, 0x0) 04:59:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf00, {0x6}}, 0x14}}, 0x0) 05:00:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x8d00, {0x6}}, 0x14}}, 0x0) 05:00:14 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 25) 05:00:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x36c) 05:00:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x470b) 05:00:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 05:00:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x8b000000, {0x6}}, 0x14}}, 0x0) 05:00:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x260c) 05:00:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf000, {0x6}}, 0x14}}, 0x0) [ 976.166854] FAULT_INJECTION: forcing a failure. [ 976.166854] name failslab, interval 1, probability 0, space 0, times 0 [ 976.169238] CPU: 0 PID: 7129 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 976.170652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 976.172368] Call Trace: [ 976.172918] dump_stack+0x107/0x167 [ 976.173673] should_fail.cold+0x5/0xa [ 976.174471] ? create_object.isra.0+0x3a/0xa30 [ 976.175430] should_failslab+0x5/0x20 [ 976.176212] kmem_cache_alloc+0x5b/0x310 [ 976.177053] create_object.isra.0+0x3a/0xa30 [ 976.177946] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 976.178989] kmem_cache_alloc+0x159/0x310 [ 976.179868] copy_process+0x2514/0x78b0 [ 976.180695] ? __lock_acquire+0xbb1/0x5b00 [ 976.181609] ? __cleanup_sighand+0xb0/0xb0 [ 976.182483] ? lock_acquire+0x197/0x470 [ 976.183323] ? find_held_lock+0x2c/0x110 [ 976.184148] kernel_clone+0xe7/0x980 [ 976.184908] ? lock_downgrade+0x6d0/0x6d0 [ 976.185753] ? find_held_lock+0x2c/0x110 [ 976.186576] ? create_io_thread+0xf0/0xf0 [ 976.187436] ? ksys_write+0x12d/0x260 [ 976.188231] ? __mutex_unlock_slowpath+0xe1/0x600 [ 976.189241] __do_sys_fork+0x8a/0xc0 [ 976.189999] ? kernel_thread+0xf0/0xf0 [ 976.190811] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 976.191898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 976.192955] ? trace_hardirqs_on+0x5b/0x180 [ 976.193836] ? syscall_enter_from_user_mode+0x1d/0x50 [ 976.194897] do_syscall_64+0x33/0x40 [ 976.195715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 976.196763] RIP: 0033:0x7f0161ef8b19 [ 976.197528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 976.201352] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 976.202938] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 976.204448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 976.205918] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 976.207378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 976.208832] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:00:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x9effffff, {0x6}}, 0x14}}, 0x0) 05:00:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x330c) 05:00:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:00:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x374) 05:00:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xc00e, {0x6}}, 0x14}}, 0x0) 05:00:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x80000, {0x6}}, 0x14}}, 0x0) 05:00:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x600f) 05:00:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xc00e0000, {0x6}}, 0x14}}, 0x0) 05:00:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 05:00:27 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 26) 05:00:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf0ffffff, {0x6}}, 0x14}}, 0x0) 05:00:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x6300) 05:00:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x3a0b) 05:00:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf0ffff, {0x6}}, 0x14}}, 0x0) 05:00:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf000, {0x6}}, 0x14}}, 0x0) 05:00:27 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x37a) [ 989.874071] FAULT_INJECTION: forcing a failure. [ 989.874071] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 989.875687] CPU: 1 PID: 7161 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 989.876590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 989.877686] Call Trace: [ 989.878040] dump_stack+0x107/0x167 [ 989.878525] should_fail.cold+0x5/0xa [ 989.879033] __alloc_pages_nodemask+0x182/0x600 [ 989.879661] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 989.880355] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 989.881160] alloc_pages_current+0x187/0x280 [ 989.881743] __get_free_pages+0xc/0xa0 [ 989.882259] pgd_alloc+0x84/0x4e0 [ 989.882719] ? pgd_page_get_mm+0x40/0x40 [ 989.883257] ? lockdep_init_map_type+0x2c7/0x780 [ 989.884553] ? lockdep_init_map_type+0x2c7/0x780 [ 989.885768] mm_init+0x670/0xab0 [ 989.886637] copy_process+0x257b/0x78b0 [ 989.887663] ? __lock_acquire+0xbb1/0x5b00 [ 989.888575] ? __cleanup_sighand+0xb0/0xb0 [ 989.889460] ? lock_acquire+0x197/0x470 [ 989.890285] ? find_held_lock+0x2c/0x110 [ 989.891137] kernel_clone+0xe7/0x980 [ 989.891927] ? lock_downgrade+0x6d0/0x6d0 [ 989.892791] ? find_held_lock+0x2c/0x110 [ 989.893650] ? create_io_thread+0xf0/0xf0 [ 989.894522] ? ksys_write+0x12d/0x260 [ 989.895327] ? __mutex_unlock_slowpath+0xe1/0x600 [ 989.896338] __do_sys_fork+0x8a/0xc0 [ 989.897118] ? kernel_thread+0xf0/0xf0 [ 989.897947] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 989.899050] ? syscall_enter_from_user_mode+0x1d/0x50 [ 989.900192] ? trace_hardirqs_on+0x5b/0x180 [ 989.901095] ? syscall_enter_from_user_mode+0x1d/0x50 [ 989.902180] do_syscall_64+0x33/0x40 [ 989.902957] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 989.904054] RIP: 0033:0x7f0161ef8b19 [ 989.904831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 989.908680] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 989.910289] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 989.911792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 989.913275] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 989.914757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 989.916280] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:00:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x470b) 05:00:27 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x500) 05:00:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x80000, {0x6}}, 0x14}}, 0x0) 05:00:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xfffff000, {0x6}}, 0x14}}, 0x0) 05:00:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 05:00:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x6d0f) 05:00:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x1000000, {0x6}}, 0x14}}, 0x0) 05:00:28 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 27) 05:00:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xffffff7f, {0x6}}, 0x14}}, 0x0) 05:00:28 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x600) [ 990.077428] FAULT_INJECTION: forcing a failure. [ 990.077428] name failslab, interval 1, probability 0, space 0, times 0 [ 990.079001] CPU: 0 PID: 7186 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 990.079902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.080982] Call Trace: [ 990.081331] dump_stack+0x107/0x167 [ 990.081806] should_fail.cold+0x5/0xa [ 990.082309] ? create_object.isra.0+0x3a/0xa30 [ 990.082902] should_failslab+0x5/0x20 [ 990.083405] kmem_cache_alloc+0x5b/0x310 [ 990.083936] create_object.isra.0+0x3a/0xa30 [ 990.084507] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 990.085171] kmem_cache_alloc+0x159/0x310 [ 990.085715] copy_process+0x2514/0x78b0 [ 990.086237] ? __lock_acquire+0xbb1/0x5b00 [ 990.086799] ? __cleanup_sighand+0xb0/0xb0 [ 990.087364] ? lock_acquire+0x197/0x470 [ 990.087886] ? find_held_lock+0x2c/0x110 [ 990.088421] kernel_clone+0xe7/0x980 [ 990.088904] ? lock_downgrade+0x6d0/0x6d0 [ 990.089443] ? find_held_lock+0x2c/0x110 [ 990.089972] ? create_io_thread+0xf0/0xf0 [ 990.090513] ? ksys_write+0x12d/0x260 [ 990.091013] ? __mutex_unlock_slowpath+0xe1/0x600 [ 990.091651] __do_sys_fork+0x8a/0xc0 [ 990.092145] ? kernel_thread+0xf0/0xf0 [ 990.092659] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 990.093345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.094015] ? trace_hardirqs_on+0x5b/0x180 [ 990.094585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 990.095256] do_syscall_64+0x33/0x40 [ 990.095753] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 990.096419] RIP: 0033:0x7f0161ef8b19 [ 990.096905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.099292] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 990.100272] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 990.101189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 990.102105] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 990.103027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.103954] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:00:41 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 28) 05:00:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf0ffff, {0x6}}, 0x14}}, 0x0) 05:00:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x700) 05:00:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x740e) 05:00:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x600f) 05:00:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x2}}, 0x14}}, 0x0) 05:00:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x2000000, {0x6}}, 0x14}}, 0x0) 05:00:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xffffff9e, {0x6}}, 0x14}}, 0x0) 05:00:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf000000, {0x6}}, 0x14}}, 0x0) 05:00:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xfffffff0, {0x6}}, 0x14}}, 0x0) [ 1004.011617] FAULT_INJECTION: forcing a failure. [ 1004.011617] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.013288] CPU: 0 PID: 7211 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1004.014142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1004.015185] Call Trace: [ 1004.015531] dump_stack+0x107/0x167 [ 1004.015991] should_fail.cold+0x5/0xa [ 1004.016468] ? create_object.isra.0+0x3a/0xa30 [ 1004.017044] should_failslab+0x5/0x20 [ 1004.017517] kmem_cache_alloc+0x5b/0x310 [ 1004.018026] create_object.isra.0+0x3a/0xa30 [ 1004.018579] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1004.019214] kmem_cache_alloc+0x159/0x310 [ 1004.019762] vm_area_dup+0x78/0x290 [ 1004.020225] ? __lock_acquire+0xbb1/0x5b00 [ 1004.020767] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1004.021425] ? lock_acquire+0x197/0x470 [ 1004.021921] ? copy_process+0x260c/0x78b0 [ 1004.022442] ? vm_area_alloc+0x110/0x110 [ 1004.022944] ? find_held_lock+0x2c/0x110 [ 1004.023464] ? get_mm_exe_file+0x139/0x310 [ 1004.023994] ? lock_downgrade+0x6d0/0x6d0 [ 1004.024511] ? down_write_nested+0xe4/0x160 [ 1004.025055] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1004.025697] ? get_mm_exe_file+0x162/0x310 [ 1004.026227] copy_process+0x298b/0x78b0 [ 1004.026753] ? __cleanup_sighand+0xb0/0xb0 [ 1004.027292] ? lock_acquire+0x197/0x470 [ 1004.027805] ? find_held_lock+0x2c/0x110 [ 1004.028329] kernel_clone+0xe7/0x980 [ 1004.028796] ? lock_downgrade+0x6d0/0x6d0 [ 1004.029295] ? find_held_lock+0x2c/0x110 [ 1004.029782] ? create_io_thread+0xf0/0xf0 [ 1004.030282] ? ksys_write+0x12d/0x260 [ 1004.030744] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1004.031328] __do_sys_fork+0x8a/0xc0 [ 1004.031787] ? kernel_thread+0xf0/0xf0 [ 1004.032267] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1004.032898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1004.033518] ? trace_hardirqs_on+0x5b/0x180 [ 1004.034034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1004.034653] do_syscall_64+0x33/0x40 [ 1004.035099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1004.035719] RIP: 0033:0x7f0161ef8b19 [ 1004.036166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1004.038351] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1004.039258] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1004.040113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1004.040965] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1004.041819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1004.042671] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:00:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x900) 05:00:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x810e) 05:00:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x1000000, {0x6}}, 0x14}}, 0x0) 05:00:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x6300) 05:00:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0xf}}, 0x14}}, 0x0) 05:00:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xb0e) 05:00:57 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 29) 05:00:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x32000000, {0x6}}, 0x14}}, 0x0) 05:00:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 05:00:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x880d) 05:00:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x120d) 05:00:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xffffffff, {0x6}}, 0x14}}, 0x0) 05:00:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x6d0f) 05:00:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x2000000, {0x6}}, 0x14}}, 0x0) [ 1019.298509] FAULT_INJECTION: forcing a failure. [ 1019.298509] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.303009] CPU: 0 PID: 7252 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1019.304794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1019.306924] Call Trace: [ 1019.307632] dump_stack+0x107/0x167 [ 1019.308568] should_fail.cold+0x5/0xa [ 1019.309552] ? vm_area_dup+0x78/0x290 [ 1019.310537] should_failslab+0x5/0x20 [ 1019.311524] kmem_cache_alloc+0x5b/0x310 [ 1019.312588] vm_area_dup+0x78/0x290 [ 1019.313538] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1019.314754] ? lock_downgrade+0x6d0/0x6d0 [ 1019.315648] ? copy_page_range+0x24e9/0x3810 [ 1019.316807] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1019.318020] ? avc_has_extended_perms+0xf40/0xf40 [ 1019.319270] ? vm_area_alloc+0x110/0x110 [ 1019.320331] ? find_held_lock+0x2c/0x110 [ 1019.321390] ? selinux_vm_enough_memory+0x114/0x180 [ 1019.322688] ? selinux_sb_statfs+0x250/0x250 [ 1019.323831] ? percpu_counter_add_batch+0x8b/0x140 [ 1019.325100] ? __vm_enough_memory+0x184/0x360 [ 1019.326255] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1019.327445] copy_process+0x298b/0x78b0 [ 1019.328546] ? __cleanup_sighand+0xb0/0xb0 [ 1019.329650] ? lock_acquire+0x197/0x470 [ 1019.330674] ? find_held_lock+0x2c/0x110 [ 1019.331747] kernel_clone+0xe7/0x980 [ 1019.332717] ? lock_downgrade+0x6d0/0x6d0 [ 1019.333767] ? find_held_lock+0x2c/0x110 [ 1019.334806] ? create_io_thread+0xf0/0xf0 [ 1019.335873] ? ksys_write+0x12d/0x260 [ 1019.336869] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1019.337909] __do_sys_fork+0x8a/0xc0 [ 1019.338874] ? kernel_thread+0xf0/0xf0 [ 1019.339908] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1019.341264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1019.342590] ? trace_hardirqs_on+0x5b/0x180 [ 1019.343702] ? syscall_enter_from_user_mode+0x1d/0x50 05:00:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf000000, {0x6}}, 0x14}}, 0x0) [ 1019.345037] do_syscall_64+0x33/0x40 [ 1019.346051] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1019.347381] RIP: 0033:0x7f0161ef8b19 05:00:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}}, 0x0) [ 1019.348356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1019.353382] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1019.355444] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1019.357388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1019.359317] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1019.361272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1019.363204] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:00:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x740e) 05:00:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x950d) 05:00:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x1f0d) 05:00:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x9effffff, {0x6}}, 0x14}}, 0x0) 05:00:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 05:00:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x260c) 05:01:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x9c0c) 05:01:12 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 30) 05:01:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x8d000000, {0x6}}, 0x14}}, 0x0) 05:01:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xc00e0000, {0x6}}, 0x14}}, 0x0) 05:01:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0x8}}, 0x14}}, 0x0) 05:01:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x810e) 05:01:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x330c) 05:01:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 1034.734422] FAULT_INJECTION: forcing a failure. [ 1034.734422] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.737390] CPU: 0 PID: 7288 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1034.739108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1034.741138] Call Trace: [ 1034.741802] dump_stack+0x107/0x167 [ 1034.742693] should_fail.cold+0x5/0xa [ 1034.743613] ? create_object.isra.0+0x3a/0xa30 [ 1034.744724] should_failslab+0x5/0x20 [ 1034.745639] kmem_cache_alloc+0x5b/0x310 [ 1034.746635] create_object.isra.0+0x3a/0xa30 [ 1034.747697] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1034.748933] kmem_cache_alloc+0x159/0x310 [ 1034.749959] vm_area_dup+0x78/0x290 [ 1034.750850] ? __lock_acquire+0xbb1/0x5b00 [ 1034.751940] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1034.753247] ? lock_acquire+0x197/0x470 [ 1034.754234] ? copy_process+0x260c/0x78b0 [ 1034.755278] ? vm_area_alloc+0x110/0x110 [ 1034.756302] ? find_held_lock+0x2c/0x110 [ 1034.757329] ? get_mm_exe_file+0x139/0x310 [ 1034.758377] ? lock_downgrade+0x6d0/0x6d0 [ 1034.759412] ? down_write_nested+0xe4/0x160 [ 1034.760494] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 1034.761757] ? get_mm_exe_file+0x162/0x310 [ 1034.762806] copy_process+0x298b/0x78b0 [ 1034.763842] ? __cleanup_sighand+0xb0/0xb0 [ 1034.764906] ? lock_acquire+0x197/0x470 [ 1034.765903] ? find_held_lock+0x2c/0x110 [ 1034.766916] kernel_clone+0xe7/0x980 [ 1034.767850] ? lock_downgrade+0x6d0/0x6d0 [ 1034.768873] ? find_held_lock+0x2c/0x110 [ 1034.769878] ? create_io_thread+0xf0/0xf0 [ 1034.770908] ? ksys_write+0x12d/0x260 [ 1034.771866] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1034.773058] __do_sys_fork+0x8a/0xc0 [ 1034.773973] ? kernel_thread+0xf0/0xf0 [ 1034.774946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1034.776272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1034.777536] ? trace_hardirqs_on+0x5b/0x180 [ 1034.778601] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1034.779870] do_syscall_64+0x33/0x40 [ 1034.780788] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1034.782048] RIP: 0033:0x7f0161ef8b19 [ 1034.782961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1034.787492] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1034.789366] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1034.791116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1034.792868] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1034.794614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1034.796364] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:01:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x9effffff, {0x6}}, 0x14}}, 0x0) 05:01:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x880d) 05:01:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:01:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xa90c) 05:01:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf0ffffff, {0x6}}, 0x14}}, 0x0) 05:01:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf}}, 0x14}}, 0x0) 05:01:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x3a0b) 05:01:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xc00e0000, {0x6}}, 0x14}}, 0x0) 05:01:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 05:01:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xf0ffffff, {0x6}}, 0x14}}, 0x0) 05:01:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xfffff000, {0x6}}, 0x14}}, 0x0) 05:01:26 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 31) 05:01:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x950d) 05:01:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf0}}, 0x14}}, 0x0) 05:01:26 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x470b) 05:01:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 05:01:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xb00b) 05:01:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x2}}, 0x14}}, 0x0) [ 1048.610662] FAULT_INJECTION: forcing a failure. [ 1048.610662] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.613198] CPU: 1 PID: 7324 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1048.614645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1048.616411] Call Trace: [ 1048.616977] dump_stack+0x107/0x167 05:01:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x9c0c) [ 1048.617747] should_fail.cold+0x5/0xa [ 1048.618688] ? vm_area_dup+0x78/0x290 [ 1048.619497] should_failslab+0x5/0x20 [ 1048.620319] kmem_cache_alloc+0x5b/0x310 [ 1048.621185] vm_area_dup+0x78/0x290 [ 1048.621969] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1048.622960] ? lock_downgrade+0x6d0/0x6d0 [ 1048.623845] ? copy_page_range+0x24e9/0x3810 [ 1048.624802] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1048.625790] ? avc_has_extended_perms+0xf40/0xf40 [ 1048.626819] ? vm_area_alloc+0x110/0x110 [ 1048.627673] ? find_held_lock+0x2c/0x110 [ 1048.628543] ? selinux_vm_enough_memory+0x114/0x180 [ 1048.629603] ? selinux_sb_statfs+0x250/0x250 [ 1048.630535] ? percpu_counter_add_batch+0x8b/0x140 [ 1048.631577] ? __vm_enough_memory+0x184/0x360 [ 1048.632533] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1048.633638] copy_process+0x298b/0x78b0 [ 1048.634509] ? __cleanup_sighand+0xb0/0xb0 [ 1048.635416] ? lock_acquire+0x197/0x470 [ 1048.636273] ? find_held_lock+0x2c/0x110 [ 1048.637140] kernel_clone+0xe7/0x980 [ 1048.637928] ? lock_downgrade+0x6d0/0x6d0 [ 1048.638833] ? find_held_lock+0x2c/0x110 [ 1048.639685] ? create_io_thread+0xf0/0xf0 [ 1048.640568] ? ksys_write+0x12d/0x260 [ 1048.641350] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1048.642338] __do_sys_fork+0x8a/0xc0 [ 1048.643095] ? kernel_thread+0xf0/0xf0 [ 1048.643933] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1048.645050] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1048.646142] ? trace_hardirqs_on+0x5b/0x180 [ 1048.647049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1048.648154] do_syscall_64+0x33/0x40 [ 1048.648945] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1048.650033] RIP: 0033:0x7f0161ef8b19 [ 