5abcd554008204eec4b306d5c81b610fb349e1c65a55a4acf1735b792f159a515d97fd993368961764ab99085c06a8d6d3a0143a6f4944743af8ddf33bc4d4d9290cb1b6ae73f756c4d0f99502101254cddf5b9d354e7f7f6264b3c87530b453a08a7e1bf179127e09f6428bca94a6bfd418dd5a0aa7d27e43abcac8a6dc64766be26f9c023aaf3940e82fbddb2f6b361d83abfb05e9dfe402d7b7b935744a550b022c43f180c89fdcf3325d9f94b2b9a02f48890602d0b0ec6ea19ad8e8bd2f9dc4f3ba9ad045b76d9d416e65d705836719bcc02f3d87738b478788fc9f97491671b6bbccb059a3a77e2757b806700a6261ae919c1a3e348ee02f5d7f1693108e402e7647051f4553a49788040c0cf187221a6a1e73a1971652d6d774202d68be7cf1f55b8be8cd7cf99acec8458985a9343596590c836e06e6eb7a9cfca344bb18e4be9a3fa1f22b597de0b1e7e3a5be2ff9026df4e6ca4c6edad88b6b7eb96af42d39109f6bd90bdc45fa394a312a1c523fee1a1c472d864245272f3f3f85e0bdd32d389fd6049bdfa91c5d07e67c1b6bf03a853028a44a0ca1c3bd1cdbe4565ba4fff4ec27f2c6c494f10c6804c156fa65a16141f194b2d62299387264a3d41063163cd66b32bdfbb831216a38a6495a2e759434e76476554e7d4b2e88c6d5b32041fa976e36512993d223d05af5a99b26c953f082ff705c788b49b24b0111658675c3c2e2b6536b8812abb4f1fac88776459e3ed3d4cf6fd22875e0bc8d5782ff2d25aa7d38d5ecb03a84aa34349392ae0b3c397b852ac508c1eb21cceda49f25605103237c4665162bbcae2d8e8d45cf3e1d60f4062f4028ebad5a513d619384fa8571e3aa7e5344a2f4ed7b32024cbb888fb54b5d4d6655740fd49b8fc119eb7357b033abd81f4ba12ed8151226f4f743777d1310fc78d3e4e031e10f88cc219fad7c86ec7544a2a3d3cf71a9c4b2f8d94d736b8a567a8c0921c1bca54cd416571a74bffb8bf562ec2ddf3239bcb26a6dbe0f54aedd87c35e0d86e1a388b8f731b0436d284da6132aacb664a64a81af262ad97c710e09e2c9466e2566f7d5df174a1b8f5ff2a3b91820fb6bec3159ef8d789472cf25f50560fa69e38ebebb411016e3f6407211dd38007b6324a614422e6bad1e09805d74adda1cf34aa64a4e7bbc96dc2203511cc0c75c2c2e4e5230c27b9037b15c76c295424fbfbccfbcbc17433da548aac6c82cf8b94bd95f7bfda36d2709fafd542ab8c221563aaef44117137783c857e7341dba985945c4f7b04580db1f3a91c499e79dd21dd12b0ab29283196f3f69795985cbc3d69f3f82cf8f949446d35b4f1d2d0f5289db9ef1eb0978b94d76669c74c55453ebd8f78cc3307361a1453ed01c912b6d6412f790e0a30d9413f08d87a42065f402fc0f79f27c61d9e8b834ee6ad046889bba01ee80a31251cc4235a2fbee324b2f7b605d7640583cb04236143cf28a859f40fc94702c63e3c730cadd2627ca330f2de9ed31d645fd486d96c08e2966884139d7c6553cc6dae46f32142f987d34119de6cc14a16b3e954d7e7bdd6673135d3d94d5c8f4845d468b1ce5886e4a334a874445015a56171275b77cef3e0cb446a35b5ea9234deb60dfe6ae8faf63f756eacc5c007e508efdad8d5fa9203f8785fde4e9580248a358669fa8f05696cb60aa16fa48cff2771f9f7f926506df1d003833c37c5501773fc426a0f2111b8a848c275a7a7abec4169adcbc118399efe3acf2e3ff1ae1a60d796489724b6a417f8a06eed3572021a41068616b845246048bc93118a0f9e8c65efcd7913da0b8315f6cf9c8cd177ddc23bcc1ac1dafeef07c5076b491b418383b3798006ad1bcbe5cf267022e3bb891a5b88e3b34adacd698e5e01ee21ab3269514a9eb3bdfcb2f8cba86ec7f16424cf27914dd7607a39a0972c5e45ebdfb9e88f03893fd61dfff8e9784634189f72c6c80224683d72dc109438656173e4c57848795b4efb970d9ecb89d8d15d16cf4e03c5b5b69cb5642fd341ad8bc142db000feaa20707c6bb6d45015acd3928054b4dc623d32a555883067d2128c0d98c0c96648be5dc02bf660b43167ea7d0a713c195158b53371c4328169718df1418d6d8211dacb1cf334a8a4a3287ff601e19e3efd71101d8712aa95b88156708f600e8ac2e6374829e6430d98c0ac353fbc21ae1905a0902993cf515802418664f442bf318700719ac7e80813a728f2555e760c532a2cd736ceb5ecd20a10c24fa91f2c5caea128b0a8e611d85d80bb036b5a837e7a31c37b85307b3a2afed1e385819474030fc2361ffb67e9053d9b6d3dd49d2d2b1e83011ffc2307b0c6245027f749a74911b6e65aaaf6745c9c1586baee4515bf1b78fba9b0b30dda53f0b5dc27f46cf4d99dddf428ca48bc43fbaa7a2f7cdb109383daa94aaa18093030d90c719a65d08765f0ddcc76692d68a31f0e78465587cb1206ce52bf5e54b4d5ddea58eba800bcac8a5b918f81e7c21ceeef1bcd2b311952a2f01991fca671224e6780462f5307db7e3229a5de8874ce902fe0a0efc8c5544962190789eec1247404e2c1a02b202b14b6bb29cbd2c1069dffd0ffd0b421ef5447b9cb072e89cf00cfc2007e9f946e57c0d5a4bf2a2a31675f118097e101e82c3b71172a7856688161673215bc1aeaf4dbf2294408417cad0641434092b2fdb2b36f711b7aba56d3a9746c9d98fdda415d12632636eb7fb6f5df8585dbf7bd8d7f408b1457764f3b1bce", 0x1000}, {&(0x7f0000005e00)="9fe6a78763379f8cf1963ca7553bd1e3fb7c38e766edaea7793f9a326b6810d97272836941cf0d5992275d458d93e0e8a8b527f92052cd806bb4fba3950efb44413bebf386f04d742621cabd26b34711cc", 0x51}, {&(0x7f0000005e80)="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", 0x1000}, {&(0x7f0000006e80)}], 0x7, &(0x7f0000006f40)=[@rthdr={{0x78, 0x29, 0x39, {0x89, 0xc, 0x0, 0x8, 0x0, [@empty, @empty, @private0, @empty, @local, @mcast2]}}}], 0x78}}, {{&(0x7f0000006fc0)={0xa, 0x4e23, 0x27, @empty}, 0x1c, &(0x7f00000071c0)=[{&(0x7f0000007000)="1b7eb2be71959a8f3211f90b1edd3c0657a3fb79a614daf345aaaa5141ddcd17808c476fc60d544b5b0b8daa5c96784de542547b", 0x34}, {&(0x7f0000007040)="2556182f9f7ad2f11cd3488ae02f97c08bd040a4626ced0c5946de6ce0847eaa9a75d1479c5118ec3adb091a59c63aee526a7c0bc2cbcbbfba", 0x39}, {&(0x7f0000007080)="58f7309e406e43f30ddac38fed5c0e82bc9bda981c36dea7ca08967258794259b0d8eb4ea735e6b57de72a44602392c167e5ff18487b374b2643f93c7122738774991458f997df559d95c8639ff42179995410ae583a93323c7b44dc", 0x5c}, {&(0x7f0000007100)="112bdde37ed6a049d8e0825ddcbe35da78d1a73a0701f35e9b7ff7d2232bc5a64c42c65f18fb2f44ce0801b4572c6edd4fc47e6350ad00b9d567b054ec14b630302153f2939fa889028fb7a2aca395ff7aa0c883546afb640ccec4a16d60db72f3733f6b9305bbba4c94bf663e79f9d0bdec7dd29df611aff60ba4d5d8bae0b40598978b5c5103c3a040102e4ed9", 0x8e}], 0x4, &(0x7f0000007200)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0x18}}], 0x8, 0x8050) 17:15:28 executing program 4: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() [ 233.969162] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:28 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r1 = shmget(0x1, 0x3000, 0xf97d709ca5b5f77e, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000380)=""/220) shmctl$SHM_UNLOCK(r1, 0xc) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_RMID(r0, 0x0) 17:15:28 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000340), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f00000003c0)="fe", 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000040)={[0x8]}, 0x8) 17:15:28 executing program 7: r0 = open(0x0, 0x10000, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000180)={0x2, 0x0, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x3000, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x880}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) shutdown(r1, 0x1) r3 = syz_open_dev$mouse(&(0x7f0000000600), 0x2, 0x440) statx(r0, &(0x7f0000000680)='./file0\x00', 0x1000, 0x100, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r3, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000001e00)={0x14dc, 0x2, 0x3, 0x401, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x2}, [@nested={0xc, 0x4d, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @uid=r4}]}, @nested={0x109e, 0x80, 0x0, 0x1, [@generic="40310cd8855f9f556ccd5e2554c8a839470927d842ebb133b0fc5f9ed243b62ec5810ca91c30fc58511137cb4652ecd96a02d6e9129d0e14ed465b39be8cbf1da50400875261469c5344d7d378a4441778c9f6d22e89ac9806a696cfc14ff74f1b57", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @generic="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", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x68, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x91, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @nested={0x4, 0x93}, @typed={0xf2, 0x6a, 0x0, 0x0, @binary="dbfdb3d0414e07b642d95c73bbb537bdedba0826fbf3c76aa2e751ffb340b3d1ca94f9e2348053fe2a03529a4b136ce2d3ca2a8bb9d09119da166a6a0a09322f3c91c1aa46c16e593f88657073fd460c73c6096fa4c66a605f5da639b27c0916e7a0915d6b362bf07e2305a2f5e5ec691709a8c622766a7d5307c10c9f89e8554c154fb11dc8947e0b50b6cfd8c72131bb276a67619ee2e2de511a5e7886a51e4c515a69480e3a3bc7a36ef42e34872865edc5edd8b1ca608a1f5adfb87ef963ada49851cea885913ee146755e40e87612aabe84e71e21ad4905c307b537a29984298e58cbcd905cf5e18ba9cfbf"}, @generic="2542d2175276f83087e847660dfdc2171423dc2096fd2e53c620c7a05bb6937aa14255160837b5d19845eae8326e23a245d6344071f2bddbf968f4d7efc6674f8eeb2d6ee8014ad16f15957ec06ee31dcb285e5c8a2bced08a730f9102d6f147154f974d867f38773fa7f669e3f6b495576ae38a398a26f6733c602058c39fbc802e43e25a2182a403428b985e890489ea20df400877ad0a03caec1f9bd6b49c2ad3fbd03a24e9d771e0e24ca05b9aff8183a42351c43406920d7c77385932b938ed54de54b95d9133f714b24bc3d80167aa", @nested={0xc, 0x70, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@empty}]}, @typed={0x8, 0x4e, 0x0, 0x0, @pid}, @generic="37109c8961e3f86611df31512387373d7b11815ae8d948a8361ec9835cea2d066c5cc1dca24887a576d0c40f939a266350", @nested={0x15d, 0x36, 0x0, 0x1, [@typed={0x4d, 0x8b, 0x0, 0x0, @binary="d44c851a182614275ffa9a8c7c84f8b0268e7fa564b643059461def3365cd18496b70ee361eb8fb6a633951d05da27e2f3f32d7764e324eb1db0881fd585728a89da36270d2ab552a5"}, @generic="adbcceb770245e628815be597c39b95772e1b71336f929b05c81fa5d992c3b599f955cd4b7ed5613aaca3ec6ebe40481f7fee7839c236418c9b79df064ded201595b527620602bbbf38afb77d22861b0b0a413ff9d2b2ea1629b60029eb5768faca08e05c00a704d932ce779702964b7eb056d753d08a7b36ea7ec6e9d26f9db7e90b7956b21cbffa41f29d45297c79a6b601266d2ab55dbb61b520570be454da2373ae230fdb8218e49f6b2bbd4ac554cdf289297c49899030b320865637dd597f2a30c46b502fe2ff9853c6da4cefaf1e0ad77c70c71b4061da884bb13cc5900d85cd8d583", @generic="304875eb330e11dcb48c38185f9751478e6287bd5f4678306683422afefcf11da134c0"]}, @nested={0xa9, 0x84, 0x0, 0x1, [@generic="e0e6b7d8c4e525436b2b23c8fcffa2a49649f4e6b3bb9117d404cb21d04dc83f21a9a9761d8ea7ed7224e3bd7c27b88537cc334638f484fd5f9401b9beb4bf7c741b571230d85ebba8deecbcc60555ffc633fd6fef9a7883126fe70cabcce893ad6b1e947a29ecf2977bf1b44101e628e0d9c27b7ab3380fc4afaa1d6c8fd7a586d4e2fb86600fe215e7485ebf3f1df025896fafb41604e0d5139856277ca769d63d3821a5"]}]}, 0x14dc}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2e, 0x80, 0x9, 0x43, 0x0, 0x9, 0x4200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0xd963, 0xf4a}, 0x6000, 0x1, 0xb022, 0x8, 0x7, 0x4d8, 0x8, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000001c0)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x68000000}, {0x6}]}, 0x10) [ 234.217115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.218058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.218974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:15:40 executing program 4: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() 17:15:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0xda8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) write$P9_RREMOVE(r3, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r4, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) 17:15:40 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000340), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f00000003c0)="fe", 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd(r4, &(0x7f0000000040)={[0x8]}, 0x8) 17:15:40 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) syz_open_procfs(r0, &(0x7f0000000000)='attr/keycreate\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x5, 0x67, 0xe0, 0x0, 0x100, 0x60, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x400, 0x5}, 0x800, 0x430, 0xf5a, 0x9, 0x6, 0xc94, 0x1, 0x0, 0x1}, r0, 0x3, 0xffffffffffffffff, 0x3) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a432c3efc1edfab7037255db440500824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea615885731fa8ad0600", 0x31, r1) add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000002c0), 0x0, &(0x7f0000000540)="abb7bd63dec2f2ba6433c05aea6fe0963cf771e4abb8d18fe5ad940ea89cf4629404768d0c84802b220dbcc9c1830900000061f47f0a968c71a680dd6f0b4fda6f14e37b06c7eced6a4ada58b99ed4e19f776ce7ad33382a389e26536856afea141a60a18bc95ef03285909b912e452ba7691fcc88a8f3", 0x77, 0x0) 17:15:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffffffffffffd8, &(0x7f0000000080)={&(0x7f0000000000)={0x30, 0x10, 0x409, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x30}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x2, 0x4) 17:15:40 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:15:40 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:15:40 executing program 2: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004300010100090000000000020000000008000100", @ANYRES32=0x0, @ANYBLOB="4e4a5d439b88"], 0x1c}}, 0x0) r2 = semget$private(0x0, 0x0, 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) keyctl$revoke(0x3, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) unshare(0x28010080) 17:15:40 executing program 5: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 17:15:40 executing program 4: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() 17:15:40 executing program 6: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000180)={0x0, 0x8}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x220021, &(0x7f0000000540)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="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"]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/159, 0x9f}, {&(0x7f0000000400)=""/174, 0xae}, {&(0x7f0000000680)=""/223, 0xdf}], 0x3, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x40002000) syz_io_uring_setup(0x3167, &(0x7f0000000380)={0x0, 0x9b7a, 0x0, 0xfffffffe, 0x0, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000500)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="f2ffffff0000000000"], 0xb) pkey_alloc(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) mkdirat(r4, &(0x7f0000000840)='./file0\x00', 0x44) 17:15:40 executing program 0: r0 = semget$private(0x0, 0x0, 0x153) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x4315, 0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r1 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(0x0, 0x0, 0xb) clock_gettime(0x0, 0x0) semtimedop(r1, 0x0, 0x0, &(0x7f0000000180)) r2 = semget$private(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{}, {0x3}, {0x4}, {0x0, 0x4}, {0x0, 0x0, 0x1800}], 0x5, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r2, 0x2, 0x14, &(0x7f00000010c0)=""/79) semop(0x0, 0x0, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) r3 = semget$private(0x0, 0x0, 0x0) semop(r3, &(0x7f00000000c0)=[{}, {}], 0x2) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000200)=""/205) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f00000001c0)=""/29) semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000080)=""/20) unshare(0x48020200) 17:15:41 executing program 2: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004300010100090000000000020000000008000100", @ANYRES32=0x0, @ANYBLOB="4e4a5d439b88"], 0x1c}}, 0x0) r2 = semget$private(0x0, 0x0, 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) keyctl$revoke(0x3, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) unshare(0x28010080) 17:15:41 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x1a, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xbef4c000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "7374bf600a2dbb0a10a4446998c60bc654676f080ecee8672b9b990319e9f34b4c45be9b1cbb8fbe1f4541599e2a8deeedad6067575d671432b4ba4028542704ab850b2cd326bd5a16431e3e06cbefba068d34f999e863befaed31fe2f898bdfe4043148f4d1cc27af274cc202dd9cd92b1891ba85c4048baa5cf0aa7a3d5dbef19adb89a7123a5c5cf1f42650df4c63aa25c0c5f606a072b8c1910206999409a39439cacd824f129adb4177e14f533050e77cfd6b9e760c12899b047feb4c8e5b746e5570db48fc8fafeccf98bad6d99a585091b403666ded97ce43cdf6dd1791052bc149861ea2585dfb28b538cc9fe6ffc5e07182615951fd668085ed124af574a07e3495491f19b1aa2a3b69028ccacd78524d988b224ab17ed905da0b840b4a9939e2af6efdf4221126075a8964d904883db014031e0924681a4ef3795071b256b75002a7df298c87c565b1d8a331e7d0c1000e1d707100917dfe107f87ebea9dca1b708b01cacf1c9f348c0d0fd64aa64193637c7169264d06f613c41be60f39b0cc9d813ae5fca2222832f86f2ae87e883efd48df36d16e6c1ca5c378f6ff0fbace91eb3099d744b16171fcc1ab7d5456392f0878ecf27e8caad7386663de490c3044eed7e7cb83e675716eda0cc09f219aadddd814c88048a7c6cefe69a79f2f7a234cfffbf19ac7a9f6ef59faf2776ac3d636904ec1bda09b1c9d8caeafa918983215d866f5cb6f1088e7e99a43425913d258a3dc8550fcbca3e0bec47503e24d709dd1fd1bb3cd92837d10387a0eebb98aab27950a2a66dc0b9bad3e4ef6393036d64949931ffe6479073790b3b885ac8563d4018e9227d644864c17f048daefbb192d15b56a2a440ad6d4ef5af2ac9904d8b69c64d2368928d7595594e6c3fd23229cb6aa80ec308301b1c94777900d34b1b3eea03dca765036a3f5351551affb585f22541074380b60ca062bf8a8a2324fe61ecad5733aec51e0c5ddc648280556b8a038b5816947b1637ef598cfd134cf9833d875fd23d22f5f74e74a4634d50a3ac908eed128f4297924296d95361b9504c08df4a0603eff93ee34bd45ed12e8d06b8f399fefef4ced732aad15b70f3e276101fa4b5a5c17435d0999b3345ccfe853c955e8b7927c7a171506b8e5b4de8a68cb5e80c3709a0e15643b5772d82d04859133e09fa8ab81ac042e67bc918f2847af14a4eb77c3fcac3132ec1af5a57d85acb9ce91d9d15019904396737ade63df938e6f054f8ee21e8994d45b0801ccd8ae8bda90128cb05eddd297d800412bc01fc5cfdfa9d473641fffc793b513da3f7565a27c4ff3678ac6f71560cc6cc95fb4d20f85b7934cb4a4f614182d331ab53b6a09ff47fc272b6c1f5aaca477bfdfed3fac942d639773b7a5656c526eb595d6fa9d301c425947f37088447cb4400c37750b76eb6c1f7933e43b27224c2fdc053e55125d00ab11428af674f58bd5c3ea1ce4762856afccbd37dd59a5e726f2e5e770bcc8372304fc2a33611234e3b0d411fcae8691e621b64581dc32b3d97c02920877b2c995018dcfff2da8687bc64332cffc3d355931561dc799d169f61d121f242dd3605e3fef8a46bf73998202d6a87671719896c61d729006104bdb7e926020f28260c75c2c754e5f073097d7031567e62cbfcbff541702cdaf498bbfe01e2948e6e164271ca4ab4df68a1569d29d3ce7029c0b58d2a1e6d179fa817ec9df17195c8b83a7a7508f18f0e3d07e8871f331d7a151bc11301c7dce402e6a5fda6f3096df2ddfeb48b3991e055c55d2a071ed66bf378e5c451f849cdbd7951cacad16d6b5734b71db866e77086bfab1797942633ec688d78bb2fccaae2b0e796b852b278bd4a4648d0811293e1bfe68e30b42eb27ac0a4e435e086b4cfeeb9fa539f0d800b6108e4c7b9d7237746770a3f3477646b7c9bfd2bc111679d40bffe221be492ba984df6cd4d7d8f9cbf7185e79804416be68d8a2bfa28e5bec4b57bf5f08eeecafabccd55744e49bb4a7dd1324908d91762b9884e7268d0bb6290be3b51091ae6ccf2ebbd4945dd7913bd38509a00ce38d955909bfa1f3740fc123a12e15b853b59b9b691460afdcda150d39e566a83eaa0c3b7bac9819bdbc7e0a620206be87ff2f8ea8091dbffa014d2f2eb919040a434cdeb3db68adf845d2ba751dc0e1ce4afd8672a5ecf0653b8c672c3265aa236a174185f4b4a291bda664bb79c13f8b6932a831385773898d194d2500b38fbfff8c4acafa5a80dfd3f1f906132885446f9f7ad787dbbdab593661ab1c255df879eaf4ca739deaa11379a5c6b650472257fa54b646b29ceb3dbe27e3584914f9f766bbbcc67abeffebb0df881a42b8671bba930b04d1d7710cc15d546ee69ad40e66f04eb28af8bd17b739e68ad75a239303fb97b18f8f08d2f95bdae0f245ebdfc3ecf555a6fd53f5a35af8b2dd016b227d209fc8323a7576e66a9913a0ad4f19d30d2b6f25ac8b5b6c762e2c68c76f9bd7818adbb3c9b194c09471482ec6898754469076b8674ab9e26b5977a0fa693160f18a01d2f2c362186ff75c205cec261d9e6c431ee672e4056b7e458ef02dca1167d09de5977210461758ed506290477a63c5af0698a1f4edf3bc569692bc9febd5fd641860dd34a6926af47ae7bdd3cce59a5b24b6944075e30ec2f2dbd043ebc57a39eaa5559bc4f21f08198e0daa2e8506b21160c8f9b629ad0e80d5e99e5cf4c4ceefb8d9fe5493ebcb066a647269fef2146f1ed55dac66974446e650e49db26ceb24c16c24885a2d2d011d11ec52d5b7a9c8096314d1dc7c992a1dee70be2fc0cc2d9fc94b0d02d479f6f4bfd3fa20df42568e27c0cea6caa1028d5dfbe6a9657053c06132387f9abfbaf93d9b335b69b168bf7fdaa0a44981dadc3358b50f1b24d390f8858d6775fa838388ff8a69b02bf446028485ba9e0c15731288c186b3cdf2fbc088f13f50e5eecc9b3a058d1369b7a254f11aa81a5fabd862bfd5226ce26e0199ef241badd55ba0d6087e9eb1661111a6afef1caf2bd54832bb5a3e8b864c8af220a8a115746c1646e78471ba2edb7c63fcff7f6be047a5f740525fbe5e259beee146dc2a609d3fd576e826ee1e4fce8ccbf75aa713514bda04ed4086cdd11a770cbe5782bca23f5f3ad8682609d5c5d4e5ca4e117d7423740b41081c6945b446223bb435c6ae2314552b7bf53a8b2c8a7a2a961d17315e0f7a660624b119c89ae81d2214b03cd79bc3eb355bf06811d7186b1f0a7219dd8d4096cb0df940719279357b853bc7c5bcf645aa65c12227859ce0851953fcefa6051f2a31e3666abde9ef1ece3eba658de696edf5d87a7d562dfe1f6bb9ac5e6773bc9069c732683715868cf14825345fb60665982549b9bb7c5b7d934ed0c4d136fa089f8459d473bf1ee678cf88c26f4f5ac681aa6dbe6ef78c26e7a3649ae0574f550f9fc64e8caa14586cbc43d8ec72a3170fc4f6c78fdbd40332c1f35adfc04be68a067f2c03325d624e21fa0e1fa6ea879caa84665bedefcd19759872824a0053a110af2b6099d8ea572b0c81cea39147bb2dca0eaefd4be8c3b59b98c27049f04ae5f3652ade0e1561238296d17979581b93d0ee26464fb5675b968cbc397558207fb1d5365f73994c0c8f2bcae0164e74d602a4856355b214af58b6357b2505779260ec73929eb4fe1047bbc2a125ff6c88718d2b8b8fb9c0d1cb1760748ffc5e4998dbaf8fad99df26b2eaf99bce2541d287b243d7b9cf0ecb25588d14c6228a6cb5413f48e3d07817d258c45ca0ab3494ca5b59f87abdf38e439b4a31d60d9474a52e465f36dd0cd56f00d4e5e563bfc6421b40a7522eb71894a698c19510fa7dc690b6b3f782d88e61ca635d5efd4c9c1725dbf24e0c8e246a2dc979e4750de8347687038f0441858bdf5a06bcba827d8d1327601943ca9fd004c121034fa6e1c8b9eff5da764961f5700eab97380e99b37f302239b528b36f5c9bbebaff25edae48fbe59dd272099af5c695a19b62f64485ba01ae8416c02f04360be933b8ba8a49c6c1188a78c3d36d0c61f61b4002bfeb669e29bbcb306f573528a749b085500c7649aea469fca867da4ca9eaecc75a70f41baeb80bf803402a9066dc1e8243192b78533e0ad590e14fd2bf2ce3ac943ade1fcefd247406785ee387d18e9afe8845481748fbadf4d081e01ecce50ef1fc5b457fa296b833d77390764e2af12f7930c6334476dc4cf45d9f272e364336810c11318bd0a95233005d66fe81a5708ae5fad8c7db17e6d97d2340651f7aa7a36e132a77a7a6206b36a95ccb5a48cb19bd3bb886ff0e77bc76653912149ca85895c4f80c373cbbd4305a91213e8ec5b7b18d8587d723c18f02854556aaaa540935eab2b7470a7c1c40c7e843ac1221a51e92eb05af2342fea7c853a46182c8384612aadb40145b95de565140003468eaca74b38bdf4dc640d0af80c3dd81747652c5fe15ffff8965a150a4ca6a9d9c91d067b4fac49b23cd2041dfdab22126c97d812b67ed638cc65d75d836bf439807cd7cd3cd0e6b30c81983e3f45a00282a14d401d81ac7c5544510dc7d157eeaa18b09df5ec949a22d7342b5b720b2a47251e995410f9b35d90824c1b19beb8575c9efe2aaa2a2011790a1099a924c01ca835fb7cc561eb2310a5331d4d9c4a9ee03a5f1364c17a7f4511c0c1b929c630cc110696f9e94b4107d0b75338fda2c5e0b8d46d19b98071e328f57debd56b4a0a9009913ac41518a08e6fa533edf20db0dc5eff43cd3ead623fc826ac03925490537d6b6a47f27031faa17f9852a3cb72d2088f33d35846a40758e60dab4b3980d032adc3e4faa61ff8aaea6b08bc9705cf097701e9af550fa43ec06c0ae2257927eebcbbbf4a05ad8097597943d6aed8a950ba32bc0d19827539019397e2fffa5f7379ffd7ec266f0c1cd947aab0c9e73c2796bd4c32fa0a0effbc84570efdebd3ac1eb57cc89cdbed91ed43a64cccfeba427a017a07d84acc850a45e2f26639598ed061ea81b60fb1873983591d446129ba8b27a4aef3311292017e3cbc00533824888ef80ef1a85c86a370dc11694d2f455e04ceb8811afa53aac77c65b38703d18167aedcc077c988dd9832ee1999a82c8752b921bceae484c19cee6828eef373c979b5c3f208080c8dcb38c53e384bebed6c41c3b9d6958bd2b952d82d17b262dbf30f90ab5c5d197ccee9f6b6525928b0100ffdeace644e159500495ff5a0ea7df7b9ab63617e3879818e25341e97d839beefdf248222cadd61a5d76b1ff34704bb78656afef7994904da269f973598217edc3be93157185aa15ef225f6471d7786a5e28d0f145b96566e101bf46723486867b9aa90f9eb4d1f5612d4950160c1504a367daf984"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1002000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d66642c7266a81c4eb7", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,mmap,aname=NETMAP\x00,noextend,debug=0x0000000000000004,version=9p2000.u,aname=/\\\'/]\x00,fowner>', @ANYRESDEC=r6, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB=',subj_type=,appraise,\x00']) memfd_create(&(0x7f0000000140)='/\\\'/]\x00', 0x2) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000003a00c5d500000000000000000a0002006803f51792af8281ca583f0895e6321cef6b331118ffa321907064ecde0000000400000002a5bc5b758c90cf4924a9da3acc399fbe18e8dfab23b63c332ae029f596740f51537d78c5e97d2611dca6e12735a0d77bf01eaf3ded177fdcbc9fb37f7bf5e39490a0e4961c7995bff433070e294ff400000000066bc7270f1f0d2a3aca15a427a6b92378a4d49dcd6f1d68bc1f917a1cf907047761443408af4cc7d713f62fcab0b157f92748495c720c72d1bb2289ca178814bda9c602676ec10a099f08"], 0x14}}, 0x0) 17:15:41 executing program 4: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() 17:15:41 executing program 0: rt_sigqueueinfo(0x0, 0x12, &(0x7f0000000240)) r0 = syz_io_uring_setup(0x220d, &(0x7f00000002c0)={0x0, 0x8b50, 0x10, 0xfffffffc}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x4004, @fd_index=0x4, 0x6, 0x0, 0x0, 0xf, 0x1}, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xb0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="b5dc5f6a2b35341f6925ed2c252800415000040000cbceeb2c6c06ec214ef1b6eb482c2a7e9ab98b76a7f4e0b8c8af6586b56772ca81e9e4e26ef932edf595474c1123f162f021425d84f4ed71cb8970979d2d7bbfcb3c032ea04171a73414", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2501ca61a6727457c33fc443bd289b1f5b000000000000000b00ea2f24e0507ef4c39e6b0000000cfe81f540ba047b6f11528a5ba7d4f1481ab155ce84b9cd206a1580dffd42298db1c7eb7903abd5be0ac0706541616f113e12e549ae0de6eb993e7bd84e0be9447fb96d32eb58ec2bfde413ae271a625a80d7db6ab851f7ea61849ee08281a0d379fe898ebbb7619d1d9c271f552aa3a4de53d62170217513fbcd9ba46d6302cd2f66be08245354bb48aa46ce6c604161"], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000010) syz_io_uring_setup(0x1, &(0x7f0000000180)={0x0, 0xf9a4, 0x10, 0x0, 0x10000}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(r4, 0xffffffffffffffff, &(0x7f00000000c0)=0x7, 0x8) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1e000000) [ 246.472408] kauditd_printk_skb: 48 callbacks suppressed [ 246.472427] audit: type=1400 audit(1762881341.258:85): avc: denied { watch_reads } for pid=4932 comm="syz-executor.0" path="/syzkaller-testdir120558879/syzkaller.AHLLeJ/16" dev="sda" ino=15978 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 17:15:41 executing program 2: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004300010100090000000000020000000008000100", @ANYRES32=0x0, @ANYBLOB="4e4a5d439b88"], 0x1c}}, 0x0) r2 = semget$private(0x0, 0x0, 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) keyctl$revoke(0x3, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) unshare(0x28010080) 17:15:41 executing program 4: syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() 17:15:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x9fa) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0xa, 0x0, {0xe}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x3ffc, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) r1 = fork() syz_open_procfs(r1, &(0x7f0000000040)='map_files\x00') r2 = fork() ptrace(0x10, r2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) 17:15:41 executing program 0: r0 = fork() wait4(r0, 0x0, 0x1, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x80, 0x5, 0x49, 0x0, 0xfffffffffffffffe, 0x40000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x388}, 0x42469, 0x7, 0x1, 0x8, 0x8, 0xfffff43d, 0x47, 0x0, 0xfff, 0x0, 0x400}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x20000000, 0xffffffffffffffff) r2 = getpgrp(r0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@aname={'aname', 0x3d, '.