1048.650816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1048.654710] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1048.656326] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1048.657832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1048.659344] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1048.660881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1048.662379] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:01:41 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 32) 05:01:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xbd0b) [ 1063.599146] FAULT_INJECTION: forcing a failure. [ 1063.599146] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.601787] CPU: 1 PID: 7345 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1063.603252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1063.605033] Call Trace: [ 1063.605600] dump_stack+0x107/0x167 [ 1063.606383] should_fail.cold+0x5/0xa [ 1063.607196] ? create_object.isra.0+0x3a/0xa30 [ 1063.608174] should_failslab+0x5/0x20 [ 1063.608984] kmem_cache_alloc+0x5b/0x310 [ 1063.609856] create_object.isra.0+0x3a/0xa30 [ 1063.610790] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 05:01:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x600f) 05:01:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xa90c) 05:01:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0xf}}, 0x14}}, 0x0) [ 1063.611876] kmem_cache_alloc+0x159/0x310 [ 1063.612946] anon_vma_clone+0xdc/0x590 [ 1063.613799] anon_vma_fork+0x82/0x640 [ 1063.614615] ? __vm_enough_memory+0x184/0x360 [ 1063.615575] copy_process+0x72cd/0x78b0 [ 1063.616475] ? __cleanup_sighand+0xb0/0xb0 [ 1063.617383] ? lock_acquire+0x197/0x470 [ 1063.618236] ? find_held_lock+0x2c/0x110 [ 1063.619105] kernel_clone+0xe7/0x980 [ 1063.619895] ? lock_downgrade+0x6d0/0x6d0 [ 1063.620790] ? find_held_lock+0x2c/0x110 [ 1063.621650] ? create_io_thread+0xf0/0xf0 [ 1063.622538] ? ksys_write+0x12d/0x260 [ 1063.623355] ? __mutex_unlock_slowpath+0xe1/0x600 05:01:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xffffff7f, {0x6}}, 0x14}}, 0x0) 05:01:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xfffff000, {0x6}}, 0x14}}, 0x0) 05:01:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xec0}}, 0x14}}, 0x0) [ 1063.624492] __do_sys_fork+0x8a/0xc0 [ 1063.625316] ? kernel_thread+0xf0/0xf0 [ 1063.626162] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1063.627276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1063.628375] ? trace_hardirqs_on+0x5b/0x180 [ 1063.629296] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1063.630384] do_syscall_64+0x33/0x40 [ 1063.631172] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1063.632264] RIP: 0033:0x7f0161ef8b19 [ 1063.633055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1063.636933] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1063.638524] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1063.640070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1063.641829] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1063.643573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1063.645332] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:01:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf00}}, 0x14}}, 0x0) 05:01:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x6300) 05:01:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x8b}}, 0x14}}, 0x0) 05:01:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xb00b) 05:01:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xffffff9e, {0x6}}, 0x14}}, 0x0) 05:01:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xffffff7f, {0x6}}, 0x14}}, 0x0) 05:01:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xc00e}}, 0x14}}, 0x0) 05:01:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x6d0f) 05:01:41 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 33) 05:01:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xc40a) 05:01:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 05:01:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xbd0b) 05:01:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xfffffff0, {0x6}}, 0x14}}, 0x0) 05:01:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf000}}, 0x14}}, 0x0) [ 1063.921977] FAULT_INJECTION: forcing a failure. [ 1063.921977] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.923544] CPU: 1 PID: 7381 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1063.924376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1063.925354] Call Trace: [ 1063.925678] dump_stack+0x107/0x167 [ 1063.926104] should_fail.cold+0x5/0xa [ 1063.926552] ? create_object.isra.0+0x3a/0xa30 [ 1063.927084] should_failslab+0x5/0x20 [ 1063.927529] kmem_cache_alloc+0x5b/0x310 [ 1063.928003] create_object.isra.0+0x3a/0xa30 [ 1063.928514] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1063.929103] kmem_cache_alloc+0x159/0x310 [ 1063.929597] vm_area_dup+0x78/0x290 [ 1063.930023] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1063.930564] ? lock_downgrade+0x6d0/0x6d0 [ 1063.931044] ? copy_page_range+0x24e9/0x3810 [ 1063.931559] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1063.932096] ? avc_has_extended_perms+0xf40/0xf40 [ 1063.932670] ? vm_area_alloc+0x110/0x110 [ 1063.933137] ? find_held_lock+0x2c/0x110 [ 1063.933608] ? selinux_vm_enough_memory+0x114/0x180 [ 1063.934184] ? selinux_sb_statfs+0x250/0x250 [ 1063.934692] ? percpu_counter_add_batch+0x8b/0x140 [ 1063.935256] ? __vm_enough_memory+0x184/0x360 [ 1063.935771] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1063.936378] copy_process+0x298b/0x78b0 [ 1063.936853] ? __cleanup_sighand+0xb0/0xb0 [ 1063.937349] ? lock_acquire+0x197/0x470 [ 1063.937810] ? find_held_lock+0x2c/0x110 [ 1063.938280] kernel_clone+0xe7/0x980 [ 1063.938709] ? lock_downgrade+0x6d0/0x6d0 [ 1063.939185] ? find_held_lock+0x2c/0x110 [ 1063.939654] ? create_io_thread+0xf0/0xf0 [ 1063.940131] ? ksys_write+0x12d/0x260 [ 1063.940591] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1063.941140] __do_sys_fork+0x8a/0xc0 [ 1063.941566] ? kernel_thread+0xf0/0xf0 [ 1063.942019] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1063.942623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1063.943222] ? trace_hardirqs_on+0x5b/0x180 [ 1063.943716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1063.944315] do_syscall_64+0x33/0x40 [ 1063.944744] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1063.945336] RIP: 0033:0x7f0161ef8b19 [ 1063.945769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1063.947905] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1063.948800] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1063.949628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1063.950449] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1063.951269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1063.952093] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:01:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xffffff9e, {0x6}}, 0x14}}, 0x0) 05:01:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xce0f) 05:01:57 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 34) 05:01:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xffff}}, 0x14}}, 0x0) 05:01:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}}, 0x0) 05:01:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xc40a) 05:01:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xffffffff, {0x6}}, 0x14}}, 0x0) 05:01:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x740e) [ 1079.063135] FAULT_INJECTION: forcing a failure. [ 1079.063135] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.065689] CPU: 0 PID: 7397 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1079.067120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1079.068851] Call Trace: [ 1079.069405] dump_stack+0x107/0x167 [ 1079.070163] should_fail.cold+0x5/0xa [ 1079.070949] ? create_object.isra.0+0x3a/0xa30 [ 1079.071898] should_failslab+0x5/0x20 [ 1079.072685] kmem_cache_alloc+0x5b/0x310 [ 1079.073532] create_object.isra.0+0x3a/0xa30 [ 1079.074442] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1079.075492] kmem_cache_alloc+0x159/0x310 [ 1079.076369] anon_vma_clone+0xdc/0x590 [ 1079.077169] anon_vma_fork+0x82/0x640 [ 1079.077947] ? __vm_enough_memory+0x184/0x360 [ 1079.078878] copy_process+0x72cd/0x78b0 [ 1079.079727] ? __cleanup_sighand+0xb0/0xb0 [ 1079.080621] ? lock_acquire+0x197/0x470 [ 1079.081463] ? find_held_lock+0x2c/0x110 [ 1079.082316] kernel_clone+0xe7/0x980 [ 1079.083094] ? lock_downgrade+0x6d0/0x6d0 [ 1079.083958] ? find_held_lock+0x2c/0x110 [ 1079.084816] ? create_io_thread+0xf0/0xf0 [ 1079.085686] ? ksys_write+0x12d/0x260 [ 1079.086493] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1079.087507] __do_sys_fork+0x8a/0xc0 [ 1079.088285] ? kernel_thread+0xf0/0xf0 [ 1079.089132] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1079.090212] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1079.091278] ? trace_hardirqs_on+0x5b/0x180 [ 1079.092175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1079.093279] do_syscall_64+0x33/0x40 [ 1079.094052] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1079.095114] RIP: 0033:0x7f0161ef8b19 [ 1079.095877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1079.099723] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1079.101320] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1079.102830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1079.104323] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1079.105820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1079.107295] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:01:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xfffffff0, {0x6}}, 0x14}}, 0x0) 05:01:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 05:02:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x810e) 05:02:12 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 35) 05:02:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 05:02:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xce0f) 05:02:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x3}}, 0x0) 05:02:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xd10a) 05:02:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0x8}}, 0x14}}, 0x0) 05:02:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0xffffffff, {0x6}}, 0x14}}, 0x0) [ 1094.148566] FAULT_INJECTION: forcing a failure. [ 1094.148566] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.150557] CPU: 0 PID: 7425 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1094.151720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1094.153142] Call Trace: [ 1094.153597] dump_stack+0x107/0x167 [ 1094.154222] should_fail.cold+0x5/0xa [ 1094.154884] ? create_object.isra.0+0x3a/0xa30 [ 1094.155649] should_failslab+0x5/0x20 [ 1094.156291] kmem_cache_alloc+0x5b/0x310 [ 1094.157011] create_object.isra.0+0x3a/0xa30 [ 1094.157752] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1094.158628] kmem_cache_alloc+0x159/0x310 [ 1094.159353] anon_vma_fork+0xf1/0x640 [ 1094.160018] ? __vm_enough_memory+0x184/0x360 [ 1094.160756] copy_process+0x72cd/0x78b0 [ 1094.161337] ? __cleanup_sighand+0xb0/0xb0 [ 1094.161926] ? lock_acquire+0x197/0x470 [ 1094.162478] ? find_held_lock+0x2c/0x110 [ 1094.163049] kernel_clone+0xe7/0x980 [ 1094.163552] ? lock_downgrade+0x6d0/0x6d0 [ 1094.164131] ? find_held_lock+0x2c/0x110 [ 1094.164707] ? create_io_thread+0xf0/0xf0 [ 1094.165280] ? ksys_write+0x12d/0x260 [ 1094.165811] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1094.166481] __do_sys_fork+0x8a/0xc0 [ 1094.166989] ? kernel_thread+0xf0/0xf0 [ 1094.167524] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1094.168254] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1094.168981] ? trace_hardirqs_on+0x5b/0x180 [ 1094.169575] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1094.170277] do_syscall_64+0x33/0x40 [ 1094.170795] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1094.171495] RIP: 0033:0x7f0161ef8b19 [ 1094.172013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1094.174577] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1094.175623] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1094.176611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1094.177587] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1094.178579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1094.179560] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:02:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:02:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xd10a) 05:02:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xd60f) 05:02:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x880d) 05:02:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xf}}, 0x0) 05:02:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf}}, 0x14}}, 0x0) 05:02:12 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 36) 05:02:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 05:02:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xdb0f) 05:02:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xd60f) [ 1094.310741] FAULT_INJECTION: forcing a failure. [ 1094.310741] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.312144] CPU: 0 PID: 7446 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1094.312961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1094.313956] Call Trace: [ 1094.314276] dump_stack+0x107/0x167 [ 1094.314711] should_fail.cold+0x5/0xa [ 1094.315164] ? create_object.isra.0+0x3a/0xa30 [ 1094.315703] should_failslab+0x5/0x20 [ 1094.316153] kmem_cache_alloc+0x5b/0x310 [ 1094.316643] create_object.isra.0+0x3a/0xa30 [ 1094.317159] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1094.317760] kmem_cache_alloc+0x159/0x310 [ 1094.318252] anon_vma_fork+0xf1/0x640 [ 1094.318699] ? __vm_enough_memory+0x184/0x360 [ 1094.319232] copy_process+0x72cd/0x78b0 [ 1094.319714] ? __cleanup_sighand+0xb0/0xb0 [ 1094.320219] ? lock_acquire+0x197/0x470 [ 1094.320697] ? find_held_lock+0x2c/0x110 [ 1094.321173] kernel_clone+0xe7/0x980 [ 1094.321608] ? lock_downgrade+0x6d0/0x6d0 [ 1094.322090] ? find_held_lock+0x2c/0x110 [ 1094.322563] ? create_io_thread+0xf0/0xf0 [ 1094.323049] ? ksys_write+0x12d/0x260 [ 1094.323501] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1094.324068] __do_sys_fork+0x8a/0xc0 [ 1094.324512] ? kernel_thread+0xf0/0xf0 [ 1094.324976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1094.325591] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1094.326193] ? trace_hardirqs_on+0x5b/0x180 [ 1094.326701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1094.327305] do_syscall_64+0x33/0x40 [ 1094.327741] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1094.328341] RIP: 0033:0x7f0161ef8b19 [ 1094.328787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1094.330926] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1094.331813] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1094.332653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1094.333482] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1094.334311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1094.335144] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:02:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xe30f) 05:02:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xdb0f) 05:02:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 05:02:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xea0e) 05:02:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x950d) 05:02:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xe30f) 05:02:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xc0}}, 0x0) 05:02:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0x8b}}, 0x14}}, 0x0) 05:02:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xe90}}, 0x0) 05:02:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xf70e) 05:02:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 05:02:23 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 37) 05:02:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x9c0c) 05:02:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 05:02:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xea0e) [ 1105.441721] FAULT_INJECTION: forcing a failure. [ 1105.441721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1105.444244] CPU: 1 PID: 7495 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1105.445687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1105.447416] Call Trace: [ 1105.447973] dump_stack+0x107/0x167 [ 1105.448749] should_fail.cold+0x5/0xa [ 1105.449580] __alloc_pages_nodemask+0x182/0x600 [ 1105.450561] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1105.451825] ? copy_page_range+0x28e1/0x3810 [ 1105.452756] alloc_pages_current+0x187/0x280 [ 1105.453671] get_zeroed_page+0x14/0xb0 [ 1105.454481] __pud_alloc+0x33/0x270 [ 1105.455247] copy_page_range+0x2ca1/0x3810 [ 1105.456130] ? lock_chain_count+0x20/0x20 [ 1105.457023] ? lock_downgrade+0x6d0/0x6d0 [ 1105.457907] ? up_write+0x191/0x550 [ 1105.458668] ? vm_iomap_memory+0x190/0x190 [ 1105.459549] ? downgrade_write+0x3a0/0x3a0 [ 1105.460434] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1105.461572] ? __vma_link_rb+0x540/0x700 [ 1105.462431] copy_process+0x7658/0x78b0 [ 1105.463293] ? __cleanup_sighand+0xb0/0xb0 [ 1105.464184] ? lock_acquire+0x197/0x470 [ 1105.465054] ? find_held_lock+0x2c/0x110 [ 1105.465912] kernel_clone+0xe7/0x980 [ 1105.466689] ? lock_downgrade+0x6d0/0x6d0 [ 1105.467555] ? find_held_lock+0x2c/0x110 [ 1105.468431] ? create_io_thread+0xf0/0xf0 [ 1105.469323] ? ksys_write+0x12d/0x260 [ 1105.470136] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1105.471157] __do_sys_fork+0x8a/0xc0 [ 1105.471943] ? kernel_thread+0xf0/0xf0 [ 1105.472809] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1105.473935] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.475039] ? trace_hardirqs_on+0x5b/0x180 [ 1105.475966] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.477087] do_syscall_64+0x33/0x40 [ 1105.477888] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1105.478987] RIP: 0033:0x7f0161ef8b19 [ 1105.479794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1105.483787] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 05:02:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xfe0d) [ 1105.485436] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1105.487132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1105.488678] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.490224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:02:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xf70e) [ 1105.491757] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:02:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xec0}}, 0x0) 05:02:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x2}}, 0x14}}, 0x0) 05:02:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf0}}, 0x14}}, 0x0) 05:02:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:02:37 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 38) 05:02:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xec0}}, 0x14}}, 0x0) 05:02:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0xf}}, 0x14}}, 0x0) 05:02:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xa90c) 05:02:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x33fe0}}, 0x0) 05:02:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:02:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xfe0d) [ 1119.921339] FAULT_INJECTION: forcing a failure. [ 1119.921339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1119.923876] CPU: 0 PID: 7522 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1119.925311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1119.927045] Call Trace: [ 1119.927600] dump_stack+0x107/0x167 [ 1119.928365] should_fail.cold+0x5/0xa [ 1119.929187] __alloc_pages_nodemask+0x182/0x600 [ 1119.930159] ? lock_acquire+0x197/0x470 [ 1119.930990] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1119.932256] ? lock_downgrade+0x6d0/0x6d0 [ 1119.933137] ? do_raw_spin_lock+0x121/0x260 [ 1119.934053] alloc_pages_current+0x187/0x280 [ 1119.934976] __pmd_alloc+0x37/0x630 [ 1119.935740] copy_page_range+0x2bd8/0x3810 [ 1119.936637] ? lock_chain_count+0x20/0x20 [ 1119.937552] ? up_write+0x191/0x550 [ 1119.938312] ? vm_iomap_memory+0x190/0x190 [ 1119.939194] ? downgrade_write+0x3a0/0x3a0 [ 1119.940084] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1119.941227] ? __vma_link_rb+0x540/0x700 [ 1119.942097] copy_process+0x7658/0x78b0 [ 1119.942964] ? __cleanup_sighand+0xb0/0xb0 [ 1119.943854] ? lock_acquire+0x197/0x470 [ 1119.944697] ? find_held_lock+0x2c/0x110 [ 1119.945560] kernel_clone+0xe7/0x980 [ 1119.946337] ? lock_downgrade+0x6d0/0x6d0 [ 1119.947201] ? find_held_lock+0x2c/0x110 [ 1119.948050] ? create_io_thread+0xf0/0xf0 [ 1119.948929] ? ksys_write+0x12d/0x260 [ 1119.949732] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1119.950746] __do_sys_fork+0x8a/0xc0 [ 1119.951533] ? kernel_thread+0xf0/0xf0 [ 1119.952366] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1119.953470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1119.954546] ? trace_hardirqs_on+0x5b/0x180 [ 1119.955453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1119.956525] do_syscall_64+0x33/0x40 [ 1119.957313] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1119.958388] RIP: 0033:0x7f0161ef8b19 [ 1119.959171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1119.963023] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1119.964639] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1119.966145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1119.967637] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.969132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1119.970618] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:02:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xb00b) 05:02:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x32}}, 0x14}}, 0x0) 05:02:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r2, r1, 0x0) sendfile(r2, r0, &(0x7f0000000040)=0x8001, 0x9) lseek(r1, 0x40400, 0x0) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:02:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x20003854}}, 0x0) 05:02:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 05:02:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf00}}, 0x14}}, 0x0) [ 1120.070658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1120.118228] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:02:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x7ffff000}}, 0x0) [ 1134.053202] FAULT_INJECTION: forcing a failure. [ 1134.053202] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.056235] CPU: 0 PID: 7560 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1134.058050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1134.060238] Call Trace: [ 1134.060935] dump_stack+0x107/0x167 05:02:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') pread64(r0, &(0x7f0000000040)=""/4083, 0xff3, 0x300) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000001480)={0x3, 0x0, 0xb, 0x18, 0xb4, &(0x7f0000001080)}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000004000000000000c0c94ee7dc57796308000100", @ANYRES32=r5, @ANYBLOB="1400038004000500080002000000200004000400"], 0x34}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x40, 0x100) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000001040)={@remote, 0x1e, r5}) 05:02:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0x8b00}}, 0x14}}, 0x0) 05:02:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 05:02:52 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xbd0b) 05:02:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 05:02:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) 05:02:52 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 39) [ 1134.061906] should_fail.cold+0x5/0xa [ 1134.063102] ? __pmd_alloc+0x94/0x630 [ 1134.064097] should_failslab+0x5/0x20 [ 1134.065106] kmem_cache_alloc+0x5b/0x310 [ 1134.066181] __pmd_alloc+0x94/0x630 [ 1134.067136] copy_page_range+0x2bd8/0x3810 [ 1134.068245] ? lock_chain_count+0x20/0x20 [ 1134.069385] ? up_write+0x191/0x550 [ 1134.070345] ? vm_iomap_memory+0x190/0x190 [ 1134.071449] ? downgrade_write+0x3a0/0x3a0 [ 1134.072555] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1134.073972] ? __vma_link_rb+0x540/0x700 [ 1134.075032] copy_process+0x7658/0x78b0 [ 1134.076101] ? __cleanup_sighand+0xb0/0xb0 [ 1134.077229] ? lock_acquire+0x197/0x470 [ 1134.078270] ? find_held_lock+0x2c/0x110 [ 1134.079330] kernel_clone+0xe7/0x980 [ 1134.080294] ? lock_downgrade+0x6d0/0x6d0 [ 1134.081379] ? find_held_lock+0x2c/0x110 [ 1134.082314] ? create_io_thread+0xf0/0xf0 [ 1134.083256] ? ksys_write+0x12d/0x260 [ 1134.084122] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1134.085240] __do_sys_fork+0x8a/0xc0 [ 1134.086084] ? kernel_thread+0xf0/0xf0 [ 1134.086989] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1134.088183] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1134.089354] ? trace_hardirqs_on+0x5b/0x180 [ 1134.090342] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1134.091508] do_syscall_64+0x33/0x40 [ 1134.092358] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1134.093528] RIP: 0033:0x7f0161ef8b19 [ 1134.094369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.098514] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1134.100217] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1134.101817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1134.103409] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.105010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1134.106605] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:02:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x2}}, 0x14}}, 0x0) 05:02:52 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xc40a) 05:02:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xc00e}}, 0x14}}, 0x0) 05:02:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0xf}}, 0x14}}, 0x0) 05:03:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xfffffdef}}, 0x0) 05:03:05 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xce0f) 05:03:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x8d}}, 0x14}}, 0x0) 05:03:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf000}}, 0x14}}, 0x0) 05:03:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pread64(r0, &(0x7f0000002100)=""/4043, 0xfcb, 0x8000000000000004) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x10, 0x400, 0x70bd2a, 0x25dfdbfd, {0x7}, [@generic="5c76414044b4be5d4972d1061eca4bc950597f5789d30c055189bd3a07e35db01e366a5684b7c0c7d6971a228210b60945cb4b3f6815b183dd9e292d64b2daf133f5391091891abe160ff2c3c5482fac692a0a583b421c5a894358b9756ced58a443e3db327183e3c3d97da493e414df016da55e018ac294d0238fb32d8e"]}, 0x94}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x6, 0x9b3e, 0xfffffff9, 0xf349, 0x7}) 05:03:05 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_tables_targets\x00') fstatfs(r1, &(0x7f00000000c0)=""/153) pread64(r1, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:03:05 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 40) 05:03:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}}, 0x0) [ 1147.325608] FAULT_INJECTION: forcing a failure. [ 1147.325608] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.326987] CPU: 0 PID: 7594 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1147.327781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1147.328742] Call Trace: [ 1147.329052] dump_stack+0x107/0x167 [ 1147.329482] should_fail.cold+0x5/0xa [ 1147.329925] ? create_object.isra.0+0x3a/0xa30 [ 1147.330456] should_failslab+0x5/0x20 [ 1147.330902] kmem_cache_alloc+0x5b/0x310 [ 1147.331380] create_object.isra.0+0x3a/0xa30 [ 1147.331892] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1147.332484] kmem_cache_alloc+0x159/0x310 [ 1147.332967] __pmd_alloc+0x94/0x630 [ 1147.333399] copy_page_range+0x2bd8/0x3810 [ 1147.333894] ? lock_chain_count+0x20/0x20 [ 1147.334395] ? up_write+0x191/0x550 [ 1147.334819] ? vm_iomap_memory+0x190/0x190 [ 1147.335309] ? downgrade_write+0x3a0/0x3a0 [ 1147.335805] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1147.336436] ? __vma_link_rb+0x540/0x700 [ 1147.336910] copy_process+0x7658/0x78b0 [ 1147.337397] ? __cleanup_sighand+0xb0/0xb0 [ 1147.337893] ? lock_acquire+0x197/0x470 [ 1147.338360] ? find_held_lock+0x2c/0x110 [ 1147.338840] kernel_clone+0xe7/0x980 [ 1147.339275] ? lock_downgrade+0x6d0/0x6d0 [ 1147.339752] ? find_held_lock+0x2c/0x110 [ 1147.340223] ? create_io_thread+0xf0/0xf0 [ 1147.340704] ? ksys_write+0x12d/0x260 [ 1147.341161] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1147.341727] __do_sys_fork+0x8a/0xc0 [ 1147.342161] ? kernel_thread+0xf0/0xf0 [ 1147.342622] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1147.343231] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1147.343825] ? trace_hardirqs_on+0x5b/0x180 [ 1147.344327] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1147.344927] do_syscall_64+0x33/0x40 [ 1147.345370] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1147.345965] RIP: 0033:0x7f0161ef8b19 [ 1147.346395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.348509] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1147.349394] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1147.350216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1147.351042] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.351862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1147.352686] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:03:05 executing program 4: clone3(&(0x7f0000000280)={0xc0033300, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x27}, &(0x7f0000000100)=""/70, 0x46, &(0x7f0000000180)=""/164, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4}, 0x58) syz_open_procfs(r0, &(0x7f0000000040)='net/ipv6_route\x00') 05:03:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') pread64(r0, &(0x7f0000002100)=""/4071, 0xfe7, 0x6c) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)) 05:03:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x6}, 0x0) 05:03:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0x8}}, 0x14}}, 0x0) 05:03:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xffff}}, 0x14}}, 0x0) 05:03:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 05:03:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r3, r2, 0x0) r4 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r4, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) fcntl$setown(r4, 0x8, r5) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x17bd}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x57}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x4404d) pread64(r1, &(0x7f0000000080)=""/181, 0xb5, 0x668) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:03:05 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xd10a) [ 1147.462763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 05:03:05 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40408c4}, 0x80c0) [ 1147.485143] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 05:03:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xf}}, 0x0) 05:03:05 executing program 2: pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000, 0x100) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x11, &(0x7f00000003c0)={@link_local, @multicast, @void, {@mpls_mc={0x8848, {[], @llc={@llc={0x0, 0x0, "1a"}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000740)={@remote, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast1, @loopback}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x561881, 0x4) 05:03:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}}, 0x0) 05:03:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x11}}, 0x0) 05:03:17 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 41) 05:03:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x8}, 0x0) 05:03:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf}}, 0x14}}, 0x0) 05:03:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)={0x24, r4, 0x2ff, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="00082cbd7000ffdbdf253500000008000300", @ANYRES32=r5, @ANYBLOB="05002001070000000a000600ffffffffffff00001400550033583d14688383e4f9718a8238adf1a7050020011e0000001400fe0062ee9a0992cde8b83cf958dfb2a625fe1400fe0053d03f768ddb674a5b27b6ed63afe7c1050020012d000000050020015d0000001a003400d54e305c5336cdef0b5f03dfc85b2edde67ece26a47600003c080b745ed986403808901aa16a7bced26e13e8db22bf9ecb574c8f95fed51ba0c683fece6af24f526808773cfdd2819499ab74cfbd4bfc735608b6a129106e71eb68aaf305c2228a4f6edc0c7bf7c2589cf228e50982186ef9df2ae1c96af643ac60da1285bb40922c1e017d4099b764f99dfc24d7cc85d248a2e0645b7de5380ed2effa9928832cb6b389e6"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40808) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x40, 0x25}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x4040004) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1) [ 1159.680658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 05:03:17 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xd60f) 05:03:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x44400, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000080)) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r3, r2, 0x0) r4 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r4, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000740)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d4571082000000000000000000000000000000000000000000824a700900"/260]) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000980)={{r6}, r7, 0x18, @unused=[0xfff, 0x7f, 0x1ff, 0x1], @name="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"}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f00000000c0)={{r1}, r7, 0x2, @unused=[0x10001, 0x7, 0x8, 0x7], @subvolid=0x3}) [ 1159.698865] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1159.707254] FAULT_INJECTION: forcing a failure. [ 1159.707254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1159.710024] CPU: 1 PID: 7640 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1159.711562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.713419] Call Trace: [ 1159.714015] dump_stack+0x107/0x167 [ 1159.714830] should_fail.cold+0x5/0xa [ 1159.715693] __alloc_pages_nodemask+0x182/0x600 [ 1159.716752] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1159.718104] ? find_held_lock+0x2c/0x110 [ 1159.719014] ? __pmd_alloc+0x31d/0x630 [ 1159.719883] ? lock_downgrade+0x6d0/0x6d0 [ 1159.720805] ? do_raw_spin_lock+0x121/0x260 [ 1159.721778] alloc_pages_current+0x187/0x280 [ 1159.722770] pte_alloc_one+0x16/0x1a0 [ 1159.723621] __pte_alloc+0x1d/0x330 [ 1159.724438] copy_page_range+0x1b62/0x3810 [ 1159.725389] ? lock_chain_count+0x20/0x20 [ 1159.726366] ? up_write+0x191/0x550 [ 1159.727176] ? vm_iomap_memory+0x190/0x190 [ 1159.728125] ? downgrade_write+0x3a0/0x3a0 [ 1159.729069] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1159.730309] ? __vma_link_rb+0x540/0x700 [ 1159.731227] copy_process+0x7658/0x78b0 [ 1159.732156] ? __cleanup_sighand+0xb0/0xb0 [ 1159.733122] ? lock_acquire+0x197/0x470 [ 1159.734028] ? find_held_lock+0x2c/0x110 [ 1159.734936] kernel_clone+0xe7/0x980 [ 1159.735780] ? lock_downgrade+0x6d0/0x6d0 [ 1159.736698] ? find_held_lock+0x2c/0x110 [ 1159.737616] ? create_io_thread+0xf0/0xf0 [ 1159.738544] ? ksys_write+0x12d/0x260 [ 1159.739404] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1159.740494] __do_sys_fork+0x8a/0xc0 [ 1159.741343] ? kernel_thread+0xf0/0xf0 [ 1159.742237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1159.743404] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1159.744553] ? trace_hardirqs_on+0x5b/0x180 [ 1159.745536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1159.746688] do_syscall_64+0x33/0x40 [ 1159.747532] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1159.748681] RIP: 0033:0x7f0161ef8b19 [ 1159.749535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.753664] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1159.755368] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1159.756958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1159.758561] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.760153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1159.761749] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:03:17 executing program 2: pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000000)={0xab, 0xc5ad, 0x1, 'queue0\x00', 0x9}) 05:03:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x300}, 0x0) 05:03:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0x32}}, 0x14}}, 0x0) 05:03:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0x8}}, 0x14}}, 0x0) 05:03:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xc0}}, 0x0) 05:03:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) signalfd4(r0, &(0x7f0000000040)={[0x80000000]}, 0x8, 0x80000) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080)) 05:03:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x4a, 0x0, 0x22, 0xff, 0x2800}) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:03:32 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 42) 05:03:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf0}}, 0x14}}, 0x0) 05:03:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000040)=""/76, 0x4c}, {&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000000580)=""/134, 0x86}, {&(0x7f0000000640)=""/25, 0x19}, {&(0x7f0000000680)=""/123, 0x7b}], 0x9) 05:03:32 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000010c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001e00)={0x33ec, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x817, 0x76}}}}, [@NL80211_ATTR_NAN_FUNC={0x17c8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffffd}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1634, 0xd, 0x0, 0x1, [{0xce, 0x0, "a99f92ae8eb163905770bd677884b6b35bc7cf811327ef91607335c1a85695ef52198b9d9d36cb09772d6f42bae4b8da5bf883ac551e7cb203aa4b74d49040ab31cb7393f49263a9967c3f720db1c8cdfbaa99b3dcb5795950f51538e0a9df28115011e715f1b2acbe1965497981c542a1ce454ac83e0b70077184e3fa2f785771eb2deb55848a1742fe21f905af78b0dc18e54ba70a80eeeef8a146990194d550023c86ea2cdb5bb457690695f925577becefc8b0fa88f1f0867023cc4a6bace7180128d1b6abdd853a"}, {0x75, 0x0, "9c19f54133bc0820eb9d3292d74fb23e89a3beb2dcac66e78b949b5326c4afd94148820ed5cdc0bcb9719fc609c322fc794ae43fab276212612a25b04056f4baf1edbd02cd5c35e7f06ef3e1adecc9000c4e43b069ddeefa89ed664ecbbee7dc3b1957b0ed3fdc292af8cadd0499bd5a00"}, {0xa8, 0x0, "6a27bd3509b9c83bf9147ee2fb34f2ecd122642f6e155087e12456cfc4e88d055a313272ff32b1e48861d000851bd2642592c141c42422c8b3b475c14b27885230fb538210041bcbe5359c0b578f94b8f574e5d48df2242ef0b96c4128f06262ce970de07c57cf1b2739e1d6d8ead11385fbffcc7b9742ddffa8e8de3d74587d46a472623578e2a51c3aff826b2b31ddb7aeac468919137ab33707f84cc67d9115dd0433"}, {0xd5, 0x0, "b3b623bf77af58ac6108b77648423c470d695eb92fc573c17d94e9186a6611f9a26e6a97e38e7613ceec0fa8a8c36613dddd4a245bf3c9ef930537de36b8ab3613536f90c5926d2bd18f61924794fd054be8954c28e2c81f0535c1f14e0448989fb8d244a7c4a2d8b5fa81a38c07d020c3be1d75aac3a34f617ad5edd68dd53d957f1e9e45fbb4f4ec92a5a7c0da087977b4e98c23b8082f2f0aefb006de07818d106d44f77ca6cfe2fffdce85d8ac0c9167687feb84261b9e0b61130000d5f6bdb516dadbcd18dc27e702f5b43879fb4f"}, {0x103, 0x0, "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"}, {0x1004, 0x0, "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"}, {0xd2, 0x0, "e36ad7b487df604890d4c2bad5d1953b8da23dc6681842a36a08a88c1d0dc84405f14a8cdf230e6a883f9d2b477be2b4c751ff301c39da433fe496b73414307920d3f30e3247c570b74b131cb60b2502a92956c6ac0276bddd4762b793638532cdcba508e91878ac3536bbcd689918dc3ca08a8958e188446acc63c8d116638bcc7682e861952c40cce1ed916764ff0e6b4473ad2df3bb0763687a720cd3f8da67cc76385159f90be0081d7b97c6f13a5a449d9c4b28b84fc8ab51d15958f2e4ed21dc6eabd3141535550efdb334"}, {0xb7, 0x0, "652d7a1c5fe20ca661ab81de612bc60e784f4275c232f1f15f093849e53abd2798c7143fb6fc9ef9d1c277959409b6f5f63394ce53e9e04a975d6b8fd8220246de7aa12379d3c56e4d70adcd4f9802ad997bee60af6b493afd0218db2e6593299b255984950377993476f2d2d55998cab5602d68f25cc828872f8e3cd41568e7e42a791fc1cbddff982642d4350d138c02bd0851e1542a9c74a61a94b78ecc657d80f1f4c773fec68a9535bc1ad29bfccf59f3"}, {0xd3, 0x0, "dec9f23d3f3bf05407f07da77a66d7cd313fe9c20ef15be25cc01e6bc7fae5c4fa20c36203a85b8aa0edda25ace3124d7724e47383c7df190a8bd4aea1cfc267647bf2d08c80c39a3cf766ceb334e3c8d35f1d25332d0f2d2a8fcc67534c3b2b99d011b69d2fc2ece5385a7cf47ff5b380110e6cc17878d3bcdd4f0e7ccd09c404a14ed3c39fd6b5bd380833cb798be3c7d3805af7c56caac8d25c9d7ba074ecb04cd7aeb1eceec29ac01fd7aec59464939dbab4afc6d41a0ba5fecbf7dacd4c1b7765b00fa76cd3e14fe957ff61e0"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x168, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xa3}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4a}]}, @NL80211_ATTR_NAN_FUNC={0x448, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7f}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2ac, 0xd, 0x0, 0x1, [{0xa0, 0x0, "79799f0e726253b319fa6e1dec5bfd7e798912ceb080c2cefbcecc9379f347e81864de49704a14952fbb8610a61f20a0f393376e98908356112c1fb2847fb83dc75e00524ce95ae8b42191db6b04a361a4aa4108bcb3e0a7aae8c7689c64df9f6c592b61ff5437057c37a8186740aa4a312d6183d15ad8405d66d098907b599b0faae8b6ccc3734bb99d9e6bebcc4d9df3ad62a50a62b527df31e9f8"}, {0x78, 0x0, "ba2a74ac69b89773860c629949de197d691dfd2d41bbbc04b0e7f5afef18d6159e708873807a3349ee4f0b6de268d7b4c31f0e46d3997dd74372734558b966dd436d032e296354b1d18d065c56796b72c22a340a82b72fedd550c465173a29f69b6723abfc41044d971630e88cde595267d86488"}, {0xa, 0x0, "66a7650dea5d"}, {0x2f, 0x0, "4dd82075f1fe9ae0dd67ff4f9fbec0e8500125d2f06baa620f910db30cada5a123c9fd358fc922b5307b89"}, {0x78, 0x0, "c01a9247e0b20a7c295fc1ad7874fdcf6aeb4d709506310f97a21ed1d1b728fe709f7e08c5ffaf2e7c5f8fe0d0048aa2ac7935d49027b414d5dbe9e82d13093e555a70aa67f975e4bda4908bae2de9ece0fbe751180b60f26b37fedb57c4cb2ba0d7837e13747950062bfefe3331b3d1cc504ec9"}, {0x17, 0x0, "f58ff452df5034ebb9bedaef6d7290387a78be"}, {0x25, 0x0, "db1bb6e35ad5f92aad9ce28c5a722828e235b14d96bbd9d0d4179196221fd35022"}, {0x70, 0x0, "fbec43809a1d2e0dc5c779d3341b18dc2afbb5dfc7ca2014299c81aca1b300e46cafec810fce8744cbfc904a13d275fbcfabc1ccad7c98186911c5ecf22a83b7cb83d1f5975c235ce2b278f4b553495679c0ccf402007d6bf8c774348cb6fd9e657aa7d84abf46247d9139e7"}, {0x29, 0x0, "5680bb82b01b27731206cf3a8ed5a5cf4f1c5322183e9c1a25038a61f443ac33cc12a348e8"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7f}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_SRF={0x158, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xf7}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}, @NL80211_ATTR_NAN_FUNC={0x258, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x248, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7f}, @NL80211_NAN_SRF_MAC_ADDRS={0x64, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x7c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xfd}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}]}, @NL80211_NAN_FUNC_SRF={0xc, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}]}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0x1538, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x230, 0xe, 0x0, 0x1, [{0x97, 0x0, "ae1702144dc2762615070743cc7d084b8de8a2ec2c6ced796630cf56b95ffea5cde80bc46af063de47421200ed57f85a922f30c4d257ffe4402c91b14c80e1ea15b674fb20da3df2630a87baba11349566faed0b9c6ebd699dcb8123872b7cfdacdb9ca595af3b4e9d1803f4c387bdcaa264686c54836fe6721854ea8736de86cc7e41dd1150f84118902277fe95bac21e09f0"}, {0xe3, 0x0, "7f5aa24f18a3ac67eee3836547ea65c0e8a04e9325d743af6d9d308ce7c5f687f000b221bab653fa4a2040c1d56dc10ec48f4f731b9ad3838ab2d49fdeff1bde003e90af33a801f1e758bd34e1084cbec2fe21b3b17d226937d1e00d60b68262622acffbbe961319e8493e8fbd9766b320d15840de6f0dd7a8ec792c19901f7be19b5dfc6f4eaaa8dec6c07b798fee7d320fd427cb480c7561612ac40057d410197cf3a88df52a41721f9f66f934ad70cb014f043dddb884b5504491380f3ae39dd677350426de3914190c2de21df73fe180739fa339d957ddec5748c2b268"}, {0xaf, 0x0, "2297c565e16efbe920a883358647f0c69cba16d61719866143a85cea3ea01d04c1394b2bd048678246c8e39d8c0ab080e5ce4d1aebb29eddb255729a557b478146a636b5663e1d5bfcff6edbc22f0ecc2813dc1fd6e9c76182164f2179530832ca789c2b978b9716d8fda325dd98aa3401c00a9c7677ed77a3e932b301c301fd7b7461fbbbf37c5c19c73698528b8d665fbd02e2f5a88ffaf517b8cfa2eb23411bdc0602d2ffdc9c990dbb"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1304, 0xe, 0x0, 0x1, [{0x72, 0x0, "27c623208924546605d8d45aa5dd8bcb7582a66f99a6650d2d0fd459fa6f70df3d5be8b606a0606f0793ccb83b71669cb8659153af3550eba41a43b30c726b21b6063999cf975d6fb0d62cfea2dea63fe9b0c2392691b0e62ad332021bf157951232cd40208dc46118f83d477ea5"}, {0xaa, 0x0, "3b819abff4c65ad715f5cfb126bd5404f1033181680e2e38ac61cbfaf68858338ceea410b3586f0b090471d819cfab71de6ce5e0f417199603069aa99d18c7d8b17b5767b29cca06c7853abb348861a22caedc228080e8c3d7ae27f880f9dc346208a91a54505627d4bf23ce98eb806422104e279805ad481cb3b74d0235696567b6267d5ef25f3edcee5f91b4a79ebb9cb5ebbc8916f91deef10d87872b5ba72b6d48e65288"}, {0x13, 0x0, "145dab82e35cf2fc098fdd28ce6b6d"}, {0xd0, 0x0, "187f1cb9c131c747713cc6121a5215e57e22732a17eb48a18a925db55032e13280c9884dca6d44d8a1750b1840086aadb1190d37aa2ddad260272d5c637734782c02ee9159c6b11c361aff035b7bd11d4db5766537966cfb5ffef32fe3cb32eb3621e8431301dbaed17185b8a9e64ed01ae6f592bbe3f80492a2ce69534715b9cc1a61a16c28e4ddb65119ddb2c224790b800e659607cfa08b4012b10b039c0aa76b0f4b692d3101cd9125c913ab1ed78f89d5a3ff969bd29dce0b748a0db6467c6390eb1056a6d2d55bf8d2"}, {0x1004, 0x0, "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"}, {0xf5, 0x0, "ad7094b172f4d90385c3a38cca71a07a48c01b9db1f10a17be1528bacba202c10075a07496bf441bce2c878e835754c98ece1a9622d6abaff3a109328a1a58a1c09570fbfd0ae33d3e28341505cbed43e65b320b7985203929ff7dacb6675f824ae27608902b58b1acd17743b2bc59e8f770af6f8bfb41164c00c96c89f099871884bd3ae9f09f595583ee8a248568677ec6d5caad9fb0bf76a07089258975278567fb0e87d7989ba3d7e2c04de9aee22c8585fb17803aac6a1b95c5c2748bf1bb816ce7ab85e9a9f9ff8b3de6564a46c3ed77ffe7000092ffed9d056f37b8b35ea8714d3cc5e13fa3a3dc7204927c348f"}]}]}]}, 