@&{^,[%%@'}}], [{@hash}, {@smackfsfloor}]}}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r5, 0xf505, 0x0) wait4(r2, 0x0, 0x80000000, &(0x7f0000000000)) [ 246.781197] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 17:15:41 executing program 4: syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() 17:15:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:15:42 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 247.327906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.652720] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 247.907957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.909034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.911383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:15:54 executing program 2: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004300010100090000000000020000000008000100", @ANYRES32=0x0, @ANYBLOB="4e4a5d439b88"], 0x1c}}, 0x0) r2 = semget$private(0x0, 0x0, 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) keyctl$revoke(0x3, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) unshare(0x28010080) 17:15:54 executing program 4: syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() 17:15:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000980)=ANY=[@ANYBLOB="bc0100001a0000000000e0000002000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e00000010000000000000000000000070000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000cc0014007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000005a6855fde7707c1b7cae3c147135f9c2ba7b610ac300bd06b2f009bd0537d74a0c0bb8bc4a608300009ebf1fd296cb32d8347608236c9004d559f11fac88076804527b3839e6b2eb1bfbff2583102c3acdd40d498078a0e5414843bf45ab01d514f7feef875b4d8b47d8028280268536e3fd7a98ff00ff7f0000bb4169aa3c59"], 0x1bc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x2, 0x20}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x181000, 0xc) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3000008, 0x4000010, r3, 0x0) r5 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@xdp={0x2c, 0x6, 0x0, 0x2f}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="3cdf17ef9d401d1382b34e9c2390c4e52a71bc09c1389702c7c818f34d5d75f241bce23a5a3a1b8a3a0119ed", 0x2c}, {&(0x7f0000000b40)="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", 0x1000}], 0x2, &(0x7f0000000440)=[{0xc8, 0x119, 0x2, "22746f12e2e90c8129fbd556e7b4edacf0dadf09aeed6c6e92c728d1f22fe76843c9363ec3e1900ee091193d231f1f145d2f3a91823414f6bd694b1c33f9f3ce3e1300ed94a8755fb335203ca740fed9ed8d42e7f7126536bc09d536b131ddd35731e4330888ca12d398ab2025515123d4564eaf59f3792c2465ec6b84446c058fb7cf8ce2770792a77f6123d18890231d4646e8427f9b878aea3429f6284c7cb30df6bd2a9af0fd16d5464ebf0d6fe9230f"}], 0xc8}, 0x0, 0x4000010, 0x1}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) dup3(r3, r0, 0x0) 17:15:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x9fa) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0xa, 0x0, {0xe}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x3ffc, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) r1 = fork() syz_open_procfs(r1, &(0x7f0000000040)='map_files\x00') r2 = fork() ptrace(0x10, r2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) 17:15:54 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:15:54 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:15:54 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:15:54 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:15:54 executing program 4: syz_io_uring_setup(0x2203, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() [ 260.025660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 17:15:54 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() [ 260.093127] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 17:15:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r2 = dup2(r0, r1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xb, 0x10, r2, 0xa3ba2000) 17:15:54 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() 17:15:55 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:15:55 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) fork() [ 260.316744] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:15:55 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) fork() 17:15:55 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef2ffae8362d2f4d70771d0160ea7ad49cf5ae275637aef98e691291735b2bcaf3212a4267aba89ba9d96173f6", 0x66, 0x400}], 0x0, &(0x7f0000000140)={[{@journal_async_commit}, {@jqfmt_vfsv1}, {@commit}, {@dax}, {@jqfmt_vfsv0}, {@grpid}]}) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x35) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x12840, 0x0) r2 = geteuid() fchownat(r1, &(0x7f00000000c0)='./file0\x00', r2, 0x0, 0x400) 17:15:55 executing program 2: write(0xffffffffffffffff, &(0x7f0000000040)="2ccd876fafda6e65c46833aa876bbf6365547c4ad2f5a1bf09975ec193085928a01ca088ad8237fb813ba0f30e6ccfbfbcc0b570e809c3e627c3d55c", 0x3c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000011200)) [ 260.445219] loop7: detected capacity change from 0 to 2048 [ 260.452573] EXT4-fs warning (device loop7): ext4_fill_super:4104: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 260.455189] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 260.482038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.483908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.485795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 260.492450] loop7: detected capacity change from 0 to 2048 [ 260.501823] EXT4-fs warning (device loop7): ext4_fill_super:4104: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 260.503221] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm. 17:15:55 executing program 5: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40800}, 0x4004844) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:15:55 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) fork() 17:15:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='status\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x3) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000001640)=""/79, 0x4f}, {&(0x7f0000000200)=""/58, 0x3a}, {&(0x7f00000016c0)=""/100, 0x64}], 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/cpu', 0x6080, 0x0) dup3(0xffffffffffffffff, r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000014c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x5, 0x2, &(0x7f0000001a40)="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", 0x4}, 0x7) fstat(0xffffffffffffffff, &(0x7f0000001880)) r3 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x10, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2000, @fd=r1, 0x8, 0x100000000, 0xbc98, 0x10, 0x1, {0x2}}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x0, {0x7e}}, 0x6481) mount$9p_unix(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x1f381d, 0x0) unshare(0x48020200) [ 260.668013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.669772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.671432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.676995] Bluetooth: hci0: command 0x0406 tx timeout 17:16:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) faccessat2(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0x0, 0x0) getpgrp(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x1278, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r3 = syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x400, 0x5, &(0x7f00000003c0)=[{&(0x7f00000002c0)="23b1f7ab7903439650a0988e131a79d43040248c0d884fa14eec5b4e7e5be9aece7d99b1bf8a6b8ea326b9d7", 0x2c, 0x7}, {&(0x7f0000001e00)="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", 0x1000, 0x9}, {&(0x7f0000000300)="3674c53384699525aad9c300775d28b052e0788fc01f653a645ca7701ec21786a0bba1393107b902a10c9e3c", 0x2c, 0xfffffffffffeffff}, {&(0x7f0000000340)="61d79891ccd3", 0x6, 0x1f}, {&(0x7f00000006c0)="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", 0x134, 0x3f}], 0x20080, &(0x7f0000000540)={[{'K\xb7\x91F\x04\xc69x\xa0k\xd8\x99\xb9G\xb7\x05\x15\xd0\xeb\x13\xf9yG\x86\x8d\xf1\xbf\x96l\xbd\x92\xdaWV\x82\x16_CGZtKQ\xf3z\x7f.w\xd4U,a$\x8fB\xdf$\xc0\\M\xd6d\x94\x04/\x190~\x13\\\v\xf2\xf1\xb9\xb6\xe3n\xd4w\xe9\x1f\x82\x13\xd8\x9e\x15\x01`b\xc5\xf5\x82\x96\x93\xa1\x96&\x90\x05\xec'}, {}, {}, {'/dev/sr0\x00'}, {'/)-\''}, {}], [{@euid_gt={'euid>', 0xee00}}, {@audit}, {@dont_measure}, {@hash}]}) syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') pidfd_open(0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x8}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000000180000002ab23528ff6458a67a09cfbbff240b5c6b6b5c87353efc98f7c0d212664d3a90972a4a12e3105aee6f7243feca957a16b397c2dbe3e141c0f3011933ca1fef657b59ea646f0413089450e9791fbc4f7f1e6cffa9702715b0a618a5fa1b69e0bd145d6bc0b2c10e27adc370906ba9b019dd7533a21f44a1edb2040ea0f82fbee2414248f1151ce1480b67c31e92977fe52d4b07154fe369380d02d05def5a5100eca2778355a597fc7ca73ab1efe7f678826408d214d3e6273afe68f6", @ANYRES32, @ANYBLOB="12000000000000002e2f66696c653000"]) dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'security.capability\x00'}, {0x20, '/dev/sr0\x00'}, {0x20, '{'}, {0x20, 'security.capability\x00'}], 0xa, "4edf5e53741f200701af769a8fd0a0cc4f4a623f21f9f78e0a67"}, 0x5b) 17:16:09 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:16:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5e, 0x10240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300b98bbf06000000000000ff0000fcfffffffffffe02000000000000000000000000000a00403c02000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000e0ffffffffffffff000000000000000000000000000000ff00"/112], 0xb8}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa1718e78cc03220534500002c0000000000339078ac1414aaac1e000100000001001890780400"/58], 0x0) r1 = pidfd_open(0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000400)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r1, 0x0, 0x800, 0x2}) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x40000000, 0x0, 0x7fffffff, 0x6e}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) dup(r3) fcntl$notify(r2, 0x402, 0x12) syz_io_uring_setup(0x6a0a, &(0x7f00000001c0)={0x0, 0x1000424a, 0x2, 0x0, 0x31, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000003c0)) pipe2(&(0x7f00000014c0), 0xc000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) pread64(r4, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d000100"/18], 0x1c}}, 0x0) close_range(0xffffffffffffffff, r5, 0x0) 17:16:09 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x24}}, 0x24000800) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(r2, 0x3, 0x0, 0x8000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)=':\\,^\x00') r3 = perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX=r3, @ANYRES64, @ANYRESHEX=r4, @ANYRES32=r2, @ANYRESDEC=r5], 0x34}}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x470240, 0x0) 17:16:09 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) r6 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r10, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x4}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) r11 = dup(r1) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000280)={0xf0000001}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x1b, r2, 0x1, 0x5, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000180)={'sit0\x00', r2, 0x4, 0x1, 0x0, 0x9, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x40, 0x80, 0x9, 0x3}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r12, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x10) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x1, r2, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) 17:16:09 executing program 5: syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) r7 = fcntl$dupfd(r0, 0x0, r6) ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, 0x0) r8 = socket$unix(0x1, 0x0, 0x0) fcntl$dupfd(r7, 0x406, r8) 17:16:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r3 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r7, 0x80, &(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, 0x0, 0x0, 0x1}, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) 17:16:09 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 1) [ 274.721796] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.726483] FAULT_INJECTION: forcing a failure. [ 274.726483] name failslab, interval 1, probability 0, space 0, times 1 [ 274.728950] CPU: 1 PID: 5069 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 274.730459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 274.732247] Call Trace: [ 274.732828] dump_stack+0x107/0x167 [ 274.733618] should_fail.cold+0x5/0xa [ 274.734445] ? copy_process+0x3305/0x78b0 [ 274.735339] should_failslab+0x5/0x20 [ 274.736165] kmem_cache_alloc_node+0x55/0x330 [ 274.737140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 274.738279] copy_process+0x3305/0x78b0 [ 274.739156] ? __lock_acquire+0xbb1/0x5b00 [ 274.740084] ? lock_downgrade+0x6d0/0x6d0 [ 274.740987] ? __cleanup_sighand+0xb0/0xb0 [ 274.741917] ? lock_acquire+0x197/0x470 [ 274.742790] ? find_held_lock+0x2c/0x110 [ 274.743678] kernel_clone+0xe7/0x980 [ 274.744482] ? lock_downgrade+0x6d0/0x6d0 [ 274.745377] ? find_held_lock+0x2c/0x110 [ 274.746253] ? create_io_thread+0xf0/0xf0 [ 274.747145] ? ksys_write+0x12d/0x260 [ 274.747958] ? __mutex_unlock_slowpath+0xe1/0x600 [ 274.748984] __do_sys_fork+0x8a/0xc0 [ 274.749771] ? kernel_thread+0xf0/0xf0 [ 274.750626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 274.751105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 274.751733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 274.751750] ? trace_hardirqs_on+0x5b/0x180 [ 274.751771] ? syscall_enter_from_user_mode+0x1d/0x50 [ 274.751790] do_syscall_64+0x33/0x40 [ 274.751811] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 274.751832] RIP: 0033:0x7f2eb7a3db19 [ 274.759280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 274.763175] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 274.764768] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 274.766280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.767789] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 274.769283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.770785] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 274.795446] loop7: detected capacity change from 0 to 8257024 [ 274.860571] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 17:16:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') r1 = dup2(r0, 0xffffffffffffffff) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) pidfd_getfd(r1, r4, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0xfff, 0x0) 17:16:09 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 2) [ 275.095355] FAULT_INJECTION: forcing a failure. [ 275.095355] name failslab, interval 1, probability 0, space 0, times 0 [ 275.097829] CPU: 0 PID: 5087 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 275.099288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 275.101052] Call Trace: [ 275.101616] dump_stack+0x107/0x167 [ 275.102402] should_fail.cold+0x5/0xa [ 275.103214] ? create_object.isra.0+0x3a/0xa30 [ 275.104188] should_failslab+0x5/0x20 [ 275.104996] kmem_cache_alloc+0x5b/0x310 [ 275.105866] create_object.isra.0+0x3a/0xa30 [ 275.106806] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 275.107888] kmem_cache_alloc_node+0x169/0x330 [ 275.108871] copy_process+0x3305/0x78b0 [ 275.109724] ? __lock_acquire+0xbb1/0x5b00 [ 275.110638] ? lock_downgrade+0x6d0/0x6d0 [ 275.111525] ? __cleanup_sighand+0xb0/0xb0 [ 275.112431] ? lock_acquire+0x197/0x470 [ 275.113285] ? find_held_lock+0x2c/0x110 [ 275.114151] kernel_clone+0xe7/0x980 [ 275.114953] ? lock_downgrade+0x6d0/0x6d0 [ 275.115829] ? find_held_lock+0x2c/0x110 [ 275.116695] ? create_io_thread+0xf0/0xf0 [ 275.117575] ? ksys_write+0x12d/0x260 [ 275.118398] ? __mutex_unlock_slowpath+0xe1/0x600 [ 275.119440] __do_sys_fork+0x8a/0xc0 [ 275.120228] ? kernel_thread+0xf0/0xf0 [ 275.121075] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 275.122190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 275.123287] ? trace_hardirqs_on+0x5b/0x180 [ 275.124204] ? syscall_enter_from_user_mode+0x1d/0x50 [ 275.125300] do_syscall_64+0x33/0x40 [ 275.126091] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 275.127190] RIP: 0033:0x7f2eb7a3db19 [ 275.127980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 275.131866] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 275.133515] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 275.135042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.136562] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 275.138075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.139613] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:16:09 executing program 5: syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file2\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@sbsector}]}) [ 275.317997] ISOFS: Unable to identify CD-ROM format. 17:16:10 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 3) [ 275.389213] FAULT_INJECTION: forcing a failure. [ 275.389213] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 275.391853] CPU: 0 PID: 5096 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 275.393305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 275.395068] Call Trace: [ 275.395632] dump_stack+0x107/0x167 [ 275.396408] should_fail.cold+0x5/0xa [ 275.397221] __alloc_pages_nodemask+0x182/0x600 [ 275.398205] ? lock_downgrade+0x6d0/0x6d0 [ 275.399096] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 275.400370] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 275.401478] ? kmem_cache_alloc_node+0x2bc/0x330 [ 275.402498] copy_process+0x62b/0x78b0 [ 275.403331] ? __lock_acquire+0xbb1/0x5b00 [ 275.404247] ? lock_downgrade+0x6d0/0x6d0 [ 275.405125] ? __cleanup_sighand+0xb0/0xb0 [ 275.406029] ? lock_acquire+0x197/0x470 [ 275.406888] ? find_held_lock+0x2c/0x110 [ 275.407747] kernel_clone+0xe7/0x980 [ 275.408531] ? lock_downgrade+0x6d0/0x6d0 [ 275.409405] ? find_held_lock+0x2c/0x110 [ 275.410265] ? create_io_thread+0xf0/0xf0 [ 275.411150] ? ksys_write+0x12d/0x260 [ 275.411957] ? __mutex_unlock_slowpath+0xe1/0x600 [ 275.412983] __do_sys_fork+0x8a/0xc0 [ 275.413770] ? kernel_thread+0xf0/0xf0 [ 275.414615] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 275.415720] ? syscall_enter_from_user_mode+0x1d/0x50 [ 275.416807] ? trace_hardirqs_on+0x5b/0x180 [ 275.417720] ? syscall_enter_from_user_mode+0x1d/0x50 [ 275.418815] do_syscall_64+0x33/0x40 [ 275.419599] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 275.420682] RIP: 0033:0x7f2eb7a3db19 [ 275.421470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 275.425354] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 275.426971] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 275.428475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.429978] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 275.431485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.432991] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:16:10 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 4) [ 275.499170] FAULT_INJECTION: forcing a failure. [ 275.499170] name failslab, interval 1, probability 0, space 0, times 0 [ 275.501600] CPU: 0 PID: 5098 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 275.503031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 275.504741] Call Trace: [ 275.505298] dump_stack+0x107/0x167 [ 275.506053] should_fail.cold+0x5/0xa [ 275.506871] ? prepare_creds+0x25/0x5e0 [ 275.507695] should_failslab+0x5/0x20 [ 275.508480] kmem_cache_alloc+0x5b/0x310 [ 275.509322] ? lock_downgrade+0x6d0/0x6d0 [ 275.510186] prepare_creds+0x25/0x5e0 [ 275.510977] copy_creds+0x72/0x580 [ 275.511709] copy_process+0xfef/0x78b0 [ 275.512510] ? __lock_acquire+0xbb1/0x5b00 [ 275.513381] ? lock_downgrade+0x6d0/0x6d0 [ 275.514247] ? __cleanup_sighand+0xb0/0xb0 [ 275.515133] ? lock_acquire+0x197/0x470 [ 275.515960] ? find_held_lock+0x2c/0x110 [ 275.516799] kernel_clone+0xe7/0x980 [ 275.517565] ? lock_downgrade+0x6d0/0x6d0 [ 275.518418] ? find_held_lock+0x2c/0x110 [ 275.519254] ? create_io_thread+0xf0/0xf0 [ 275.520094] ? ksys_write+0x12d/0x260 [ 275.520881] ? __mutex_unlock_slowpath+0xe1/0x600 [ 275.521874] __do_sys_fork+0x8a/0xc0 [ 275.522640] ? kernel_thread+0xf0/0xf0 [ 275.523461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 275.524518] ? syscall_enter_from_user_mode+0x1d/0x50 [ 275.525546] ? trace_hardirqs_on+0x5b/0x180 [ 275.526422] ? syscall_enter_from_user_mode+0x1d/0x50 [ 275.527465] do_syscall_64+0x33/0x40 [ 275.528219] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 275.529245] RIP: 0033:0x7f2eb7a3db19 [ 275.529992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 275.533697] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 275.535239] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 275.536673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.538100] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 275.539537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.540967] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 275.601481] ISOFS: Unable to identify CD-ROM format. 17:16:10 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget(0x1, 0x4000, 0xf97d709ca5b5f77e, &(0x7f0000ffc000/0x4000)=nil) r2 = shmget(0x2, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r3 = fork() ptrace$setopts(0x4200, r3, 0x0, 0x100011) ptrace(0x10, r3) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xffe3) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x74, 0x14000) sendmsg$nl_generic(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00200003000200328bd7000fddbdf257f000000b78262e6f0e1e48727ec6b56998507cb3bcafb5220646edd97b21cabcb67153c6646c88a4303050accc8f174e70fc1364a938f446e860efc293ccf095cba33d94b06740ecf0879a5642c87783d325d19aeb6f1faff7dc33aca7d553682655f608a4b41ec20ddde264f683aade96fc995974bfc04205b3ff9054e1e021302467d160d4333169617838714c8bbee9a63cf69e92448d6660fca27495d52b990018676d904c9d1dbbb5d67e26ffcc1b0d2f0b83a350c512cc69497ba0e2a8fb5080010004000000042005e807a9491b7bb51fa2f307a36f3fc6e9f47fa671be4eb70e9865ed208", @ANYRES32=0xee00, @ANYBLOB='\b\x00\"\x00', @ANYRES32=r5, @ANYBLOB='\b\x00;\x00', @ANYRES32=r6, @ANYBLOB="0805450000000000baef", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="6100678008003200e000000114006500fe8000000000000000000000000000331c3f98e5f97b518a6787bbcf95d8e4999acb3ab68a6d344d6cb35e1aedab44ca7cbbb75333a18e1379708b970951bb1c4b6a3152fa4a4084d75fb33698766ea275000000080004000800000000"], 0x2a0}, 0x1, 0x0, 0x0, 0x40}, 0x8040) ptrace$cont(0x7, r3, 0x8, 0x8) [ 275.660964] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.718263] loop7: detected capacity change from 0 to 8257024 [ 280.301006] Bluetooth: hci2: command 0x0409 tx timeout [ 282.349028] Bluetooth: hci2: command 0x041b tx timeout [ 284.397023] Bluetooth: hci2: command 0x040f tx timeout [ 285.041549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.043630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.060628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.089174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.090861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.093036] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 285.249960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 285.388668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.390361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.393575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 285.398396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.445051] Bluetooth: hci2: command 0x0419 tx timeout 17:16:32 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:16:32 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0xfff, 0x100100) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = signalfd4(r1, &(0x7f0000000280)={[0x7]}, 0x8, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8b8, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}}, 0x20040844) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[{&(0x7f0000000580)}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c0353", 0x6d, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC, @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000040)) 17:16:32 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000001000010400000000000000960000090005000000000000000500008058000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac560104ae744f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfac4f065ffe3cb0ac3a25ca5c1ff5a7d310a65a63eb47d43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb4c1c21b6c873ce49854f9149a62f64ea4ff187fa6628397f9891a1f301010000d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10c03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd8ac96f4ac935755e976515d5387d8ed13cc5e45951deec4790aad73f2a0d0ea95e61d823c36e7917930000000000000000809a8b102b27b8e1c2e5be95a7667982602b021ee8a5a44acf857c53efab7324bb2c969011de6cd005437eb40ab05d2130246d333887233ece9854bad5688ac31fde854ddfe81a623cc89677a2562d59ac9a686c2a3c4df2af66c6afbc6e8c911906479371d9eadf43ac91738af8b172f13943e8bacfafc6d4b363f4d8d37311f006efb5491cac3b588992ea89d1dbf1d2696736422803e81d69b9e602255c8139d49aadcb17e54ca7ee5490f9f00d7d0f1cd439556c7b667bb8c6ce9cd634ec925821f91ebcce61bec382874d4a3d9cd1dc94ca0d92049a0b8ba1309f0c4dac2566532713f833eaa74c2b80701eb5357eac306d1ed0b1dc9882ca31e3c1759f3bd20ecd526f129cba6cb60731620df76b9e9bd131149b34e35b2fc6926651ac4fdf32d3171a501e1d160c70c4bd370e494a8994d7a63af6e5b011dab4b7437a267c70f4867d66aba42a7833d17a507ad627abd25ccb786be5319db387d3f82186bdf5bd87b04a9ac8ce"], 0x24}}, 0x24000800) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(r2, 0x3, 0x0, 0x8000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)=':\\,^\x00') r3 = perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX=r3, @ANYRES64, @ANYRESHEX=r4, @ANYRES32=r2, @ANYRESDEC=r5], 0x34}}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x470240, 0x0) 17:16:32 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget(0x1, 0x4000, 0xf97d709ca5b5f77e, &(0x7f0000ffc000/0x4000)=nil) r2 = shmget(0x2, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r3 = fork() ptrace$setopts(0x4200, r3, 0x0, 0x100011) ptrace(0x10, r3) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xffe3) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x74, 0x14000) sendmsg$nl_generic(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00200003000200328bd7000fddbdf257f000000b78262e6f0e1e48727ec6b56998507cb3bcafb5220646edd97b21cabcb67153c6646c88a4303050accc8f174e70fc1364a938f446e860efc293ccf095cba33d94b06740ecf0879a5642c87783d325d19aeb6f1faff7dc33aca7d553682655f608a4b41ec20ddde264f683aade96fc995974bfc04205b3ff9054e1e021302467d160d4333169617838714c8bbee9a63cf69e92448d6660fca27495d52b990018676d904c9d1dbbb5d67e26ffcc1b0d2f0b83a350c512cc69497ba0e2a8fb5080010004000000042005e807a9491b7bb51fa2f307a36f3fc6e9f47fa671be4eb70e9865ed208", @ANYRES32=0xee00, @ANYBLOB='\b\x00\"\x00', @ANYRES32=r5, @ANYBLOB='\b\x00;\x00', @ANYRES32=r6, @ANYBLOB="0805450000000000baef", @ANYRES32=r7, @ANYBLOB="f8005700503eb5e310222b1e9a9a13a4b5e1e4b0aab398eb3c86b28c0c774baab3e05151733f7663a52d182bbce560d020c3cd6a2db1fd567b1733301954f6b9c13d7ce347ae7a7b2b5de099762e384d3f4461002096ce5634e0903e195022e22aeba08c57c1103333a906e70e90133993de015e1fbdf86013be9738e693302b5e13df53b6676816dbeaef1297b1aafd281a27f6eb2730ed0618674f3397882731b5feee8abcfc65f8f4a7d4452ad92f0d7f15582d6fc3b08faa98ff7fafb7078ded6e4e64da97ef2cf26a000e03fe439546aec942639427fe1fb13c61a8043b8386fec967b495657ded150b2e3a4a484a4cb0acf9b2883214000400200100000000000000000000000000000400960008006600", @ANYRES32=r0, @ANYBLOB="6100678008003200e000000114006500fe8000000000000000000000000000331c3f98e5f97b518a6787bbcf95d8e4999acb3ab68a6d344d6cb35e1aedab44ca7cbbb75333a18e1379708b970951bb1c4b6a3152fa4a4084d75fb33698766ea275000000080004000800000000"], 0x2a0}, 0x1, 0x0, 0x0, 0x40}, 0x8040) ptrace$cont(0x7, r3, 0x8, 0x8) 17:16:32 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 5) 17:16:32 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:16:32 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x1, 0x2001) write$binfmt_elf64(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x712) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x10000, 0x28) syz_io_uring_setup(0x2203, &(0x7f0000000440)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000140)=0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "f038779db49df8c8c974dd18e49f81be7bcc1259ba726003d07140eeb3a2467de631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c739157c00", 0x4000}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee00, 0xee00) keyctl$setperm(0x5, r4, 0x16020228) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) r6 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x100a}, 0x0, {0x0, r10}}, 0x6c) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r9, r0, r6], 0x3) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x1, 0x0, 0x9, 0x3, 0x0, 0x100000001, 0x2100, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0xfff, 0xfffffffffffffffa}, 0x1, 0x9, 0x7fffffff, 0x7, 0x9e6, 0x58, 0x27, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xb, r1, 0x0) 17:16:33 executing program 5: syz_emit_ethernet(0x92, &(0x7f0000000040)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x1a, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010101, @local, {[@noop, @timestamp_prespec={0x44, 0x2c, 0x21, 0x3, 0xb, [{@broadcast, 0x8000}, {@multicast2, 0x35}, {@local, 0x7}, {@broadcast, 0x6}, {@private=0xa010102, 0x6}]}, @lsrr={0x83, 0xf, 0xac, [@loopback, @private=0xa010102, @loopback]}, @end, @ssrr={0x89, 0xb, 0x71, [@loopback, @dev={0xac, 0x14, 0x14, 0x1c}]}, @timestamp_addr={0x44, 0xc, 0x26, 0x1, 0xc, [{@loopback, 0x70}]}]}}, @redirect={0x5, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local}}}}}}, 0x0) [ 298.295742] FAULT_INJECTION: forcing a failure. [ 298.295742] name failslab, interval 1, probability 0, space 0, times 0 [ 298.298179] CPU: 0 PID: 5588 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 298.299654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 298.301443] Call Trace: [ 298.302010] dump_stack+0x107/0x167 [ 298.302818] should_fail.cold+0x5/0xa [ 298.303635] ? prepare_creds+0x25/0x5e0 [ 298.304483] should_failslab+0x5/0x20 [ 298.305299] kmem_cache_alloc+0x5b/0x310 [ 298.306174] ? lock_downgrade+0x6d0/0x6d0 [ 298.307073] prepare_creds+0x25/0x5e0 [ 298.307888] copy_creds+0x72/0x580 [ 298.308654] copy_process+0xfef/0x78b0 [ 298.309489] ? __lock_acquire+0xbb1/0x5b00 [ 298.310407] ? lock_downgrade+0x6d0/0x6d0 [ 298.311307] ? __cleanup_sighand+0xb0/0xb0 [ 298.312217] ? lock_acquire+0x197/0x470 [ 298.313073] ? find_held_lock+0x2c/0x110 [ 298.313944] kernel_clone+0xe7/0x980 [ 298.314755] ? lock_downgrade+0x6d0/0x6d0 [ 298.315638] ? find_held_lock+0x2c/0x110 [ 298.316506] ? create_io_thread+0xf0/0xf0 [ 298.317395] ? ksys_write+0x12d/0x260 [ 298.318211] ? __mutex_unlock_slowpath+0xe1/0x600 [ 298.319253] __do_sys_fork+0x8a/0xc0 [ 298.320047] ? kernel_thread+0xf0/0xf0 [ 298.320890] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 298.322011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 298.323118] ? trace_hardirqs_on+0x5b/0x180 [ 298.324045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 298.325141] do_syscall_64+0x33/0x40 [ 298.325932] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 298.327026] RIP: 0033:0x7f2eb7a3db19 [ 298.327826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 298.331767] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 298.333398] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 298.334928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.336448] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 298.337941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.339438] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 298.389084] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:16:33 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r1, 0x19) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, r0, "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", "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"}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x26dd, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xffff7e15) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000228c78561800b7bcb6f353b37eba2623045734a69b59ed9d10e337a51087b00d389a08f8b1df3b7a2d5d8a4200d3e675f7c7e70000000000000000b9000000000000", @ANYRES32=r2, @ANYBLOB="9300"/17]) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f00000004c0)) 17:16:33 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x5, {{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8}}, 0x1, 0x3, [{{0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffa}}, {{0xa, 0x4e24, 0x3000, @local, 0x740}}, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x9}}]}, 0x210) [ 298.907990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.014520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.016097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.017732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:16:46 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 6) 17:16:46 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget(0x1, 0x4000, 0xf97d709ca5b5f77e, &(0x7f0000ffc000/0x4000)=nil) r2 = shmget(0x2, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r3 = fork() ptrace$setopts(0x4200, r3, 0x0, 0x100011) ptrace(0x10, r3) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xffe3) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x74, 0x14000) sendmsg$nl_generic(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00200003000200328bd7000fddbdf257f000000b78262e6f0e1e48727ec6b56998507cb3bcafb5220646edd97b21cabcb67153c6646c88a4303050accc8f174e70fc1364a938f446e860efc293ccf095cba33d94b06740ecf0879a5642c87783d325d19aeb6f1faff7dc33aca7d553682655f608a4b41ec20ddde264f683aade96fc995974bfc04205b3ff9054e1e021302467d160d4333169617838714c8bbee9a63cf69e92448d6660fca27495d52b990018676d904c9d1dbbb5d67e26ffcc1b0d2f0b83a350c512cc69497ba0e2a8fb5080010004000000042005e807a9491b7bb51fa2f307a36f3fc6e9f47fa671be4eb70e9865ed208", @ANYRES32=0xee00, @ANYBLOB='\b\x00\"\x00', @ANYRES32=r5, @ANYBLOB='\b\x00;\x00', @ANYRES32=r6, @ANYBLOB="0805450000000000baef", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="6100678008003200e000000114006500fe8000000000000000000000000000331c3f98e5f97b518a6787bbcf95d8e4999acb3ab68a6d344d6cb35e1aedab44ca7cbbb75333a18e1379708b970951bb1c4b6a3152fa4a4084d75fb33698766ea275000000080004000800000000"], 0x2a0}, 0x1, 0x0, 0x0, 0x40}, 0x8040) ptrace$cont(0x7, r3, 0x8, 0x8) 17:16:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x20010, r2, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r5) r6 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:apt_var_cache_t:s0\x00', 0x25, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) r7 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000440)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x1, 0x1}, 0x4) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1c41, &(0x7f0000000340)={0x0, 0x7a65, 0x1, 0x0, 0x229, 