0x33ec}, 0x1, 0x0, 0x0, 0x4}, 0x20008050) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r2, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) pread64(r1, &(0x7f0000000040)=""/4083, 0xff3, 0x300) 05:03:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf}}, 0x14}}, 0x0) 05:03:32 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xdb0f) 05:03:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x80000}, 0x0) 05:03:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xe8c}}, 0x0) [ 1174.372497] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1174.382884] FAULT_INJECTION: forcing a failure. [ 1174.382884] name failslab, interval 1, probability 0, space 0, times 0 05:03:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x2}, 0x0) [ 1174.385444] CPU: 0 PID: 7792 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1174.387128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1174.388970] Call Trace: [ 1174.389569] dump_stack+0x107/0x167 [ 1174.390390] should_fail.cold+0x5/0xa [ 1174.391228] ? __pmd_alloc+0x94/0x630 [ 1174.392078] should_failslab+0x5/0x20 [ 1174.392926] kmem_cache_alloc+0x5b/0x310 [ 1174.393829] __pmd_alloc+0x94/0x630 [ 1174.394636] copy_page_range+0x2bd8/0x3810 [ 1174.395580] ? lock_chain_count+0x20/0x20 [ 1174.396542] ? up_write+0x191/0x550 [ 1174.397368] ? vm_iomap_memory+0x190/0x190 [ 1174.398335] ? downgrade_write+0x3a0/0x3a0 [ 1174.399235] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1174.400355] ? __vma_link_rb+0x540/0x700 [ 1174.401218] copy_process+0x7658/0x78b0 [ 1174.402075] ? __cleanup_sighand+0xb0/0xb0 [ 1174.402957] ? lock_acquire+0x197/0x470 [ 1174.403783] ? find_held_lock+0x2c/0x110 [ 1174.404622] kernel_clone+0xe7/0x980 [ 1174.405380] ? lock_downgrade+0x6d0/0x6d0 [ 1174.406284] ? find_held_lock+0x2c/0x110 [ 1174.407186] ? create_io_thread+0xf0/0xf0 [ 1174.408106] ? ksys_write+0x12d/0x260 [ 1174.408944] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1174.410033] __do_sys_fork+0x8a/0xc0 [ 1174.410845] ? kernel_thread+0xf0/0xf0 [ 1174.411726] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1174.412736] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1174.413896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.414982] ? trace_hardirqs_on+0x5b/0x180 [ 1174.415865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.416918] do_syscall_64+0x33/0x40 [ 1174.417690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1174.418733] RIP: 0033:0x7f0161ef8b19 [ 1174.419497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1174.423499] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1174.425193] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1174.426788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1174.428371] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.429961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.431541] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:03:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xec0}}, 0x0) 05:03:32 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xe30f) [ 1174.445324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7791 comm=syz-executor.2 [ 1174.462251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 05:03:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xec0}}, 0x14}}, 0x0) 05:03:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0x8d}}, 0x14}}, 0x0) 05:03:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x8}, 0x0) 05:03:32 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xea0e) 05:03:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x33fe0}}, 0x0) 05:03:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf00}}, 0x14}}, 0x0) 05:03:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf0}}, 0x14}}, 0x0) 05:03:46 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan0\x00'}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:03:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf}, 0x0) 05:03:46 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xf70e) 05:03:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x20003854}}, 0x0) 05:03:46 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 43) [ 1188.930803] FAULT_INJECTION: forcing a failure. [ 1188.930803] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.932307] CPU: 1 PID: 7832 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1188.933158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1188.934203] Call Trace: [ 1188.934538] dump_stack+0x107/0x167 [ 1188.934995] should_fail.cold+0x5/0xa [ 1188.935481] ? create_object.isra.0+0x3a/0xa30 [ 1188.936050] should_failslab+0x5/0x20 [ 1188.936524] kmem_cache_alloc+0x5b/0x310 [ 1188.937035] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1188.937795] create_object.isra.0+0x3a/0xa30 [ 1188.938343] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1188.939122] kmem_cache_alloc+0x159/0x310 [ 1188.939798] ptlock_alloc+0x1d/0x70 [ 1188.940293] pte_alloc_one+0x68/0x1a0 [ 1188.940768] __pte_alloc+0x1d/0x330 [ 1188.941224] copy_page_range+0x1b62/0x3810 [ 1188.941765] ? lock_chain_count+0x20/0x20 [ 1188.942302] ? up_write+0x191/0x550 [ 1188.942756] ? vm_iomap_memory+0x190/0x190 [ 1188.943285] ? downgrade_write+0x3a0/0x3a0 [ 1188.943818] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1188.944497] ? __vma_link_rb+0x540/0x700 [ 1188.945018] copy_process+0x7658/0x78b0 [ 1188.945539] ? __cleanup_sighand+0xb0/0xb0 [ 1188.946080] ? lock_acquire+0x197/0x470 [ 1188.946578] ? find_held_lock+0x2c/0x110 [ 1188.947091] kernel_clone+0xe7/0x980 [ 1188.947568] ? lock_downgrade+0x6d0/0x6d0 [ 1188.948081] ? find_held_lock+0x2c/0x110 [ 1188.948584] ? create_io_thread+0xf0/0xf0 [ 1188.949110] ? ksys_write+0x12d/0x260 [ 1188.949597] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1188.950201] __do_sys_fork+0x8a/0xc0 [ 1188.950666] ? kernel_thread+0xf0/0xf0 [ 1188.951156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1188.951810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.952444] ? trace_hardirqs_on+0x5b/0x180 [ 1188.952976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1188.953620] do_syscall_64+0x33/0x40 [ 1188.954091] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1188.954731] RIP: 0033:0x7f0161ef8b19 05:03:46 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="000200000000000000", @ANYRES32=0x0, @ANYBLOB="61fe11000000000000000000"], 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001540), 0x100, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r4, r3, 0x0) r5 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r5, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r6 = openat(0xffffffffffffffff, &(0x7f0000001580)='./file0\x00', 0x8000, 0x4) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) r8 = openat$random(0xffffffffffffff9c, &(0x7f00000015c0), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001200)=[{&(0x7f00000000c0)="868af4a2e1619423e207d5c883dfc4b176f8097909fea0a3acb47ff76118325b37065ec85297ec5208f73987129962590ad7ff843488c62ab99b21f70127f9d93a078449ed66c59f275c626e4d2f9a0075dd40c9525c55b8622f", 0x5a}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="188afeab21f57d14619710a5fc543037d347189a897ed76e88eee61eee9385883ba7cdbfb6da843c536e6262eb8440b24da6adfbf89b402e62faea16b50dadb7f8d4ca09cdf4e3a887515e3a34c906e141dc88bd633764a44bf82cba938ed5a21e537d6f1360244f44f3579fb860d22fa300271c3eb4b2a65820fcc3f49cbdbbe250d5b96a070cb782321f8da6876a33a579cb8c569891c781bc8182c7b78878aa835f602bc85d", 0xa7}], 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="1c00000000e4ffff0000000017492daeb094bf460002000000034e0eaa695fdb1d6153bafcc3bf2b384fedfd3da7ac236e940ead7fbe749653cbe8c39699f649790a0aef25292d0e33ec17db794075605d2e19218d2b527bb33797190c5d20a19385da5b31b87d76f4a93196", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32], 0xf8, 0x2404c000}, 0x8010) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r9, &(0x7f0000002100)=""/4083, 0xff3, 0x300) [ 1188.955191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1188.957694] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1188.958632] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1188.959531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1188.960406] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1188.961283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1188.962168] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 [ 1188.984383] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 05:03:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x7ffff000}}, 0x0) 05:03:47 executing program 2: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) fcntl$setpipe(r0, 0x407, 0x7f) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r2 = dup2(r1, r1) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) finit_module(r2, &(0x7f0000000080)='\x00', 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r3, 0x0, 0xb8, 0x9}) pidfd_getfd(r2, r4, 0x0) eventfd2(0x7, 0x81001) pread64(r3, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:03:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf0}, 0x0) 05:03:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xec0}}, 0x14}}, 0x0) 05:03:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0xfe0d) 05:03:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0x3200}}, 0x14}}, 0x0) 05:03:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xfffffdef}}, 0x0) [ 1189.053541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1189.088474] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 05:03:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r2, r1, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r3, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000040)={0x0, 0x2, 0x1}) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:03:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xec0}, 0x0) [ 1189.112607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 05:03:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xc00e}}, 0x14}}, 0x0) 05:04:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf00}}, 0x14}}, 0x0) 05:04:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf000}}, 0x14}}, 0x0) 05:04:00 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 44) 05:04:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x2}, 0x0) 05:04:00 executing program 6: pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) 05:04:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf00}, 0x0) 05:04:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000040)={{0x0, 0xffffffff, 0x4, 0x1f, 0x80000000, 0x0, 0x36eb, 0x61, 0x7, 0x8000009, 0x6, 0x1f, 0x7f, 0x401, 0x7}}) r1 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r1) statx(r0, &(0x7f00000014c0)='./file0\x00', 0x1000, 0x4, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000001c80)=[{{&(0x7f0000001600)=@abs, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001680)=""/90, 0x5a}, {&(0x7f0000001700)=""/14, 0xe}, {&(0x7f0000001740)=""/238, 0xee}, {&(0x7f0000001840)=""/61, 0x3d}, {&(0x7f0000001880)=""/44, 0x2c}], 0x5, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}], 0x1, 0x2000, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000001d80)='pagemap\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r5 = getegid() geteuid() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pipe(&(0x7f0000001900)={0xffffffffffffffff}) fstat(r0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r9, 0x0) getresuid(&(0x7f0000001a00), &(0x7f0000001a40)=0x0, &(0x7f0000001a80)) sendmsg$unix(r0, &(0x7f0000001bc0)={&(0x7f0000001040)=@file={0x1, './file0\x00'}, 0xfffffffffffffef6, &(0x7f0000001440)=[{&(0x7f0000001e40)="02574594e13c02f6c543b1466416d0618a7304265af727bbc6760b3136eee2cd9d38210e4cdc903110fc02204e005d937aec275668ce06a9a0ebcc8eda6d54de70b7c0ceb553970de9b25f0d186245f5f1b66cd8032c4e47038db6373da0f3951b688bcf0c836e7cc09fd7ce292ac8c10fbb835e1217cdc8c114af3d5d2e135c35ba28bf8d39530940be59b792abd341b0912b35e15b55259db8f0c8529931271862d4675fb2538d0a", 0x8e}, {&(0x7f0000001180)="0f62c7f4929e58095567ad1251fd2e", 0xf}, {&(0x7f00000013c0)="d129b4567d9a68c6c9efceb49cf687f2bc093818cc1c39b60798032c763b", 0x1e}, {&(0x7f0000001200)="75c47b8019e0bc7902d7267d93d6f47b6ffb92c2efa655c5fd1adfea42245d02d85ea58ed669808017b57c74f528471663a95208aad9cab651c2e8c6826fff8840c4b38c5418ab5bc38d301c617173ae5cc5862570a2d352e5604a8466d26a4c91029aa8ea58b4ce50d6a5332bb62ba8502b67fedd6cb7373ef297233f811a74757836f1aab835fa3c8a01142574c63349b8a1a5b752123a2b79b600f1b5769711531a4b84aa39daa6d1afa0", 0xac}, {&(0x7f00000012c0)="2223d76c32125a9520389335b8e639e99291fe2ea942028a0f9a8b4835ea600ca372c5d16c159ddefa4b1885bdffc88dd8bc9ec3344b582a8e3d0090a104b64af32691d1880e29c7f1d07985db8bd6f515822dfb16411305defd4f626d56e6ae7c0e287b7dc640760f58fd9db98ef0ffdea5db6b68c2630a5adc5ef109182c7aba5c7f3f232625fb317c0a38aca3615da330d1a28080a95e06a2928a0241245c98e220e9a30af579a2b61e8e2ee6582535fff6587b439d4a5fe6f0be68cef571262ebf7f64da207e63a95e9163e58c2149da118182a31957af4825d781", 0xdd}, {&(0x7f0000001dc0)="a9aa51e6d63aeede7a6fb218036b6a08a86f4cae66e869997650fbda4174f5dbd08f390ee1c18fdc70c8889f4dd936e829feb3097c2f157ae4219626afa50e8f516097a8ce940e90647def6ab9ecaa2ec1f609d2ba1f75aaf75d910d77746ca190050ae5c6c1018f672e3195ac0a90865677950d91", 0x75}], 0x6, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {r3, r2, r5}}}, @rights={{0x0, 0x1, 0x1, [r4]}}, @rights={{0x2c, 0x1, 0x1, [r0, r6, r0, r0, r7, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, 0xee00}}}], 0xd0, 0x60084}, 0x48814) 05:04:00 executing program 2: r0 = semget$private(0x0, 0x1, 0x500) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r2, r3, 0x1000) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/16, 0x10}, {&(0x7f00000001c0)=""/250, 0xfa}], 0x2}}, {{&(0x7f0000000300), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000440)=""/33, 0x21}], 0x2, &(0x7f00000004c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f00000005c0)=""/94, 0x5e}, {&(0x7f0000000640)=""/212, 0xd4}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x3, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000017c0)=""/55, 0x37}, {&(0x7f0000001800)=""/57, 0x39}], 0x2, &(0x7f0000001880)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}], 0x4, 0x1, &(0x7f0000001ac0)={0x77359400}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001b00), 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001b80)=""/191, 0xbf}, {&(0x7f0000001c40)=""/94, 0x5e}, {&(0x7f0000001cc0)=""/15, 0xf}, {&(0x7f0000001d00)}], 0x4, &(0x7f0000001d80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x58}, 0x4062) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000001e40)={{0x3, r1, r3, r4, r5, 0x1, 0x4}, 0x3, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x7ff}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r7 = open(&(0x7f0000002080)='./file1\x00', 0x840, 0x100) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r8, 0x0) fchownat(r7, &(0x7f00000020c0)='./file0\x00', r8, r5, 0x800) mount$9p_rdma(&(0x7f0000001d00), &(0x7f0000001ec0)='./file1\x00', &(0x7f0000001f00), 0x22a823, &(0x7f0000001f40)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x6}}, {@rq={'rq', 0x3d, 0xfff}}, {@sq={'sq', 0x3d, 0x81}}, {@rq={'rq', 0x3d, 0x6}}, {@rq={'rq', 0x3d, 0x4}}, {@timeout={'timeout', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x8}}], [{@subj_user={'subj_user', 0x3d, 'net/protocols\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '-'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x35, 0x0, 0x33, 0x35, 0x64, 0x33, 0x36], 0x2d, [0x63, 0x36, 0x31, 0x37], 0x2d, [0x35, 0x65, 0x34, 0x32], 0x2d, [0x30, 0x31, 0x38, 0x33], 0x2d, [0x39, 0x65, 0x65, 0x37, 0x30, 0x36, 0x34, 0x33]}}}, {@permit_directio}]}}) pread64(r6, &(0x7f0000002100)=""/4083, 0xff3, 0x300) [ 1202.807804] FAULT_INJECTION: forcing a failure. [ 1202.807804] name failslab, interval 1, probability 0, space 0, times 0 [ 1202.810263] CPU: 1 PID: 7871 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1202.811698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1202.813439] Call Trace: [ 1202.814017] dump_stack+0x107/0x167 [ 1202.814779] should_fail.cold+0x5/0xa [ 1202.815571] ? vm_area_dup+0x78/0x290 [ 1202.816368] should_failslab+0x5/0x20 [ 1202.817166] kmem_cache_alloc+0x5b/0x310 [ 1202.818032] ? lock_downgrade+0x6d0/0x6d0 [ 1202.818905] vm_area_dup+0x78/0x290 [ 1202.819681] ? _cond_resched+0x10/0x30 [ 1202.820500] ? copy_page_range+0x24e9/0x3810 [ 1202.821461] ? vm_area_alloc+0x110/0x110 [ 1202.822325] ? up_write+0x191/0x550 [ 1202.823093] ? vm_iomap_memory+0x190/0x190 [ 1202.823981] ? downgrade_write+0x3a0/0x3a0 [ 1202.824873] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1202.826047] ? __vma_link_rb+0x540/0x700 [ 1202.826909] copy_process+0x298b/0x78b0 [ 1202.827777] ? __cleanup_sighand+0xb0/0xb0 [ 1202.828680] ? lock_acquire+0x197/0x470 [ 1202.829535] ? find_held_lock+0x2c/0x110 [ 1202.830391] kernel_clone+0xe7/0x980 [ 1202.831167] ? lock_downgrade+0x6d0/0x6d0 [ 1202.832031] ? find_held_lock+0x2c/0x110 [ 1202.832881] ? create_io_thread+0xf0/0xf0 [ 1202.833770] ? ksys_write+0x12d/0x260 [ 1202.834583] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1202.835631] __do_sys_fork+0x8a/0xc0 [ 1202.836402] ? kernel_thread+0xf0/0xf0 [ 1202.837250] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1202.838368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1202.839464] ? trace_hardirqs_on+0x5b/0x180 [ 1202.840363] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1202.841491] do_syscall_64+0x33/0x40 [ 1202.842308] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1202.843404] RIP: 0033:0x7f0161ef8b19 [ 1202.844199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1202.848092] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1202.849677] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1202.851188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1202.852681] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1202.854184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1202.855670] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:04:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0x8d00}}, 0x14}}, 0x0) 05:04:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x7f, 0x5, 0x1, 0x0, 0xe816, 0x10000, 0xda3b86e2d215eb8a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2043d994, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x100, 0x80000000, 0x800, 0x3, 0x1f, 0xffff, 0xffff, 0x0, 0x2, 0x0, 0x2e}, 0x0, 0xb, 0xffffffffffffffff, 0x1) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:04:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffc0}}, './file0\x00'}) pread64(r1, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:04:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xffff}}, 0x14}}, 0x0) 05:04:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x3}, 0x0) 05:04:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xc00e}, 0x0) 05:04:01 executing program 2: r0 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r0) r1 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='uid_map\x00') pread64(r3, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:04:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xc00e}}, 0x14}}, 0x0) 05:04:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xf}}, 0x0) 05:04:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x6}, 0x0) 05:04:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x15}}, 0x0) 05:04:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000001040)=""/4093, 0xffd, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) write$cgroup_pressure(r1, &(0x7f0000000040)={'some', 0x20, 0xf1, 0x20, 0x4}, 0x2f) 05:04:14 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000600)={0x7, 0x80, 0x10, 0xff, 0x1, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r2, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r5}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x2ff, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe85, 0x62}}}}, [@NL80211_ATTR_IE={0x78, 0x2a, [@dsss={0x3, 0x1, 0x2c}, @cf={0x4, 0x6, {0x7, 0x80, 0x827, 0x8c54}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x1f, 0x0, @device_a, 0x0, 0x4, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @random={0x4b, 0x23, "e0766f550cb306e9389fe647e37f9235a9b402bc734a934e698e15bf7c3d05917d6f9b"}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0xf8, 0x25, 0x1, 0x3}}, @peer_mgmt={0x75, 0x18, {0x1, 0xd88, @val=0x80d0, @val=0x41, @val="da5ee8960e829663eb6aca3fdc875973"}}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}]}, 0xd0}}, 0x4040050) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r7, &(0x7f0000002100)=""/4083, 0xff3, 0x2fe) 05:04:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf000}, 0x0) 05:04:14 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 45) 05:04:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xf000}}, 0x14}}, 0x0) 05:04:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) readv(r1, &(0x7f0000001280)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/130, 0x82}, {&(0x7f0000001140)=""/146, 0x92}, {&(0x7f0000001200)=""/34, 0x22}, {&(0x7f0000001240)=""/52, 0x34}], 0x5) 05:04:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x8}, 0x0) [ 1216.792607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1216.799894] FAULT_INJECTION: forcing a failure. [ 1216.799894] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.802386] CPU: 0 PID: 8032 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1216.803791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1216.805482] Call Trace: [ 1216.806046] dump_stack+0x107/0x167 [ 1216.806790] should_fail.cold+0x5/0xa [ 1216.807568] ? create_object.isra.0+0x3a/0xa30 [ 1216.808500] should_failslab+0x5/0x20 [ 1216.809278] kmem_cache_alloc+0x5b/0x310 [ 1216.810116] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1216.811365] create_object.isra.0+0x3a/0xa30 [ 1216.812259] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1216.813310] kmem_cache_alloc+0x159/0x310 [ 1216.814171] ptlock_alloc+0x1d/0x70 [ 1216.814910] pte_alloc_one+0x68/0x1a0 [ 1216.815698] __pte_alloc+0x1d/0x330 [ 1216.816443] copy_page_range+0x1b62/0x3810 [ 1216.817323] ? lock_chain_count+0x20/0x20 [ 1216.818219] ? up_write+0x191/0x550 [ 1216.818967] ? vm_iomap_memory+0x190/0x190 [ 1216.819834] ? downgrade_write+0x3a0/0x3a0 [ 1216.820708] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1216.821807] ? __vma_link_rb+0x540/0x700 [ 1216.822677] copy_process+0x7658/0x78b0 [ 1216.823511] ? __cleanup_sighand+0xb0/0xb0 [ 1216.824416] ? lock_acquire+0x197/0x470 [ 1216.825256] ? find_held_lock+0x2c/0x110 [ 1216.826113] kernel_clone+0xe7/0x980 [ 1216.826885] ? lock_downgrade+0x6d0/0x6d0 [ 1216.827740] ? find_held_lock+0x2c/0x110 [ 1216.828585] ? create_io_thread+0xf0/0xf0 [ 1216.829449] ? ksys_write+0x12d/0x260 [ 1216.830258] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1216.831265] __do_sys_fork+0x8a/0xc0 [ 1216.832033] ? kernel_thread+0xf0/0xf0 [ 1216.832858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1216.833955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1216.835039] ? trace_hardirqs_on+0x5b/0x180 [ 1216.835924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1216.836986] do_syscall_64+0x33/0x40 [ 1216.837752] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1216.838808] RIP: 0033:0x7f0161ef8b19 [ 1216.839568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1216.843341] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1216.844890] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1216.846359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1216.847814] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1216.849269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1216.850733] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:04:27 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 46) 05:04:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x80000}, 0x0) 05:04:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x300}, 0x0) 05:04:27 executing program 4: r0 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/protocols\x00') pread64(r1, &(0x7f0000002100)=""/4083, 0xff3, 0x300) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x2, 0x4, 0x7, 0x300000000000000, r0}) 05:04:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xc0}}, 0x0) 05:04:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:04:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6, 0x0, 0xffff}}, 0x14}}, 0x0) 05:04:27 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x18000, 0x80) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r5, r4, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1229.328833] FAULT_INJECTION: forcing a failure. [ 1229.328833] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.330327] CPU: 0 PID: 8148 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1229.331190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1229.332229] Call Trace: [ 1229.332563] dump_stack+0x107/0x167 [ 1229.333020] should_fail.cold+0x5/0xa [ 1229.333495] ? vm_area_dup+0x78/0x290 [ 1229.333970] should_failslab+0x5/0x20 [ 1229.334449] kmem_cache_alloc+0x5b/0x310 [ 1229.334955] vm_area_dup+0x78/0x290 [ 1229.335418] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1229.335997] ? lock_downgrade+0x6d0/0x6d0 [ 1229.336490] ? _cond_resched+0x10/0x30 [ 1229.336970] ? copy_page_range+0x24e9/0x3810 [ 1229.337519] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1229.338106] ? avc_has_extended_perms+0xf40/0xf40 [ 1229.338710] ? vm_area_alloc+0x110/0x110 [ 1229.339216] ? selinux_vm_enough_memory+0x114/0x180 [ 1229.339835] ? selinux_sb_statfs+0x250/0x250 [ 1229.340376] ? up_write+0x191/0x550 [ 1229.340826] ? percpu_counter_add_batch+0x8b/0x140 [ 1229.341433] ? __vm_enough_memory+0x184/0x360 [ 1229.341984] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1229.342635] copy_process+0x298b/0x78b0 [ 1229.343143] ? __cleanup_sighand+0xb0/0xb0 [ 1229.343672] ? lock_acquire+0x197/0x470 [ 1229.344175] ? find_held_lock+0x2c/0x110 [ 1229.344679] kernel_clone+0xe7/0x980 [ 1229.345146] ? lock_downgrade+0x6d0/0x6d0 [ 1229.345661] ? find_held_lock+0x2c/0x110 [ 1229.346166] ? create_io_thread+0xf0/0xf0 [ 1229.346681] ? ksys_write+0x12d/0x260 [ 1229.347160] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1229.347761] __do_sys_fork+0x8a/0xc0 [ 1229.348208] ? kernel_thread+0xf0/0xf0 [ 1229.348698] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1229.349317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1229.349956] ? trace_hardirqs_on+0x5b/0x180 [ 1229.350477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1229.351084] do_syscall_64+0x33/0x40 [ 1229.351552] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1229.352157] RIP: 0033:0x7f0161ef8b19 [ 1229.352595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1229.354758] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1229.355704] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1229.356577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1229.357455] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1229.358333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1229.359207] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:04:27 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 47) 05:04:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xe}}, 0x0) [ 1229.396661] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1229.417004] FAULT_INJECTION: forcing a failure. [ 1229.417004] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.418338] CPU: 0 PID: 8172 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1229.419117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1229.420110] Call Trace: [ 1229.420432] dump_stack+0x107/0x167 [ 1229.420869] should_fail.cold+0x5/0xa [ 1229.421334] ? create_object.isra.0+0x3a/0xa30 [ 1229.421883] should_failslab+0x5/0x20 [ 1229.422352] kmem_cache_alloc+0x5b/0x310 [ 1229.422842] create_object.isra.0+0x3a/0xa30 [ 1229.423374] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1229.423986] kmem_cache_alloc+0x159/0x310 [ 1229.424499] vm_area_dup+0x78/0x290 [ 1229.424941] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1229.425500] ? lock_downgrade+0x6d0/0x6d0 [ 1229.425994] ? _cond_resched+0x10/0x30 [ 1229.426471] ? copy_page_range+0x24e9/0x3810 [ 1229.427008] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1229.427573] ? avc_has_extended_perms+0xf40/0xf40 [ 1229.428155] ? vm_area_alloc+0x110/0x110 [ 1229.428648] ? selinux_vm_enough_memory+0x114/0x180 [ 1229.429258] ? selinux_sb_statfs+0x250/0x250 [ 1229.429782] ? up_write+0x191/0x550 [ 1229.430213] ? percpu_counter_add_batch+0x8b/0x140 [ 1229.430810] ? __vm_enough_memory+0x184/0x360 [ 1229.431349] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1229.431971] copy_process+0x298b/0x78b0 [ 1229.432461] ? __cleanup_sighand+0xb0/0xb0 [ 1229.432973] ? lock_acquire+0x197/0x470 [ 1229.433449] ? find_held_lock+0x2c/0x110 [ 1229.433938] kernel_clone+0xe7/0x980 [ 1229.434366] ? lock_downgrade+0x6d0/0x6d0 [ 1229.434859] ? find_held_lock+0x2c/0x110 [ 1229.435340] ? create_io_thread+0xf0/0xf0 [ 1229.435835] ? ksys_write+0x12d/0x260 [ 1229.436290] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1229.436870] __do_sys_fork+0x8a/0xc0 [ 1229.437311] ? kernel_thread+0xf0/0xf0 [ 1229.437782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1229.438413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1229.439025] ? trace_hardirqs_on+0x5b/0x180 [ 1229.439540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1229.440154] do_syscall_64+0x33/0x40 [ 1229.440596] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1229.441207] RIP: 0033:0x7f0161ef8b19 [ 1229.441650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1229.443844] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1229.444709] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1229.445518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1229.446335] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1229.447144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1229.447953] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:04:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf0ffff}, 0x0) 05:04:27 executing program 4: r0 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r0) r1 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r1) r2 = syz_open_procfs(r1, &(0x7f0000000000)='wchan\x00') pread64(r2, &(0x7f0000002100)=""/4083, 0xff3, 0x300) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x7ff, 0x100000001, 0x1}) 05:04:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xf}}, 0x0) 05:04:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x2}, 0x0) 05:04:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xe8c}}, 0x0) 05:04:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xc0}}, 0x0) 05:04:27 executing program 2: r0 = fork() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/dev_mcast\x00') r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) r4 = accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2000, @fd=r4, 0x6, 0x0, 0x0, 0x2, 0x1, {0x3, r2}}, 0x5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x501000) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r6, r5, 0x0) r7 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r7, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) pread64(r6, &(0x7f00000007c0)=""/4071, 0xfe7, 0x305) 05:04:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000080)={0x7, 'veth1_to_bond\x00', {0x8000}, 0x1000}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40000000}) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0x20, 0xc22, 0x0, 0xfffffffc, {0xff}}, 0x14}}, 0x0) close_range(r3, r2, 0x0) r4 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r4) r5 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x80, 0x1, 0x5, 0x4, 0x0, 0x1, 0x200, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x8600, 0xfffffffffffffeff, 0x5, 0x6, 0x7, 0x4, 0x2, 0x0, 0x7ff}, r4, 0xa, r5, 0x2) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x91) 05:04:27 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 48) 05:04:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x8}, 0x0) 05:04:27 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) r2 = syz_open_dev$vcsn(&(0x7f0000001100), 0x9c9, 0x109000) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x7, 0x6}, {0x4, 0xffff}]}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000001080)="38a7775521f60400d89de979c90fd04cacf895f28a67a21debf5e3f82e9a93a2b43bdda2d9ad3719741c7460f6bd147b8a5a1cb87a92a5108f3841514fc6cb610bb80a2b8455e9048f753c6151c133d8ba5fb501642bd59d4f1967", 0x5b) pread64(r0, &(0x7f0000000040)=""/4087, 0xff7, 0x7) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = dup2(r0, r1) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000001040)={0xf98, 0x7fff, 0x0, 0x3ff}) [ 1229.597745] FAULT_INJECTION: forcing a failure. [ 1229.597745] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1229.599075] CPU: 0 PID: 8286 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1229.599805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1229.600704] Call Trace: [ 1229.601010] dump_stack+0x107/0x167 [ 1229.601424] should_fail.cold+0x5/0xa [ 1229.601859] __alloc_pages_nodemask+0x182/0x600 [ 1229.602402] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1229.603099] alloc_pages_current+0x187/0x280 [ 1229.603602] allocate_slab+0x26f/0x380 [ 1229.604049] ___slab_alloc+0x470/0x700 [ 1229.604494] ? vm_area_dup+0x78/0x290 [ 1229.604933] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1229.605528] ? obj_cgroup_charge+0xc6/0x490 [ 1229.605993] ? trace_hardirqs_on+0x5b/0x180 [ 1229.606496] ? vm_area_dup+0x78/0x290 [ 1229.606931] ? kmem_cache_alloc+0x301/0x310 [ 1229.607418] ? vm_area_dup+0x78/0x290 [ 1229.607850] kmem_cache_alloc+0x301/0x310 [ 1229.608325] vm_area_dup+0x78/0x290 [ 1229.608742] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1229.609271] ? lock_downgrade+0x6d0/0x6d0 [ 1229.609742] ? _cond_resched+0x10/0x30 [ 1229.610195] ? copy_page_range+0x24e9/0x3810 [ 1229.610700] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1229.611233] ? avc_has_extended_perms+0xf40/0xf40 [ 1229.611784] ? vm_area_alloc+0x110/0x110 [ 1229.612254] ? selinux_vm_enough_memory+0x114/0x180 [ 1229.612819] ? selinux_sb_statfs+0x250/0x250 [ 1229.613318] ? up_write+0x191/0x550 [ 1229.613733] ? percpu_counter_add_batch+0x8b/0x140 [ 1229.614278] ? __vm_enough_memory+0x184/0x360 [ 1229.614788] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1229.615377] copy_process+0x298b/0x78b0 [ 1229.615823] ? __cleanup_sighand+0xb0/0xb0 [ 1229.616312] ? lock_acquire+0x197/0x470 [ 1229.616749] ? find_held_lock+0x2c/0x110 [ 1229.617214] kernel_clone+0xe7/0x980 [ 1229.617641] ? lock_downgrade+0x6d0/0x6d0 [ 1229.618122] ? find_held_lock+0x2c/0x110 [ 1229.618582] ? create_io_thread+0xf0/0xf0 [ 1229.619062] ? ksys_write+0x12d/0x260 [ 1229.619498] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1229.620049] __do_sys_fork+0x8a/0xc0 [ 1229.620471] ? kernel_thread+0xf0/0xf0 [ 1229.620922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1229.621521] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1229.622115] ? trace_hardirqs_on+0x5b/0x180 [ 1229.622586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1229.623170] do_syscall_64+0x33/0x40 [ 1229.623595] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1229.624180] RIP: 0033:0x7f0161ef8b19 [ 1229.624602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1229.626697] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1229.627561] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1229.628368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1229.629186] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1229.629996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1229.630815] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:04:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x1000000}, 0x0) [ 1229.643159] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 05:04:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xec0}}, 0x0) 05:04:40 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) 05:04:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xe90}}, 0x0) 05:04:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x2000000}, 0x0) 05:04:40 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 49) 05:04:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf}, 0x0) 05:04:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x94, 0x5, 0x3, 0x5, 0x0, 0x5, 0x2204, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x40, 0x8, 0x90, 0x5, 0x101, 0x8, 0x101, 0x0, 0xffffffff, 0x0, 0x800}, 0xffffffffffffffff, 0x6, r0, 0x3) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:04:40 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = eventfd2(0x7bd7, 0x80000) pread64(r2, &(0x7f0000000080)=""/232, 0xe8, 0x5) pread64(r1, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:04:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x33fe0}}, 0x0) [ 1242.818723] FAULT_INJECTION: forcing a failure. [ 1242.818723] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.821194] CPU: 0 PID: 8419 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1242.822672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1242.824434] Call Trace: [ 1242.824995] dump_stack+0x107/0x167 [ 1242.825768] should_fail.cold+0x5/0xa [ 1242.826582] ? create_object.isra.0+0x3a/0xa30 [ 1242.827553] should_failslab+0x5/0x20 [ 1242.828351] kmem_cache_alloc+0x5b/0x310 [ 1242.829215] create_object.isra.0+0x3a/0xa30 [ 1242.830136] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1242.831229] kmem_cache_alloc+0x159/0x310 [ 1242.832095] anon_vma_clone+0xdc/0x590 [ 1242.832929] anon_vma_fork+0x82/0x640 [ 1242.833722] ? __vm_enough_memory+0x184/0x360 [ 1242.834681] copy_process+0x72cd/0x78b0 [ 1242.835551] ? __cleanup_sighand+0xb0/0xb0 [ 1242.836444] ? lock_acquire+0x197/0x470 [ 1242.837286] ? find_held_lock+0x2c/0x110 [ 1242.838139] kernel_clone+0xe7/0x980 [ 1242.838907] ? lock_downgrade+0x6d0/0x6d0 [ 1242.839768] ? find_held_lock+0x2c/0x110 [ 1242.840627] ? create_io_thread+0xf0/0xf0 [ 1242.841500] ? ksys_write+0x12d/0x260 [ 1242.842328] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1242.843359] __do_sys_fork+0x8a/0xc0 [ 1242.844147] ? kernel_thread+0xf0/0xf0 [ 1242.844994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1242.846113] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1242.847207] ? trace_hardirqs_on+0x5b/0x180 [ 1242.848126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1242.849213] do_syscall_64+0x33/0x40 [ 1242.850002] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1242.851094] RIP: 0033:0x7f0161ef8b19 [ 1242.851885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1242.855795] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1242.857402] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1242.858918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1242.860424] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1242.861929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1242.863439] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:04:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x8b}, 0x0) 05:04:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x20003854}}, 0x0) 05:04:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xec0}}, 0x0) 05:04:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') ioctl$CDROMEJECT(r0, 0x5309) readv(r0, &(0x7f0000001580)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/233, 0xe9}, {&(0x7f0000001140)=""/173, 0xad}, {&(0x7f0000001200)=""/26, 0x1a}, {&(0x7f0000001240)=""/98, 0x62}, {&(0x7f00000012c0)=""/130, 0x82}, {&(0x7f0000001380)=""/199, 0xc7}, {&(0x7f0000001480)=""/247, 0xf7}], 0x8) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:04:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x2fe) 05:04:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf000000}, 0x0) 05:04:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf0}, 0x0) 05:04:55 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 50) 05:04:55 executing program 2: r0 = fork() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioprio_get$pid(0x1, r1) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='statm\x00') io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x3) pread64(r2, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:04:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002040)=""/4099, 0x1003, 0x300) 05:04:55 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x8000) syz_io_uring_setup(0x210f, &(0x7f0000000080)={0x0, 0xfc6f, 0x1, 0x2, 0x1e1, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 05:04:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x7ffff000}}, 0x0) 05:04:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x33fe0}}, 0x0) 05:04:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x9effffff}, 0x0) [ 1257.352317] FAULT_INJECTION: forcing a failure. [ 1257.352317] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.354815] CPU: 0 PID: 8552 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1257.356215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.357922] Call Trace: [ 1257.358484] dump_stack+0x107/0x167 [ 1257.359237] should_fail.cold+0x5/0xa [ 1257.360041] ? anon_vma_clone+0xdc/0x590 [ 1257.360869] should_failslab+0x5/0x20 [ 1257.361649] kmem_cache_alloc+0x5b/0x310 [ 1257.362500] anon_vma_clone+0xdc/0x590 [ 1257.363317] anon_vma_fork+0x82/0x640 [ 1257.364090] ? __vm_enough_memory+0x184/0x360 [ 1257.365027] copy_process+0x72cd/0x78b0 [ 1257.365873] ? __cleanup_sighand+0xb0/0xb0 [ 1257.366772] ? lock_acquire+0x197/0x470 [ 1257.367629] ? find_held_lock+0x2c/0x110 [ 1257.368520] kernel_clone+0xe7/0x980 [ 1257.369290] ? lock_downgrade+0x6d0/0x6d0 [ 1257.370152] ? find_held_lock+0x2c/0x110 [ 1257.371004] ? create_io_thread+0xf0/0xf0 [ 1257.371859] ? ksys_write+0x12d/0x260 [ 1257.372643] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1257.373654] __do_sys_fork+0x8a/0xc0 [ 1257.374431] ? kernel_thread+0xf0/0xf0 [ 1257.375247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1257.376321] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1257.377447] ? trace_hardirqs_on+0x5b/0x180 [ 1257.378580] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1257.379900] do_syscall_64+0x33/0x40 [ 1257.380812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1257.381992] RIP: 0033:0x7f0161ef8b19 [ 1257.382787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1257.386739] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1257.388326] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1257.389808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1257.391306] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1257.392787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1257.394258] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:04:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xc00e0000}, 0x0) 05:04:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xfffffdef}}, 0x0) 05:04:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x20003854}}, 0x0) 05:04:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x2}, 0x0) 05:04:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xec0}, 0x0) 05:04:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000040)=""/47, &(0x7f0000000080)=0x2f) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:05:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x7ffff000}}, 0x0) 05:05:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf00}, 0x0) 05:05:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x3}, 0x0) 05:05:10 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 51) 05:05:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf0ffffff}, 0x0) 05:05:10 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x30000, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r1, &(0x7f0000002100)=""/4076, 0x1026, 0x300) 05:05:10 executing program 4: fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/protocols\x00') pread64(r1, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) fcntl$dupfd(r1, 0x406, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file0\x00'}) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r4, r5, 0x1000) fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x4}, [{0x2, 0x2, r3}, {0x2, 0x4, 0xee00}, {0x2, 0x2, 0xee01}, {0x2, 0x0, 0xee01}, {0x2, 0x1, 0xee01}, {0x2, 0x1, 0xee00}, {0x2, 0x0, 0xffffffffffffffff}], {0x4, 0x5}, [{0x8, 0x2}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x1}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x1, 0xee00}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x1, 0xee00}, {0x8, 0x5, r5}], {0x10, 0x8}, {0x20, 0x7}}, 0x9c, 0x2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x1) 05:05:10 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000052ec0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "9755154351ac9a"}) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x23a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000052ec0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {r10}, {}, {}, {}, {0x0, r9}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {r7}], 0x4, "9755154351ac9a"}) r11 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x23a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000052ec0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c009b39830e4109622d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42c9254e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab695fa4726664c00ec9aa53b8c092760da4cd088f03fad6504eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46ec35180a8fcb898160855b5044023da75f2b1f285c1462a8afa95492a14be3f42052ff535612d226506a0", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r16}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {0x0, r16}, {0x0, r17}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {r14}, {}, {}, {}, {r18}, {}, {}, {}, {0x0, r17}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {r15}, {0x0, r16}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {r15}], 0x4, "9755154351ac9a"}) [ 1272.136603] FAULT_INJECTION: forcing a failure. [ 1272.136603] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.139154] CPU: 1 PID: 8693 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1272.140554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1272.142268] Call Trace: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000004da80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004ea80)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004ec80)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "2eecb9dfa4910c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004fc80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r5}, {}, {r6, r12}, {r14, r19}, {r20, r22}], 0x81, "f51077bf0a8fd6"}) r23 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r23, &(0x7f0000002100)=""/4083, 0xff3, 0x300) [ 1272.142837] dump_stack+0x107/0x167 [ 1272.143755] should_fail.cold+0x5/0xa [ 1272.144543] ? create_object.isra.0+0x3a/0xa30 [ 1272.145476] should_failslab+0x5/0x20 [ 1272.146263] kmem_cache_alloc+0x5b/0x310 [ 1272.147108] create_object.isra.0+0x3a/0xa30 [ 1272.148010] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1272.149043] kmem_cache_alloc+0x159/0x310 [ 1272.149905] anon_vma_fork+0xf1/0x640 [ 1272.150699] ? __vm_enough_memory+0x184/0x360 [ 1272.151613] copy_process+0x72cd/0x78b0 [ 1272.152461] ? __cleanup_sighand+0xb0/0xb0 [ 1272.153374] ? lock_acquire+0x197/0x470 [ 1272.154201] ? find_held_lock+0x2c/0x110 [ 1272.155046] kernel_clone+0xe7/0x980 [ 1272.155809] ? lock_downgrade+0x6d0/0x6d0 [ 1272.156669] ? find_held_lock+0x2c/0x110 [ 1272.157504] ? create_io_thread+0xf0/0xf0 [ 1272.158345] ? ksys_write+0x12d/0x260 [ 1272.159129] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1272.160117] __do_sys_fork+0x8a/0xc0 [ 1272.160870] ? kernel_thread+0xf0/0xf0 [ 1272.161691] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1272.162803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1272.163856] ? trace_hardirqs_on+0x5b/0x180 [ 1272.164734] ? syscall_enter_from_user_mode+0x1d/0x50 05:05:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x8b00}, 0x0) [ 1272.165800] do_syscall_64+0x33/0x40 [ 1272.166676] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1272.167747] RIP: 0033:0x7f0161ef8b19 [ 1272.168532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1272.172398] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1272.174012] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1272.175511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1272.177008] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1272.178489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1272.180004] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:05:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xfffff000}, 0x0) 05:05:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x6}, 0x0) 05:05:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0xfffffdef}}, 0x0) 05:05:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xffffff7f}, 0x0) 05:05:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r1 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r1) syz_open_procfs(r1, &(0x7f0000000040)='attr/prev\x00') 05:05:10 executing program 2: mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x50402, &(0x7f00000000c0)={[{@memory_localevents}], [{@subj_user={'subj_user', 0x3d, 'net/ip6_tables_targets\x00'}}, {@obj_user={'obj_user', 0x3d, ']o[[\xd8,*'}}, {@dont_hash}, {@hash}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') setxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="0406cd6d84f5"], 0x6, 0x3) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:05:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x8}, 0x0) 05:05:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xc00e}, 0x0) 05:05:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x6}, 0x0) 05:05:10 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 52) [ 1272.526625] FAULT_INJECTION: forcing a failure. [ 1272.526625] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.529677] CPU: 1 PID: 8911 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1272.531492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1272.533573] Call Trace: [ 1272.534133] dump_stack+0x107/0x167 [ 1272.534932] should_fail.cold+0x5/0xa [ 1272.535749] ? anon_vma_fork+0xf1/0x640 [ 1272.536618] should_failslab+0x5/0x20 [ 1272.537422] kmem_cache_alloc+0x5b/0x310 [ 1272.538287] anon_vma_fork+0xf1/0x640 [ 1272.539121] ? __vm_enough_memory+0x184/0x360 [ 1272.540088] copy_process+0x72cd/0x78b0 [ 1272.540980] ? __cleanup_sighand+0xb0/0xb0 [ 1272.541886] ? lock_acquire+0x197/0x470 [ 1272.542768] ? find_held_lock+0x2c/0x110 [ 1272.543656] kernel_clone+0xe7/0x980 [ 1272.544452] ? lock_downgrade+0x6d0/0x6d0 [ 1272.545333] ? find_held_lock+0x2c/0x110 [ 1272.546176] ? create_io_thread+0xf0/0xf0 [ 1272.547080] ? ksys_write+0x12d/0x260 [ 1272.547894] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1272.548944] __do_sys_fork+0x8a/0xc0 [ 1272.549735] ? kernel_thread+0xf0/0xf0 [ 1272.550599] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1272.551710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1272.552802] ? trace_hardirqs_on+0x5b/0x180 [ 1272.553716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1272.554816] do_syscall_64+0x33/0x40 [ 1272.555608] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1272.556701] RIP: 0033:0x7f0161ef8b19 [ 1272.557487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1272.561438] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1272.563083] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1272.564625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1272.566139] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1272.567692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1272.569234] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:05:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xffffff9e}, 0x0) 05:05:24 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 53) 05:05:24 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x2, 0x3, 0x5, 0x8, 0xffffffffffffffff}) 05:05:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf000}, 0x0) 05:05:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x3, 0xff, 0xffffffff, 0xc000, 0x7}) 05:05:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x300}, 0x0) 05:05:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x8}, 0x0) 05:05:24 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/protocols\x00') pread64(r1, &(0x7f0000002100)=""/4083, 0xff3, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000052640)={0x0, ""/256, 0x0, 0x0}) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x23a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000052ec0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x4, "9755154351ac9a"}) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x23a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000052ec0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "9755154351ac9a"}) r10 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x23a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052ec0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {0x0, r14}, {0x0, r15}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r12}, {}, {}, {}, {r16}, {}, {}, {}, {0x0, r15}, {0x0}, {}, {r16}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {r13}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {r13}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000052840)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "f40cbef68f8ac1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000080)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053a40)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r6}, {0x0, r8}, {0x0, r11}, {r12, r18}], 0x5, "f364c5c214a679"}) [ 1286.833120] FAULT_INJECTION: forcing a failure. [ 1286.833120] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.835547] CPU: 0 PID: 8946 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1286.836976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1286.838732] Call Trace: [ 1286.839289] dump_stack+0x107/0x167 [ 1286.840058] should_fail.cold+0x5/0xa [ 1286.840857] ? create_object.isra.0+0x3a/0xa30 [ 1286.841821] should_failslab+0x5/0x20 [ 1286.842618] kmem_cache_alloc+0x5b/0x310 [ 1286.843483] create_object.isra.0+0x3a/0xa30 [ 1286.844408] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1286.845476] kmem_cache_alloc+0x159/0x310 [ 1286.846355] anon_vma_fork+0x1ff/0x640 [ 1286.847184] copy_process+0x72cd/0x78b0 [ 1286.848055] ? __cleanup_sighand+0xb0/0xb0 [ 1286.848955] ? lock_acquire+0x197/0x470 [ 1286.849800] ? find_held_lock+0x2c/0x110 [ 1286.850656] kernel_clone+0xe7/0x980 [ 1286.851443] ? lock_downgrade+0x6d0/0x6d0 [ 1286.852308] ? find_held_lock+0x2c/0x110 [ 1286.853160] ? create_io_thread+0xf0/0xf0 [ 1286.854047] ? ksys_write+0x12d/0x260 [ 1286.854861] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1286.855873] __do_sys_fork+0x8a/0xc0 [ 1286.856651] ? kernel_thread+0xf0/0xf0 [ 1286.857479] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1286.858573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1286.859653] ? trace_hardirqs_on+0x5b/0x180 [ 1286.860560] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1286.861639] do_syscall_64+0x33/0x40 [ 1286.862435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1286.863519] RIP: 0033:0x7f0161ef8b19 [ 1286.864298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1286.868144] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1286.869734] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1286.871225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1286.872709] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.874191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1286.875692] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:05:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x2}, 0x0) 05:05:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x300}, 0x0) 05:05:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xfffffff0}, 0x0) 05:05:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x80000}, 0x0) 05:05:24 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x12400, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r1, &(0x7f0000001180)=""/4102, 0x1006, 0x300) r2 = openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0xbd, 0x10}, 0x18) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000140)=0x28) 05:05:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r1 = gettid() ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x41, 0x8, 0x70bd2c, 0x25dfdbfd, {0x8}, [@nested={0x14, 0x4, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x96, 0x0, 0x0, @fd=r2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x8000) 05:05:25 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 54) 05:05:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf0ffff}, 0x0) 05:05:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x8000000000000}, 0x0) 05:05:25 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/class/drm', 0x400000, 0x110) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x4}]}, 0x24}}, 0x4000048) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="aeaecbe2", @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="1400038004000500080002000000000004000400"], 0x34}}, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000840)=""/111, 0x6f, 0x40, &(0x7f00000008c0)={0x11, 0x1, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r4, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') r6 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r6) r7 = gettid() r8 = getpgrp(0xffffffffffffffff) r9 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r9) r10 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) clone3(&(0x7f0000001f00)={0x21300, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0x9}, &(0x7f0000000600)=""/73, 0x49, &(0x7f0000000680)=""/71, &(0x7f0000001ec0)=[r6, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, r7, r8, 0xffffffffffffffff, 0xffffffffffffffff, r9], 0xa, {r10}}, 0x58) ioctl$PTP_SYS_OFFSET_EXTENDED(r5, 0xc4c03d09, &(0x7f0000000080)={0x18}) [ 1287.141131] FAULT_INJECTION: forcing a failure. [ 1287.141131] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.143679] CPU: 1 PID: 9070 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1287.145112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1287.146852] Call Trace: [ 1287.147408] dump_stack+0x107/0x167 [ 1287.148170] should_fail.cold+0x5/0xa [ 1287.148972] ? create_object.isra.0+0x3a/0xa30 [ 1287.149924] should_failslab+0x5/0x20 [ 1287.150717] kmem_cache_alloc+0x5b/0x310 [ 1287.151585] create_object.isra.0+0x3a/0xa30 [ 1287.152495] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1287.153552] kmem_cache_alloc+0x159/0x310 [ 1287.154421] vm_area_dup+0x78/0x290 [ 1287.155198] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 1287.156166] ? lock_downgrade+0x6d0/0x6d0 [ 1287.157020] ? _cond_resched+0x10/0x30 [ 1287.157829] ? copy_page_range+0x24e9/0x3810 [ 1287.158765] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 1287.159739] ? avc_has_extended_perms+0xf40/0xf40 [ 1287.160754] ? vm_area_alloc+0x110/0x110 [ 1287.161605] ? selinux_vm_enough_memory+0x114/0x180 [ 1287.162642] ? selinux_sb_statfs+0x250/0x250 [ 1287.163560] ? up_write+0x191/0x550 [ 1287.164323] ? percpu_counter_add_batch+0x8b/0x140 [ 1287.165346] ? __vm_enough_memory+0x184/0x360 [ 1287.166277] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1287.167365] copy_process+0x298b/0x78b0 [ 1287.168230] ? __cleanup_sighand+0xb0/0xb0 [ 1287.169121] ? lock_acquire+0x197/0x470 [ 1287.169956] ? find_held_lock+0x2c/0x110 [ 1287.170808] kernel_clone+0xe7/0x980 [ 1287.171586] ? lock_downgrade+0x6d0/0x6d0 [ 1287.172442] ? find_held_lock+0x2c/0x110 [ 1287.173286] ? create_io_thread+0xf0/0xf0 [ 1287.174151] ? ksys_write+0x12d/0x260 [ 1287.174954] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1287.175966] __do_sys_fork+0x8a/0xc0 [ 1287.176747] ? kernel_thread+0xf0/0xf0 [ 1287.177582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1287.178677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1287.179761] ? trace_hardirqs_on+0x5b/0x180 [ 1287.180657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1287.181730] do_syscall_64+0x33/0x40 [ 1287.182510] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1287.183585] RIP: 0033:0x7f0161ef8b19 [ 1287.184367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1287.188208] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1287.189802] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1287.191313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1287.192788] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1287.194274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1287.195773] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:05:40 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 55) 05:05:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x2}, 0x0) 05:05:40 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 05:05:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000080)={{r0}, 0x1, &(0x7f0000000040)=[0xfffffffffffff801], 0x8, 0x7, [0x3, 0x9, 0x3, 0x10001]}) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:05:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x8}, 0x0) 05:05:40 executing program 4: r0 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='timers\x00') pread64(r1, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:05:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf0ffffffffffff}, 0x0) 05:05:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x1000000}, 0x0) [ 1302.530145] FAULT_INJECTION: forcing a failure. [ 1302.530145] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.531546] CPU: 1 PID: 9192 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1302.532360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1302.533399] Call Trace: [ 1302.533723] dump_stack+0x107/0x167 [ 1302.534160] should_fail.cold+0x5/0xa [ 1302.534617] ? create_object.isra.0+0x3a/0xa30 [ 1302.535188] should_failslab+0x5/0x20 [ 1302.535644] kmem_cache_alloc+0x5b/0x310 [ 1302.536132] create_object.isra.0+0x3a/0xa30 [ 1302.536655] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1302.537297] kmem_cache_alloc+0x159/0x310 [ 1302.537800] anon_vma_fork+0x1ff/0x640 [ 1302.538289] copy_process+0x72cd/0x78b0 [ 1302.538789] ? __cleanup_sighand+0xb0/0xb0 [ 1302.539326] ? lock_acquire+0x197/0x470 [ 1302.539804] ? find_held_lock+0x2c/0x110 [ 1302.540291] kernel_clone+0xe7/0x980 [ 1302.540735] ? lock_downgrade+0x6d0/0x6d0 [ 1302.541231] ? find_held_lock+0x2c/0x110 [ 1302.541714] ? create_io_thread+0xf0/0xf0 [ 1302.542251] ? ksys_write+0x12d/0x260 [ 1302.542716] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1302.543320] __do_sys_fork+0x8a/0xc0 [ 1302.543766] ? kernel_thread+0xf0/0xf0 [ 1302.544263] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1302.544896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1302.545510] ? trace_hardirqs_on+0x5b/0x180 [ 1302.546026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1302.546673] do_syscall_64+0x33/0x40 [ 1302.547147] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1302.547787] RIP: 0033:0x7f0161ef8b19 [ 1302.548235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1302.550496] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1302.551414] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1302.552301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1302.553202] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1302.554085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1302.554988] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:05:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x2000000}, 0x0) 05:05:53 executing program 6: syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000280)=""/133, 0x85}, {&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000340)=""/42, 0x2a}], 0x5, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000480), 0x6e, &(0x7f0000002a80)=[{&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f00000026c0)=""/111, 0x6f}, {&(0x7f0000002740)=""/129, 0x81}, {&(0x7f0000002800)=""/226, 0xe2}, {&(0x7f0000002900)=""/89, 0x59}, {&(0x7f0000000600)=""/8, 0x8}, {&(0x7f0000002980)=""/251, 0xfb}], 0x8, &(0x7f0000002b00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002bc0), 0x6e, &(0x7f0000003d80)=[{&(0x7f0000002c40)=""/60, 0x3c}, {&(0x7f0000002c80)=""/124, 0x7c}, {&(0x7f0000002d00)=""/75, 0x4b}, {&(0x7f0000002d80)=""/4096, 0x1000}], 0x4, &(0x7f0000003dc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x3, 0x102, &(0x7f0000003ec0)) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000003f00)={0x6, 0x9, 0x2, 0x5ccb, 0x5, 0x8}) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x80000) pread64(r2, &(0x7f00000006c0)=""/4091, 0xffb, 0x300) r3 = openat2(0xffffffffffffff9c, &(0x7f0000003f40)='./file0\x00', &(0x7f0000003f80)={0x280, 0x32, 0x1d}, 0x18) ioctl$TCSBRKP(r3, 0x5425, 0x9) 05:05:53 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 56) 05:05:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf}, 0x0) 05:05:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x100000000000000}, 0x0) 05:05:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/l2cap\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:05:53 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6be804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463548d26abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r2, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r3) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={r3, 0xee01}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) flock(r5, 0x1) pread64(r4, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:05:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x8}, 0x0) [ 1315.768847] FAULT_INJECTION: forcing a failure. [ 1315.768847] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.771495] CPU: 1 PID: 9308 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1315.773068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1315.774966] Call Trace: [ 1315.775598] dump_stack+0x107/0x167 [ 1315.776438] should_fail.cold+0x5/0xa [ 1315.777313] ? create_object.isra.0+0x3a/0xa30 [ 1315.778356] should_failslab+0x5/0x20 [ 1315.779240] kmem_cache_alloc+0x5b/0x310 [ 1315.780169] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1315.781549] create_object.isra.0+0x3a/0xa30 [ 1315.782554] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1315.783742] kmem_cache_alloc+0x159/0x310 [ 1315.784703] ptlock_alloc+0x1d/0x70 [ 1315.785537] pte_alloc_one+0x68/0x1a0 [ 1315.786409] __pte_alloc+0x1d/0x330 [ 1315.787258] copy_page_range+0x1b62/0x3810 [ 1315.788271] ? up_write+0x191/0x550 [ 1315.789105] ? vm_iomap_memory+0x190/0x190 [ 1315.790073] ? downgrade_write+0x3a0/0x3a0 [ 1315.791046] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1315.792302] ? __vma_link_rb+0x540/0x700 [ 1315.793239] copy_process+0x7658/0x78b0 [ 1315.794185] ? __cleanup_sighand+0xb0/0xb0 [ 1315.795173] ? lock_acquire+0x197/0x470 [ 1315.796092] ? find_held_lock+0x2c/0x110 [ 1315.797026] kernel_clone+0xe7/0x980 [ 1315.797892] ? lock_downgrade+0x6d0/0x6d0 [ 1315.798838] ? find_held_lock+0x2c/0x110 [ 1315.799778] ? create_io_thread+0xf0/0xf0 [ 1315.800733] ? ksys_write+0x12d/0x260 [ 1315.801611] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1315.802724] __do_sys_fork+0x8a/0xc0 [ 1315.803584] ? kernel_thread+0xf0/0xf0 [ 1315.804493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1315.805695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1315.806878] ? trace_hardirqs_on+0x5b/0x180 [ 1315.807883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1315.809064] do_syscall_64+0x33/0x40 [ 1315.809928] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1315.811113] RIP: 0033:0x7f0161ef8b19 [ 1315.811966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1315.816202] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1315.817954] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1315.819602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1315.821243] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1315.822883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1315.824531] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:05:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x32}, 0x0) 05:05:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000140), &(0x7f00000000c0)='system_u:object_r:device_t:s0\x00', 0x1e, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x1) [ 1315.836392] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 05:05:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x200000000000000}, 0x0) 05:05:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf}, 0x0) 05:05:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf000000}, 0x0) 05:05:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x400) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x3}, {0x7fffffff}, 