0x0, r7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000002924ca78022e9"], 0x10}}, 0x0) 17:16:46 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r1, 0x19) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, r0, "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", "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"}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x26dd, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xffff7e15) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000228c78561800b7bcb6f353b37eba2623045734a69b59ed9d10e337a51087b00d389a08f8b1df3b7a2d5d8a4200d3e675f7c7e70000000000000000b9000000000000", @ANYRES32=r2, @ANYBLOB="9300"/17]) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f00000004c0)) 17:16:46 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0xfff, 0x100100) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = signalfd4(r1, &(0x7f0000000280)={[0x7]}, 0x8, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8b8, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}}, 0x20040844) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[{&(0x7f0000000580)}, {&(0x7f0000000680)="c8b2e2f56915c164d1c3a6ba7c6c4bacd083ce797d8d47e3020dc084611ac43437f3bf0465f4d0ff7b715c8608cb46cf17e3a4ce3306a7f9a681e4a790ed0e332b9981a4197c46eae8f97143a884138d23745b52ea994c900dd244754a43b8a887458419c220c691f1899c0353", 0x6d, 0x6fe7}], 0x82024, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC, @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000040)) 17:16:46 executing program 6: perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x44307, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x121042, 0x17) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd, 0x7ff, 0x0, 0xa48f, 0x4, 0x1}, 0x3) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x67, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0)=0x9, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4007, @fd_index=0xc, 0xffffffff00000000, 0x101, 0x6, 0x1, 0x0, {0x2}}, 0x2) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0xa8) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000580)={{r3}, "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"}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 17:16:46 executing program 7: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="23000000ceb2d5163af6f3c8f719ac60df190361165190aef1e020ec66c143fb1af3a4b134475632860e39b7bcf226c66ce402ecde4324b55293", @ANYRES16=r5, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="140003801000038002000180070002002f2c0000"], 0x34}}, 0x0) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x34, r10, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0x2, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/,\x00'}]}]}]}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000e80)={0x5d8, 0x0, 0x2, 0x70bd2b, 0x25dfdb7d, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xea}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb47}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8000, 0x5, 0x2, 0x200}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0xff, 0x2, 0xfffffeff}, {0x7, 0x4}, {0x8, 0x5, 0x5, 0x8}, {0x1000, 0x19, 0x1, 0x5}, {0xe7f, 0x1, 0x3, 0x5}, {0x7, 0x8, 0xfa, 0xfe5}, {0x3f, 0x0, 0x1, 0x8}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x7f, 0x9, 0x2}, {0x4, 0x7f, 0x74, 0x3f}, {0x7, 0x1, 0x2, 0x9}]}}}]}}]}, 0x5d8}, 0x1, 0x0, 0x0, 0x20000080}, 0x40801) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc0000001d00210c00000000000000000400020014001180809801a7b0c7dba094e04e365ab1db75f251c743092f709fd86b008c800c002600c50000000000000060e70abfd6747aa579ff34503e5e099fe49c9e0bf04f9f65262066a06e231607b7982f978ef362196ef5c94170b0ba6c7bb45010d9d0a9f486cf828a9fa4638632652a58b51d7cd5f08b761d2b5dd1e52a30181fe7e70022c9831b0028003f8008004f00fe66452a067e1a2c0ee5de3ebf43c7e5d7e4ecd1c747460002bc30f2bb24700c9a87bafec4b952caa6619aa326b9d28729c9ffffffa7cb8129fea94995d8b1c0a291250f837dc1b5cbaa3ba528440d5c4df76b8877e08e3cd9509eaca6b6e393bc6dd26239c0ee42791259aca6c57f37626912d6724ac1386d7f00fcf78c23fb1b5dd84181a751d60444012934b0d162618834c91d584eead37adadd1f321fad2b139b3639507a7fe9717b44409c3f27700cfa3aacc007ab89eb31f33d23b0fdb68010a703c64f6ada1ca8e6d79e7a3752b168a20807d30c52c168f6ff234cd28ef4fb1c", @ANYBLOB="15ffbe03d3e6a8a896dfcc19f525f4e6e66834e0995e3b41a790ce446a6f129c323732370715edea0c1146ca56d87c4224eeeec9a9084fc714984bf9bea484e41d7913492983e5daa32819", @ANYBLOB="0b00080013192f262f2d0000080000006401010008000a00ac1e0001"], 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17:16:46 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 311.821184] FAULT_INJECTION: forcing a failure. [ 311.821184] name failslab, interval 1, probability 0, space 0, times 0 [ 311.823675] CPU: 1 PID: 5633 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 311.825106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 311.826861] Call Trace: [ 311.827426] dump_stack+0x107/0x167 [ 311.828200] should_fail.cold+0x5/0xa [ 311.829020] ? security_prepare_creds+0x112/0x190 [ 311.830043] should_failslab+0x5/0x20 [ 311.830852] __kmalloc+0x72/0x390 [ 311.831607] security_prepare_creds+0x112/0x190 [ 311.832592] prepare_creds+0x452/0x5e0 [ 311.833419] copy_creds+0x72/0x580 [ 311.834172] copy_process+0xfef/0x78b0 [ 311.835023] ? __lock_acquire+0xbb1/0x5b00 [ 311.835930] ? lock_downgrade+0x6d0/0x6d0 [ 311.836835] ? __cleanup_sighand+0xb0/0xb0 [ 311.837747] ? lock_acquire+0x197/0x470 [ 311.838602] ? find_held_lock+0x2c/0x110 [ 311.839473] kernel_clone+0xe7/0x980 [ 311.840259] ? lock_downgrade+0x6d0/0x6d0 [ 311.841139] ? find_held_lock+0x2c/0x110 [ 311.841995] ? create_io_thread+0xf0/0xf0 [ 311.842886] ? ksys_write+0x12d/0x260 [ 311.843705] ? __mutex_unlock_slowpath+0xe1/0x600 [ 311.844730] __do_sys_fork+0x8a/0xc0 [ 311.845529] ? kernel_thread+0xf0/0xf0 [ 311.846377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 311.847503] ? syscall_enter_from_user_mode+0x1d/0x50 [ 311.848591] ? trace_hardirqs_on+0x5b/0x180 [ 311.849509] ? syscall_enter_from_user_mode+0x1d/0x50 [ 311.850610] do_syscall_64+0x33/0x40 [ 311.851419] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 311.852517] RIP: 0033:0x7f2eb7a3db19 [ 311.853298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 311.857222] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 311.858834] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 311.860335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.861866] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 311.863389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.864896] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 312.027853] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.7'. 17:16:46 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 7) 17:16:46 executing program 2: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) 17:16:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1f}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8d0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="280000001d00210c00003f87000000000000000014000100fc0207000000000000000000009e669aef8a4f1e09b8adcbe2490116c56dc1b6325032217c5a32097e6d9c7eba7d48b1353691bbeb3471d8e5be5efb67307c5194d4d5619ffb4d19a9890ed576fe40144cf7206ef055dcc8d9b9185fa9c356b775e49eb1fe0cc015689d717330e9d45e55133631f4908db43601f0bf6863d288036fa492db184e098119a891595b444e7850986fd7b4216aa4c4992a4cb2fe2a2bd3a0488ecb5c2b48a5086b9f77fdd8daf04812db3f5090f142a5a771022ca7f016b4d218591d6658937bdc1386b0050aa78345"], 0x28}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000001400)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@chain) r3 = memfd_create(&(0x7f0000000080)='builtin_and_secondary_trusted\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0xfff}}, './file0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000002d00210c00000000fbdbdf250000000053000080c8937b3cad1fddce1c9ad60f060736682b26be73f50df62ea9546cd9569900ba302c2e6cb24f2bfca803000000c8a7ec4a546683d9aa25d99c36ce0040024daf60ff2795e8a3d5b2858a6104000b0000a25901d7e636a6ca5062934b324ad9a8e4f4f089e213ea19f048fa7ae0afd5bb4ececc0224713909761940a7e1"], 0x68}}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000002c0)=0x2, 0x4) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000c80)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000140)=0x4) lseek(r0, 0x0, 0x3) [ 312.135166] FAULT_INJECTION: forcing a failure. [ 312.135166] name failslab, interval 1, probability 0, space 0, times 0 [ 312.137701] CPU: 1 PID: 5644 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 312.139221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 312.141042] Call Trace: [ 312.141621] dump_stack+0x107/0x167 [ 312.142438] should_fail.cold+0x5/0xa [ 312.143294] ? create_object.isra.0+0x3a/0xa30 [ 312.144294] should_failslab+0x5/0x20 [ 312.145138] kmem_cache_alloc+0x5b/0x310 [ 312.146060] create_object.isra.0+0x3a/0xa30 [ 312.147065] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 312.148184] __kmalloc+0x16e/0x390 [ 312.148978] security_prepare_creds+0x112/0x190 [ 312.150036] prepare_creds+0x452/0x5e0 [ 312.150908] copy_creds+0x72/0x580 [ 312.151713] copy_process+0xfef/0x78b0 [ 312.152578] ? __lock_acquire+0xbb1/0x5b00 [ 312.153521] ? lock_downgrade+0x6d0/0x6d0 [ 312.154464] ? __cleanup_sighand+0xb0/0xb0 [ 312.155432] ? lock_acquire+0x197/0x470 [ 312.156315] ? find_held_lock+0x2c/0x110 [ 312.157213] kernel_clone+0xe7/0x980 [ 312.158043] ? lock_downgrade+0x6d0/0x6d0 [ 312.158995] ? find_held_lock+0x2c/0x110 [ 312.159988] ? create_io_thread+0xf0/0xf0 [ 312.160889] ? ksys_write+0x12d/0x260 [ 312.161720] ? __mutex_unlock_slowpath+0xe1/0x600 [ 312.162785] __do_sys_fork+0x8a/0xc0 [ 312.163581] ? kernel_thread+0xf0/0xf0 [ 312.164429] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 312.165563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 312.166673] ? trace_hardirqs_on+0x5b/0x180 [ 312.167612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 312.168723] do_syscall_64+0x33/0x40 [ 312.169537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 312.170644] RIP: 0033:0x7f2eb7a3db19 [ 312.171449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 312.175430] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 312.177076] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 312.178611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.180155] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 312.181699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.183241] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 312.191622] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 17:16:47 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r1, 0x19) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, r0, "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", "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"}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x26dd, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xffff7e15) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000228c78561800b7bcb6f353b37eba2623045734a69b59ed9d10e337a51087b00d389a08f8b1df3b7a2d5d8a4200d3e675f7c7e70000000000000000b9000000000000", @ANYRES32=r2, @ANYBLOB="9300"/17]) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x5) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f00000004c0)) 17:16:47 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:16:47 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_io_uring_setup(0x3c4a, &(0x7f0000000000)={0x0, 0xa738, 0x1, 0x0, 0x1b2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x33a0, &(0x7f0000000100)={0x0, 0xbc05, 0x1, 0x1, 0x2e1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) pwrite64(r4, &(0x7f00000002c0)="b9a79cadb6995f4a8683bec764572279852321a2a4a210615de76b7dd284859dd6103cf6bc9d7c09b01131e37645600ba2962ecc974d6509cb9eb80ad3cde2cbb9826cfeaadb7dd77edf4f1259bec41c1e431c1b93887d41b9fd21647085882f56fa39f4c0a4c279a615247ef5a84cb3ba1eba5116bee3414a8f0cbc920b4e702255f1e3550743e1717f730f293e70cb74b2b4a71c395c0ee7962f2a80116a8280e385e74665e49adf0ecb3a58e7841322076564bfc89646079d110e53dffeda8bbba9d62240e54ff6a85acb6a", 0xcd, 0x4afb) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd_index=0x2, 0xadef, 0x100, 0x100, 0x3, 0x1, {0x0, r8}}, 0x401) 17:16:47 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 8) 17:16:47 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_io_uring_setup(0x3c4a, &(0x7f0000000000)={0x0, 0xa738, 0x1, 0x0, 0x1b2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x33a0, &(0x7f0000000100)={0x0, 0xbc05, 0x1, 0x1, 0x2e1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) pwrite64(r4, &(0x7f00000002c0)="b9a79cadb6995f4a8683bec764572279852321a2a4a210615de76b7dd284859dd6103cf6bc9d7c09b01131e37645600ba2962ecc974d6509cb9eb80ad3cde2cbb9826cfeaadb7dd77edf4f1259bec41c1e431c1b93887d41b9fd21647085882f56fa39f4c0a4c279a615247ef5a84cb3ba1eba5116bee3414a8f0cbc920b4e702255f1e3550743e1717f730f293e70cb74b2b4a71c395c0ee7962f2a80116a8280e385e74665e49adf0ecb3a58e7841322076564bfc89646079d110e53dffeda8bbba9d62240e54ff6a85acb6a", 0xcd, 0x4afb) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd_index=0x2, 0xadef, 0x100, 0x100, 0x3, 0x1, {0x0, r8}}, 0x401) 17:16:47 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e40)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x54, 0x3) r4 = syz_io_uring_setup(0x49c6, &(0x7f0000000380)={0x0, 0x5265, 0x2, 0xffffffff, 0x11b}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) dup(r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r4, 0x8000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x889c7cb2ceb4d95c, 0x0, 0x0, 0x1, {0x0, r7}}, 0x101) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r0, &(0x7f00000001c0)={0x505200, 0xb, 0x1}, &(0x7f0000000180)='./file1\x00', 0x18, 0x0, 0x23456, {0x0, r7}}, 0x80000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd, 0x7, &(0x7f00000000c0)="7933dd5eb3033f99b70eedfb89863185b0fdeb80dfad79dea96911f3827ce739406636c894ee5f", 0x27, 0x12, 0x1, {0x0, r7}}, 0x9) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) [ 312.729754] FAULT_INJECTION: forcing a failure. [ 312.729754] name failslab, interval 1, probability 0, space 0, times 0 [ 312.732274] CPU: 1 PID: 5676 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 312.733824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 312.735499] Call Trace: [ 312.736037] dump_stack+0x107/0x167 [ 312.736759] should_fail.cold+0x5/0xa [ 312.737506] ? __delayacct_tsk_init+0x1b/0x80 [ 312.738372] should_failslab+0x5/0x20 [ 312.739118] kmem_cache_alloc+0x5b/0x310 [ 312.739910] ? prepare_creds+0x466/0x5e0 [ 312.740853] __delayacct_tsk_init+0x1b/0x80 [ 312.741691] copy_process+0x3399/0x78b0 [ 312.742469] ? __lock_acquire+0xbb1/0x5b00 [ 312.743302] ? lock_downgrade+0x6d0/0x6d0 [ 312.744116] ? __cleanup_sighand+0xb0/0xb0 [ 312.744943] ? lock_acquire+0x197/0x470 [ 312.745717] ? find_held_lock+0x2c/0x110 [ 312.746504] kernel_clone+0xe7/0x980 [ 312.747236] ? lock_downgrade+0x6d0/0x6d0 [ 312.748026] ? find_held_lock+0x2c/0x110 [ 312.748810] ? create_io_thread+0xf0/0xf0 [ 312.749610] ? ksys_write+0x12d/0x260 [ 312.750347] ? __mutex_unlock_slowpath+0xe1/0x600 [ 312.751281] __do_sys_fork+0x8a/0xc0 [ 312.751990] ? kernel_thread+0xf0/0xf0 [ 312.752748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 312.753754] ? syscall_enter_from_user_mode+0x1d/0x50 [ 312.754733] ? trace_hardirqs_on+0x5b/0x180 [ 312.755570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 312.756551] do_syscall_64+0x33/0x40 [ 312.757268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 312.758244] RIP: 0033:0x7f2eb7a3db19 [ 312.758964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 312.762445] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 312.763907] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 312.765267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.766625] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 312.767987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.769335] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 313.013538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5683 comm=syz-executor.0 [ 313.035379] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. 17:16:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="12da1d39224f9f90c7b1ad260564227c6ffe1273468f6871584dea34a8a808a2c76a8912f01f9f04842411e6af5c78849bb297c52061a6c0dc392486af613739f69b3ec10bf56b4206184bd0ef97d83238d584e7b4b4213b8f7f4c1e3523e51eb6470370c9d0b39b6660834a692535843ad6a521ad5d41e00b3b6317800846dd72c40026d2e79eb21ac9ec6762e235465e9f9449b788aa266f34538f4d5441c02f4ade0d9d7a344fdfd5c39652b6de548d1828eb42570ec1a4cbbd6528b5b15a5f5785da94498b3cb02e41647531f57623581145403d437ce760a532d4aba712723cd73b0820a63b117acf16d7f6bd1108dbdfa363696d"], 0xb) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 17:16:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) faccessat2(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[0x0]) r3 = syz_io_uring_setup(0x3873, &(0x7f00000001c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x68}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x3ff9, &(0x7f00000001c0)={0x0, 0x40000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000180000002ab23528ff6458a67a09cfbbff240b5c6b6b5c87353efc98f7c0d212664d3a90972a4a12e3105aee6f7243feca16b397c279fb4c957cebe7295077ad1a5d8fdbe3e141c0f3011933ca1fef657b59ea646f0413089450e9791fbc4f7f1e6cffa9702715b0a618a5fa1b69e0bd145d6bc0b2c10e27adc370906ba9b019dd7533a21f44a1edb2040ea0f82fbee2414248f1151ce1480b67c31e92977fe52d4b07154fe369380d02d05def5a5100eca2778355a597fc7ca73ab1efe7f678826408d254d3e6273afe68f63278", @ANYRES32, @ANYBLOB="12000000000082682be53042de8c22e3cfeb20002e2f66ec00653400", @ANYRESHEX=r1, @ANYRES32=r5, @ANYRES16=r2, @ANYBLOB="693e6c40b617573c11e653f8f695c091ca1a1cded1d6c96f072408a91751466f6041d5b4c2442d448b25732b1bf494b49f0e971d566952a4c8500aeff78e584717a1179753abc497afb2773e6e4c748119482bac2cad618b63f48113d3163f982afbd9e5555b350c2b3bd421187217c95e95d7a640e248de6697bb1cbe11397804a790f71ab3ae42d56111be4d91afe333a0fa5f3a83032303becef83144b323e3ef6bc327493b1173865924e942", @ANYRES32, @ANYRES16=r4]) dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65300a625d851824f8ec401c0b15a46de6d65070df6125513b04de41fda6482321a8caccc5a8dc4dae74f8893455c4b4b82ead9b9bb83216f1f1431f71e887e6b63bbe7afc5bdd53c4ee151fcfc42612be2ba54224aabea3da5523940cb15c533987"], 0xb) 17:16:47 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:16:47 executing program 5: r0 = creat(&(0x7f0000000200)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) io_setup(0x5, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pipe2(&(0x7f0000000280), 0x4000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 313.119507] FAULT_INJECTION: forcing a failure. [ 313.119507] name failslab, interval 1, probability 0, space 0, times 0 [ 313.121213] CPU: 1 PID: 5693 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 313.122201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 313.123392] Call Trace: [ 313.123778] dump_stack+0x107/0x167 [ 313.124303] should_fail.cold+0x5/0xa [ 313.124835] ? create_object.isra.0+0x3a/0xa30 [ 313.125464] should_failslab+0x5/0x20 [ 313.125991] kmem_cache_alloc+0x5b/0x310 [ 313.126564] create_object.isra.0+0x3a/0xa30 [ 313.127184] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 313.127882] kmem_cache_alloc+0x159/0x310 write$binfmt_elf64(r11, &(0x7f0000000840)=ANY=[@ANYBLOB="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"/6776], 0x1a78) creat(&(0x7f00000001c0)='./file1\x00', 0x16) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x34, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0x2, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/,\x00'}]}]}]}]}, 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000040)={'tunl0\x00', r12, 0x80, 0x20, 0x0, 0x6, {{0x1b, 0x4, 0x1, 0x0, 0x6c, 0x65, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@rr={0x7, 0x13, 0xf8, [@multicast2, @private=0xa010102, @local, @private=0xa010100]}, @rr={0x7, 0x13, 0xcc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @private=0xa010101, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xfb, [@empty, @local]}, @lsrr={0x83, 0x17, 0x56, [@empty, @multicast2, @local, @remote, @empty]}, @ssrr={0x89, 0x7, 0x3a, [@local]}, @end, @noop]}}}}}) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x800000}]) [ 313.128463] ? prepare_creds+0x466/0x5e0 17:16:47 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_io_uring_setup(0x3c4a, &(0x7f0000000000)={0x0, 0xa738, 0x1, 0x0, 0x1b2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x33a0, &(0x7f0000000100)={0x0, 0xbc05, 0x1, 0x1, 0x2e1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) pwrite64(r4, &(0x7f00000002c0)="b9a79cadb6995f4a8683bec764572279852321a2a4a210615de76b7dd284859dd6103cf6bc9d7c09b01131e37645600ba2962ecc974d6509cb9eb80ad3cde2cbb9826cfeaadb7dd77edf4f1259bec41c1e431c1b93887d41b9fd21647085882f56fa39f4c0a4c279a615247ef5a84cb3ba1eba5116bee3414a8f0cbc920b4e702255f1e3550743e1717f730f293e70cb74b2b4a71c395c0ee7962f2a80116a8280e385e74665e49adf0ecb3a58e7841322076564bfc89646079d110e53dffeda8bbba9d62240e54ff6a85acb6a", 0xcd, 0x4afb) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd_index=0x2, 0xadef, 0x100, 0x100, 0x3, 0x1, {0x0, r8}}, 0x401) 17:16:47 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 9) [ 313.129300] __delayacct_tsk_init+0x1b/0x80 [ 313.130063] copy_process+0x3399/0x78b0 [ 313.130626] ? __lock_acquire+0xbb1/0x5b00 [ 313.131239] ? lock_downgrade+0x6d0/0x6d0 [ 313.131820] ? __cleanup_sighand+0xb0/0xb0 [ 313.132418] ? lock_acquire+0x197/0x470 [ 313.132976] ? find_held_lock+0x2c/0x110 [ 313.133553] kernel_clone+0xe7/0x980 [ 313.134070] ? lock_downgrade+0x6d0/0x6d0 [ 313.134642] ? find_held_lock+0x2c/0x110 [ 313.135215] ? create_io_thread+0xf0/0xf0 [ 313.135791] ? ksys_write+0x12d/0x260 [ 313.136330] ? __mutex_unlock_slowpath+0xe1/0x600 [ 313.137008] __do_sys_fork+0x8a/0xc0 [ 313.137526] ? kernel_thread+0xf0/0xf0 [ 313.138076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 313.138813] ? syscall_enter_from_user_mode+0x1d/0x50 [ 313.139541] ? trace_hardirqs_on+0x5b/0x180 [ 313.140144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 313.140857] do_syscall_64+0x33/0x40 [ 313.141370] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 313.142077] RIP: 0033:0x7f2eb7a3db19 [ 313.142589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 313.145145] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 313.146193] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 313.147186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.148190] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 313.149175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.150161] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 313.153341] process 'syz-executor.3' launched './file1' with NULL argv: empty string added [ 327.558178] FAULT_INJECTION: forcing a failure. [ 327.558178] name failslab, interval 1, probability 0, space 0, times 0 [ 327.560582] CPU: 0 PID: 5715 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 327.562030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 327.563823] Call Trace: 17:17:02 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/zoneinfo\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x840000, 0x22) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x484, 0x100, 0x1, 'queue1\x00', 0x2}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x4, 0x86, 0xe1, 0x7f, 0x0, 0x3, 0x24100, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x49d4, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0xa000, 0x200, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x800, 0x0, 0x9}, 0x0, 0xd, r3, 0x8) sendfile(r1, r0, &(0x7f0000000040)=0x496, 0x80000001) 17:17:02 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 10) 17:17:02 executing program 6: semget$private(0x0, 0x4, 0x100) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=loose,noextend,nodevmap,dont_appraise,dont_measure,subj_type=,dont_measure,fscontext=system_u,fsmagic=0x000000000000008c,uid=', @ANYRESDEC=r2, @ANYBLOB=',audit,rootcoNtexu,\x00\x00\x00\x00\x00\x00\x00\x00']) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = semget(0x2, 0x0, 0x20b) r4 = getuid() stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) statx(r6, &(0x7f0000000280)='./file1\x00', 0x400, 0x400, &(0x7f00000004c0)) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r4, r1, r5, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) clock_gettime(0x0, &(0x7f00000000c0)) semtimedop(r3, &(0x7f0000000280), 0x0, &(0x7f0000000100)={0x0, 0x989680}) semctl$SEM_INFO(0x0, 0x935a4533181df21f, 0x13, &(0x7f0000001e00)=""/4096) unshare(0x48020200) unshare(0x10000) 17:17:02 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_io_uring_setup(0x3c4a, &(0x7f0000000000)={0x0, 0xa738, 0x1, 0x0, 0x1b2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x33a0, &(0x7f0000000100)={0x0, 0xbc05, 0x1, 0x1, 0x2e1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) pwrite64(r4, &(0x7f00000002c0)="b9a79cadb6995f4a8683bec764572279852321a2a4a210615de76b7dd284859dd6103cf6bc9d7c09b01131e37645600ba2962ecc974d6509cb9eb80ad3cde2cbb9826cfeaadb7dd77edf4f1259bec41c1e431c1b93887d41b9fd21647085882f56fa39f4c0a4c279a615247ef5a84cb3ba1eba5116bee3414a8f0cbc920b4e702255f1e3550743e1717f730f293e70cb74b2b4a71c395c0ee7962f2a80116a8280e385e74665e49adf0ecb3a58e7841322076564bfc89646079d110e53dffeda8bbba9d62240e54ff6a85acb6a", 0xcd, 0x4afb) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd_index=0x2, 0xadef, 0x100, 0x100, 0x3, 0x1, {0x0, r8}}, 0x401) 17:17:02 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:17:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r2 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x0, 0x6, 0x1, 0xfffffffffffffffe, 0x4, 0x4}) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x100000001) 17:17:02 executing program 7: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x100, {{0xa, 0x4e21, 0x8, @mcast2, 0x4}}, {{0xa, 0x4e24, 0x9, @private2, 0x5}}}, 0x108) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="c6", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 327.564386] dump_stack+0x107/0x167 [ 327.565259] should_fail.cold+0x5/0xa [ 327.566071] ? dup_fd+0x89/0xe40 [ 327.566790] should_failslab+0x5/0x20 [ 327.567609] kmem_cache_alloc+0x5b/0x310 [ 327.568472] dup_fd+0x89/0xe40 [ 327.569153] ? audit_filter_inodes+0x40/0x40 [ 327.570085] ? security_task_alloc+0xe6/0x260 [ 327.571054] copy_process+0x197c/0x78b0 [ 327.571899] ? __lock_acquire+0xbb1/0x5b00 [ 327.572810] ? __cleanup_sighand+0xb0/0xb0 [ 327.573715] ? lock_acquire+0x197/0x470 [ 327.574559] ? find_held_lock+0x2c/0x110 [ 327.575437] kernel_clone+0xe7/0x980 [ 327.576223] ? lock_downgrade+0x6d0/0x6d0 [ 327.577091] ? find_held_lock+0x2c/0x110 [ 327.577944] ? create_io_thread+0xf0/0xf0 [ 327.578815] ? ksys_write+0x12d/0x260 [ 327.579636] ? __mutex_unlock_slowpath+0xe1/0x600 [ 327.580663] __do_sys_fork+0x8a/0xc0 [ 327.581455] ? kernel_thread+0xf0/0xf0 [ 327.582293] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 327.583414] ? syscall_enter_from_user_mode+0x1d/0x50 [ 327.584497] ? trace_hardirqs_on+0x5b/0x180 [ 327.585408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 327.586491] do_syscall_64+0x33/0x40 [ 327.587284] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 327.588367] RIP: 0033:0x7f2eb7a3db19 [ 327.589148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 327.593043] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 327.594649] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 327.596162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.597674] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 327.599190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 327.600710] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:17:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d00210c00009897dd2cb96ed96200000000000000000000050000000000000014000100fc02cabcd6a5f159"], 0x30}}, 0x0) sendto$inet(r1, &(0x7f0000000480)="36547e61dfe69d5c6dcc9e7eaa982a3a40fc2be90fe34fa3a39cb8c1df59c1f69951a1ec750f95330dada0eaa8f9f421c8e79192b7816e424a104b14d852f1469171b210e296cdeb64a0d0fc8673c2cbf430a51d38210a1c9e735faa4213a6b64bc33160c832544d9dca2f329ab99c1adb4ee9cd79f3e48bf69575287072f58294b330cf863209ab2f35c233b0dcb8c8077ac6a3c67eda26e3ecaf44163f9c9b3907430b4c47d96b31b457326642d44d1acbe1795272e838661c", 0xba, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x637, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000700)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300)="80de16691069", 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4010, r1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index}, 0x8001) io_uring_enter(r2, 0x5b1b, 0x8, 0x0, 0x0, 0x0) 17:17:02 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000012c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1204a4, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) mkdirat(0xffffffffffffffff, &(0x7f0000001280)='./file0\x00', 0x44) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r3}}, 0x101) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fsetxattr(r4, &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000200)='\x00', 0x1, 0x0) getdents64(r4, &(0x7f0000000240)=""/4096, 0x1000) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x104240, 0x40) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x251) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 327.701049] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 327.703468] sr 1:0:0:0: [sg1] tag#0 CDB: Xdwrite(16) 80 de 16 69 10 69 17:17:02 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 11) [ 327.761092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.763107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.765281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 327.926252] FAULT_INJECTION: forcing a failure. [ 327.926252] name failslab, interval 1, probability 0, space 0, times 0 [ 327.929011] CPU: 0 PID: 5738 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 327.930627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 327.932604] Call Trace: [ 327.933244] dump_stack+0x107/0x167 [ 327.934120] should_fail.cold+0x5/0xa [ 327.935038] ? create_object.isra.0+0x3a/0xa30 [ 327.936126] should_failslab+0x5/0x20 [ 327.937029] kmem_cache_alloc+0x5b/0x310 [ 327.938001] create_object.isra.0+0x3a/0xa30 [ 327.939049] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 327.940268] kmem_cache_alloc+0x159/0x310 [ 327.941258] dup_fd+0x89/0xe40 [ 327.942021] ? audit_filter_inodes+0x40/0x40 [ 327.943083] ? security_task_alloc+0xe6/0x260 [ 327.944150] copy_process+0x197c/0x78b0 [ 327.945113] ? __lock_acquire+0xbb1/0x5b00 [ 327.946131] ? __cleanup_sighand+0xb0/0xb0 [ 327.947160] ? lock_acquire+0x197/0x470 [ 