0x1, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="62227ff169fea064ef4e6a2988cf81ec8ae709fd9bb84f798e0058faaab20baa261b6979fe64fdf381df0da53caed4d0a2fa7ebafacead43d48cca87f8883e4952500f6bdc9c8f21ecb2a28561502374c5eb1a9297ac6f1cea607777ad67b0a94e6bd55f96c006419d83d4c8c6d2807ac0b5e19a5caf5c0f9447daa5247fc4396cf05ea2e2b4d1", 0x87, 0x0, &(0x7f0000000180)={0x2, 0x15b, {0x1, 0xc, 0x80, "327b2201800e6cb0d7ad0e2cbe6cd720059fd0eb1c473f8e8e29851384ad395898efd154550cd3087e2413509506e4b7c8ec7c119dcb36b5ca9c35897806134c08d0565101fba76dabe01e48d1a9c11120a7c2726976f4fec9b649835c0bae19b13829ee0a6e240cee8fa3e1b934e51fe0808030ef84691c2feb8c875e035c35", 0xce, "29a830d3b6dd09198f973a47204563fc9477b5780f60c26fcc2d6f9db265c663ae748a451fc629e755a5832cf905fd54f137b89d527fa62f16e569c1dbfd973919eaf35f2934c4f9bf2ca1ba5fc41db4caf1f576ecf60e6847a62862d4f1a8b819e0214a377ef4b79e717ac88c0d91d9c42b7441bd22bdd0bb8b816c0956fe68b0358a458925bfe959f8957d6e47f7a12fbde6a09207f9f6700e561d15bbab5a2a8d09a86e6b85312450abacd64e415681a905e743a94c02d322d5f4501803a3df93423134c94a1b4e1818a2ed0b"}, 0xfd, "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"}, 0x264}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'ipvlan0\x00', {0x2, 0x0, @empty}}) getpeername$packet(r0, &(0x7f0000000500), &(0x7f0000000540)=0x14) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:05:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf00000000000000}, 0x0) 05:05:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(0xffffffffffffffff, 0x9, 0x3) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:05:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf0}, 0x0) 05:05:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x8d}, 0x0) 05:05:54 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 57) 05:05:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fcdbdf250300ff03000000e9ffffff000800010002000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') pread64(r1, &(0x7f0000002100)=""/4083, 0xff3, 0x300) openat(r1, &(0x7f0000000040)='./file0\x00', 0x980, 0x62) 05:05:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x8000000000000000}, 0x0) 05:05:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x8b000000}, 0x0) 05:05:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf0}, 0x0) [ 1316.257591] FAULT_INJECTION: forcing a failure. [ 1316.257591] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1316.260353] CPU: 1 PID: 9482 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1316.261898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1316.263769] Call Trace: [ 1316.264365] dump_stack+0x107/0x167 [ 1316.265184] should_fail.cold+0x5/0xa [ 1316.266058] __alloc_pages_nodemask+0x182/0x600 [ 1316.267132] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1316.268498] alloc_pages_current+0x187/0x280 [ 1316.269493] pte_alloc_one+0x16/0x1a0 [ 1316.270347] __pte_alloc+0x1d/0x330 [ 1316.271177] copy_page_range+0x1b62/0x3810 [ 1316.272174] ? up_write+0x191/0x550 [ 1316.272991] ? vm_iomap_memory+0x190/0x190 [ 1316.273951] ? downgrade_write+0x3a0/0x3a0 [ 1316.274904] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1316.276143] ? __vma_link_rb+0x540/0x700 [ 1316.277062] copy_process+0x7658/0x78b0 [ 1316.277993] ? __cleanup_sighand+0xb0/0xb0 [ 1316.278959] ? lock_acquire+0x197/0x470 [ 1316.279869] ? find_held_lock+0x2c/0x110 [ 1316.280794] kernel_clone+0xe7/0x980 [ 1316.281635] ? lock_downgrade+0x6d0/0x6d0 [ 1316.282567] ? find_held_lock+0x2c/0x110 [ 1316.283495] ? create_io_thread+0xf0/0xf0 [ 1316.284429] ? ksys_write+0x12d/0x260 [ 1316.285299] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1316.286401] __do_sys_fork+0x8a/0xc0 [ 1316.287252] ? kernel_thread+0xf0/0xf0 [ 1316.288157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1316.289348] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1316.290517] ? trace_hardirqs_on+0x5b/0x180 [ 1316.291503] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1316.292670] do_syscall_64+0x33/0x40 [ 1316.293527] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1316.294686] RIP: 0033:0x7f0161ef8b19 [ 1316.295537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1316.299728] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1316.301464] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1316.303080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1316.304696] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1316.306309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1316.307939] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:05:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r3, r2, 0x0) r4 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r4, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r6, r5, 0x0) kcmp(0xffffffffffffffff, r1, 0x0, r3, r5) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:05:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x9effffff00000000}, 0x0) 05:05:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xec0}, 0x0) 05:05:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x148, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x88, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x850) [ 1316.356695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1316.377517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1316.395401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1316.408329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 05:06:13 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 58) 05:06:13 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/core\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) pread64(r0, &(0x7f00000000c0)=""/57, 0x39, 0xb2d) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)={'macvtap0\x00'}) 05:06:13 executing program 2: r0 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='fdinfo/3\x00') pread64(r2, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:06:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r0, 0x4000000100007d, 0x3) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:06:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x9effffff}, 0x0) 05:06:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xec0}, 0x0) 05:06:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xc00e000000000000}, 0x0) 05:06:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf00}, 0x0) [ 1335.754914] FAULT_INJECTION: forcing a failure. [ 1335.754914] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.756389] CPU: 0 PID: 9586 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1335.757234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1335.758253] Call Trace: [ 1335.758585] dump_stack+0x107/0x167 [ 1335.759035] should_fail.cold+0x5/0xa [ 1335.759517] ? create_object.isra.0+0x3a/0xa30 [ 1335.760079] should_failslab+0x5/0x20 [ 1335.760552] kmem_cache_alloc+0x5b/0x310 [ 1335.761059] create_object.isra.0+0x3a/0xa30 [ 1335.761601] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1335.762225] kmem_cache_alloc+0x159/0x310 [ 1335.762743] vm_area_dup+0x78/0x290 [ 1335.763195] ? _cond_resched+0x10/0x30 [ 1335.763682] ? copy_page_range+0x24e9/0x3810 [ 1335.764264] ? vm_area_alloc+0x110/0x110 [ 1335.764791] ? up_write+0x191/0x550 [ 1335.765256] ? vm_iomap_memory+0x190/0x190 [ 1335.765774] ? downgrade_write+0x3a0/0x3a0 [ 1335.766291] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1335.766963] ? __vma_link_rb+0x540/0x700 [ 1335.767467] copy_process+0x298b/0x78b0 [ 1335.767972] ? __cleanup_sighand+0xb0/0xb0 [ 1335.768505] ? lock_acquire+0x197/0x470 [ 1335.768997] ? find_held_lock+0x2c/0x110 [ 1335.769495] kernel_clone+0xe7/0x980 [ 1335.769949] ? lock_downgrade+0x6d0/0x6d0 [ 1335.770452] ? find_held_lock+0x2c/0x110 [ 1335.770945] ? create_io_thread+0xf0/0xf0 [ 1335.771458] ? ksys_write+0x12d/0x260 [ 1335.771924] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1335.772517] __do_sys_fork+0x8a/0xc0 [ 1335.772973] ? kernel_thread+0xf0/0xf0 [ 1335.773462] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1335.774101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1335.774744] ? trace_hardirqs_on+0x5b/0x180 [ 1335.775270] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1335.775902] do_syscall_64+0x33/0x40 [ 1335.776360] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1335.776989] RIP: 0033:0x7f0161ef8b19 [ 1335.777444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1335.779683] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1335.780613] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1335.781482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1335.782358] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1335.783218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1335.784112] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:06:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xc00e0000}, 0x0) 05:06:26 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 59) 05:06:26 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x303) 05:06:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf0ffffff00000000}, 0x0) 05:06:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf00}, 0x0) 05:06:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000001040)=""/4089, 0xff9, 0x302) 05:06:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x3200}, 0x0) 05:06:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000010000001a000000c95c9b5b88ee", @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66696c653000"]) fcntl$setlease(r0, 0x400, 0x0) [ 1348.912644] FAULT_INJECTION: forcing a failure. [ 1348.912644] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.915092] CPU: 1 PID: 9707 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1348.916557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1348.918323] Call Trace: [ 1348.918889] dump_stack+0x107/0x167 [ 1348.919681] should_fail.cold+0x5/0xa [ 1348.920488] ? create_object.isra.0+0x3a/0xa30 [ 1348.921457] should_failslab+0x5/0x20 [ 1348.922261] kmem_cache_alloc+0x5b/0x310 [ 1348.923121] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1348.924404] create_object.isra.0+0x3a/0xa30 [ 1348.925334] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1348.926427] kmem_cache_alloc+0x159/0x310 [ 1348.927323] ptlock_alloc+0x1d/0x70 [ 1348.928098] pte_alloc_one+0x68/0x1a0 [ 1348.928906] __pte_alloc+0x1d/0x330 [ 1348.929678] copy_page_range+0x1b62/0x3810 [ 1348.930610] ? up_write+0x191/0x550 [ 1348.931372] ? vm_iomap_memory+0x190/0x190 [ 1348.932280] ? downgrade_write+0x3a0/0x3a0 [ 1348.933171] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1348.934305] ? __vma_link_rb+0x540/0x700 [ 1348.935165] copy_process+0x7658/0x78b0 [ 1348.936041] ? __cleanup_sighand+0xb0/0xb0 [ 1348.936945] ? lock_acquire+0x197/0x470 [ 1348.937783] ? find_held_lock+0x2c/0x110 [ 1348.938637] kernel_clone+0xe7/0x980 [ 1348.939420] ? lock_downgrade+0x6d0/0x6d0 [ 1348.940303] ? find_held_lock+0x2c/0x110 [ 1348.941162] ? create_io_thread+0xf0/0xf0 [ 1348.942043] ? ksys_write+0x12d/0x260 [ 1348.942849] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1348.943876] __do_sys_fork+0x8a/0xc0 [ 1348.944662] ? kernel_thread+0xf0/0xf0 [ 1348.945495] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1348.946599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1348.947693] ? trace_hardirqs_on+0x5b/0x180 [ 1348.948605] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1348.949686] do_syscall_64+0x33/0x40 [ 1348.950478] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1348.951776] RIP: 0033:0x7f0161ef8b19 [ 1348.952568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1348.956447] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1348.958062] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1348.959567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1348.961071] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.962567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1348.964081] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:06:26 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000040)={0x0, 0x1, [0x80000001, 0x40, 0x1, 0x0, 0x7, 0x8000]}) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:06:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf0ffffff}, 0x0) 05:06:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x8d00}, 0x0) 05:06:27 executing program 2: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="258cf96f7b79115218c05a392c608571", 0x10) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080)={0x77359400}, 0x10) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0xfffffffb, @mcast1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r1, &(0x7f0000002100)=""/4083, 0xff3, 0x300) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x40, @local, 0x400}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x0, 0x0, 0x9, 0x0, "e221d089c4a99f8258ff55c387445997bd00ac9120226d21b2594249f51bc07ec3c263c5a531f2055b3d8397c440354fb44a3905bc0f8411cc4c3afe8c179c9ede7e9790b02b03c763ef87248ed2ea55"}, 0xd8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) lseek(r3, 0xffffffff, 0x1) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0xa87, 0x4}) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x4, @loopback, 0x3ff}, 0x1c) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x38, 0x1, 0x4, 0x80, 0x0, 0x4, 0x4200, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7c7, 0x0, @perf_config_ext={0xd59, 0x11400000}, 0x1020, 0x81, 0x0, 0x4, 0x5, 0x3f, 0x1, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) 05:06:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xc00e}, 0x0) 05:06:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) 05:06:27 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 60) 05:06:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8014, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r2, r1, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xfffffffffffffecd, &(0x7f0000000380)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r3, @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) preadv(r3, &(0x7f0000001e80)=[{&(0x7f0000000b00)=""/126, 0x7e}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/198, 0xc6}, {&(0x7f0000001c80)=""/202, 0xca}, {&(0x7f0000001d80)=""/228, 0xe4}], 0x6, 0x5, 0x474b) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) ioctl$CDROMREADALL(r4, 0x5318, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000001f00)=ANY=[@ANYBLOB="0100200001000000f6980ea418549244f4b220e90010", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:06:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xfffff000}, 0x0) [ 1349.164573] FAULT_INJECTION: forcing a failure. [ 1349.164573] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.165510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1349.166966] CPU: 0 PID: 9802 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1349.170272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.172029] Call Trace: [ 1349.172591] dump_stack+0x107/0x167 [ 1349.173364] should_fail.cold+0x5/0xa [ 1349.174169] ? vm_area_dup+0x78/0x290 [ 1349.174974] should_failslab+0x5/0x20 [ 1349.175788] kmem_cache_alloc+0x5b/0x310 [ 1349.176650] ? lock_downgrade+0x6d0/0x6d0 [ 1349.177528] vm_area_dup+0x78/0x290 05:06:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r3, r2, 0x0) r4 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r4, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) fcntl$setlease(r1, 0x400, 0x2) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) [ 1349.178304] ? _cond_resched+0x10/0x30 [ 1349.179308] ? copy_page_range+0x24e9/0x3810 [ 1349.180278] ? vm_area_alloc+0x110/0x110 [ 1349.181240] ? up_write+0x191/0x550 [ 1349.182008] ? vm_iomap_memory+0x190/0x190 [ 1349.182903] ? downgrade_write+0x3a0/0x3a0 [ 1349.183814] ? anon_vma_interval_tree_insert+0x277/0x450 [ 1349.184962] ? __vma_link_rb+0x540/0x700 [ 1349.185829] copy_process+0x298b/0x78b0 [ 1349.186700] ? __cleanup_sighand+0xb0/0xb0 [ 1349.187614] ? lock_acquire+0x197/0x470 [ 1349.188464] ? find_held_lock+0x2c/0x110 [ 1349.189338] kernel_clone+0xe7/0x980 [ 1349.190126] ? lock_downgrade+0x6d0/0x6d0 [ 1349.191003] ? find_held_lock+0x2c/0x110 [ 1349.191872] ? create_io_thread+0xf0/0xf0 [ 1349.192754] ? ksys_write+0x12d/0x260 [ 1349.193565] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1349.194592] __do_sys_fork+0x8a/0xc0 [ 1349.195378] ? kernel_thread+0xf0/0xf0 [ 1349.196222] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1349.197333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.198424] ? trace_hardirqs_on+0x5b/0x180 [ 1349.199337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.200453] do_syscall_64+0x33/0x40 [ 1349.201245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1349.202329] RIP: 0033:0x7f0161ef8b19 [ 1349.203114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.207016] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1349.208635] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1349.210147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1349.211652] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.213155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.214664] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:06:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xc00e}, 0x0) 05:06:27 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') write(r0, &(0x7f0000000040)="d484fc9e44b81e45f8465335dceaff5a", 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) [ 1349.257543] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1349.297637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 05:06:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x212001) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:06:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf000}, 0x0) 05:06:41 executing program 2: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0xc02, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000006c0)={0x1, 0x7, @start={0x0, 0x1, "422509dbe8a57f3528cc2b0c6306c7cd2c70bddf199840fb9ab700e2112e3df7b58a941d78440cc22f9773bf736851dcec670f2f8357cda5e2042bfcec828caf058b3c7178c83c7177bc4a4332e9eebf178330939885f754aa8bc7533fbb5e45bf5a9c10d688bc9adbc56ab0fab8741641997560f368257f622fd08b90fdd3e59e58554ac6efeef943133ee0b43c23d0628396b84918910809358a5ae94409a928d2b441b3b929ffaf7810282b12cd2b05efd9c6a568d29b61ee08a0a860e3e260166dab06022944a3e8e1901b276707c1dfd102e39840513760f846ae38fff7389ec6b6601a898dbc0431a91586acb835978e465e0b5a0bb63f58306140b41961a1f6b945051b87e52f6c5cc06d4e0d547f00ada1ea792ff9506bad0bd155d6c8fb6f15e0b620ec9199b630a66b554376a0c54e8ad22e48063a09580a8817cb348e77577a05b97e306d757839c29ee751cd8216504bd005a1c4a25e5b2c3575a3fce03623798752fe26792b3c5538d00185ffb8c198eb62f0b986135ba0a723d68fd16637db57c622efbe899bb859afc5fd9fa90389d420882f1cdc33b5998d358964d666bffce19130c9b0ca2c97075363d40729d4ecd93b589954005d87683045837c94506e942615ca21ef42857fe00dbb6e6265ba51536282889166d9748cb687ce6ad932137d654ba778e3a271fb9c70892d3b49ac3732f6e4f548d59004ecfc817cb329a34e9dd93236192876320ea835e97683489d8671a28554d59832198eb3f4a4528f8e32374397470a861efa67921be0d158e2adccd3af5e4423d8aac51f7c0fcd10a7b17d2432903e9d4be767d86296ee38c5358616f4db38e00c5ba86abbcf81f8d1ccd1066423fa61e661dbf9ce64742109ff088b5a7a4ded5b95a378fcce5b1bfa6478f97cad7c948be5bf55bd04803acb4decaa0b27675f3b016e177140fa4cddd3724ec62275b110661dfd5c5e14a66d5984096c29725661ef73aa8fe56ec79ea509930d7573c901a6a677e5b9d0d0c4f7a05a1fc22723d83558815d515efd64914237c4b4373bf8236ed1e7fce13b4908c035eb818cca44afde2443573af825475b22f7c274db80deb2a2ea4e4e8b91563e829219fc888ca0b9af3813bb27317e168dcaed5c9677041b724b34f689f08679e57c963e4324e5b1c7aca46e8e5c1356e1595b1679bb67f1242bd61b834fffe1df65e7a99f3e42a1acde7e1ed3673191468342e98d600d09495535ff7a493d7addd7baf9c25d5577bcb0ef5006bbc02faef6afbdc38e20e42d4b2a17615503bd83829379b122023d3a5a7783b1a740c5256da90eb92cbd18bf6342459b107f31cd7bfb9819adf19c4176e3b012cde785c05fa4f973db61a834437b485f8124b96533b5984a59d20cdd523c80f2c082803b127972ec2078df5c0a3172e72c816d76ed5e426cc5", "91e4dd736c12b88b628289e02e18b607f82f307651be9c5c7f7e2aa420045b46f358e375a05b782ec41799dc96480f1c14f3640e8ab406a7f4a361e94dffd2864b7d4873ef3b2df2c91e0839e0946fde03f550a5c053f84c2a2eec1b65b8e86dd755796a21293217f98d5ddcaee7788a2362c7bb5ad9d4179a59da1ba6efc0fdeea8c58dac80801224e24018bdc5e7929c824733b48793df0d3ad3966e5440603d183abe12d328ef13c031c4998adba0d048af48e62d57ba01a68a1a14d428d48fe43b1768e18696f0755d7e7a89ea6ba5eb05ba11d572df3aac9254087fdaa5039e9642c3fa1e3512b049232f1827cae2d2764b40ac2d8c637ad8adee8f90519c057d4fba9ecf3499631052d3e35a5734a58a4bcdf01c24b4d4d9ead0a1c346ec67f6ce1c5a52aad1f3472c4bc77b4000c329a76c41b598f1ec3b7212eec96c6d73f0c99fccebcb5c2bde5a0dbbd0ba822db9927cb070197455e94ce9beb9b2353eee75ed1c75ef0e9e0a6df9185ad2bc26e00bc15facc431f516ea7d6797b09ede89f83970669e04f7f05220c2610b32e431b5142666fca9632564fe6f8c94360a10a4460a69ec3a24b38efd5f786b36589c8abef3b38dd7bd6070063a37b91eee1c177a7873dbfceb33eb271d1e7e098e5e8454e3be5e50e938bbd4f1459b5af6f1c07a4184688ff8702075ecac25cf1a00ec46817da1c98b626c266d52824165841e8c06d29b367233046b074ff393e1a18ecfec6c4b2f317cbe436f25d03be4b7573253b17bc9ae47b54c78d606c134c677f3d5bf865f6a3da1fe58a4cd7d80b6ea2aed7cc81163d95ceaf14bd49edf5b1d4a0d43d82a9e97a4b70791619e60a125a5343bd39bfd3617659fc5b2e166b43f348978f46e39432b71555f4d2ba09c8166398e70dccad2ac328c83aca402ec13ad40175a4166e03d51f249ac897b5821f142182f1bb19d05f96d4e908987b0d1f73e57931b273f1946e5cd4fc1afc3bdb4f00bad1b349a0e577ec55a1ce5a976f04f900e35d707dadae81b0c26ce1c0b05d5f5e3409101f680bc83e21da229a5470d2091a3628ede74b54ce93e0ad812bf6e709062fa4ffbf6020d23caf1ae6a4ce3c0d341c18d48d994dbded7cef9097056835dc18db0f6472edacabb409fc82da433eb285b035034261dd9a558778a71120bd236a98d6db9262387a0f3cbf796587ae042e911c7ec7a42e7da1b2f16bc1a41dc3b3af16a87115fc50629ab6f16c159efa775e806b828e5b219d834d09a863349e8b6658ef2ec955f11554808c21cd27f5d173ce49bfcf9f11f94cb8ce0980b738520c0edf922adccda430dd5d1625b8c8504fe86c4b21f84ce78fc9ded6c2e663225943932a0b88976a2bb841d60b43ca3311e1875ee2f6338a5dee3e757ed94052529279d3bf44df1588431316bd29e4766f500650d50b9ed"}, [0x7, 0xffff, 0x7, 0x1f, 0x200, 0xc6, 0x2, 0x80000001, 0x676ae00f, 0x1, 0x0, 0x6a28, 0xa9e2, 0x0, 0x3, 0x5, 0x4, 0x2, 0xa412, 0x1f, 0x1, 0x5, 0x1, 0x0, 0x68, 0x5, 0x10000, 0x3, 0x9, 0x4, 0x9, 0x5, 0x6, 0x876e, 0x3ff, 0x1, 0x1, 0x0, 0x1ff, 0xfff, 0x80, 0x1, 0x7ff, 0x1, 0x7, 0x3, 0xb6, 0x7ff, 0x8, 0x4, 0x80000000, 0x638, 0x6, 0x1, 0x0, 0x963c, 0x1, 0xff, 0x0, 0x80000001, 0x400, 0x7ff, 0x80000000, 0x13]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001100)={r1, "eb5348272a43b0257277f02e89ca8af8"}) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) write$P9_RWSTAT(r2, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x4}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) close_range(r5, r4, 0x0) r6 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r6, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) pread64(r6, &(0x7f00000000c0)=""/151, 0x97, 0x7) pread64(r3, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:06:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf000}, 0x0) 05:06:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xffffffff00000000}, 0x0) 05:06:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1f, 