327.948109] ? find_held_lock+0x2c/0x110 [ 327.949070] kernel_clone+0xe7/0x980 [ 327.949944] ? lock_downgrade+0x6d0/0x6d0 [ 327.950923] ? find_held_lock+0x2c/0x110 [ 327.951880] ? create_io_thread+0xf0/0xf0 [ 327.952855] ? ksys_write+0x12d/0x260 [ 327.953765] ? __mutex_unlock_slowpath+0xe1/0x600 [ 327.954919] __do_sys_fork+0x8a/0xc0 [ 327.955814] ? kernel_thread+0xf0/0xf0 [ 327.956758] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 327.957998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 327.959220] ? trace_hardirqs_on+0x5b/0x180 [ 327.960245] ? syscall_enter_from_user_mode+0x1d/0x50 [ 327.961490] do_syscall_64+0x33/0x40 [ 327.962378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 327.963602] RIP: 0033:0x7f2eb7a3db19 [ 327.964478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 327.968842] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 327.970653] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 327.972358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.974061] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 327.975760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 327.977460] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 328.149637] cgroup2: Unknown parameter './file0' [ 328.560793] sr 1:0:0:0: [sg1] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 328.563060] sr 1:0:0:0: [sg1] tag#0 CDB: Xdwrite(16) 80 de 16 69 10 69 17:17:17 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 12) 17:17:17 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_io_uring_setup(0x3c4a, &(0x7f0000000000)={0x0, 0xa738, 0x1, 0x0, 0x1b2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x33a0, &(0x7f0000000100)={0x0, 0xbc05, 0x1, 0x1, 0x2e1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) pwrite64(r2, &(0x7f00000002c0)="b9a79cadb6995f4a8683bec764572279852321a2a4a210615de76b7dd284859dd6103cf6bc9d7c09b01131e37645600ba2962ecc974d6509cb9eb80ad3cde2cbb9826cfeaadb7dd77edf4f1259bec41c1e431c1b93887d41b9fd21647085882f56fa39f4c0a4c279a615247ef5a84cb3ba1eba5116bee3414a8f0cbc920b4e702255f1e3550743e1717f730f293e70cb74b2b4a71c395c0ee7962f2a80116a8280e385e74665e49adf0ecb3a58e7841322076564bfc89646079d110e53dffeda8bbba9d62240e54ff6a85acb6a", 0xcd, 0x4afb) 17:17:17 executing program 6: syz_io_uring_setup(0xa28, &(0x7f0000000180)={0x0, 0x5267, 0x2, 0x1, 0x3d}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000200)) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r5 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r9, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="de08fdcba90284c74679a1dc641e443a3a6939d28d716827b3bad51fcd1597ef229663bebaa51e812b8922b7320a707cb6e5d273e977e035fa055008d7f34166dabb74facb10b0351c3871c241eb76caa79cce02fe89250c85f5494f21ef82314e9bb0f5e19b04960a4da8a9d17db3b319", 0x71, 0x4000, 0x1}, 0x80) add_key$keyring(&(0x7f0000001000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r10 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r11 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r11, 0xfffffffffffffffc, r10, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="8bf69c0ecef924e48c0b719dd8d5248b1984f1f4cd292d096cd6a1d13e03f17b898591bec50bbc883d12f75cc8d7b833dedd28b5abcc7863112f11c6", 0x3c, r10) execveat(0xffffffffffffffff, &(0x7f0000000140)='mnt/encrypted_dir\x00', 0x0, 0x0, 0x0) 17:17:17 executing program 3: move_pages(0x0, 0x4, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646ff36677c66200088020000400000004f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0]) openat(r0, &(0x7f0000000040)='./file0\x00', 0x80000, 0x110) 17:17:17 executing program 7: semget$private(0x0, 0x3, 0x153) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4315, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r0 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(0x0, 0x0, 0xb) clock_gettime(0x0, 0x0) semtimedop(r0, 0x0, 0x0, &(0x7f0000000180)) r1 = semget$private(0x0, 0x0, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x4, 0x7}, {0x2, 0x1, 0x1000}, {0x3, 0x2, 0x1000}, {0x3, 0x1}, {0x4, 0x6, 0x1000}], 0x5, &(0x7f0000000100)={0x0, 0x3938700}) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_INFO(0xffffffffffffffff, 0x3, 0x13, &(0x7f0000001e00)=""/4096) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, &(0x7f00000010c0)=""/79) semop(0x0, &(0x7f0000000080)=[{0x3, 0xe7fb, 0x2000}, {0x3, 0x7}, {0x2, 0x0, 0x1800}, {0x3, 0x6, 0x1800}, {0x1, 0x6, 0x800}, {0x2, 0x9ba, 0x1000}], 0x6) semop(0x0, 0x0, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) r2 = semget$private(0x0, 0x0, 0x0) semop(r2, &(0x7f00000000c0)=[{}, {}], 0x2) semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f00000001c0)=""/29) unshare(0x48020200) 17:17:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000280)={'ipvlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMK(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xa0, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x59}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40840}, 0x20000000) 17:17:17 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc82240, 0x2) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x4, 0x0, r4, &(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1, 0x0, 0x0, {0x0, r5}}, 0x9) writev(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="a4", 0x1}], 0x2) 17:17:17 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 342.738183] FAULT_INJECTION: forcing a failure. [ 342.738183] name failslab, interval 1, probability 0, space 0, times 0 [ 342.740914] CPU: 1 PID: 5766 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 342.742435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 342.744353] Call Trace: [ 342.744969] dump_stack+0x107/0x167 [ 342.745800] should_fail.cold+0x5/0xa [ 342.746669] ? alloc_fdtable+0x9e/0x2c0 [ 342.747569] should_failslab+0x5/0x20 [ 342.748453] kmem_cache_alloc_trace+0x55/0x320 [ 342.749498] ? rwlock_bug.part.0+0x90/0x90 [ 342.750470] alloc_fdtable+0x9e/0x2c0 [ 342.751347] dup_fd+0x92d/0xe40 [ 342.752111] copy_process+0x197c/0x78b0 [ 342.753017] ? __lock_acquire+0xbb1/0x5b00 [ 342.753983] ? __cleanup_sighand+0xb0/0xb0 [ 342.754956] ? lock_acquire+0x197/0x470 [ 342.755867] ? find_held_lock+0x2c/0x110 [ 342.756793] kernel_clone+0xe7/0x980 [ 342.757623] ? lock_downgrade+0x6d0/0x6d0 [ 342.758566] ? find_held_lock+0x2c/0x110 [ 342.759493] ? create_io_thread+0xf0/0xf0 [ 342.760440] ? ksys_write+0x12d/0x260 [ 342.761308] ? __mutex_unlock_slowpath+0xe1/0x600 [ 342.762392] __do_sys_fork+0x8a/0xc0 [ 342.763228] ? kernel_thread+0xf0/0xf0 [ 342.764113] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 342.765295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 342.766445] ? trace_hardirqs_on+0x5b/0x180 [ 342.767414] ? syscall_enter_from_user_mode+0x1d/0x50 [ 342.768573] do_syscall_64+0x33/0x40 [ 342.769398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 342.770539] RIP: 0033:0x7f2eb7a3db19 [ 342.771366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 342.775458] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 342.777121] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 342.778964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 17:17:17 executing program 5: fallocate(0xffffffffffffffff, 0x0, 0x9, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf3b6, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xe, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x4, 0xc1, 0xb4700000, 0x3ff, 0x73cf}) r1 = timerfd_create(0x0, 0x0) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{}, {0x0, r2+60000000}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000240)={{0x0, r3+60000000}}, &(0x7f0000000280)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) syz_open_dev$sg(&(0x7f0000000100), 0x20, 0x101400) syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file0\x00', 0x22, 0x400100, 0x12345}, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xffffffff}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) [ 342.780527] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 342.782392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.783960] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:17:17 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x200000, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x35e7eaa4871bc4b0, 0x0) openat(r0, 0x0, 0x206000, 0x18) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x821000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@cache_fscache}, {@cache_loose}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '/dev/nbd'}}, {@appraise_type}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '[%\xb0'}}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x8200, 0x11) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='cgroup\x00', 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x20100, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 17:17:17 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 13) 17:17:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES16=r1, @ANYBLOB="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"], 0x30}}, 0x0) 17:17:17 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x401, 0x2, 0x7f, 0xfffffffa}, {0x6, 0x3, 0x6, 0x6}, {0x6, 0x4, 0x8, 0xb5e}, {0x8, 0xff, 0xff, 0x40}]}) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r1 = fork() ptrace(0x10, r1) syz_open_procfs(r1, &(0x7f0000000000)='attr/keycreate\x00') process_vm_writev(r1, 0x0, 0xfffffffffffffd4f, 0x0, 0x0, 0x0) 17:17:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000280)={'ipvlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMK(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xa0, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x59}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40840}, 0x20000000) 17:17:17 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_io_uring_setup(0x3c4a, &(0x7f0000000000)={0x0, 0xa738, 0x1, 0x0, 0x1b2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x33a0, &(0x7f0000000100)={0x0, 0xbc05, 0x1, 0x1, 0x2e1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)}, {0x0}, {0x0}], 0x3}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) [ 343.068717] FAULT_INJECTION: forcing a failure. [ 343.068717] name failslab, interval 1, probability 0, space 0, times 0 [ 343.071127] CPU: 0 PID: 5787 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 343.072576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 343.074335] Call Trace: [ 343.074909] dump_stack+0x107/0x167 [ 343.075702] should_fail.cold+0x5/0xa [ 343.076518] ? create_object.isra.0+0x3a/0xa30 [ 343.077481] should_failslab+0x5/0x20 [ 343.078428] kmem_cache_alloc+0x5b/0x310 [ 343.079302] create_object.isra.0+0x3a/0xa30 [ 343.080227] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 343.081302] kmem_cache_alloc_trace+0x151/0x320 [ 343.082278] ? rwlock_bug.part.0+0x90/0x90 [ 343.083185] alloc_fdtable+0x9e/0x2c0 [ 343.083988] dup_fd+0x92d/0xe40 [ 343.084709] copy_process+0x197c/0x78b0 [ 343.085547] ? __lock_acquire+0xbb1/0x5b00 [ 343.085646] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 343.086456] ? __cleanup_sighand+0xb0/0xb0 [ 343.086489] ? lock_acquire+0x197/0x470 [ 343.089816] ? find_held_lock+0x2c/0x110 [ 343.090683] kernel_clone+0xe7/0x980 [ 343.091484] ? lock_downgrade+0x6d0/0x6d0 [ 343.092343] ? find_held_lock+0x2c/0x110 [ 343.093198] ? create_io_thread+0xf0/0xf0 [ 343.094057] ? ksys_write+0x12d/0x260 [ 343.094885] ? __mutex_unlock_slowpath+0xe1/0x600 [ 343.095912] __do_sys_fork+0x8a/0xc0 [ 343.096698] ? kernel_thread+0xf0/0xf0 [ 343.097544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 343.098670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 343.099790] ? trace_hardirqs_on+0x5b/0x180 [ 343.100719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 343.101818] do_syscall_64+0x33/0x40 [ 343.102611] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 343.103709] RIP: 0033:0x7f2eb7a3db19 [ 343.104496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 343.108438] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 343.110057] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 343.111619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.113155] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 343.114687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.116214] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:17:17 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd=r1, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)={0x77359400}, 0x1, 0x0, 0x1}, 0xffff9feb) syz_io_uring_setup(0xcec, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x2) r5 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r9, r4, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x5, 0x1, 0x1}, 0x2) openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x40, 0x10) io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0) 17:17:18 executing program 5: r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x7c62, &(0x7f0000000180)={0x0, 0xca43, 0x2, 0x2, 0xac, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000080)={{0x40, 0x5}, 'port0\x00', 0x48, 0x20000, 0x7, 0x2, 0x6, 0x8, 0x101, 0x0, 0x0, 0xfc}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)='x', 0x1, 0xfffffffffffffffe}], 0x0, 0x0) syz_io_uring_setup(0x5ff4, &(0x7f0000000580)={0x0, 0x8a09, 0x2, 0x2, 0x16e}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000600)=0x0, &(0x7f0000000640)) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) creat(&(0x7f0000000780)='.\x00', 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r6}}, 0x7ff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0xffff) syz_io_uring_submit(r4, 0x0, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r5, &(0x7f0000000680)=0x80, &(0x7f00000006c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x80000001) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) syz_io_uring_setup(0x6c5d, &(0x7f0000000380)={0x0, 0x2a81, 0x1d, 0x1, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000540)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="2609e2f628b952c11a8fc2ca79abe6013b890aef34fe173fdc317b12e8921876a25abbee3d18ace1a46cea99ee3b74ff57a804a9544419db48dd4d394cf3367ca6ac3d28084a8445f23a20fa0ba7c3d651d807b98b546056da49a8970bbc1150cb6ebc348efc11bcf5fc382e8ee74429e31fd0f46e8eefb1f9a80207ac1aebf2db0de9706471df860891b0a091d3027cfc1774229311a59f06b32406a707fb2073ac065b1690a4411a", 0xa9, 0x4040}, 0x800) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x73367fb999b6c2e1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x3) 17:17:18 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_io_uring_setup(0x3c4a, &(0x7f0000000000)={0x0, 0xa738, 0x1, 0x0, 0x1b2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x33a0, &(0x7f0000000100)={0x0, 0xbc05, 0x1, 0x1, 0x2e1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) [ 343.305364] loop5: detected capacity change from 0 to 8388096 [ 348.205108] Bluetooth: hci1: command 0x0409 tx timeout [ 350.252984] Bluetooth: hci1: command 0x041b tx timeout [ 352.301185] Bluetooth: hci1: command 0x040f tx timeout [ 353.088175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.090352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.093343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.133459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.135269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.138014] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 353.301793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.793624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.795195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.797526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 354.348975] Bluetooth: hci1: command 0x0419 tx timeout 17:17:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000280)={'ipvlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMK(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xa0, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x59}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40840}, 0x20000000) 17:17:42 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:17:42 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:17:42 executing program 7: name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000000000005a04000100000000c3c2585ba909b62040e5ab1d16d3ed8dd8cad3e434c1b50dc74e130601be3ecd8b9ae70064c3b677ed9a036da85ee9d557642c875dd9431e1c8681ea2a3a31fc8720e58cb3fc9ee6befc8f530000000000000003bcfb5a4f7546585196652a65ecfa230a3ce96b7397075b608f8a65b837cc573633d886373044f36b50f71d6481adb361c9698e4d877055b53099bb4be328bbe7c17eec814cda6d6b87b3facd3e1f3eba3124ac7fe55850480ff8e8b4c0a8ea2cf1195e6d0bf7eac68a27e6676b93ed738dd2b56b6a92"], &(0x7f0000000c40), 0x1000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x509042, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, r1, 0x0) syz_io_uring_complete(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{}, {}, {}, {}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000280)='./file1\x00', 0x8, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x3, 0x1, 0x6, 0x2, 0x6}}) 17:17:42 executing program 6: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x800, &(0x7f0000000980)) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)) lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="4c0000022e2f"]) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1400007faa08b2577642567ffa4d9cfab8cb0012"], 0x14}, 0x1, 0x0, 0x0, 0x404c885}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xffe55751b16e2b03, 0x0) name_to_handle_at(r4, &(0x7f0000000280)='./file1\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="280000004e000000f70000ffffffff1c72000000000000000100000003000000000000008ff881a60800000000000000"], &(0x7f0000000440), 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext, 0x0, 0xc9a, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x20040000) 17:17:42 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 14) 17:17:42 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32=0xee01, @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) getsockopt$netlink(r5, 0x10e, 0x7, &(0x7f0000000100)=""/129, &(0x7f0000000000)=0x81) 17:17:42 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_io_uring_setup(0x3c4a, &(0x7f0000000000)={0x0, 0xa738, 0x1, 0x0, 0x1b2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x33a0, &(0x7f0000000100)={0x0, 0xbc05, 0x1, 0x1, 0x2e1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 367.427246] FAULT_INJECTION: forcing a failure. [ 367.427246] name failslab, interval 1, probability 0, space 0, times 0 [ 367.428972] CPU: 0 PID: 6300 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 367.429988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 367.431238] Call Trace: [ 367.431653] dump_stack+0x107/0x167 [ 367.432207] should_fail.cold+0x5/0xa [ 367.432776] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 367.433550] should_failslab+0x5/0x20 [ 367.434128] __kmalloc_node+0x76/0x420 [ 367.434709] ? lock_downgrade+0x6d0/0x6d0 [ 367.435341] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 367.436121] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 367.436872] ? trace_hardirqs_on+0x5b/0x180 [ 367.436890] kmem_cache_alloc_trace+0x169/0x320 [ 367.436901] ? rwlock_bug.part.0+0x90/0x90 [ 367.436918] alloc_fdtable+0x9e/0x2c0 [ 367.436933] dup_fd+0x92d/0xe40 [ 367.436956] copy_process+0x197c/0x78b0 [ 367.436974] ? __lock_acquire+0xbb1/0x5b00 [ 367.437003] ? __cleanup_sighand+0xb0/0xb0 [ 367.437023] ? lock_acquire+0x197/0x470 [ 367.437042] ? find_held_lock+0x2c/0x110 [ 367.437058] kernel_clone+0xe7/0x980 [ 367.437071] ? lock_downgrade+0x6d0/0x6d0 [ 367.437082] ? find_held_lock+0x2c/0x110 [ 367.437095] ? create_io_thread+0xf0/0xf0 [ 367.437108] ? ksys_write+0x12d/0x260 [ 367.437126] ? __mutex_unlock_slowpath+0xe1/0x600 [ 367.437145] __do_sys_fork+0x8a/0xc0 [ 367.437158] ? kernel_thread+0xf0/0xf0 [ 367.437182] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 367.437196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 367.437206] ? trace_hardirqs_on+0x5b/0x180 [ 367.437222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 367.437234] do_syscall_64+0x33/0x40 [ 367.437247] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 367.437256] RIP: 0033:0x7f2eb7a3db19 [ 367.437268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 367.437275] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 367.437289] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 367.437297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 367.437304] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 367.437311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.437318] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:17:57 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @inquiry={{0x401, 0x5}, {"bbcf4a", 0x4, 0x85}}}, 0x9) 17:17:57 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:17:57 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_io_uring_setup(0x3c4a, &(0x7f0000000000)={0x0, 0xa738, 0x1, 0x0, 0x1b2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x33a0, &(0x7f0000000100)={0x0, 0xbc05, 0x1, 0x1, 0x2e1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:17:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000280)={'ipvlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMK(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xa0, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x59}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40840}, 0x20000000) 17:17:57 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:17:57 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 15) 17:17:57 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:17:57 executing program 6: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) pidfd_getfd(r0, r2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x22, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @rand_addr=0x640100ff}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x5331, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x40080) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0xb) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b2000a00", @ANYRES16=0x0, @ANYBLOB="2000290008000300"/18, @ANYRES32, @ANYBLOB="d3d8eb8d775a2d1e88f5c09de91116eb35190b98cb8eba90eca0ff5ed9745736b0523e04c9a0477e68b95f41fcf9a5bb8abbd729dd4350a39aef4984b715e79fefb7a7e619fb937a1bead8dd3daab920358627f60ea820ad102a40c6b5dd59062fc967136af36340097890eebd97c3e93b452d2e8847a9468de633563348066a2d7a57e7c668c824fe740c2f44bf87a9c91a1ef243c665d3a317d50f25357266266215aa5172394df809"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) [ 383.104553] FAULT_INJECTION: forcing a failure. [ 383.104553] name failslab, interval 1, probability 0, space 0, times 0 [ 383.107015] CPU: 0 PID: 6325 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 383.108527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 383.110344] Call Trace: [ 383.110927] dump_stack+0x107/0x167 [ 383.111736] should_fail.cold+0x5/0xa [ 383.112572] ? kvmalloc_node+0x119/0x170 [ 383.113458] should_failslab+0x5/0x20 [ 383.114254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.116100] __kmalloc_node+0x76/0x420 [ 383.116123] kvmalloc_node+0x119/0x170 [ 383.116143] alloc_fdtable+0xed/0x2c0 [ 383.116163] dup_fd+0x92d/0xe40 [ 383.116193] copy_process+0x197c/0x78b0 [ 383.116218] ? __lock_acquire+0xbb1/0x5b00 [ 383.116256] ? __cleanup_sighand+0xb0/0xb0 [ 383.116288] ? lock_acquire+0x197/0x470 [ 383.122824] ? find_held_lock+0x2c/0x110 [ 383.123729] kernel_clone+0xe7/0x980 [ 383.124540] ? lock_downgrade+0x6d0/0x6d0 [ 383.125439] ? find_held_lock+0x2c/0x110 [ 383.126316] ? create_io_thread+0xf0/0xf0 [ 383.127210] ? ksys_write+0x12d/0x260 [ 383.128046] ? __mutex_unlock_slowpath+0xe1/0x600 [ 383.129092] __do_sys_fork+0x8a/0xc0 [ 383.129899] ? kernel_thread+0xf0/0xf0 [ 383.130750] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 383.131892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 383.133004] ? trace_hardirqs_on+0x5b/0x180 [ 383.133936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 383.135040] do_syscall_64+0x33/0x40 [ 383.135848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 383.136952] RIP: 0033:0x7f2eb7a3db19 [ 383.137751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 383.141730] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 383.143333] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 383.144859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 383.146367] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 383.147892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 17:17:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0xc5821, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0xffffffff}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x2, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x0, r0, 0x3) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x18, 0x109, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32}]}, 0x24}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x78) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x4) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, 0x0) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xfdef) unlinkat(r6, &(0x7f0000000300)='./file0\x00', 0x200) fallocate(r4, 0x0, 0x401, 0x2) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffe, @local, 0x3}, 0x1c) poll(&(0x7f0000000380)=[{r1, 0x5155}, {r4, 0x2028}, {r0, 0x2}, {0xffffffffffffffff, 0x3250}, {0xffffffffffffffff, 0x5000}, {0xffffffffffffffff, 0x214}], 0x6, 0x7) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 383.149406] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:17:58 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_io_uring_setup(0x3c4a, &(0x7f0000000000)={0x0, 0xa738, 0x1, 0x0, 0x1b2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:17:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'ipvlan0\x00'}) 17:17:58 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:17:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 383.601386] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.6'. [ 383.607084] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.6'. [ 383.608326] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 383.609427] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 17:17:58 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 16) 17:17:58 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:17:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 383.685808] FAULT_INJECTION: forcing a failure. [ 383.685808] name failslab, interval 1, probability 0, space 0, times 0 [ 383.688254] CPU: 0 PID: 6370 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 383.689688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 383.691441] Call Trace: [ 383.692001] dump_stack+0x107/0x167 [ 383.692834] should_fail.cold+0x5/0xa [ 383.693634] ? create_object.isra.0+0x3a/0xa30 [ 383.694589] should_failslab+0x5/0x20 [ 383.695387] kmem_cache_alloc+0x5b/0x310 [ 383.696255] create_object.isra.0+0x3a/0xa30 [ 383.697164] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 383.698229] __kmalloc_node+0x1ae/0x420 [ 383.699038] kvmalloc_node+0x119/0x170 [ 383.699844] alloc_fdtable+0xed/0x2c0 [ 383.700638] dup_fd+0x92d/0xe40 [ 383.701337] copy_process+0x197c/0x78b0 [ 383.702167] ? __lock_acquire+0xbb1/0x5b00 [ 383.703066] ? __cleanup_sighand+0xb0/0xb0 [ 383.703954] ? lock_acquire+0x197/0x470 [ 383.704781] ? find_held_lock+0x2c/0x110 [ 383.705621] kernel_clone+0xe7/0x980 [ 383.706389] ? lock_downgrade+0x6d0/0x6d0 [ 383.707244] ? find_held_lock+0x2c/0x110 [ 383.708093] ? create_io_thread+0xf0/0xf0 [ 383.708949] ? ksys_write+0x12d/0x260 [ 383.709741] ? __mutex_unlock_slowpath+0xe1/0x600 [ 383.710738] __do_sys_fork+0x8a/0xc0 [ 383.711510] ? kernel_thread+0xf0/0xf0 [ 383.712316] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 383.713277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 383.714550] ? syscall_enter_from_user_mode+0x1d/0x50 [ 383.715803] ? trace_hardirqs_on+0x5b/0x180 [ 383.716846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 383.718079] do_syscall_64+0x33/0x40 [ 383.718976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 383.720210] RIP: 0033:0x7f2eb7a3db19 [ 383.721105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 383.725551] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 383.727372] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 383.729069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 383.730775] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 383.732493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.734234] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:17:58 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 383.758810] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 383.831590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.832571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.833414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 383.903873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.904726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.905626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:18:10 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:18:10 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:18:10 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:10 executing program 6: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) pidfd_getfd(r0, r2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x22, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @rand_addr=0x640100ff}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x5331, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x40080) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0xb) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b2000a00", @ANYRES16=0x0, @ANYBLOB="2000290008000300"/18, @ANYRES32, @ANYBLOB="d3d8eb8d775a2d1e88f5c09de91116eb35190b98cb8eba90eca0ff5ed9745736b0523e04c9a0477e68b95f41fcf9a5bb8abbd729dd4350a39aef4984b715e79fefb7a7e619fb937a1bead8dd3daab920358627f60ea820ad102a40c6b5dd59062fc967136af36340097890eebd97c3e93b452d2e8847a9468de633563348066a2d7a57e7c668c824fe740c2f44bf87a9c91a1ef243c665d3a317d50f25357266266215aa5172394df809"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 17:18:10 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 17) 17:18:10 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:18:10 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0xc5821, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0xffffffff}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x2, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x0, r0, 0x3) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x18, 0x109, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x2, 0x0, 0x0, @u32}]}, 