0x5, 0x3f, 0x9, 0x0, 0x0, 0x20, 0x1e, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0x101}, 0x42000, 0x6b0, 0x19, 0x5, 0x8, 0x8, 0x1ff, 0x0, 0x53, 0x0, 0x1}, 0xffffffffffffffff, 0xd, r2, 0x2) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x30d) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) 05:06:41 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 61) 05:06:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xffffff7f}, 0x0) [ 1363.194495] FAULT_INJECTION: forcing a failure. [ 1363.194495] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.195929] CPU: 0 PID: 9957 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1363.196732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1363.197713] Call Trace: [ 1363.198033] dump_stack+0x107/0x167 [ 1363.198459] should_fail.cold+0x5/0xa [ 1363.198908] ? vm_area_dup+0x78/0x290 [ 1363.199356] should_failslab+0x5/0x20 [ 1363.199814] kmem_cache_alloc+0x5b/0x310 [ 1363.200291] ? lock_downgrade+0x6d0/0x6d0 [ 1363.200783] vm_area_dup+0x78/0x290 [ 1363.201213] ? _cond_resched+0x10/0x30 [ 1363.201669] ? copy_page_range+0x24e9/0x3810 [ 1363.202202] ? vm_area_alloc+0x110/0x110 [ 1363.202685] ? vm_iomap_memory+0x190/0x190 [ 1363.203184] ? downgrade_write+0x3a0/0x3a0 [ 1363.203681] ? down_write_killable+0x180/0x180 [ 1363.204213] ? __vma_link_rb+0x540/0x700 [ 1363.204694] copy_process+0x298b/0x78b0 [ 1363.205175] ? __cleanup_sighand+0xb0/0xb0 [ 1363.205676] ? lock_acquire+0x197/0x470 [ 1363.206150] ? find_held_lock+0x2c/0x110 [ 1363.206627] kernel_clone+0xe7/0x980 [ 1363.207063] ? lock_downgrade+0x6d0/0x6d0 [ 1363.207548] ? find_held_lock+0x2c/0x110 [ 1363.208029] ? create_io_thread+0xf0/0xf0 [ 1363.208204] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1363.208532] ? ksys_write+0x12d/0x260 [ 1363.210614] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1363.211186] __do_sys_fork+0x8a/0xc0 [ 1363.211658] ? kernel_thread+0xf0/0xf0 [ 1363.212123] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1363.212736] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1363.213333] ? trace_hardirqs_on+0x5b/0x180 [ 1363.213837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1363.214439] do_syscall_64+0x33/0x40 [ 1363.214880] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1363.215479] RIP: 0033:0x7f0161ef8b19 [ 1363.215921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1363.218073] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1363.218960] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1363.219799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1363.220630] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1363.221462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1363.222301] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:06:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xffffff9e}, 0x0) [ 1363.252253] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 05:06:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0xfcd1, {0x4, 0x400, 0x4, 0x4}}) socket$inet(0x2, 0x1, 0x0) 05:06:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xfffffffffffff000}, 0x0) 05:06:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x80000}, 0x0) 05:06:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x80000}, 0x0) 05:06:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000001040)=""/4083, 0xff3, 0x300) 05:06:41 executing program 2: ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r2, r1, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r3, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000040)={{r2}, 0x0, 0x4, @unused=[0x9, 0xe46, 0x5, 0x4], @name="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"}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r4, &(0x7f0000002100)=""/4083, 0xff3, 0x300) [ 1363.372842] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1363.382575] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 05:06:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xfffffff0}, 0x0) 05:06:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) 05:06:54 executing program 4: r0 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x9, 0x3, 0x16, 0x80, 0x0, 0x0, 0x41522, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x1, 0x5, 0x7, 0x200, 0x6741, 0x8, 0x0, 0xffff, 0x0, 0x3}, r0, 0xf, 0xffffffffffffffff, 0x8) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r1 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r1) pidfd_open(r1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 05:06:54 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 62) 05:06:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf0ffff}, 0x0) 05:06:54 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r2, r1, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r3, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) fadvise64(r2, 0x85c, 0x2, 0x3) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:06:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x2}, 0x0) 05:06:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf0ffff}, 0x0) 05:06:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x8}, 0x0) [ 1376.140663] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1376.151998] FAULT_INJECTION: forcing a failure. [ 1376.151998] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.153378] CPU: 1 PID: 10096 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1376.154124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.155083] Call Trace: [ 1376.155389] dump_stack+0x107/0x167 [ 1376.155797] should_fail.cold+0x5/0xa [ 1376.156213] ? create_object.isra.0+0x3a/0xa30 [ 1376.156715] should_failslab+0x5/0x20 [ 1376.157132] kmem_cache_alloc+0x5b/0x310 [ 1376.157582] create_object.isra.0+0x3a/0xa30 [ 1376.158054] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1376.158611] kmem_cache_alloc+0x159/0x310 [ 1376.159092] vm_area_dup+0x78/0x290 [ 1376.159502] ? _cond_resched+0x10/0x30 [ 1376.159938] ? copy_page_range+0x24e9/0x3810 [ 1376.160481] ? vm_area_alloc+0x110/0x110 [ 1376.160925] ? vm_iomap_memory+0x190/0x190 [ 1376.161398] ? downgrade_write+0x3a0/0x3a0 [ 1376.161854] ? down_write_killable+0x180/0x180 [ 1376.162351] ? __vma_link_rb+0x540/0x700 [ 1376.162824] copy_process+0x298b/0x78b0 [ 1376.163277] ? __cleanup_sighand+0xb0/0xb0 [ 1376.163753] ? lock_acquire+0x197/0x470 [ 1376.164198] ? find_held_lock+0x2c/0x110 [ 1376.164651] kernel_clone+0xe7/0x980 [ 1376.165051] ? lock_downgrade+0x6d0/0x6d0 [ 1376.165532] ? find_held_lock+0x2c/0x110 [ 1376.165977] ? create_io_thread+0xf0/0xf0 [ 1376.166473] ? ksys_write+0x12d/0x260 [ 1376.166890] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1376.167430] __do_sys_fork+0x8a/0xc0 [ 1376.167843] ? kernel_thread+0xf0/0xf0 [ 1376.168274] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.168848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.169418] ? trace_hardirqs_on+0x5b/0x180 [ 1376.169913] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1376.170479] do_syscall_64+0x33/0x40 [ 1376.170882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1376.171488] RIP: 0033:0x7f0161ef8b19 [ 1376.171904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.173891] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1376.174718] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1376.175553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1376.176384] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1376.177217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1376.178048] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:06:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x1000000}, 0x0) 05:06:54 executing program 4: r0 = fork() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/vlan/vlan1\x00') pread64(r1, &(0x7f0000002100)=""/4083, 0xff3, 0x300) recvmmsg$unix(r1, &(0x7f0000001ec0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/138, 0x8a}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001200), 0x6e, &(0x7f0000001400)=[{&(0x7f0000001280)=""/94, 0x5e}, {&(0x7f0000001300)=""/204, 0xcc}], 0x2}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/174, 0xae}], 0x1, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000001680), 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001700)=""/91, 0x5b}, {&(0x7f0000001780)=""/225, 0xe1}, {&(0x7f0000001880)=""/38, 0x26}, {&(0x7f00000018c0)=""/247, 0xf7}, {&(0x7f00000019c0)=""/76, 0x4c}, {&(0x7f0000001a40)=""/31, 0x1f}, {&(0x7f0000001a80)=""/160, 0xa0}, {&(0x7f0000001b40)=""/11, 0xb}, {&(0x7f0000001b80)=""/241, 0xf1}, {&(0x7f0000001c80)=""/206, 0xce}], 0xa, &(0x7f0000001e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x4, 0x10002, &(0x7f0000001fc0)) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000002000), &(0x7f0000002040)={'U+', 0x80000}, 0x16, 0x3) 05:06:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x8000000000000}, 0x0) 05:06:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x1000000}, 0x0) 05:06:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r1 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r1) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) move_pages(r2, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x53ad, 0x3, 0x2595, 0x10000], &(0x7f0000000200)=[0x0, 0x0], 0x4) syz_open_procfs(r2, &(0x7f0000000040)='mounts\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1, 0x8, 0x2, 0x0, 0x0, 0xffff, 0x422, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x7ff, 0x2}, 0x10, 0x2, 0x81, 0x0, 0x9, 0x3, 0x7f, 0x0, 0x400, 0x0, 0xfffffffffffffffc}, r3, 0x6, r4, 0x9) 05:07:07 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 63) 05:07:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x2000000}, 0x0) 05:07:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf0ffffffffffff}, 0x0) 05:07:07 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000abc000/0x2000)=nil, &(0x7f0000a90000/0x1000)=nil, &(0x7f0000d4a000/0x1000)=nil, &(0x7f0000c2a000/0x2000)=nil, &(0x7f0000b6a000/0x3000)=nil, &(0x7f0000000040)="9379a34b1556bf1219ac542dc919ac10a5a8ab1bc254c8f0877a145aab1108471edf20b25741667874b24c0c5634d8dec79a78fbf3d7e99fea2e7ca3505f20ca88bc48d4c2e84b47dc671b8d24395f56e7571df82a573f63ef7eebc5344d7a7b9901dbecf8dd5d105dbbc9", 0x6b}, 0x68) 05:07:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0xf}, 0x0) 05:07:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = pidfd_open(0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r3, r2, 0x0) r4 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r4, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) pidfd_getfd(r1, r4, 0x0) r5 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000400)=r5) pidfd_open(r5, 0x0) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:07:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x2000000}, 0x0) [ 1389.604166] FAULT_INJECTION: forcing a failure. [ 1389.604166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1389.605892] CPU: 0 PID: 10232 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1389.606872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.608045] Call Trace: [ 1389.608431] dump_stack+0x107/0x167 [ 1389.608945] should_fail.cold+0x5/0xa [ 1389.609491] __alloc_pages_nodemask+0x182/0x600 [ 1389.610146] ? lookup_memtype+0x5b/0x200 [ 1389.610726] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1389.611599] alloc_pages_current+0x187/0x280 [ 1389.612255] pte_alloc_one+0x16/0x1a0 [ 1389.612798] __pte_alloc+0x1d/0x330 [ 1389.613310] copy_page_range+0x1b62/0x3810 [ 1389.613906] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1389.614667] ? vm_iomap_memory+0x190/0x190 [ 1389.615273] ? up_write+0x191/0x550 [ 1389.615780] ? downgrade_write+0x3a0/0x3a0 [ 1389.616389] ? down_write_killable+0x180/0x180 [ 1389.617023] ? __vma_link_rb+0x540/0x700 [ 1389.617598] copy_process+0x7658/0x78b0 [ 1389.618173] ? __cleanup_sighand+0xb0/0xb0 [ 1389.618766] ? lock_acquire+0x197/0x470 [ 1389.619344] ? find_held_lock+0x2c/0x110 [ 1389.619911] kernel_clone+0xe7/0x980 [ 1389.620479] ? lock_downgrade+0x6d0/0x6d0 [ 1389.621073] ? find_held_lock+0x2c/0x110 [ 1389.621639] ? create_io_thread+0xf0/0xf0 [ 1389.622227] ? ksys_write+0x12d/0x260 [ 1389.622764] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1389.623439] __do_sys_fork+0x8a/0xc0 [ 1389.623971] ? kernel_thread+0xf0/0xf0 [ 1389.624537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1389.625257] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.625963] ? trace_hardirqs_on+0x5b/0x180 [ 1389.626558] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.627290] do_syscall_64+0x33/0x40 [ 1389.627810] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1389.628554] RIP: 0033:0x7f0161ef8b19 [ 1389.629072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.631653] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1389.632200] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1389.632737] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1389.632754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1389.636576] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1389.637576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1389.638578] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:07:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xfffffffffffffe61, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r2, r1, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f70ef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdaf9f9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100090000000000000000001ecf4a0290e25d64de07ce29ed0f1aa99ed9e104e86d8ed694ab5cff0c3d4abec5ef11f15f074a1a262d91037808cafd1acac6643d3d25271f2c84e86bd41a3e5e2025563ede4a607236414e9a9077ed71", @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0080007ce091b639386e6345e55e4a70fcc8a8e13494a5186e62ecff25372f1f56b1ae2b57bfcf83d7d025a9619029438b54ec343d57deb9c1aa339422d8303afe4774d02447b5f167c466ccda08", @ANYRES16=r3, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000040)={0x8, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "491409d86a6cd1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r7}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r5}, {}, {}, {}, {r9}, {}, {}, {}, {0x0, r8}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {r6}], 0x4, "9755154351ac9a"}) [ 1389.677130] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001040)={r4, r6, "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", "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"}) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:07:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf000000}, 0x0) 05:07:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x100000000000000}, 0x0) 05:07:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf000000}, 0x0) 05:07:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0xf0}, 0x0) 05:07:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) 05:07:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x32000000}, 0x0) 05:07:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x200000000000000}, 0x0) 05:07:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.pending_reads\x00', 0x400080, 0x145) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) [ 1389.773547] ------------[ cut here ]------------ [ 1389.774327] WARNING: CPU: 0 PID: 10232 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1389.775525] Modules linked in: [ 1389.776026] CPU: 0 PID: 10232 Comm: syz-executor.5 Not tainted 5.10.244 #1 [ 1389.776966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.778076] RIP: 0010:get_pat_info+0x216/0x270 [ 1389.778685] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 51 8e 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 3a 8e 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 55 a5 5a 00 e9 [ 1389.781143] RSP: 0018:ffff88804619f778 EFLAGS: 00010216 [ 1389.781856] RAX: 000000000001fa7e RBX: ffff88801e3df300 RCX: ffffc9000222c000 [ 1389.783819] RDX: 0000000000040000 RSI: ffffffff811243f6 RDI: 0000000000000007 [ 1389.784946] RBP: ffff88804619f830 R08: 0000000000000000 R09: ffff88804619f700 [ 1389.785890] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1389.786855] R13: 1ffff11008c33eef R14: 0000000000000000 R15: ffff88801e3df350 [ 1389.787826] FS: 00007f015f46e700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1389.790324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1389.792083] CR2: 00005555678d7c58 CR3: 0000000033a08000 CR4: 0000000000350ef0 [ 1389.794635] Call Trace: [ 1389.795610] ? pgprot_writethrough+0xc0/0xc0 [ 1389.797191] ? memtype_seq_stop+0x20/0x20 [ 1389.798211] untrack_pfn+0xdc/0x240 [ 1389.798791] ? track_pfn_insert+0x150/0x150 [ 1389.799387] ? uprobe_munmap+0x95/0x560 [ 1389.799908] unmap_single_vma+0x1bc/0x300 [ 1389.800499] unmap_vmas+0x16d/0x300 [ 1389.801000] ? zap_vma_ptes+0x100/0x100 [ 1389.801533] exit_mmap+0x27f/0x4f0 [ 1389.802028] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 1389.802721] mmput+0xca/0x340 [ 1389.803159] copy_process+0x6450/0x78b0 [ 1389.803702] ? __cleanup_sighand+0xb0/0xb0 [ 1389.804316] ? lock_acquire+0x197/0x470 [ 1389.804837] ? find_held_lock+0x2c/0x110 [ 1389.805394] kernel_clone+0xe7/0x980 [ 1389.805888] ? lock_downgrade+0x6d0/0x6d0 [ 1389.806458] ? find_held_lock+0x2c/0x110 [ 1389.807005] ? create_io_thread+0xf0/0xf0 [ 1389.807540] ? ksys_write+0x12d/0x260 [ 1389.808092] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1389.808715] __do_sys_fork+0x8a/0xc0 [ 1389.809223] ? kernel_thread+0xf0/0xf0 [ 1389.809730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1389.810441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.811127] ? trace_hardirqs_on+0x5b/0x180 [ 1389.811686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.812401] do_syscall_64+0x33/0x40 [ 1389.812892] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1389.813574] RIP: 0033:0x7f0161ef8b19 [ 1389.814083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.816495] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1389.817505] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1389.818450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1389.819376] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1389.820338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1389.821295] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 [ 1389.822230] irq event stamp: 2055 [ 1389.822687] hardirqs last enabled at (2063): [] console_unlock+0x92d/0xb40 [ 1389.823812] hardirqs last disabled at (2072): [] console_unlock+0x839/0xb40 [ 1389.824951] softirqs last enabled at (1632): [] asm_call_irq_on_stack+0x12/0x20 [ 1389.826113] softirqs last disabled at (1529): [] asm_call_irq_on_stack+0x12/0x20 [ 1389.827286] ---[ end trace 9c77444cbe24a53c ]--- 05:07:07 executing program 5: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000b, 0x12, r0, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() (fail_nth: 64) 05:07:07 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') open_by_handle_at(r0, &(0x7f0000000040)=@ocfs2_parent={0x18, 0x2, {{0x2, 0x1, 0x7f}, {0x8, 0xff, 0x5}}}, 0x119a00) pread64(r0, &(0x7f0000002100)=""/4083, 0xff3, 0x300) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 05:07:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x8d000000}, 0x0) [ 1389.925787] FAULT_INJECTION: forcing a failure. [ 1389.925787] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.928235] CPU: 1 PID: 10355 Comm: syz-executor.5 Tainted: G W 5.10.244 #1 [ 1389.929970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.931693] Call Trace: [ 1389.932289] dump_stack+0x107/0x167 [ 1389.933055] should_fail.cold+0x5/0xa [ 1389.933852] ? ptlock_alloc+0x1d/0x70 [ 1389.934646] should_failslab+0x5/0x20 [ 1389.935440] kmem_cache_alloc+0x5b/0x310 [ 1389.936308] ptlock_alloc+0x1d/0x70 [ 1389.937091] pte_alloc_one+0x68/0x1a0 [ 1389.937883] __pte_alloc+0x1d/0x330 [ 1389.938650] copy_page_range+0x1b62/0x3810 [ 1389.939541] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1389.940714] ? vm_iomap_memory+0x190/0x190 [ 1389.941598] ? up_write+0x191/0x550 [ 1389.942355] ? downgrade_write+0x3a0/0x3a0 [ 1389.943232] ? down_write_killable+0x180/0x180 [ 1389.944193] ? __vma_link_rb+0x540/0x700 [ 1389.945049] copy_process+0x7658/0x78b0 [ 1389.945909] ? __cleanup_sighand+0xb0/0xb0 [ 1389.946803] ? lock_acquire+0x197/0x470 [ 1389.947644] ? find_held_lock+0x2c/0x110 [ 1389.948531] kernel_clone+0xe7/0x980 [ 1389.949317] ? lock_downgrade+0x6d0/0x6d0 [ 1389.950175] ? find_held_lock+0x2c/0x110 [ 1389.951017] ? create_io_thread+0xf0/0xf0 [ 1389.951886] ? ksys_write+0x12d/0x260 [ 1389.952733] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1389.953747] __do_sys_fork+0x8a/0xc0 [ 1389.954526] ? kernel_thread+0xf0/0xf0 [ 1389.955340] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1389.956319] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1389.957423] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.958499] ? trace_hardirqs_on+0x5b/0x180 [ 1389.959407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.960498] do_syscall_64+0x33/0x40 [ 1389.961275] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1389.962343] RIP: 0033:0x7f0161ef8b19 [ 1389.963128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.967056] RSP: 002b:00007f015f46e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 1389.968682] RAX: ffffffffffffffda RBX: 00007f016200bf60 RCX: 00007f0161ef8b19 [ 1389.970175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1389.971670] RBP: 00007f015f46e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1389.973170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1389.974668] R13: 00007fffb1a4d5df R14: 00007f015f46e300 R15: 0000000000022000 05:07:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x9effffff}, 0x0) 05:07:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0xf00000000000000}, 0x0) 05:07:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x9effffff}, 0x0) VM DIAGNOSIS: 05:07:07 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e3e01 RDI=ffffffff879f71c0 RBP=ffffffff879f7180 RSP=ffff88804619f188 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000030 R13=0000000000000030 R14=ffffffff879f7180 R15=dffffc0000000000 RIP=ffffffff822e3e58 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f015f46e700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555678d7c58 CR3=0000000033a08000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000000000ff00000000 XMM01=ff000000000000000000000100000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f0161fdf7c800007f0161fdf7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88803578e310 RCX=ffffffff8164f513 RDX=ffff88800f8c9a40 RSI=ffffffff8164f521 RDI=0000000000000006 RBP=ffff88803578e130 RSP=ffff88803d3a7a00 R8 =0000000000000001 R9 =ffffffff868706af R10=ffff88803578e130 R11=0000000000000001 R12=ffffc90005a0f000 R13=0000000000000000 R14=ffffc90005a0d000 R15=dffffc0000000000 RIP=ffffffff8140d23d RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555843e3400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff3560f950 CR3=000000003d392000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000