0x24}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x78) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x4) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, 0x0) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xfdef) unlinkat(r6, &(0x7f0000000300)='./file0\x00', 0x200) fallocate(r4, 0x0, 0x401, 0x2) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffe, @local, 0x3}, 0x1c) poll(&(0x7f0000000380)=[{r1, 0x5155}, {r4, 0x2028}, {r0, 0x2}, {0xffffffffffffffff, 0x3250}, {0xffffffffffffffff, 0x5000}, {0xffffffffffffffff, 0x214}], 0x6, 0x7) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 395.770154] FAULT_INJECTION: forcing a failure. [ 395.770154] name failslab, interval 1, probability 0, space 0, times 0 [ 395.771774] CPU: 0 PID: 6385 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 395.772705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 395.773832] Call Trace: [ 395.774211] dump_stack+0x107/0x167 [ 395.774711] should_fail.cold+0x5/0xa [ 395.775239] ? create_object.isra.0+0x3a/0xa30 [ 395.775875] should_failslab+0x5/0x20 [ 395.776401] kmem_cache_alloc+0x5b/0x310 [ 395.776958] create_object.isra.0+0x3a/0xa30 [ 395.777560] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 395.778253] __kmalloc_node+0x1ae/0x420 [ 395.778802] kvmalloc_node+0x119/0x170 [ 395.779352] alloc_fdtable+0x159/0x2c0 [ 395.779893] dup_fd+0x92d/0xe40 [ 395.780354] copy_process+0x197c/0x78b0 [ 395.780906] ? __lock_acquire+0xbb1/0x5b00 [ 395.781495] ? __cleanup_sighand+0xb0/0xb0 [ 395.782077] ? lock_acquire+0x197/0x470 [ 395.782623] ? find_held_lock+0x2c/0x110 [ 395.783180] kernel_clone+0xe7/0x980 [ 395.783697] ? lock_downgrade+0x6d0/0x6d0 [ 395.784261] ? find_held_lock+0x2c/0x110 [ 395.784814] ? create_io_thread+0xf0/0xf0 [ 395.785396] ? ksys_write+0x12d/0x260 [ 395.785922] ? __mutex_unlock_slowpath+0xe1/0x600 [ 395.786584] __do_sys_fork+0x8a/0xc0 [ 395.787092] ? kernel_thread+0xf0/0xf0 [ 395.787642] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 395.788359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 395.789064] ? trace_hardirqs_on+0x5b/0x180 [ 395.789655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 395.790379] do_syscall_64+0x33/0x40 [ 395.790888] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 395.791595] RIP: 0033:0x7f2eb7a3db19 [ 395.792102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 395.794617] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 395.795665] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 395.796637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.797613] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 395.798616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 395.799601] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:18:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r11, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:18:10 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 18) [ 395.949765] FAULT_INJECTION: forcing a failure. [ 395.949765] name failslab, interval 1, probability 0, space 0, times 0 [ 395.951388] CPU: 0 PID: 6402 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 395.952324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 395.953459] Call Trace: [ 395.953815] dump_stack+0x107/0x167 [ 395.954295] should_fail.cold+0x5/0xa [ 395.954799] ? copy_fs_struct+0x45/0x340 [ 395.955329] should_failslab+0x5/0x20 [ 395.955837] kmem_cache_alloc+0x5b/0x310 [ 395.956373] copy_fs_struct+0x45/0x340 [ 395.956888] copy_process+0x34b5/0x78b0 [ 395.957414] ? __lock_acquire+0xbb1/0x5b00 [ 395.957981] ? __cleanup_sighand+0xb0/0xb0 [ 395.958562] ? lock_acquire+0x197/0x470 [ 395.959095] ? find_held_lock+0x2c/0x110 [ 395.959635] kernel_clone+0xe7/0x980 [ 395.960124] ? lock_downgrade+0x6d0/0x6d0 [ 395.960665] ? find_held_lock+0x2c/0x110 [ 395.961194] ? create_io_thread+0xf0/0xf0 [ 395.961736] ? ksys_write+0x12d/0x260 [ 395.962239] ? __mutex_unlock_slowpath+0xe1/0x600 [ 395.962875] __do_sys_fork+0x8a/0xc0 [ 395.963361] ? kernel_thread+0xf0/0xf0 [ 395.963901] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 395.964589] ? syscall_enter_from_user_mode+0x1d/0x50 [ 395.965260] ? trace_hardirqs_on+0x5b/0x180 [ 395.965825] ? syscall_enter_from_user_mode+0x1d/0x50 [ 395.966507] do_syscall_64+0x33/0x40 [ 395.966995] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 395.967670] RIP: 0033:0x7f2eb7a3db19 [ 395.968171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 395.970574] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 395.971572] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 395.972500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.973468] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 395.974402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 395.975361] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:18:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) 17:18:10 executing program 2: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:10 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 19) [ 396.044490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 396.051443] FAULT_INJECTION: forcing a failure. [ 396.051443] name failslab, interval 1, probability 0, space 0, times 0 [ 396.052928] CPU: 0 PID: 6411 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 396.053783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 396.054824] Call Trace: [ 396.055180] dump_stack+0x107/0x167 [ 396.055650] should_fail.cold+0x5/0xa [ 396.056132] ? create_object.isra.0+0x3a/0xa30 [ 396.056709] should_failslab+0x5/0x20 [ 396.057187] kmem_cache_alloc+0x5b/0x310 [ 396.057700] create_object.isra.0+0x3a/0xa30 [ 396.058251] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 396.058890] __kmalloc_node+0x1ae/0x420 [ 396.059395] kvmalloc_node+0x119/0x170 [ 396.059894] alloc_fdtable+0x159/0x2c0 [ 396.060402] dup_fd+0x92d/0xe40 [ 396.060828] copy_process+0x197c/0x78b0 [ 396.061339] ? __lock_acquire+0xbb1/0x5b00 [ 396.061886] ? __cleanup_sighand+0xb0/0xb0 [ 396.062429] ? lock_acquire+0x197/0x470 [ 396.062933] ? find_held_lock+0x2c/0x110 [ 396.063446] kernel_clone+0xe7/0x980 [ 396.063921] ? lock_downgrade+0x6d0/0x6d0 [ 396.064441] ? find_held_lock+0x2c/0x110 [ 396.064956] ? create_io_thread+0xf0/0xf0 [ 396.065474] ? ksys_write+0x12d/0x260 [ 396.065961] ? __mutex_unlock_slowpath+0xe1/0x600 [ 396.066569] __do_sys_fork+0x8a/0xc0 [ 396.067051] ? kernel_thread+0xf0/0xf0 [ 396.067577] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 396.068241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 396.068920] ? trace_hardirqs_on+0x5b/0x180 [ 396.069460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 396.070129] do_syscall_64+0x33/0x40 [ 396.070597] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 396.071314] RIP: 0033:0x7f2eb7a3db19 [ 396.071799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 396.074187] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 396.075185] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 396.076114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 396.077042] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 396.077969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.078901] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:18:10 executing program 2: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:10 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:18:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) 17:18:10 executing program 2: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 396.410822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 396.444423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.445355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.446316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 396.581962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.583566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.586593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 400.866552] Bluetooth: hci2: command 0x0406 tx timeout 17:18:23 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:18:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) [ 408.899872] FAULT_INJECTION: forcing a failure. [ 408.899872] name failslab, interval 1, probability 0, space 0, times 0 [ 408.901346] CPU: 0 PID: 6437 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 408.902225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 408.903276] Call Trace: [ 408.903623] dump_stack+0x107/0x167 [ 408.904103] should_fail.cold+0x5/0xa [ 408.904589] ? copy_process+0x1ae7/0x78b0 [ 408.905121] should_failslab+0x5/0x20 [ 408.905613] kmem_cache_alloc+0x5b/0x310 [ 408.906141] ? _raw_spin_unlock+0x1a/0x30 [ 408.906672] copy_process+0x1ae7/0x78b0 [ 408.907189] ? __lock_acquire+0xbb1/0x5b00 [ 408.907754] ? __cleanup_sighand+0xb0/0xb0 [ 408.908304] ? lock_acquire+0x197/0x470 [ 408.908818] ? find_held_lock+0x2c/0x110 [ 408.909349] kernel_clone+0xe7/0x980 [ 408.909823] ? lock_downgrade+0x6d0/0x6d0 [ 408.910354] ? find_held_lock+0x2c/0x110 [ 408.910874] ? create_io_thread+0xf0/0xf0 [ 408.911416] ? ksys_write+0x12d/0x260 [ 408.911928] ? __mutex_unlock_slowpath+0xe1/0x600 [ 408.912542] __do_sys_fork+0x8a/0xc0 [ 408.913026] ? kernel_thread+0xf0/0xf0 [ 408.913538] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 408.914203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 408.914877] ? trace_hardirqs_on+0x5b/0x180 [ 408.915435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 408.916099] do_syscall_64+0x33/0x40 [ 408.916572] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 408.917231] RIP: 0033:0x7f2eb7a3db19 [ 408.917701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 408.920038] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 408.921001] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 408.921906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.922824] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 408.923742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.924648] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:18:23 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) 17:18:23 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_io_uring_setup(0x3c4a, &(0x7f0000000000)={0x0, 0xa738, 0x1, 0x0, 0x1b2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:23 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:23 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:23 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 20) 17:18:23 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:18:23 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 408.977834] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:18:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:23 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 21) 17:18:23 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_io_uring_setup(0x3c4a, &(0x7f0000000000)={0x0, 0xa738, 0x1, 0x0, 0x1b2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 409.065563] FAULT_INJECTION: forcing a failure. [ 409.065563] name failslab, interval 1, probability 0, space 0, times 0 [ 409.066943] CPU: 0 PID: 6456 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 409.067752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 409.068715] Call Trace: [ 409.069028] dump_stack+0x107/0x167 [ 409.069451] should_fail.cold+0x5/0xa [ 409.069896] ? create_object.isra.0+0x3a/0xa30 [ 409.070425] should_failslab+0x5/0x20 [ 409.070870] kmem_cache_alloc+0x5b/0x310 [ 409.071344] create_object.isra.0+0x3a/0xa30 [ 409.071864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 409.072456] __kmalloc_node+0x1ae/0x420 [ 409.072922] kvmalloc_node+0x119/0x170 [ 409.073375] alloc_fdtable+0x159/0x2c0 [ 409.073830] dup_fd+0x92d/0xe40 [ 409.074219] copy_process+0x197c/0x78b0 [ 409.074689] ? __lock_acquire+0xbb1/0x5b00 [ 409.075188] ? __cleanup_sighand+0xb0/0xb0 [ 409.075689] ? lock_acquire+0x197/0x470 [ 409.076155] ? find_held_lock+0x2c/0x110 [ 409.076628] kernel_clone+0xe7/0x980 [ 409.077059] ? lock_downgrade+0x6d0/0x6d0 [ 409.077537] ? find_held_lock+0x2c/0x110 [ 409.078006] ? create_io_thread+0xf0/0xf0 [ 409.078485] ? ksys_write+0x12d/0x260 [ 409.078929] ? __mutex_unlock_slowpath+0xe1/0x600 [ 409.079489] __do_sys_fork+0x8a/0xc0 [ 409.079923] ? kernel_thread+0xf0/0xf0 [ 409.080379] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 409.080986] ? syscall_enter_from_user_mode+0x1d/0x50 [ 409.081584] ? trace_hardirqs_on+0x5b/0x180 [ 409.082082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 409.082677] do_syscall_64+0x33/0x40 [ 409.083110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 409.083709] RIP: 0033:0x7f2eb7a3db19 [ 409.084137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 409.086260] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 409.087134] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 409.087961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.088775] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 409.089602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.090421] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:18:23 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 409.259842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.261551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.266692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:18:38 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) 17:18:38 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:38 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:18:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:18:38 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_io_uring_setup(0x3c4a, &(0x7f0000000000)={0x0, 0xa738, 0x1, 0x0, 0x1b2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:38 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 22) 17:18:38 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:38 executing program 5: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) pipe(&(0x7f0000000200)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x1b4, 0x25, 0x1, 0x0, 0x0, {}, [@generic="d4a1091538629b542f9cf36086fbf4977c0c9176c70a7a5cb5e89979f2adfbc690c419ee069cc2b4400a8945b8cc4cd7c543b473cbf30b02cf613ff4e6602f2bc8ce4f856cf8b10538b23094568d95de1a47db5b284fbaa971794a4d305d98d351cdb069023f464ee932c03f709a9ff277087081620a2076e63bd9136e9a680be1063f6b736429ca1e0ddaf43b0476159686018b8796a27b424b8996ac3416206c7a283763688a919e515e0a9c8d15dc42ae79b219037d5e68a734029ca18e4e0c754da821af", @generic="a5dadd9c5d9ce18ac15a2ecbda21ef229d59f8b249516c69198ead1286840afe29554733eee540aefbdae8e15e8d9796cbd90ec08131c37678dde6231701403bdcbb972dd1917dd3df2c1fb9125aa8a74a6cd4906f4fed56a07e0f9ecbf1e6234f4bf67cb2180a4a101677fb69a6f20a6fd7308b170b719a6de209ed1803f95be1051c9e8f5e1ce8166da78f494087994d8c214774bfc59ee064ae14799e1adde733a03289f9da442b7aeebae66b982e9012fe79ce6024c8480eecad42bdf4501f93a381aa2e1a9ae56d82f8d1c3343f296a3ed0cfe4e9151a"]}, 0x1b4}}, 0x20004000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0xfff, 0x6, &(0x7f0000000b00)=[{&(0x7f0000000780)="215abfafad58a8b7020e466d65b435db081537ff8ddb1bdbfe9b0d7ef6c398bf7ea972858c77492e96747faf046c261eddf296cb02f7d99d73a7220560cf15a773027aa17909c2635be3f8dacafe65b6935cd21be13ba92466f65d479c57f54df730709f26068fa14ca15bac3ad88081ca920edbef0ba009a09258", 0x7b, 0x7}, {&(0x7f0000000800)="2f68dbf4ba538bad50eab4cd2feedd3ab38fd8b4ac5b38c24ecc64aa733fcd3ba56bee32bbc3a90a7c7c2dc797cced43a031800560354120ce866da4f5ff9b2f6e5ba511586f4884fcfeecaaffee64225fd80b5df3d20f0a7d0c1264829b667785e2ac8f2ada8e35474c9bc3132a0fbbd5941262733de8eb778a9681d64ba6574c6d0ea8d0a5d4f4cd755a12b0071360606335e0577f54c766d24d2f7166ab8e4835f2fef5924e507d323cda62e8c70fada835df7c494e79b6957a3769051686607f2d1f3f8c6ea8b4a73aa5bbb71131cb9f408e090f0f7e2572351ae864", 0xde, 0x3ff}, {&(0x7f0000000900)="239bd1f53b9ba9aae08d13252d4808760125ab84fe864d3c011e346e9867e7a2f57ec39e5fe66590da8e577c0313f83634f5a76ad28d7572ae6b618436dff66c86bb81cb4890b92afc2e0d95eb31ec1f2a5c9df791fbc436eaa5f1b59ba925641f923afb2f13a1fa1818ed72ec77e5dd0cb119e2124032668cfcac219a6b15", 0x7f, 0x8}, {&(0x7f0000000980)="e54734c30d4d34f222c82db960c54c3e6e4a7cb1c90b9f482e4cdac90692e1c4a967ef4c74871504ff50187f15dfc87a8ae887edb531d1a65670f67f6ea751f6452d5bbb98f61f8632b2ea48f9ae433a12f4592cbe2978880c0eefa238abd3851faf74eaf4464ca912f2e609", 0x6c}, {&(0x7f0000000a00)="e179f7e9450c1e56eb8b276bf5f17a81da63d010a8d03f8ca192958dfb19521d651a8b6f5bdf7cf6b12917ab1c6340d2cd212b4835da8fc4fade93b4075a670a7b08603f666edb2e0fbfa6d08821d145ca4c9c2e5a45edc9cd58d9c19688ea9b9b5513248d7d8e7bd696767812c65644c695fd55a449b8bd17c7718a08477f2980f3e12c3f03932df665e612011d6c1a1bd561cdf5a3d7ecb3962b7d0e3a21ec9fb13f08f79b2c45aae6275d182bb1eaae32ce6bd5894e1b6036ab87e05fd8d54bf186e0854d844d166bc0deb6dead485f", 0xd1, 0xfffffffffffffff9}, {&(0x7f0000000280)="91d329", 0x3, 0x2}], 0x82004, &(0x7f0000000bc0)={[{@i_version}, {@nouser_xattr}, {@usrjquota}, {@grpquota}, {@resgid={'resgid', 0x3d, r1}}, {@jqfmt_vfsv1}], [{@euid_eq={'euid', 0x3d, r0}}, {@euid_lt={'euid<', r2}}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/full\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0xc9a, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r3, 0x0, r4) socket$netlink(0x10, 0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x20040000) [ 423.303791] netlink: 400 bytes leftover after parsing attributes in process `syz-executor.5'. [ 423.320992] loop5: detected capacity change from 0 to 8388096 [ 423.354078] FAULT_INJECTION: forcing a failure. [ 423.354078] name failslab, interval 1, probability 0, space 0, times 0 [ 423.356875] CPU: 0 PID: 6487 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 423.358302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 423.360055] Call Trace: [ 423.360646] dump_stack+0x107/0x167 [ 423.361448] should_fail.cold+0x5/0xa [ 423.362280] ? copy_process+0x1c65/0x78b0 [ 423.363165] should_failslab+0x5/0x20 [ 423.364006] kmem_cache_alloc+0x5b/0x310 [ 423.364872] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 423.365999] copy_process+0x1c65/0x78b0 [ 423.367051] ? __lock_acquire+0xbb1/0x5b00 [ 423.367974] ? __cleanup_sighand+0xb0/0xb0 [ 423.368873] ? lock_acquire+0x197/0x470 [ 423.369724] ? find_held_lock+0x2c/0x110 [ 423.370603] kernel_clone+0xe7/0x980 [ 423.371388] ? lock_downgrade+0x6d0/0x6d0 [ 423.372299] ? find_held_lock+0x2c/0x110 [ 423.373190] ? create_io_thread+0xf0/0xf0 [ 423.374067] ? ksys_write+0x12d/0x260 [ 423.374876] ? __mutex_unlock_slowpath+0xe1/0x600 [ 423.375917] __do_sys_fork+0x8a/0xc0 [ 423.376722] ? kernel_thread+0xf0/0xf0 [ 423.377619] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 423.378742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 423.379843] ? trace_hardirqs_on+0x5b/0x180 [ 423.380772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 423.382118] do_syscall_64+0x33/0x40 [ 423.382954] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 423.384086] RIP: 0033:0x7f2eb7a3db19 [ 423.384869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 423.388721] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 423.390317] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 423.391856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.393361] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 423.394886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.396415] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:18:38 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:38 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r1}}, 0xffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:18:38 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:38 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 23) [ 423.701401] FAULT_INJECTION: forcing a failure. [ 423.701401] name failslab, interval 1, probability 0, space 0, times 0 [ 423.705501] CPU: 1 PID: 6503 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 423.706972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 423.708768] Call Trace: [ 423.709356] dump_stack+0x107/0x167 [ 423.710146] should_fail.cold+0x5/0xa [ 423.710972] ? create_object.isra.0+0x3a/0xa30 [ 423.711990] should_failslab+0x5/0x20 [ 423.712816] kmem_cache_alloc+0x5b/0x310 [ 423.713698] create_object.isra.0+0x3a/0xa30 [ 423.714641] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 423.715742] kmem_cache_alloc+0x159/0x310 [ 423.716647] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 423.717784] copy_process+0x1c65/0x78b0 [ 423.718654] ? __lock_acquire+0xbb1/0x5b00 [ 423.719592] ? __cleanup_sighand+0xb0/0xb0 [ 423.720531] ? lock_acquire+0x197/0x470 [ 423.721398] ? find_held_lock+0x2c/0x110 [ 423.722279] kernel_clone+0xe7/0x980 [ 423.723084] ? lock_downgrade+0x6d0/0x6d0 [ 423.723985] ? find_held_lock+0x2c/0x110 [ 423.724846] ? create_io_thread+0xf0/0xf0 [ 423.725728] ? ksys_write+0x12d/0x260 [ 423.726550] ? __mutex_unlock_slowpath+0xe1/0x600 [ 423.727574] __do_sys_fork+0x8a/0xc0 [ 423.728373] ? kernel_thread+0xf0/0xf0 [ 423.729221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 423.730334] ? syscall_enter_from_user_mode+0x1d/0x50 [ 423.731423] ? trace_hardirqs_on+0x5b/0x180 [ 423.732378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 423.733474] do_syscall_64+0x33/0x40 [ 423.734276] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 423.735358] RIP: 0033:0x7f2eb7a3db19 [ 423.736165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 423.740026] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 423.741629] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 423.743138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.744667] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 423.746181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.747696] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:18:38 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:38 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 423.803222] netlink: 400 bytes leftover after parsing attributes in process `syz-executor.5'. [ 423.830138] loop5: detected capacity change from 0 to 8388096 17:18:52 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:18:52 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:18:52 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) 17:18:52 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 24) 17:18:52 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1, 0x100010, 0xffffffffffffffff, 0x10000000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:18:52 executing program 7: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 437.889578] FAULT_INJECTION: forcing a failure. [ 437.889578] name failslab, interval 1, probability 0, space 0, times 0 [ 437.892196] CPU: 1 PID: 6528 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 437.893642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 437.895391] Call Trace: [ 437.895962] dump_stack+0x107/0x167 [ 437.896732] should_fail.cold+0x5/0xa [ 437.897536] ? copy_process+0x2514/0x78b0 [ 437.898408] should_failslab+0x5/0x20 17:18:52 executing program 5: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) pipe(&(0x7f0000000200)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x1b4, 0x25, 0x1, 0x0, 0x0, {}, [@generic="d4a1091538629b542f9cf36086fbf4977c0c9176c70a7a5cb5e89979f2adfbc690c419ee069cc2b4400a8945b8cc4cd7c543b473cbf30b02cf613ff4e6602f2bc8ce4f856cf8b10538b23094568d95de1a47db5b284fbaa971794a4d305d98d351cdb069023f464ee932c03f709a9ff277087081620a2076e63bd9136e9a680be1063f6b736429ca1e0ddaf43b0476159686018b8796a27b424b8996ac3416206c7a283763688a919e515e0a9c8d15dc42ae79b219037d5e68a734029ca18e4e0c754da821af", @generic="a5dadd9c5d9ce18ac15a2ecbda21ef229d59f8b249516c69198ead1286840afe29554733eee540aefbdae8e15e8d9796cbd90ec08131c37678dde6231701403bdcbb972dd1917dd3df2c1fb9125aa8a74a6cd4906f4fed56a07e0f9ecbf1e6234f4bf67cb2180a4a101677fb69a6f20a6fd7308b170b719a6de209ed1803f95be1051c9e8f5e1ce8166da78f494087994d8c214774bfc59ee064ae14799e1adde733a03289f9da442b7aeebae66b982e9012fe79ce6024c8480eecad42bdf4501f93a381aa2e1a9ae56d82f8d1c3343f296a3ed0cfe4e9151a"]}, 0x1b4}}, 0x20004000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0xfff, 0x6, &(0x7f0000000b00)=[{&(0x7f0000000780)="215abfafad58a8b7020e466d65b435db081537ff8ddb1bdbfe9b0d7ef6c398bf7ea972858c77492e96747faf046c261eddf296cb02f7d99d73a7220560cf15a773027aa17909c2635be3f8dacafe65b6935cd21be13ba92466f65d479c57f54df730709f26068fa14ca15bac3ad88081ca920edbef0ba009a09258", 0x7b, 0x7}, {&(0x7f0000000800)="2f68dbf4ba538bad50eab4cd2feedd3ab38fd8b4ac5b38c24ecc64aa733fcd3ba56bee32bbc3a90a7c7c2dc797cced43a031800560354120ce866da4f5ff9b2f6e5ba511586f4884fcfeecaaffee64225fd80b5df3d20f0a7d0c1264829b667785e2ac8f2ada8e35474c9bc3132a0fbbd5941262733de8eb778a9681d64ba6574c6d0ea8d0a5d4f4cd755a12b0071360606335e0577f54c766d24d2f7166ab8e4835f2fef5924e507d323cda62e8c70fada835df7c494e79b6957a3769051686607f2d1f3f8c6ea8b4a73aa5bbb71131cb9f408e090f0f7e2572351ae864", 0xde, 0x3ff}, {&(0x7f0000000900)="239bd1f53b9ba9aae08d13252d4808760125ab84fe864d3c011e346e9867e7a2f57ec39e5fe66590da8e577c0313f83634f5a76ad28d7572ae6b618436dff66c86bb81cb4890b92afc2e0d95eb31ec1f2a5c9df791fbc436eaa5f1b59ba925641f923afb2f13a1fa1818ed72ec77e5dd0cb119e2124032668cfcac219a6b15", 0x7f, 0x8}, {&(0x7f0000000980)="e54734c30d4d34f222c82db960c54c3e6e4a7cb1c90b9f482e4cdac90692e1c4a967ef4c74871504ff50187f15dfc87a8ae887edb531d1a65670f67f6ea751f6452d5bbb98f61f8632b2ea48f9ae433a12f4592cbe2978880c0eefa238abd3851faf74eaf4464ca912f2e609", 0x6c}, {&(0x7f0000000a00)="e179f7e9450c1e56eb8b276bf5f17a81da63d010a8d03f8ca192958dfb19521d651a8b6f5bdf7cf6b12917ab1c6340d2cd212b4835da8fc4fade93b4075a670a7b08603f666edb2e0fbfa6d08821d145ca4c9c2e5a45edc9cd58d9c19688ea9b9b5513248d7d8e7bd696767812c65644c695fd55a449b8bd17c7718a08477f2980f3e12c3f03932df665e612011d6c1a1bd561cdf5a3d7ecb3962b7d0e3a21ec9fb13f08f79b2c45aae6275d182bb1eaae32ce6bd5894e1b6036ab87e05fd8d54bf186e0854d844d166bc0deb6dead485f", 0xd1, 0xfffffffffffffff9}, {&(0x7f0000000280)="91d329", 0x3, 0x2}], 0x82004, &(0x7f0000000bc0)={[{@i_version}, {@nouser_xattr}, {@usrjquota}, {@grpquota}, {@resgid={'resgid', 0x3d, r1}}, {@jqfmt_vfsv1}], [{@euid_eq={'euid', 0x3d, r0}}, {@euid_lt={'euid<', r2}}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/full\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0xc9a, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r3, 0x0, r4) socket$netlink(0x10, 0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x20040000) [ 437.899385] kmem_cache_alloc+0x5b/0x310 [ 437.900345] copy_process+0x2514/0x78b0 [ 437.901205] ? __lock_acquire+0xbb1/0x5b00 [ 437.902134] ? __cleanup_sighand+0xb0/0xb0 [ 437.903058] ? lock_acquire+0x197/0x470 [ 437.903919] ? find_held_lock+0x2c/0x110 [ 437.904787] kernel_clone+0xe7/0x980 [ 437.905579] ? lock_downgrade+0x6d0/0x6d0 [ 437.906458] ? find_held_lock+0x2c/0x110 [ 437.907110] netlink: 400 bytes leftover after parsing attributes in process `syz-executor.5'. [ 437.907316] ? create_io_thread+0xf0/0xf0 [ 437.909451] ? ksys_write+0x12d/0x260 [ 437.910264] ? __mutex_unlock_slowpath+0xe1/0x600 [ 437.911284] __do_sys_fork+0x8a/0xc0 [ 437.912076] ? kernel_thread+0xf0/0xf0 [ 437.912923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 437.914038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 437.915133] ? trace_hardirqs_on+0x5b/0x180 [ 437.916074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 437.917187] do_syscall_64+0x33/0x40 [ 437.917985] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 437.919068] RIP: 0033:0x7f2eb7a3db19 [ 437.919867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 437.923792] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 437.925433] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 437.926950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 437.927279] loop5: detected capacity change from 0 to 8388096 [ 437.928473] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 437.928484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 437.928495] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:18:52 executing program 7: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:52 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 25) [ 438.207517] FAULT_INJECTION: forcing a failure. [ 438.207517] name failslab, interval 1, probability 0, space 0, times 0 [ 438.210008] CPU: 1 PID: 6552 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 438.211464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 438.213228] Call Trace: [ 438.213791] dump_stack+0x107/0x167 [ 438.214563] should_fail.cold+0x5/0xa [ 438.215370] ? create_object.isra.0+0x3a/0xa30 [ 438.216347] should_failslab+0x5/0x20 [ 438.217157] kmem_cache_alloc+0x5b/0x310 [ 438.218021] create_object.isra.0+0x3a/0xa30 [ 438.218950] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 438.220034] kmem_cache_alloc+0x159/0x310 [ 438.220905] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 438.222019] copy_process+0x1c65/0x78b0 [ 438.222867] ? __lock_acquire+0xbb1/0x5b00 [ 438.223790] ? __cleanup_sighand+0xb0/0xb0 [ 438.224707] ? lock_acquire+0x197/0x470 [ 438.225559] ? find_held_lock+0x2c/0x110 [ 438.226422] kernel_clone+0xe7/0x980 [ 438.227206] ? lock_downgrade+0x6d0/0x6d0 [ 438.228084] ? find_held_lock+0x2c/0x110 [ 438.228938] ? create_io_thread+0xf0/0xf0 [ 438.229809] ? ksys_write+0x12d/0x260 [ 438.230614] ? __mutex_unlock_slowpath+0xe1/0x600 [ 438.231633] __do_sys_fork+0x8a/0xc0 [ 438.232423] ? kernel_thread+0xf0/0xf0 [ 438.233258] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 438.234367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 438.235461] ? trace_hardirqs_on+0x5b/0x180 [ 438.236378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 438.237458] do_syscall_64+0x33/0x40 [ 438.238248] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 438.239336] RIP: 0033:0x7f2eb7a3db19 [ 438.240134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 438.244032] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 438.245649] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 438.247146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 438.248689] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 438.250192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 438.251720] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:18:53 executing program 7: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:18:53 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 438.311314] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:18:53 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) 17:18:53 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:18:53 executing program 6: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 438.588779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.589702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.590832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:19:09 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:19:09 executing program 6: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:19:09 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:09 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:19:09 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 26) 17:19:09 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:19:09 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) [ 454.541795] FAULT_INJECTION: forcing a failure. [ 454.541795] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 454.544961] CPU: 1 PID: 6589 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 454.546443] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 454.548220] Call Trace: [ 454.548788] dump_stack+0x107/0x167 [ 454.549565] should_fail.cold+0x5/0xa [ 454.550385] __alloc_pages_nodemask+0x182/0x600 [ 454.551378] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 454.552505] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 454.553803] alloc_pages_current+0x187/0x280 [ 454.554741] __get_free_pages+0xc/0xa0 [ 454.555570] pgd_alloc+0x84/0x4e0 [ 454.556315] ? pgd_page_get_mm+0x40/0x40 [ 454.557183] ? lockdep_init_map_type+0x2c7/0x780 [ 454.558207] ? lockdep_init_map_type+0x2c7/0x780 [ 454.559211] mm_init+0x670/0xab0 [ 454.559932] copy_process+0x257b/0x78b0 [ 454.560793] ? __lock_acquire+0xbb1/0x5b00 [ 454.561705] ? __cleanup_sighand+0xb0/0xb0 [ 454.562617] ? lock_acquire+0x197/0x470 [ 454.563474] ? find_held_lock+0x2c/0x110 [ 454.564339] kernel_clone+0xe7/0x980 [ 454.565137] ? lock_downgrade+0x6d0/0x6d0 [ 454.566004] ? find_held_lock+0x2c/0x110 [ 454.566869] ? create_io_thread+0xf0/0xf0 [ 454.567209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 454.567744] ? ksys_write+0x12d/0x260 [ 454.567769] ? __mutex_unlock_slowpath+0xe1/0x600 [ 454.567796] __do_sys_fork+0x8a/0xc0 [ 454.572093] ? kernel_thread+0xf0/0xf0 [ 454.572921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 454.574015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 454.575076] ? trace_hardirqs_on+0x5b/0x180 [ 454.575974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 454.577056] do_syscall_64+0x33/0x40 [ 454.577829] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 454.578920] RIP: 0033:0x7f2eb7a3db19 [ 454.579708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 454.583575] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 454.585208] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 454.586715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.588225] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 454.589706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.591205] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:19:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:19:09 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:09 executing program 6: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:09 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 27) 17:19:09 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:09 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 454.841862] FAULT_INJECTION: forcing a failure. [ 454.841862] name failslab, interval 1, probability 0, space 0, times 0 [ 454.844364] CPU: 1 PID: 6611 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 454.845826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 454.847632] Call Trace: [ 454.848213] dump_stack+0x107/0x167 [ 454.848999] should_fail.cold+0x5/0xa [ 454.849830] ? create_object.isra.0+0x3a/0xa30 [ 454.850814] should_failslab+0x5/0x20 [ 454.851633] kmem_cache_alloc+0x5b/0x310 [ 454.852501] create_object.isra.0+0x3a/0xa30 [ 454.853410] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 454.854518] kmem_cache_alloc+0x159/0x310 [ 454.855421] copy_process+0x2514/0x78b0 [ 454.856292] ? __lock_acquire+0xbb1/0x5b00 [ 454.857218] ? __cleanup_sighand+0xb0/0xb0 [ 454.858139] ? lock_acquire+0x197/0x470 [ 454.858999] ? find_held_lock+0x2c/0x110 [ 454.859887] kernel_clone+0xe7/0x980 [ 454.860706] ? lock_downgrade+0x6d0/0x6d0 [ 454.861601] ? find_held_lock+0x2c/0x110 [ 454.862472] ? create_io_thread+0xf0/0xf0 [ 454.863368] ? ksys_write+0x12d/0x260 [ 454.864211] ? __mutex_unlock_slowpath+0xe1/0x600 [ 454.865268] __do_sys_fork+0x8a/0xc0 [ 454.866078] ? kernel_thread+0xf0/0xf0 [ 454.866938] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 454.868082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 454.869210] ? trace_hardirqs_on+0x5b/0x180 [ 454.870154] ? syscall_enter_from_user_mode+0x1d/0x50 [ 454.871275] do_syscall_64+0x33/0x40 [ 454.872087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 454.873215] RIP: 0033:0x7f2eb7a3db19 [ 454.874023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 454.878053] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 454.879703] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 454.881246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.882781] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 454.884348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.885886] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:19:09 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r4, 0xffffffffffffffff, r5, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 455.360081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 455.370856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:19:23 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 468.765893] FAULT_INJECTION: forcing a failure. [ 468.765893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 468.768799] CPU: 1 PID: 6628 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 468.770528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 468.772327] Call Trace: [ 468.772910] dump_stack+0x107/0x167 [ 468.773703] should_fail.cold+0x5/0xa [ 468.774533] __alloc_pages_nodemask+0x182/0x600 [ 468.775539] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 468.776676] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 468.777986] alloc_pages_current+0x187/0x280 17:19:23 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:19:23 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:23 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:23 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:19:23 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 28) 17:19:23 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:19:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r4, 0xffffffffffffffff, r5, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 468.778934] __get_free_pages+0xc/0xa0 [ 468.779955] pgd_alloc+0x84/0x4e0 [ 468.780713] ? pgd_page_get_mm+0x40/0x40 [ 468.781591] ? lockdep_init_map_type+0x2c7/0x780 [ 468.782619] ? lockdep_init_map_type+0x2c7/0x780 [ 468.783647] mm_init+0x670/0xab0 [ 468.784386] copy_process+0x257b/0x78b0 [ 468.785246] ? __lock_acquire+0xbb1/0x5b00 [ 468.786182] ? __cleanup_sighand+0xb0/0xb0 [ 468.787108] ? lock_acquire+0x197/0x470 [ 468.787968] ? find_held_lock+0x2c/0x110 [ 468.788851] kernel_clone+0xe7/0x980 [ 468.789651] ? lock_downgrade+0x6d0/0x6d0 [ 468.790538] ? find_held_lock+0x2c/0x110 [ 468.791412] ? create_io_thread+0xf0/0xf0 [ 468.792314] ? ksys_write+0x12d/0x260 [ 468.793146] ? __mutex_unlock_slowpath+0xe1/0x600 [ 468.794196] __do_sys_fork+0x8a/0xc0 [ 468.794995] ? kernel_thread+0xf0/0xf0 [ 468.795843] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 468.796961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 468.798034] ? trace_hardirqs_on+0x5b/0x180 [ 468.798930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 468.800007] do_syscall_64+0x33/0x40 [ 468.800794] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 468.801866] RIP: 0033:0x7f2eb7a3db19 [ 468.802646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 468.806446] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 468.808043] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 468.809543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.811032] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 468.812527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.814030] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 468.823506] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 468.850938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 17:19:23 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:23 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r4, 0xffffffffffffffff, r5, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:19:23 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:23 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 29) 17:19:23 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 469.123110] FAULT_INJECTION: forcing a failure. [ 469.123110] name failslab, interval 1, probability 0, space 0, times 0 [ 469.125771] CPU: 0 PID: 6662 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 469.127351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 469.129261] Call Trace: [ 469.129877] dump_stack+0x107/0x167 [ 469.130696] should_fail.cold+0x5/0xa [ 469.131560] ? copy_process+0x2514/0x78b0 [ 469.132520] should_failslab+0x5/0x20 [ 469.133394] kmem_cache_alloc+0x5b/0x310 [ 469.134310] copy_process+0x2514/0x78b0 [ 469.135222] ? __lock_acquire+0xbb1/0x5b00 [ 469.136204] ? __cleanup_sighand+0xb0/0xb0 [ 469.137171] ? lock_acquire+0x197/0x470 [ 469.138075] ? find_held_lock+0x2c/0x110 [ 469.139001] kernel_clone+0xe7/0x980 [ 469.139846] ? lock_downgrade+0x6d0/0x6d0 [ 469.140792] ? find_held_lock+0x2c/0x110 [ 469.141705] ? create_io_thread+0xf0/0xf0 [ 469.142639] ? ksys_write+0x12d/0x260 [ 469.143511] ? __mutex_unlock_slowpath+0xe1/0x600 [ 469.144626] __do_sys_fork+0x8a/0xc0 [ 469.145460] ? kernel_thread+0xf0/0xf0 [ 469.146348] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 469.147538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 469.148703] ? trace_hardirqs_on+0x5b/0x180 [ 469.149671] ? syscall_enter_from_user_mode+0x1d/0x50 [ 469.150827] do_syscall_64+0x33/0x40 [ 469.151672] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 469.152830] RIP: 0033:0x7f2eb7a3db19 [ 469.153658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 469.157838] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 469.159546] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 469.161155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.162809] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 469.164416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.166027] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:19:23 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:23 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 469.430150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.431970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.433752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 470.445017] Bluetooth: hci1: command 0x0406 tx timeout 17:19:38 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x7c82, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x37e}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x7}}], [{@subj_type={'subj_type', 0x3d, ':\xc8'}}, {@dont_hash}]}}) mmap(&(0x7f0000be8000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 17:19:38 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:19:38 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:38 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 1) 17:19:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:19:38 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:38 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:19:38 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 30) [ 484.064762] FAULT_INJECTION: forcing a failure. [ 484.064762] name failslab, interval 1, probability 0, space 0, times 0 [ 484.067433] CPU: 0 PID: 6685 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 484.068861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 484.070591] Call Trace: [ 484.071156] dump_stack+0x107/0x167 [ 484.071925] should_fail.cold+0x5/0xa [ 484.072736] ? getname_flags.part.0+0x50/0x4f0 [ 484.073686] should_failslab+0x5/0x20 [ 484.074492] kmem_cache_alloc+0x5b/0x310 [ 484.075529] getname_flags.part.0+0x50/0x4f0 [ 484.076137] FAULT_INJECTION: forcing a failure. [ 484.076137] name failslab, interval 1, probability 0, space 0, times 0 [ 484.076558] getname+0x8e/0xd0 [ 484.076580] do_sys_openat2+0xf9/0x4d0 [ 484.076608] ? build_open_flags+0x6f0/0x6f0 [ 484.076624] ? __mutex_unlock_slowpath+0xe1/0x600 [ 484.076644] ? wait_for_completion_io+0x270/0x270 [ 484.083617] __x64_sys_openat+0x13f/0x1f0 [ 484.084486] ? __ia32_sys_open+0x1c0/0x1c0 [ 484.085347] ? ksys_write+0x1a9/0x260 [ 484.086133] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 484.087207] ? syscall_enter_from_user_mode+0x1d/0x50 [ 484.088268] do_syscall_64+0x33/0x40 [ 484.089036] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 484.090110] RIP: 0033:0x7f64f3e1ea04 [ 484.090862] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 484.094659] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 484.096233] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 484.097732] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 484.099219] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 484.100705] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 484.102171] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 484.103667] CPU: 1 PID: 6688 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 484.105318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 484.107241] Call Trace: [ 484.107862] dump_stack+0x107/0x167 [ 484.108739] should_fail.cold+0x5/0xa [ 484.109632] ? create_object.isra.0+0x3a/0xa30 [ 484.110689] should_failslab+0x5/0x20 [ 484.111580] kmem_cache_alloc+0x5b/0x310 [ 484.112558] create_object.isra.0+0x3a/0xa30 [ 484.113586] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 484.114784] kmem_cache_alloc+0x159/0x310 [ 484.115779] vm_area_dup+0x78/0x290 [ 484.116656] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 484.117739] ? lock_downgrade+0x6d0/0x6d0 [ 484.118713] ? copy_page_range+0x24e9/0x3810 [ 484.119759] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 484.120855] ? avc_has_extended_perms+0xf40/0xf40 [ 484.121985] ? vm_area_alloc+0x110/0x110 [ 484.122933] ? find_held_lock+0x2c/0x110 [ 484.123869] ? selinux_vm_enough_memory+0x114/0x180 [ 484.125043] ? selinux_sb_statfs+0x250/0x250 [ 484.126057] ? percpu_counter_add_batch+0x8b/0x140 [ 484.127187] ? __vm_enough_memory+0x184/0x360 [ 484.128219] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 484.129419] copy_process+0x298b/0x78b0 [ 484.130378] ? __cleanup_sighand+0xb0/0xb0 [ 484.131353] ? lock_acquire+0x197/0x470 [ 484.132294] ? find_held_lock+0x2c/0x110 [ 484.133252] kernel_clone+0xe7/0x980 [ 484.134105] ? lock_downgrade+0x6d0/0x6d0 [ 484.135058] ? find_held_lock+0x2c/0x110 [ 484.135996] ? create_io_thread+0xf0/0xf0 [ 484.136975] ? ksys_write+0x12d/0x260 [ 484.137846] ? __mutex_unlock_slowpath+0xe1/0x600 [ 484.138974] __do_sys_fork+0x8a/0xc0 [ 484.139814] ? kernel_thread+0xf0/0xf0 [ 484.140747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 484.141973] ? syscall_enter_from_user_mode+0x1d/0x50 [ 484.143171] ? trace_hardirqs_on+0x5b/0x180 [ 484.144182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 484.145394] do_syscall_64+0x33/0x40 [ 484.146255] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 484.147428] RIP: 0033:0x7f2eb7a3db19 [ 484.148292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 484.152559] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 484.154318] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 484.155970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 484.157629] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 484.159290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.160966] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:19:38 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:39 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 2) 17:19:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 484.309109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.310649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.312240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 484.338651] FAULT_INJECTION: forcing a failure. [ 484.338651] name failslab, interval 1, probability 0, space 0, times 0 [ 484.341371] CPU: 1 PID: 6702 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 484.342993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 484.344978] Call Trace: [ 484.345595] dump_stack+0x107/0x167 [ 484.346444] should_fail.cold+0x5/0xa [ 484.347340] ? create_object.isra.0+0x3a/0xa30 [ 484.348406] should_failslab+0x5/0x20 [ 484.349304] kmem_cache_alloc+0x5b/0x310 [ 484.350249] create_object.isra.0+0x3a/0xa30 [ 484.351266] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 484.352467] kmem_cache_alloc+0x159/0x310 [ 484.353504] getname_flags.part.0+0x50/0x4f0 [ 484.354536] getname+0x8e/0xd0 [ 484.355292] do_sys_openat2+0xf9/0x4d0 [ 484.356197] ? build_open_flags+0x6f0/0x6f0 [ 484.357203] ? __mutex_unlock_slowpath+0xe1/0x600 [ 484.358329] ? wait_for_completion_io+0x270/0x270 [ 484.359452] __x64_sys_openat+0x13f/0x1f0 [ 484.360423] ? __ia32_sys_open+0x1c0/0x1c0 [ 484.361397] ? ksys_write+0x1a9/0x260 [ 484.362305] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 484.363519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 484.364724] do_syscall_64+0x33/0x40 [ 484.365595] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 484.366789] RIP: 0033:0x7f64f3e1ea04 [ 484.367661] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 484.371883] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 484.373633] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 484.375277] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 484.376920] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 484.378545] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 484.380164] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 484.409846] FAULT_INJECTION: forcing a failure. [ 484.409846] name failslab, interval 1, probability 0, space 0, times 0 [ 484.412292] CPU: 0 PID: 6707 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 484.413725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 484.415458] Call Trace: [ 484.416019] dump_stack+0x107/0x167 [ 484.416807] should_fail.cold+0x5/0xa [ 484.417623] ? vm_area_dup+0x78/0x290 [ 484.418440] should_failslab+0x5/0x20 [ 484.419239] kmem_cache_alloc+0x5b/0x310 [ 484.420102] vm_area_dup+0x78/0x290 [ 484.420891] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 484.421877] ? lock_downgrade+0x6d0/0x6d0 [ 484.422754] ? copy_page_range+0x24e9/0x3810 [ 484.423702] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 484.424693] ? avc_has_extended_perms+0xf40/0xf40 [ 484.425712] ? vm_area_alloc+0x110/0x110 [ 484.426559] ? find_held_lock+0x2c/0x110 [ 484.427416] ? selinux_vm_enough_memory+0x114/0x180 [ 484.428473] ? selinux_sb_statfs+0x250/0x250 [ 484.429401] ? percpu_counter_add_batch+0x8b/0x140 [ 484.430427] ? __vm_enough_memory+0x184/0x360 [ 484.431366] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 484.432461] copy_process+0x298b/0x78b0 [ 484.433323] ? __cleanup_sighand+0xb0/0xb0 [ 484.434218] ? lock_acquire+0x197/0x470 [ 484.435056] ? find_held_lock+0x2c/0x110 [ 484.435910] kernel_clone+0xe7/0x980 [ 484.436710] ? lock_downgrade+0x6d0/0x6d0 [ 484.437591] ? find_held_lock+0x2c/0x110 [ 484.438452] ? create_io_thread+0xf0/0xf0 [ 484.439320] ? ksys_write+0x12d/0x260 [ 484.440134] ? __mutex_unlock_slowpath+0xe1/0x600 [ 484.441160] __do_sys_fork+0x8a/0xc0 [ 484.441944] ? kernel_thread+0xf0/0xf0 [ 484.442780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 484.443868] ? syscall_enter_from_user_mode+0x1d/0x50 [ 484.444951] ? trace_hardirqs_on+0x5b/0x180 [ 484.445865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 484.446944] do_syscall_64+0x33/0x40 [ 484.447724] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 484.448805] RIP: 0033:0x7f2eb7a3db19 [ 484.449589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 484.453432] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 484.455018] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 484.456524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 484.458002] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 484.459496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.460996] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:19:39 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 31) 17:19:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000ecff0c0000de0b00018008000100", @ANYRES32=r11, @ANYBLOB="140003801000038002000180070002002f2c0000"], 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="c7ed85e2", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="300001800800030000000000080003000100000008000100", @ANYRES32=r11, @ANYBLOB="1400020076657468315f746f5f7465616d000000a800028018000400a2ae2cd67cb848692fbc9f95bda0571f4141767f810004003325dc5049f3f20c4fd2a2c223d354f551b4795b83a9af5aeff72b92e1810ef15924022d254ecf40d59f47397c25684e49ebc5d34dbfbdb8977e9d4c9eb505c5cc27a566a9ef44d72fed21145558225b11ad47449eb2b2f54b47e478e2ae115dd41d996c257c60b935ef3188da7bfb0c19933e6d6d2b33b084380f05fd0000000800020040000000"], 0x240}, 0x1, 0x0, 0x0, 0x4048000}, 0x240048a0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r8}}, 0x7ff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0xffff) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r7, 0x0, &(0x7f0000000000)="e8823e77da8c74ed", 0x8, 0x8004, 0x47ab9be2ea9a94f2, {0x0, r8}}, 0x10000) 17:19:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7e, 0x0, 0x7, 0x4, 0x0, 0x6e3, 0x40000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf25d, 0x2, @perf_bp={&(0x7f0000000380), 0x9}, 0xa8132d268dc3c471, 0x10001, 0x1, 0x3, 0x80, 0x3, 0x800, 0x0, 0xffff, 0x0, 0x1}, r6, 0xffffffffffffffff, r7, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:19:39 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:39 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 1) [ 484.561605] FAULT_INJECTION: forcing a failure. [ 484.561605] name failslab, interval 1, probability 0, space 0, times 0 [ 484.564817] CPU: 1 PID: 6715 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 484.566674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 484.568965] Call Trace: [ 484.569699] dump_stack+0x107/0x167 [ 484.570693] should_fail.cold+0x5/0xa [ 484.571734] ? getname_flags.part.0+0x50/0x4f0 [ 484.573006] should_failslab+0x5/0x20 [ 484.574056] kmem_cache_alloc+0x5b/0x310 [ 484.575166] getname_flags.part.0+0x50/0x4f0 [ 484.576371] getname+0x8e/0xd0 [ 484.577260] do_sys_openat2+0xf9/0x4d0 [ 484.578329] ? build_open_flags+0x6f0/0x6f0 [ 484.579507] ? __mutex_unlock_slowpath+0xe1/0x600 [ 484.580922] ? wait_for_completion_io+0x270/0x270 [ 484.582177] __x64_sys_openat+0x13f/0x1f0 [ 484.583264] ? __ia32_sys_open+0x1c0/0x1c0 [ 484.584333] ? ksys_write+0x1a9/0x260 [ 484.585339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 484.586579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 484.587757] do_syscall_64+0x33/0x40 [ 484.588620] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 484.589782] RIP: 0033:0x7fc35e22ea04 [ 484.590624] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 484.594835] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 484.596581] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 484.598188] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 484.599824] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 484.601459] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 484.603088] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 17:19:39 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:19:39 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 3) [ 484.707095] FAULT_INJECTION: forcing a failure. [ 484.707095] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 484.709822] CPU: 1 PID: 6722 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 484.711389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 484.713287] Call Trace: [ 484.713888] dump_stack+0x107/0x167 [ 484.714728] should_fail.cold+0x5/0xa [ 484.715634] strncpy_from_user+0x34/0x470 [ 484.716590] getname_flags.part.0+0x95/0x4f0 [ 484.717619] getname+0x8e/0xd0 [ 484.718356] do_sys_openat2+0xf9/0x4d0 [ 484.719255] ? build_open_flags+0x6f0/0x6f0 [ 484.720247] ? __mutex_unlock_slowpath+0xe1/0x600 [ 484.721369] ? wait_for_completion_io+0x270/0x270 [ 484.722484] __x64_sys_openat+0x13f/0x1f0 [ 484.723434] ? __ia32_sys_open+0x1c0/0x1c0 [ 484.724404] ? ksys_write+0x1a9/0x260 [ 484.725280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 484.726469] ? syscall_enter_from_user_mode+0x1d/0x50 [ 484.727637] do_syscall_64+0x33/0x40 [ 484.728497] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 484.729668] RIP: 0033:0x7f64f3e1ea04 [ 484.730508] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 484.734714] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 484.736441] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 484.738054] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 484.739681] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 484.741323] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 484.742941] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 499.542336] FAULT_INJECTION: forcing a failure. [ 499.542336] name failslab, interval 1, probability 0, space 0, times 0 [ 499.545035] CPU: 1 PID: 6732 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 499.546604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 499.548420] Call Trace: [ 499.549027] dump_stack+0x107/0x167 [ 499.549841] should_fail.cold+0x5/0xa [ 499.550708] ? create_object.isra.0+0x3a/0xa30 [ 499.551732] should_failslab+0x5/0x20 [ 499.552610] kmem_cache_alloc+0x5b/0x310 [ 499.553531] create_object.isra.0+0x3a/0xa30 [ 499.554563] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 499.555683] kmem_cache_alloc+0x159/0x310 [ 499.556595] getname_flags.part.0+0x50/0x4f0 [ 499.557518] getname+0x8e/0xd0 [ 499.558208] do_sys_openat2+0xf9/0x4d0 [ 499.559007] ? build_open_flags+0x6f0/0x6f0 [ 499.559941] ? __mutex_unlock_slowpath+0xe1/0x600 [ 499.561013] ? wait_for_completion_io+0x270/0x270 [ 499.562006] __x64_sys_openat+0x13f/0x1f0 [ 499.562874] ? __ia32_sys_open+0x1c0/0x1c0 [ 499.563782] ? ksys_write+0x1a9/0x260 [ 499.564625] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 499.565730] ? syscall_enter_from_user_mode+0x1d/0x50 [ 499.566815] do_syscall_64+0x33/0x40 [ 499.567595] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 499.568678] RIP: 0033:0x7fc35e22ea04 17:19:54 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 2) 17:19:54 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 1) 17:19:54 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:19:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r6 = fork() ptrace(0x10, r6) syz_open_procfs(r6, &(0x7f0000000000)='attr/keycreate\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r0}}, './file1\x00'}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 499.569726] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 499.573775] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 499.575372] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 499.576872] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 499.578364] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 499.579867] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 499.581358] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 499.596125] FAULT_INJECTION: forcing a failure. [ 499.596125] name failslab, interval 1, probability 0, space 0, times 0 [ 499.598606] CPU: 0 PID: 6735 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 499.600069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 499.601848] Call Trace: [ 499.602408] dump_stack+0x107/0x167 [ 499.603198] should_fail.cold+0x5/0xa [ 499.603465] FAULT_INJECTION: forcing a failure. [ 499.603465] name failslab, interval 1, probability 0, space 0, times 0 [ 499.604007] ? create_object.isra.0+0x3a/0xa30 [ 499.604026] should_failslab+0x5/0x20 [ 499.604044] kmem_cache_alloc+0x5b/0x310 [ 499.604070] create_object.isra.0+0x3a/0xa30 [ 499.609915] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 499.610988] kmem_cache_alloc+0x159/0x310 [ 499.611885] vm_area_dup+0x78/0x290 [ 499.612678] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 499.613677] ? lock_downgrade+0x6d0/0x6d0 [ 499.614552] ? copy_page_range+0x24e9/0x3810 [ 499.615508] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 499.616478] ? avc_has_extended_perms+0xf40/0xf40 [ 499.617530] ? vm_area_alloc+0x110/0x110 [ 499.618401] ? find_held_lock+0x2c/0x110 [ 499.619278] ? selinux_vm_enough_memory+0x114/0x180 [ 499.620352] ? selinux_sb_statfs+0x250/0x250 [ 499.621331] ? percpu_counter_add_batch+0x8b/0x140 [ 499.622386] ? __vm_enough_memory+0x184/0x360 [ 499.623348] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 499.624454] copy_process+0x298b/0x78b0 [ 499.625346] ? __cleanup_sighand+0xb0/0xb0 [ 499.626242] ? lock_acquire+0x197/0x470 [ 499.627110] ? find_held_lock+0x2c/0x110 [ 499.627986] kernel_clone+0xe7/0x980 [ 499.628805] ? lock_downgrade+0x6d0/0x6d0 [ 499.629696] ? find_held_lock+0x2c/0x110 [ 499.630566] ? create_io_thread+0xf0/0xf0 [ 499.631433] ? ksys_write+0x12d/0x260 [ 499.632229] ? __mutex_unlock_slowpath+0xe1/0x600 [ 499.633270] __do_sys_fork+0x8a/0xc0 [ 499.634059] ? kernel_thread+0xf0/0xf0 [ 499.634910] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 499.636036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 499.637148] ? trace_hardirqs_on+0x5b/0x180 [ 499.638078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 499.639189] do_syscall_64+0x33/0x40 [ 499.639990] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 499.641100] RIP: 0033:0x7f2eb7a3db19 [ 499.641895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 499.645853] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 499.647473] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 499.648984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 499.650491] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 499.652026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.653549] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 499.655096] CPU: 1 PID: 6738 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 499.656551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 499.658320] Call Trace: [ 499.658883] dump_stack+0x107/0x167 [ 499.659660] should_fail.cold+0x5/0xa [ 499.660465] ? __alloc_file+0x21/0x320 [ 499.661299] should_failslab+0x5/0x20 [ 499.662121] kmem_cache_alloc+0x5b/0x310 [ 499.662992] __alloc_file+0x21/0x320 [ 499.663777] alloc_empty_file+0x6d/0x170 [ 499.664649] path_openat+0xe6/0x2770 [ 499.665432] ? __lock_acquire+0x1657/0x5b00 [ 499.666362] ? path_lookupat+0x860/0x860 [ 499.667232] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 499.668350] ? lock_acquire+0x197/0x470 [ 499.669198] ? find_held_lock+0x2c/0x110 17:19:54 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 32) 17:19:54 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 4) 17:19:54 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:19:54 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 499.670070] do_filp_open+0x190/0x3e0 [ 499.671161] ? may_open_dev+0xf0/0xf0 [ 499.671993] ? alloc_fd+0x2e7/0x670 [ 499.672787] ? lock_downgrade+0x6d0/0x6d0 [ 499.673678] ? do_raw_spin_lock+0x121/0x260 [ 499.674610] ? rwlock_bug.part.0+0x90/0x90 [ 499.675511] ? _raw_spin_unlock+0x1a/0x30 [ 499.676402] ? alloc_fd+0x2e7/0x670 [ 499.677206] do_sys_openat2+0x171/0x4d0 [ 499.678065] ? build_open_flags+0x6f0/0x6f0 [ 499.678975] ? __mutex_unlock_slowpath+0xe1/0x600 [ 499.680010] ? wait_for_completion_io+0x270/0x270 [ 499.681065] __x64_sys_openat+0x13f/0x1f0 [ 499.681955] ? __ia32_sys_open+0x1c0/0x1c0 [ 499.682851] ? ksys_write+0x1a9/0x260 [ 499.683674] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 499.684814] ? syscall_enter_from_user_mode+0x1d/0x50 [ 499.685926] do_syscall_64+0x33/0x40 [ 499.686729] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 499.687829] RIP: 0033:0x7f64f3e1ea04 [ 499.688633] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 499.692602] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 499.694204] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 499.695694] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 499.697221] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 499.698740] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 499.700268] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 17:19:54 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 499.742739] FAULT_INJECTION: forcing a failure. [ 499.742739] name failslab, interval 1, probability 0, space 0, times 0 [ 499.745251] CPU: 0 PID: 6746 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 499.746737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 499.748554] Call Trace: [ 499.749123] dump_stack+0x107/0x167 [ 499.749921] should_fail.cold+0x5/0xa [ 499.750751] ? getname_flags.part.0+0x50/0x4f0 [ 499.751739] should_failslab+0x5/0x20 [ 499.752572] kmem_cache_alloc+0x5b/0x310 [ 499.753461] getname_flags.part.0+0x50/0x4f0 [ 499.754421] getname+0x8e/0xd0 [ 499.755119] do_sys_openat2+0xf9/0x4d0 [ 499.755971] ? build_open_flags+0x6f0/0x6f0 [ 499.756916] ? __mutex_unlock_slowpath+0xe1/0x600 [ 499.757964] ? wait_for_completion_io+0x270/0x270 [ 499.759017] __x64_sys_openat+0x13f/0x1f0 [ 499.759917] ? __ia32_sys_open+0x1c0/0x1c0 [ 499.760842] ? ksys_write+0x1a9/0x260 [ 499.761674] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 499.762805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 499.763929] do_syscall_64+0x33/0x40 [ 499.764786] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 499.765906] RIP: 0033:0x7f431a77ea04 [ 499.766717] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 499.769529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 499.770738] RSP: 002b:00007f4317d200b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 499.770759] RAX: ffffffffffffffda RBX: 00007f431a8df020 RCX: 00007f431a77ea04 [ 499.770769] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 499.770779] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 499.770788] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 499.770798] R13: 00007ffed9559d5f R14: 00007f4317d20300 R15: 0000000000022000 17:19:54 executing program 7: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:19:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() ptrace(0x10, r5) syz_open_procfs(r5, &(0x7f0000000000)='attr/keycreate\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:19:54 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 3) 17:19:54 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 2) 17:19:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() ptrace(0x10, r5) syz_open_procfs(r5, &(0x7f0000000000)='attr/keycreate\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 499.959466] FAULT_INJECTION: forcing a failure. [ 499.959466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.962127] CPU: 1 PID: 6758 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 499.963611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 499.965416] Call Trace: [ 499.965984] dump_stack+0x107/0x167 [ 499.966755] should_fail.cold+0x5/0xa [ 499.967569] strncpy_from_user+0x34/0x470 [ 499.968472] getname_flags.part.0+0x95/0x4f0 [ 499.969435] getname+0x8e/0xd0 [ 499.970130] do_sys_openat2+0xf9/0x4d0 [ 499.970972] ? build_open_flags+0x6f0/0x6f0 [ 499.971900] ? __mutex_unlock_slowpath+0xe1/0x600 [ 499.972952] ? wait_for_completion_io+0x270/0x270 [ 499.973970] __x64_sys_openat+0x13f/0x1f0 [ 499.974839] ? __ia32_sys_open+0x1c0/0x1c0 [ 499.975747] ? ksys_write+0x1a9/0x260 [ 499.976591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 499.977703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 499.978796] do_syscall_64+0x33/0x40 [ 499.979579] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 499.980696] RIP: 0033:0x7fc35e22ea04 [ 499.981476] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 17:19:54 executing program 7: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 499.985469] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 499.987305] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 499.989004] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 499.990516] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 499.992067] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 499.993623] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 500.016793] FAULT_INJECTION: forcing a failure. [ 500.016793] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 500.019485] CPU: 0 PID: 6760 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 500.020949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 500.022712] Call Trace: [ 500.023279] dump_stack+0x107/0x167 [ 500.024046] should_fail.cold+0x5/0xa [ 500.024871] __alloc_pages_nodemask+0x182/0x600 [ 500.025860] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 500.027145] ? kmem_cache_alloc+0x301/0x310 [ 500.028066] alloc_pages_current+0x187/0x280 [ 500.029014] allocate_slab+0x26f/0x380 [ 500.029857] ___slab_alloc+0x470/0x700 [ 500.030699] ? getname_flags.part.0+0x50/0x4f0 [ 500.031673] ? getname_flags.part.0+0x50/0x4f0 [ 500.032656] ? kmem_cache_alloc+0x301/0x310 [ 500.033581] kmem_cache_alloc+0x301/0x310 [ 500.034467] getname_flags.part.0+0x50/0x4f0 [ 500.035401] getname+0x8e/0xd0 [ 500.036086] do_sys_openat2+0xf9/0x4d0 [ 500.036893] ? build_open_flags+0x6f0/0x6f0 [ 500.037804] ? __mutex_unlock_slowpath+0xe1/0x600 [ 500.038834] ? wait_for_completion_io+0x270/0x270 [ 500.039872] __x64_sys_openat+0x13f/0x1f0 [ 500.040766] ? __ia32_sys_open+0x1c0/0x1c0 [ 500.041664] ? ksys_write+0x1a9/0x260 [ 500.042474] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 500.043581] ? syscall_enter_from_user_mode+0x1d/0x50 [ 500.044681] do_syscall_64+0x33/0x40 [ 500.045471] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 500.046521] RIP: 0033:0x7f431a77ea04 [ 500.047320] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 500.051242] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 500.052855] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 500.054380] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 500.055904] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 500.057431] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 500.058970] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 17:19:54 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 33) 17:19:54 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 5) [ 500.143860] FAULT_INJECTION: forcing a failure. [ 500.143860] name failslab, interval 1, probability 0, space 0, times 0 [ 500.146320] CPU: 0 PID: 6771 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 500.147790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 500.149572] Call Trace: [ 500.150128] dump_stack+0x107/0x167 [ 500.150902] should_fail.cold+0x5/0xa [ 500.151387] FAULT_INJECTION: forcing a failure. [ 500.151387] name failslab, interval 1, probability 0, space 0, times 0 [ 500.151714] ? create_object.isra.0+0x3a/0xa30 [ 500.155047] should_failslab+0x5/0x20 [ 500.155860] kmem_cache_alloc+0x5b/0x310 [ 500.156756] create_object.isra.0+0x3a/0xa30 [ 500.157694] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 500.158776] kmem_cache_alloc+0x159/0x310 [ 500.159658] __alloc_file+0x21/0x320 [ 500.160445] alloc_empty_file+0x6d/0x170 [ 500.161331] path_openat+0xe6/0x2770 [ 500.162115] ? __lock_acquire+0x1657/0x5b00 [ 500.163036] ? path_lookupat+0x860/0x860 [ 500.163894] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 500.165009] ? lock_acquire+0x197/0x470 [ 500.165850] ? find_held_lock+0x2c/0x110 [ 500.166721] do_filp_open+0x190/0x3e0 [ 500.167517] ? may_open_dev+0xf0/0xf0 [ 500.168335] ? alloc_fd+0x2e7/0x670 [ 500.169130] ? lock_downgrade+0x6d0/0x6d0 [ 500.169998] ? do_raw_spin_lock+0x121/0x260 [ 500.170906] ? rwlock_bug.part.0+0x90/0x90 [ 500.171799] ? _raw_spin_unlock+0x1a/0x30 [ 500.172684] ? alloc_fd+0x2e7/0x670 [ 500.173473] do_sys_openat2+0x171/0x4d0 [ 500.174312] ? build_open_flags+0x6f0/0x6f0 [ 500.175216] ? __mutex_unlock_slowpath+0xe1/0x600 [ 500.176239] ? wait_for_completion_io+0x270/0x270 [ 500.177281] __x64_sys_openat+0x13f/0x1f0 [ 500.178172] ? __ia32_sys_open+0x1c0/0x1c0 [ 500.179059] ? ksys_write+0x1a9/0x260 [ 500.179879] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 500.181002] ? syscall_enter_from_user_mode+0x1d/0x50 [ 500.182099] do_syscall_64+0x33/0x40 [ 500.182892] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 500.183981] RIP: 0033:0x7f64f3e1ea04 [ 500.184789] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 500.188664] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 500.190278] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 500.191806] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 500.193350] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 500.194863] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 500.196380] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 500.197965] CPU: 1 PID: 6770 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 500.199422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 500.201184] Call Trace: [ 500.201776] dump_stack+0x107/0x167 [ 500.202549] should_fail.cold+0x5/0xa [ 500.203351] ? anon_vma_clone+0xdc/0x590 [ 500.204200] should_failslab+0x5/0x20 [ 500.205019] kmem_cache_alloc+0x5b/0x310 [ 500.205877] anon_vma_clone+0xdc/0x590 [ 500.206712] anon_vma_fork+0x82/0x640 [ 500.207514] ? __vm_enough_memory+0x184/0x360 [ 500.208464] copy_process+0x72cd/0x78b0 [ 500.209349] ? __cleanup_sighand+0xb0/0xb0 [ 500.210254] ? lock_acquire+0x197/0x470 [ 500.211092] ? find_held_lock+0x2c/0x110 [ 500.211952] kernel_clone+0xe7/0x980 [ 500.212746] ? lock_downgrade+0x6d0/0x6d0 [ 500.213618] ? find_held_lock+0x2c/0x110 [ 500.214473] ? create_io_thread+0xf0/0xf0 [ 500.215342] ? ksys_write+0x12d/0x260 [ 500.216151] ? __mutex_unlock_slowpath+0xe1/0x600 [ 500.217200] __do_sys_fork+0x8a/0xc0 [ 500.217983] ? kernel_thread+0xf0/0xf0 [ 500.218814] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 500.219928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 500.221017] ? trace_hardirqs_on+0x5b/0x180 [ 500.221929] ? syscall_enter_from_user_mode+0x1d/0x50 [ 500.223015] do_syscall_64+0x33/0x40 [ 500.223801] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 500.224890] RIP: 0033:0x7f2eb7a3db19 [ 500.225682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 500.229486] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 500.231092] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 500.232576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.234070] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 500.235565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.237065] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 505.133092] Bluetooth: hci5: command 0x0409 tx timeout [ 507.181012] Bluetooth: hci5: command 0x041b tx timeout [ 509.228997] Bluetooth: hci5: command 0x040f tx timeout [ 510.092228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.094583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.098110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 510.145381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.147320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.151354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 510.329963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 510.687647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.689268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.692246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 511.277086] Bluetooth: hci5: command 0x0419 tx timeout 17:20:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() ptrace(0x10, r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:20:17 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:20:17 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:20:17 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 3) 17:20:17 executing program 7: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:20:17 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 4) 17:20:17 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 6) 17:20:17 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 34) [ 523.217545] FAULT_INJECTION: forcing a failure. [ 523.217545] name failslab, interval 1, probability 0, space 0, times 0 [ 523.218935] CPU: 1 PID: 7242 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 523.219702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.220646] Call Trace: [ 523.220958] dump_stack+0x107/0x167 [ 523.221373] should_fail.cold+0x5/0xa [ 523.221805] ? security_file_alloc+0x34/0x170 [ 523.222313] should_failslab+0x5/0x20 [ 523.222747] kmem_cache_alloc+0x5b/0x310 [ 523.223216] security_file_alloc+0x34/0x170 [ 523.223704] __alloc_file+0xb7/0x320 [ 523.224128] alloc_empty_file+0x6d/0x170 [ 523.224592] path_openat+0xe6/0x2770 [ 523.225022] ? __lock_acquire+0x1657/0x5b00 [ 523.225512] ? path_lookupat+0x860/0x860 [ 523.225974] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 523.226567] ? lock_acquire+0x197/0x470 [ 523.227016] ? find_held_lock+0x2c/0x110 [ 523.227486] do_filp_open+0x190/0x3e0 [ 523.227918] ? may_open_dev+0xf0/0xf0 [ 523.228352] ? alloc_fd+0x2e7/0x670 [ 523.228776] ? lock_downgrade+0x6d0/0x6d0 [ 523.229250] ? do_raw_spin_lock+0x121/0x260 [ 523.229737] ? rwlock_bug.part.0+0x90/0x90 [ 523.230228] ? _raw_spin_unlock+0x1a/0x30 [ 523.230698] ? alloc_fd+0x2e7/0x670 [ 523.231118] do_sys_openat2+0x171/0x4d0 [ 523.231568] ? build_open_flags+0x6f0/0x6f0 [ 523.232058] ? __mutex_unlock_slowpath+0xe1/0x600 [ 523.232603] ? wait_for_completion_io+0x270/0x270 [ 523.233162] __x64_sys_openat+0x13f/0x1f0 [ 523.233633] ? __ia32_sys_open+0x1c0/0x1c0 [ 523.234110] ? ksys_write+0x1a9/0x260 [ 523.234549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.235144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.235735] do_syscall_64+0x33/0x40 [ 523.236160] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.236740] RIP: 0033:0x7f64f3e1ea04 [ 523.237172] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 523.239260] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 523.240125] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 523.240943] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 523.241754] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 523.242567] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 523.243374] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 523.249341] FAULT_INJECTION: forcing a failure. [ 523.249341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.250726] CPU: 1 PID: 7249 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 523.251506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.252447] Call Trace: [ 523.252748] dump_stack+0x107/0x167 [ 523.253170] should_fail.cold+0x5/0xa [ 523.253621] strncpy_from_user+0x34/0x470 [ 523.254105] getname_flags.part.0+0x95/0x4f0 [ 523.254608] getname+0x8e/0xd0 [ 523.254979] do_sys_openat2+0xf9/0x4d0 [ 523.255424] ? build_open_flags+0x6f0/0x6f0 [ 523.255916] ? __mutex_unlock_slowpath+0xe1/0x600 [ 523.256464] ? wait_for_completion_io+0x270/0x270 [ 523.257030] __x64_sys_openat+0x13f/0x1f0 [ 523.257504] ? __ia32_sys_open+0x1c0/0x1c0 [ 523.257983] ? ksys_write+0x1a9/0x260 [ 523.258418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.259015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.259600] do_syscall_64+0x33/0x40 [ 523.260025] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.260618] RIP: 0033:0x7f431a77ea04 [ 523.261051] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 523.263178] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 523.264044] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 523.264860] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 523.265670] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 523.266485] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 523.267300] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 523.267439] FAULT_INJECTION: forcing a failure. [ 523.267439] name failslab, interval 1, probability 0, space 0, times 0 [ 523.271184] CPU: 0 PID: 7252 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 523.272817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 523.272967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.272975] Call Trace: [ 523.273010] dump_stack+0x107/0x167 [ 523.277025] should_fail.cold+0x5/0xa [ 523.277837] ? __alloc_file+0x21/0x320 [ 523.278657] should_failslab+0x5/0x20 [ 523.279457] kmem_cache_alloc+0x5b/0x310 [ 523.280323] __alloc_file+0x21/0x320 [ 523.281181] alloc_empty_file+0x6d/0x170 [ 523.282189] path_openat+0xe6/0x2770 [ 523.283136] ? __lock_acquire+0x1657/0x5b00 [ 523.284080] ? path_lookupat+0x860/0x860 [ 523.284947] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 523.286043] ? lock_acquire+0x197/0x470 [ 523.286887] ? find_held_lock+0x2c/0x110 [ 523.287756] do_filp_open+0x190/0x3e0 [ 523.288556] ? may_open_dev+0xf0/0xf0 [ 523.289366] ? alloc_fd+0x2e7/0x670 [ 523.290134] ? lock_downgrade+0x6d0/0x6d0 [ 523.290998] ? do_raw_spin_lock+0x121/0x260 [ 523.291914] ? rwlock_bug.part.0+0x90/0x90 [ 523.292821] ? _raw_spin_unlock+0x1a/0x30 [ 523.293689] ? alloc_fd+0x2e7/0x670 [ 523.294468] do_sys_openat2+0x171/0x4d0 [ 523.295315] ? build_open_flags+0x6f0/0x6f0 [ 523.296229] ? __mutex_unlock_slowpath+0xe1/0x600 [ 523.297264] ? wait_for_completion_io+0x270/0x270 [ 523.298287] __x64_sys_openat+0x13f/0x1f0 [ 523.299086] cgroup: fork rejected by pids controller in [ 523.299154] ? __ia32_sys_open+0x1c0/0x1c0 [ 523.299168] ? ksys_write+0x1a9/0x260 [ 523.299196] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.300082] /syz0 [ 523.300803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.300826] do_syscall_64+0x33/0x40 [ 523.301325] [ 523.302382] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.302397] RIP: 0033:0x7fc35e22ea04 17:20:18 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 7) [ 523.306641] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 523.310711] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 523.312326] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 523.313843] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 523.315356] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 523.316873] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 523.318380] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 523.322903] FAULT_INJECTION: forcing a failure. [ 523.322903] name failslab, interval 1, probability 0, space 0, times 0 [ 523.325351] CPU: 0 PID: 7239 Comm: syz-executor.4 Not tainted 5.10.246 #1 17:20:18 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 4) [ 523.326802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.328641] Call Trace: [ 523.329210] dump_stack+0x107/0x167 [ 523.329994] should_fail.cold+0x5/0xa [ 523.330799] ? create_object.isra.0+0x3a/0xa30 [ 523.331751] should_failslab+0x5/0x20 [ 523.332556] kmem_cache_alloc+0x5b/0x310 [ 523.333420] create_object.isra.0+0x3a/0xa30 [ 523.334355] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 523.335435] kmem_cache_alloc+0x159/0x310 [ 523.336307] anon_vma_fork+0xf1/0x640 [ 523.336700] FAULT_INJECTION: forcing a failure. [ 523.336700] name failslab, interval 1, probability 0, space 0, times 0 [ 523.337109] ? __vm_enough_memory+0x184/0x360 [ 523.337134] copy_process+0x72cd/0x78b0 [ 523.337187] ? __cleanup_sighand+0xb0/0xb0 [ 523.341059] ? lock_acquire+0x197/0x470 [ 523.341905] ? find_held_lock+0x2c/0x110 [ 523.342761] kernel_clone+0xe7/0x980 [ 523.343560] ? lock_downgrade+0x6d0/0x6d0 [ 523.344429] ? find_held_lock+0x2c/0x110 [ 523.345289] ? create_io_thread+0xf0/0xf0 [ 523.346163] ? ksys_write+0x12d/0x260 [ 523.346966] ? __mutex_unlock_slowpath+0xe1/0x600 [ 523.347984] __do_sys_fork+0x8a/0xc0 [ 523.348774] ? kernel_thread+0xf0/0xf0 [ 523.349605] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.350711] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.351795] ? trace_hardirqs_on+0x5b/0x180 [ 523.352704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.353797] do_syscall_64+0x33/0x40 [ 523.354585] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.355667] RIP: 0033:0x7f2eb7a3db19 [ 523.356451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.360333] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 523.361951] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 523.363440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 523.364944] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 523.366455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 523.367952] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 523.369489] CPU: 1 PID: 7256 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 523.370301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.371309] Call Trace: [ 523.371631] dump_stack+0x107/0x167 [ 523.372045] should_fail.cold+0x5/0xa [ 523.372478] ? create_object.isra.0+0x3a/0xa30 [ 523.373005] should_failslab+0x5/0x20 [ 523.373444] kmem_cache_alloc+0x5b/0x310 [ 523.373904] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 523.374528] create_object.isra.0+0x3a/0xa30 [ 523.375025] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 523.375602] kmem_cache_alloc+0x159/0x310 [ 523.376074] security_file_alloc+0x34/0x170 [ 523.376566] __alloc_file+0xb7/0x320 [ 523.376996] alloc_empty_file+0x6d/0x170 [ 523.377458] path_openat+0xe6/0x2770 [ 523.377878] ? __lock_acquire+0x1657/0x5b00 [ 523.378372] ? path_lookupat+0x860/0x860 [ 523.378838] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 523.379431] ? lock_acquire+0x197/0x470 [ 523.379882] ? find_held_lock+0x2c/0x110 [ 523.380348] do_filp_open+0x190/0x3e0 [ 523.380786] ? may_open_dev+0xf0/0xf0 [ 523.381220] ? alloc_fd+0x2e7/0x670 [ 523.381635] ? lock_downgrade+0x6d0/0x6d0 [ 523.382099] ? do_raw_spin_lock+0x121/0x260 [ 523.382589] ? rwlock_bug.part.0+0x90/0x90 [ 523.383076] ? _raw_spin_unlock+0x1a/0x30 [ 523.383545] ? alloc_fd+0x2e7/0x670 [ 523.383965] do_sys_openat2+0x171/0x4d0 [ 523.384416] ? build_open_flags+0x6f0/0x6f0 [ 523.384911] ? __mutex_unlock_slowpath+0xe1/0x600 [ 523.385456] ? wait_for_completion_io+0x270/0x270 [ 523.386018] __x64_sys_openat+0x13f/0x1f0 [ 523.386512] ? __ia32_sys_open+0x1c0/0x1c0 [ 523.387000] ? ksys_write+0x1a9/0x260 [ 523.387436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.388028] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.388612] do_syscall_64+0x33/0x40 [ 523.389040] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.389620] RIP: 0033:0x7f64f3e1ea04 [ 523.390041] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 523.392123] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 523.392986] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 523.393791] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 523.394592] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 523.395399] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 523.396206] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 523.427226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:20:18 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 523.435074] FAULT_INJECTION: forcing a failure. [ 523.435074] name failslab, interval 1, probability 0, space 0, times 0 [ 523.437470] CPU: 0 PID: 7291 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 523.438923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.440693] Call Trace: [ 523.441266] dump_stack+0x107/0x167 [ 523.442053] should_fail.cold+0x5/0xa [ 523.442863] ? __alloc_file+0x21/0x320 [ 523.443678] should_failslab+0x5/0x20 [ 523.444493] kmem_cache_alloc+0x5b/0x310 [ 523.445377] __alloc_file+0x21/0x320 [ 523.446164] alloc_empty_file+0x6d/0x170 [ 523.447032] path_openat+0xe6/0x2770 [ 523.447827] ? __lock_acquire+0x1657/0x5b00 [ 523.448744] ? path_lookupat+0x860/0x860 [ 523.449624] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 523.450731] ? lock_acquire+0x197/0x470 [ 523.451584] ? find_held_lock+0x2c/0x110 [ 523.452459] do_filp_open+0x190/0x3e0 [ 523.453264] ? may_open_dev+0xf0/0xf0 [ 523.454068] ? alloc_fd+0x2e7/0x670 [ 523.454836] ? lock_downgrade+0x6d0/0x6d0 [ 523.455704] ? do_raw_spin_lock+0x121/0x260 [ 523.456608] ? rwlock_bug.part.0+0x90/0x90 [ 523.457516] ? _raw_spin_unlock+0x1a/0x30 [ 523.458380] ? alloc_fd+0x2e7/0x670 [ 523.459168] do_sys_openat2+0x171/0x4d0 [ 523.460003] ? build_open_flags+0x6f0/0x6f0 [ 523.460910] ? __mutex_unlock_slowpath+0xe1/0x600 [ 523.461949] ? wait_for_completion_io+0x270/0x270 [ 523.462986] __x64_sys_openat+0x13f/0x1f0 [ 523.463875] ? __ia32_sys_open+0x1c0/0x1c0 [ 523.464784] ? ksys_write+0x1a9/0x260 [ 523.465593] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.466721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.467822] do_syscall_64+0x33/0x40 [ 523.468598] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.469722] RIP: 0033:0x7f431a77ea04 [ 523.470523] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 523.474418] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 523.476022] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 523.477538] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 523.479051] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 523.480537] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 523.482034] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 523.511829] FAULT_INJECTION: forcing a failure. [ 523.511829] name failslab, interval 1, probability 0, space 0, times 0 [ 523.513213] CPU: 1 PID: 7327 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 523.513992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.514935] Call Trace: [ 523.515240] dump_stack+0x107/0x167 [ 523.515654] should_fail.cold+0x5/0xa [ 523.516091] ? create_object.isra.0+0x3a/0xa30 [ 523.516608] should_failslab+0x5/0x20 [ 523.517051] kmem_cache_alloc+0x5b/0x310 [ 523.517514] create_object.isra.0+0x3a/0xa30 [ 523.518012] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 523.518592] kmem_cache_alloc+0x159/0x310 [ 523.519065] __alloc_file+0x21/0x320 [ 523.519497] alloc_empty_file+0x6d/0x170 [ 523.519959] path_openat+0xe6/0x2770 [ 523.520386] ? __lock_acquire+0x1657/0x5b00 [ 523.520886] ? path_lookupat+0x860/0x860 [ 523.521348] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 523.521943] ? lock_acquire+0x197/0x470 [ 523.522400] ? find_held_lock+0x2c/0x110 [ 523.522868] do_filp_open+0x190/0x3e0 [ 523.523300] ? may_open_dev+0xf0/0xf0 [ 523.523744] ? alloc_fd+0x2e7/0x670 [ 523.524162] ? lock_downgrade+0x6d0/0x6d0 [ 523.524633] ? do_raw_spin_lock+0x121/0x260 [ 523.525133] ? rwlock_bug.part.0+0x90/0x90 [ 523.525629] ? _raw_spin_unlock+0x1a/0x30 [ 523.526101] ? alloc_fd+0x2e7/0x670 [ 523.526521] do_sys_openat2+0x171/0x4d0 [ 523.526974] ? build_open_flags+0x6f0/0x6f0 [ 523.527466] ? __mutex_unlock_slowpath+0xe1/0x600 [ 523.528014] ? wait_for_completion_io+0x270/0x270 [ 523.528571] __x64_sys_openat+0x13f/0x1f0 [ 523.529055] ? __ia32_sys_open+0x1c0/0x1c0 17:20:18 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 5) [ 523.529534] ? ksys_write+0x1a9/0x260 [ 523.530238] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.530837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.531432] do_syscall_64+0x33/0x40 [ 523.531859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.532442] RIP: 0033:0x7fc35e22ea04 [ 523.532879] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 523.534974] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 523.535839] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 523.536648] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 523.537467] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 523.538285] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 523.539094] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 17:20:18 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 8) 17:20:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() ptrace(0x10, r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:20:18 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) [ 523.585946] FAULT_INJECTION: forcing a failure. [ 523.585946] name failslab, interval 1, probability 0, space 0, times 0 [ 523.587469] CPU: 1 PID: 7368 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 523.588250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.589203] Call Trace: [ 523.589506] dump_stack+0x107/0x167 [ 523.589924] should_fail.cold+0x5/0xa [ 523.590357] ? proc_self_get_link+0x18b/0x200 [ 523.590862] should_failslab+0x5/0x20 [ 523.591295] kmem_cache_alloc_trace+0x55/0x320 [ 523.591811] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 523.592322] proc_self_get_link+0x18b/0x200 [ 523.592816] step_into+0x1595/0x1ce0 [ 523.593239] ? lookup_fast+0x6e0/0x6e0 [ 523.593679] ? try_to_unlazy_next+0x4f0/0x4f0 [ 523.594191] walk_component+0x171/0x6a0 [ 523.594650] ? trace_hardirqs_on+0x5b/0x180 [ 523.595155] ? handle_dots.part.0+0x15c0/0x15c0 [ 523.595695] ? security_inode_permission+0xcb/0x100 [ 523.596284] link_path_walk.part.0+0x699/0xbf0 [ 523.596826] ? walk_component+0x6a0/0x6a0 [ 523.597301] ? percpu_counter_add_batch+0x8b/0x140 [ 523.597871] path_openat+0x25d/0x2770 [ 523.598321] ? path_lookupat+0x860/0x860 [ 523.598800] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 523.599406] ? lock_acquire+0x197/0x470 [ 523.599867] ? find_held_lock+0x2c/0x110 [ 523.600347] do_filp_open+0x190/0x3e0 [ 523.600797] ? may_open_dev+0xf0/0xf0 [ 523.601249] ? rwlock_bug.part.0+0x90/0x90 [ 523.601745] ? _raw_spin_unlock+0x1a/0x30 [ 523.602226] ? alloc_fd+0x2e7/0x670 [ 523.602655] do_sys_openat2+0x171/0x4d0 [ 523.603117] ? build_open_flags+0x6f0/0x6f0 [ 523.603614] ? __mutex_unlock_slowpath+0xe1/0x600 [ 523.604174] ? wait_for_completion_io+0x270/0x270 [ 523.604736] __x64_sys_openat+0x13f/0x1f0 [ 523.605224] ? __ia32_sys_open+0x1c0/0x1c0 [ 523.605710] ? ksys_write+0x1a9/0x260 [ 523.606162] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.606771] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.607371] do_syscall_64+0x33/0x40 [ 523.607804] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.608397] RIP: 0033:0x7f64f3e1ea04 [ 523.608835] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 523.610969] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 523.611856] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 523.612688] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 523.613526] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 523.614356] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 523.615186] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 17:20:18 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 6) [ 523.687802] FAULT_INJECTION: forcing a failure. [ 523.687802] name failslab, interval 1, probability 0, space 0, times 0 [ 523.689169] CPU: 1 PID: 7374 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 523.689949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.690895] Call Trace: [ 523.691207] dump_stack+0x107/0x167 [ 523.691622] should_fail.cold+0x5/0xa [ 523.692058] ? security_file_alloc+0x34/0x170 [ 523.692567] should_failslab+0x5/0x20 [ 523.693013] kmem_cache_alloc+0x5b/0x310 [ 523.693482] security_file_alloc+0x34/0x170 [ 523.693974] __alloc_file+0xb7/0x320 [ 523.694402] alloc_empty_file+0x6d/0x170 [ 523.694862] path_openat+0xe6/0x2770 [ 523.695289] ? __lock_acquire+0x1657/0x5b00 [ 523.695784] ? path_lookupat+0x860/0x860 [ 523.696248] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 523.696849] ? lock_acquire+0x197/0x470 [ 523.697309] ? find_held_lock+0x2c/0x110 [ 523.697777] do_filp_open+0x190/0x3e0 [ 523.698211] ? may_open_dev+0xf0/0xf0 [ 523.698650] ? alloc_fd+0x2e7/0x670 [ 523.699062] ? lock_downgrade+0x6d0/0x6d0 [ 523.699537] ? do_raw_spin_lock+0x121/0x260 [ 523.700027] ? rwlock_bug.part.0+0x90/0x90 [ 523.700522] ? _raw_spin_unlock+0x1a/0x30 [ 523.701000] ? alloc_fd+0x2e7/0x670 [ 523.701428] do_sys_openat2+0x171/0x4d0 [ 523.701881] ? build_open_flags+0x6f0/0x6f0 [ 523.702377] ? __mutex_unlock_slowpath+0xe1/0x600 [ 523.702927] ? wait_for_completion_io+0x270/0x270 [ 523.703479] __x64_sys_openat+0x13f/0x1f0 [ 523.703948] ? __ia32_sys_open+0x1c0/0x1c0 [ 523.704426] ? ksys_write+0x1a9/0x260 [ 523.704873] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.705468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.706057] do_syscall_64+0x33/0x40 [ 523.706482] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.707065] RIP: 0033:0x7fc35e22ea04 [ 523.707490] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 523.709592] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 523.710458] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 523.711266] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 523.712083] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 523.712904] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 523.713718] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 523.758565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.760403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.762089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 523.772847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.774530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.776197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:20:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 9) 17:20:33 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 5) 17:20:33 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:20:33 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:20:33 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:20:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() ptrace(0x10, r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:20:33 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 35) 17:20:33 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 7) [ 538.687661] FAULT_INJECTION: forcing a failure. [ 538.687661] name failslab, interval 1, probability 0, space 0, times 0 [ 538.689064] CPU: 0 PID: 7389 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 538.689872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 538.690493] FAULT_INJECTION: forcing a failure. [ 538.690493] name failslab, interval 1, probability 0, space 0, times 0 [ 538.691087] Call Trace: [ 538.691118] dump_stack+0x107/0x167 [ 538.691132] should_fail.cold+0x5/0xa [ 538.691146] ? find_held_lock+0x2c/0x110 [ 538.691160] ? create_object.isra.0+0x3a/0xa30 [ 538.691170] should_failslab+0x5/0x20 [ 538.691182] kmem_cache_alloc+0x5b/0x310 [ 538.691192] ? __task_pid_nr_ns+0x1b8/0x500 [ 538.691206] create_object.isra.0+0x3a/0xa30 [ 538.691214] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 538.691228] kmem_cache_alloc_trace+0x151/0x320 [ 538.691242] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 538.691252] proc_self_get_link+0x18b/0x200 [ 538.691263] step_into+0x1595/0x1ce0 [ 538.691277] ? lookup_fast+0x6e0/0x6e0 [ 538.691287] ? try_to_unlazy_next+0x4f0/0x4f0 [ 538.691303] walk_component+0x171/0x6a0 [ 538.691314] ? trace_hardirqs_on+0x5b/0x180 [ 538.691324] ? handle_dots.part.0+0x15c0/0x15c0 [ 538.691337] ? security_inode_permission+0xcb/0x100 [ 538.691351] link_path_walk.part.0+0x699/0xbf0 [ 538.691366] ? walk_component+0x6a0/0x6a0 [ 538.691376] ? percpu_counter_add_batch+0x8b/0x140 [ 538.691392] path_openat+0x25d/0x2770 [ 538.691408] ? path_lookupat+0x860/0x860 [ 538.691420] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 538.691429] ? lock_acquire+0x197/0x470 [ 538.691439] ? find_held_lock+0x2c/0x110 [ 538.691455] do_filp_open+0x190/0x3e0 [ 538.691465] ? may_open_dev+0xf0/0xf0 [ 538.691482] ? rwlock_bug.part.0+0x90/0x90 [ 538.691498] ? _raw_spin_unlock+0x1a/0x30 [ 538.691509] ? alloc_fd+0x2e7/0x670 [ 538.691525] do_sys_openat2+0x171/0x4d0 [ 538.691537] ? build_open_flags+0x6f0/0x6f0 [ 538.691556] ? __mutex_unlock_slowpath+0xe1/0x600 [ 538.714164] ? wait_for_completion_io+0x270/0x270 [ 538.714858] __x64_sys_openat+0x13f/0x1f0 [ 538.715454] ? __ia32_sys_open+0x1c0/0x1c0 [ 538.716056] ? ksys_write+0x1a9/0x260 [ 538.716601] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 538.717349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 538.718100] do_syscall_64+0x33/0x40 [ 538.718646] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 538.719390] RIP: 0033:0x7f64f3e1ea04 [ 538.719920] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 538.722600] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 538.723681] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 538.724532] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 538.725587] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 538.726431] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 538.727447] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 538.728500] CPU: 1 PID: 7388 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 538.730010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 538.731803] Call Trace: [ 538.732386] dump_stack+0x107/0x167 [ 538.733187] should_fail.cold+0x5/0xa [ 538.734013] ? create_object.isra.0+0x3a/0xa30 [ 538.735001] should_failslab+0x5/0x20 [ 538.735824] kmem_cache_alloc+0x5b/0x310 [ 538.736701] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 538.737897] create_object.isra.0+0x3a/0xa30 [ 538.738839] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 538.739944] kmem_cache_alloc+0x159/0x310 [ 538.740842] security_file_alloc+0x34/0x170 [ 538.741788] __alloc_file+0xb7/0x320 [ 538.742589] alloc_empty_file+0x6d/0x170 [ 538.743469] path_openat+0xe6/0x2770 [ 538.744276] ? __lock_acquire+0x1657/0x5b00 [ 538.745231] ? path_lookupat+0x860/0x860 [ 538.746113] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 538.747242] ? lock_acquire+0x197/0x470 [ 538.748097] ? find_held_lock+0x2c/0x110 [ 538.748987] do_filp_open+0x190/0x3e0 [ 538.749802] ? may_open_dev+0xf0/0xf0 [ 538.750626] ? alloc_fd+0x2e7/0x670 [ 538.751408] ? lock_downgrade+0x6d0/0x6d0 [ 538.752301] ? do_raw_spin_lock+0x121/0x260 [ 538.753230] ? rwlock_bug.part.0+0x90/0x90 [ 538.754151] ? _raw_spin_unlock+0x1a/0x30 [ 538.755039] ? alloc_fd+0x2e7/0x670 [ 538.755835] do_sys_openat2+0x171/0x4d0 [ 538.756698] ? build_open_flags+0x6f0/0x6f0 [ 538.757628] ? __mutex_unlock_slowpath+0xe1/0x600 [ 538.758670] ? wait_for_completion_io+0x270/0x270 [ 538.759720] __x64_sys_openat+0x13f/0x1f0 [ 538.760612] ? __ia32_sys_open+0x1c0/0x1c0 [ 538.761525] ? ksys_write+0x1a9/0x260 [ 538.762354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 538.763486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 538.764602] do_syscall_64+0x33/0x40 [ 538.765411] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 538.766521] RIP: 0033:0x7fc35e22ea04 [ 538.767320] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 538.771254] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 538.772857] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 538.774379] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 538.775874] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 538.777378] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 538.778884] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 538.797627] FAULT_INJECTION: forcing a failure. [ 538.797627] name failslab, interval 1, probability 0, space 0, times 0 [ 538.798970] CPU: 0 PID: 7394 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 538.799718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 538.800604] Call Trace: [ 538.800923] dump_stack+0x107/0x167 [ 538.801320] should_fail.cold+0x5/0xa [ 538.801732] ? anon_vma_fork+0xf1/0x640 [ 538.802159] should_failslab+0x5/0x20 [ 538.802590] kmem_cache_alloc+0x5b/0x310 [ 538.803036] anon_vma_fork+0xf1/0x640 [ 538.803450] ? __vm_enough_memory+0x184/0x360 [ 538.803974] copy_process+0x72cd/0x78b0 [ 538.804426] ? __cleanup_sighand+0xb0/0xb0 [ 538.804900] ? lock_acquire+0x197/0x470 [ 538.805346] ? find_held_lock+0x2c/0x110 [ 538.805783] kernel_clone+0xe7/0x980 [ 538.806209] ? lock_downgrade+0x6d0/0x6d0 [ 538.806658] ? find_held_lock+0x2c/0x110 [ 538.807128] ? create_io_thread+0xf0/0xf0 [ 538.807590] ? ksys_write+0x12d/0x260 [ 538.808013] ? __mutex_unlock_slowpath+0xe1/0x600 [ 538.808532] __do_sys_fork+0x8a/0xc0 [ 538.808938] ? kernel_thread+0xf0/0xf0 [ 538.809373] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 538.809947] ? syscall_enter_from_user_mode+0x1d/0x50 [ 538.810543] ? trace_hardirqs_on+0x5b/0x180 [ 538.811024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 538.811625] do_syscall_64+0x33/0x40 [ 538.812041] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 538.812639] RIP: 0033:0x7f2eb7a3db19 [ 538.813071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 538.815170] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 538.816054] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 538.816882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 538.817716] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 538.818545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.819367] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:20:33 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:20:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() syz_open_procfs(r5, &(0x7f0000000000)='attr/keycreate\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 538.844251] FAULT_INJECTION: forcing a failure. [ 538.844251] name failslab, interval 1, probability 0, space 0, times 0 [ 538.845620] CPU: 0 PID: 7381 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 538.846396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 538.847343] Call Trace: [ 538.847657] dump_stack+0x107/0x167 [ 538.848080] should_fail.cold+0x5/0xa [ 538.848519] ? create_object.isra.0+0x3a/0xa30 [ 538.849046] should_failslab+0x5/0x20 [ 538.849475] kmem_cache_alloc+0x5b/0x310 [ 538.849945] create_object.isra.0+0x3a/0xa30 [ 538.850450] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 538.851032] kmem_cache_alloc+0x159/0x310 [ 538.851504] __alloc_file+0x21/0x320 [ 538.851929] alloc_empty_file+0x6d/0x170 [ 538.852402] path_openat+0xe6/0x2770 [ 538.852833] ? __lock_acquire+0x1657/0x5b00 [ 538.853338] ? path_lookupat+0x860/0x860 [ 538.853804] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 538.854396] ? lock_acquire+0x197/0x470 [ 538.854845] ? find_held_lock+0x2c/0x110 [ 538.855310] do_filp_open+0x190/0x3e0 [ 538.855751] ? may_open_dev+0xf0/0xf0 [ 538.856195] ? alloc_fd+0x2e7/0x670 [ 538.856606] ? lock_downgrade+0x6d0/0x6d0 [ 538.857079] ? do_raw_spin_lock+0x121/0x260 [ 538.857574] ? rwlock_bug.part.0+0x90/0x90 [ 538.858068] ? _raw_spin_unlock+0x1a/0x30 [ 538.858546] ? alloc_fd+0x2e7/0x670 [ 538.858979] do_sys_openat2+0x171/0x4d0 [ 538.859431] ? build_open_flags+0x6f0/0x6f0 [ 538.859921] ? __mutex_unlock_slowpath+0xe1/0x600 [ 538.860480] ? wait_for_completion_io+0x270/0x270 [ 538.861049] __x64_sys_openat+0x13f/0x1f0 [ 538.861517] ? __ia32_sys_open+0x1c0/0x1c0 [ 538.861994] ? ksys_write+0x1a9/0x260 [ 538.862433] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 538.863037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 538.863621] do_syscall_64+0x33/0x40 [ 538.864043] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 538.864622] RIP: 0033:0x7f431a77ea04 [ 538.865059] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 538.867146] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 538.868012] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 538.868818] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 538.869636] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 538.870446] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 538.871248] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 538.877281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 538.929242] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:20:33 executing program 7: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 17:20:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 10) [ 538.962525] FAULT_INJECTION: forcing a failure. [ 538.962525] name failslab, interval 1, probability 0, space 0, times 0 [ 538.964072] CPU: 0 PID: 7407 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 538.964847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 538.965801] Call Trace: [ 538.966107] dump_stack+0x107/0x167 [ 538.966522] should_fail.cold+0x5/0xa [ 538.966970] ? __d_alloc+0x2a/0x990 [ 538.967383] should_failslab+0x5/0x20 [ 538.967813] kmem_cache_alloc+0x5b/0x310 [ 538.968281] __d_alloc+0x2a/0x990 [ 538.968675] ? __lock_acquire+0xbb1/0x5b00 [ 538.969164] d_alloc+0x46/0x240 [ 538.969537] d_alloc_parallel+0xe9/0x1a30 [ 538.970009] ? __lock_acquire+0x1657/0x5b00 [ 538.970504] ? __d_lookup_rcu+0x6d0/0x6d0 [ 538.970973] ? lock_acquire+0x197/0x470 [ 538.971423] ? find_held_lock+0x2c/0x110 [ 538.971882] ? lockdep_init_map_type+0x2c7/0x780 [ 538.972422] ? lockdep_init_map_type+0x2c7/0x780 [ 538.972969] __lookup_slow+0x193/0x490 [ 538.973410] ? lookup_open.isra.0+0x1270/0x1270 [ 538.973950] ? selinux_inode_permission+0x401/0x640 [ 538.974515] ? selinux_path_notify+0x4d0/0x4d0 [ 538.975034] walk_component+0x41e/0x6a0 [ 538.975484] ? handle_dots.part.0+0x15c0/0x15c0 [ 538.976015] ? security_inode_permission+0xcb/0x100 [ 538.976577] ? proc_pid_attr_read+0x2b0/0x2b0 [ 538.977100] link_path_walk.part.0+0x699/0xbf0 [ 538.977619] ? walk_component+0x6a0/0x6a0 [ 538.978096] ? percpu_counter_add_batch+0x8b/0x140 [ 538.978654] path_openat+0x25d/0x2770 [ 538.979094] ? path_lookupat+0x860/0x860 [ 538.979553] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 538.980149] ? lock_acquire+0x197/0x470 [ 538.980606] ? find_held_lock+0x2c/0x110 [ 538.981098] do_filp_open+0x190/0x3e0 [ 538.981540] ? may_open_dev+0xf0/0xf0 [ 538.981982] ? simple_attr_release+0x50/0x50 [ 538.982484] ? _raw_spin_unlock+0x1a/0x30 [ 538.982952] ? alloc_fd+0x2e7/0x670 [ 538.983371] do_sys_openat2+0x171/0x4d0 [ 538.983820] ? build_open_flags+0x6f0/0x6f0 [ 538.984322] ? __mutex_unlock_slowpath+0xe1/0x600 [ 538.984879] ? wait_for_completion_io+0x270/0x270 [ 538.985450] __x64_sys_openat+0x13f/0x1f0 [ 538.985921] ? __ia32_sys_open+0x1c0/0x1c0 [ 538.986399] ? ksys_write+0x1a9/0x260 [ 538.986833] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 538.987428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 538.988015] do_syscall_64+0x33/0x40 [ 538.988438] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 538.989030] RIP: 0033:0x7f64f3e1ea04 [ 538.989461] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 538.991572] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 538.992436] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 538.993254] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 538.994061] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 538.994865] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 538.995689] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 17:20:33 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 36) 17:20:33 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:20:33 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 11) [ 539.086052] FAULT_INJECTION: forcing a failure. [ 539.086052] name failslab, interval 1, probability 0, space 0, times 0 [ 539.087425] CPU: 0 PID: 7472 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 539.088248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 539.089248] Call Trace: [ 539.089575] dump_stack+0x107/0x167 [ 539.089999] should_fail.cold+0x5/0xa [ 539.090445] ? create_object.isra.0+0x3a/0xa30 [ 539.090975] should_failslab+0x5/0x20 [ 539.091410] kmem_cache_alloc+0x5b/0x310 [ 539.091885] create_object.isra.0+0x3a/0xa30 [ 539.092386] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 539.092943] kmem_cache_alloc+0x159/0x310 [ 539.093422] anon_vma_fork+0x1ff/0x640 [ 539.093870] copy_process+0x72cd/0x78b0 [ 539.094349] ? __cleanup_sighand+0xb0/0xb0 [ 539.094834] ? lock_acquire+0x197/0x470 [ 539.095271] ? find_held_lock+0x2c/0x110 [ 539.095733] kernel_clone+0xe7/0x980 [ 539.096162] ? lock_downgrade+0x6d0/0x6d0 [ 539.096613] ? find_held_lock+0x2c/0x110 [ 539.097076] ? create_io_thread+0xf0/0xf0 [ 539.097532] ? ksys_write+0x12d/0x260 [ 539.097972] ? __mutex_unlock_slowpath+0xe1/0x600 [ 539.098530] __do_sys_fork+0x8a/0xc0 [ 539.098946] ? kernel_thread+0xf0/0xf0 [ 539.099403] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 539.100001] ? syscall_enter_from_user_mode+0x1d/0x50 [ 539.100586] ? trace_hardirqs_on+0x5b/0x180 [ 539.101091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 539.101657] do_syscall_64+0x33/0x40 [ 539.102085] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 539.102669] RIP: 0033:0x7f2eb7a3db19 [ 539.103084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 539.105195] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 539.106020] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 539.106843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 539.107642] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 539.108471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 539.109262] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 539.138066] FAULT_INJECTION: forcing a failure. [ 539.138066] name failslab, interval 1, probability 0, space 0, times 0 [ 539.139392] CPU: 0 PID: 7498 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 539.140192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 539.141165] Call Trace: [ 539.141477] dump_stack+0x107/0x167 [ 539.141901] should_fail.cold+0x5/0xa [ 539.142344] ? __d_alloc+0x2a/0x990 [ 539.142767] should_failslab+0x5/0x20 [ 539.143213] kmem_cache_alloc+0x5b/0x310 [ 539.143688] __d_alloc+0x2a/0x990 [ 539.144093] ? __lock_acquire+0xbb1/0x5b00 [ 539.144586] d_alloc+0x46/0x240 [ 539.144984] d_alloc_parallel+0xe9/0x1a30 [ 539.145464] ? __lock_acquire+0x1657/0x5b00 [ 539.145970] ? __d_lookup_rcu+0x6d0/0x6d0 [ 539.146445] ? lock_acquire+0x197/0x470 [ 539.146907] ? find_held_lock+0x2c/0x110 [ 539.147379] ? lockdep_init_map_type+0x2c7/0x780 [ 539.147931] ? lockdep_init_map_type+0x2c7/0x780 [ 539.148487] __lookup_slow+0x193/0x490 [ 539.148946] ? lookup_open.isra.0+0x1270/0x1270 [ 539.149494] ? selinux_inode_permission+0x401/0x640 [ 539.150070] ? selinux_path_notify+0x4d0/0x4d0 [ 539.150597] walk_component+0x41e/0x6a0 [ 539.151060] ? handle_dots.part.0+0x15c0/0x15c0 [ 539.151610] ? security_inode_permission+0xcb/0x100 [ 539.152187] ? proc_pid_attr_read+0x2b0/0x2b0 [ 539.152709] link_path_walk.part.0+0x699/0xbf0 [ 539.153252] ? walk_component+0x6a0/0x6a0 [ 539.153732] ? percpu_counter_add_batch+0x8b/0x140 [ 539.154305] path_openat+0x25d/0x2770 [ 539.154753] ? path_lookupat+0x860/0x860 [ 539.155224] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 539.155831] ? lock_acquire+0x197/0x470 [ 539.156292] ? find_held_lock+0x2c/0x110 [ 539.156770] do_filp_open+0x190/0x3e0 [ 539.157220] ? may_open_dev+0xf0/0xf0 [ 539.157669] ? simple_attr_release+0x50/0x50 [ 539.158183] ? _raw_spin_unlock+0x1a/0x30 [ 539.158659] ? alloc_fd+0x2e7/0x670 [ 539.159082] do_sys_openat2+0x171/0x4d0 [ 539.159600] ? build_open_flags+0x6f0/0x6f0 [ 539.160098] ? __mutex_unlock_slowpath+0xe1/0x600 [ 539.160656] ? wait_for_completion_io+0x270/0x270 [ 539.161227] __x64_sys_openat+0x13f/0x1f0 [ 539.161705] ? __ia32_sys_open+0x1c0/0x1c0 [ 539.162193] ? ksys_write+0x1a9/0x260 [ 539.162639] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 539.163245] ? syscall_enter_from_user_mode+0x1d/0x50 [ 539.163843] do_syscall_64+0x33/0x40 [ 539.164273] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 539.164852] RIP: 0033:0x7f64f3e1ea04 17:20:33 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 6) [ 539.165284] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 539.167572] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 539.168436] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 539.169214] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 539.169980] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 539.170742] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 539.171508] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 17:20:33 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 8) [ 539.186858] FAULT_INJECTION: forcing a failure. [ 539.186858] name failslab, interval 1, probability 0, space 0, times 0 [ 539.188217] CPU: 0 PID: 7520 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 539.189002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 539.189947] Call Trace: [ 539.190240] dump_stack+0x107/0x167 [ 539.190655] should_fail.cold+0x5/0xa [ 539.191089] ? security_file_alloc+0x34/0x170 [ 539.191596] should_failslab+0x5/0x20 [ 539.192012] kmem_cache_alloc+0x5b/0x310 [ 539.192479] security_file_alloc+0x34/0x170 [ 539.192980] __alloc_file+0xb7/0x320 [ 539.193409] alloc_empty_file+0x6d/0x170 [ 539.193873] path_openat+0xe6/0x2770 [ 539.194296] ? __lock_acquire+0x1657/0x5b00 [ 539.194769] ? path_lookupat+0x860/0x860 [ 539.195232] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 539.195806] ? lock_acquire+0x197/0x470 [ 539.196262] ? find_held_lock+0x2c/0x110 [ 539.196709] do_filp_open+0x190/0x3e0 [ 539.197149] ? may_open_dev+0xf0/0xf0 [ 539.197582] ? alloc_fd+0x2e7/0x670 [ 539.197992] ? lock_downgrade+0x6d0/0x6d0 [ 539.198463] ? do_raw_spin_lock+0x121/0x260 [ 539.198949] ? rwlock_bug.part.0+0x90/0x90 [ 539.199440] ? _raw_spin_unlock+0x1a/0x30 [ 539.199907] ? alloc_fd+0x2e7/0x670 [ 539.200305] do_sys_openat2+0x171/0x4d0 [ 539.200762] ? build_open_flags+0x6f0/0x6f0 [ 539.201234] ? __mutex_unlock_slowpath+0xe1/0x600 [ 539.201782] ? wait_for_completion_io+0x270/0x270 [ 539.202334] __x64_sys_openat+0x13f/0x1f0 [ 539.202802] ? __ia32_sys_open+0x1c0/0x1c0 [ 539.203278] ? ksys_write+0x1a9/0x260 [ 539.203715] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 539.204284] ? syscall_enter_from_user_mode+0x1d/0x50 [ 539.204868] do_syscall_64+0x33/0x40 [ 539.205286] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 539.205867] RIP: 0033:0x7f431a77ea04 [ 539.206272] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 539.208363] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 539.209192] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 539.209958] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 539.210720] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 539.211483] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 539.212247] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 539.230619] FAULT_INJECTION: forcing a failure. [ 539.230619] name failslab, interval 1, probability 0, space 0, times 0 [ 539.231926] CPU: 0 PID: 7523 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 539.232655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 539.233547] Call Trace: [ 539.233834] dump_stack+0x107/0x167 [ 539.234225] should_fail.cold+0x5/0xa [ 539.234640] ? proc_self_get_link+0x18b/0x200 [ 539.235119] should_failslab+0x5/0x20 [ 539.235525] kmem_cache_alloc_trace+0x55/0x320 [ 539.236017] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 539.236494] proc_self_get_link+0x18b/0x200 [ 539.236964] step_into+0x1595/0x1ce0 [ 539.237365] ? lookup_fast+0x6e0/0x6e0 [ 539.237781] ? try_to_unlazy_next+0x4f0/0x4f0 [ 539.238299] walk_component+0x171/0x6a0 [ 539.238728] ? trace_hardirqs_on+0x5b/0x180 [ 539.239221] ? handle_dots.part.0+0x15c0/0x15c0 [ 539.239749] ? security_inode_permission+0xcb/0x100 [ 539.240320] link_path_walk.part.0+0x699/0xbf0 [ 539.240842] ? walk_component+0x6a0/0x6a0 [ 539.241320] ? percpu_counter_add_batch+0x8b/0x140 [ 539.241883] path_openat+0x25d/0x2770 [ 539.242325] ? path_lookupat+0x860/0x860 [ 539.242786] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 539.243380] ? lock_acquire+0x197/0x470 [ 539.243809] ? find_held_lock+0x2c/0x110 [ 539.244278] do_filp_open+0x190/0x3e0 [ 539.244709] ? may_open_dev+0xf0/0xf0 [ 539.245152] ? rwlock_bug.part.0+0x90/0x90 [ 539.245636] ? _raw_spin_unlock+0x1a/0x30 [ 539.246106] ? alloc_fd+0x2e7/0x670 [ 539.246523] do_sys_openat2+0x171/0x4d0 [ 539.246980] ? build_open_flags+0x6f0/0x6f0 [ 539.247471] ? __mutex_unlock_slowpath+0xe1/0x600 [ 539.248024] ? wait_for_completion_io+0x270/0x270 [ 539.248552] __x64_sys_openat+0x13f/0x1f0 [ 539.249034] ? __ia32_sys_open+0x1c0/0x1c0 [ 539.249508] ? ksys_write+0x1a9/0x260 [ 539.249944] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 539.250540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 539.251125] do_syscall_64+0x33/0x40 [ 539.251543] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 539.252124] RIP: 0033:0x7fc35e22ea04 [ 539.252549] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 539.254634] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 539.255451] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 539.256213] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 539.256987] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 539.257749] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 539.258510] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 539.316240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 539.390847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.392451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.394167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 539.428820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.430856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.432337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.434661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.437068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 539.446100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:20:46 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 37) 17:20:46 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 7) 17:20:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() syz_open_procfs(r5, &(0x7f0000000000)='attr/keycreate\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:20:46 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:20:46 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 9) 17:20:46 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:20:46 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 12) 17:20:46 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 551.618037] FAULT_INJECTION: forcing a failure. [ 551.618037] name failslab, interval 1, probability 0, space 0, times 0 [ 551.621070] CPU: 0 PID: 7531 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 551.622804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 551.624915] Call Trace: [ 551.625604] dump_stack+0x107/0x167 [ 551.626523] should_fail.cold+0x5/0xa [ 551.627491] ? create_object.isra.0+0x3a/0xa30 [ 551.628644] should_failslab+0x5/0x20 [ 551.629618] kmem_cache_alloc+0x5b/0x310 [ 551.630647] create_object.isra.0+0x3a/0xa30 [ 551.631758] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 551.633111] kmem_cache_alloc+0x159/0x310 [ 551.634164] anon_vma_fork+0x1ff/0x640 [ 551.635143] copy_process+0x72cd/0x78b0 [ 551.636184] ? __cleanup_sighand+0xb0/0xb0 [ 551.637282] ? lock_acquire+0x197/0x470 [ 551.638285] ? find_held_lock+0x2c/0x110 [ 551.639325] kernel_clone+0xe7/0x980 [ 551.640276] ? lock_downgrade+0x6d0/0x6d0 [ 551.641339] ? find_held_lock+0x2c/0x110 [ 551.642346] ? create_io_thread+0xf0/0xf0 [ 551.643214] ? ksys_write+0x12d/0x260 [ 551.644002] ? __mutex_unlock_slowpath+0xe1/0x600 [ 551.645052] __do_sys_fork+0x8a/0xc0 [ 551.645841] ? kernel_thread+0xf0/0xf0 [ 551.646675] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 551.647789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 551.648894] ? trace_hardirqs_on+0x5b/0x180 [ 551.649817] ? syscall_enter_from_user_mode+0x1d/0x50 [ 551.650905] do_syscall_64+0x33/0x40 [ 551.651682] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 551.652771] RIP: 0033:0x7f2eb7a3db19 [ 551.653571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 551.657489] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 551.659112] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 551.660639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 551.662158] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 551.663666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 551.664791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 551.665198] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 551.673635] FAULT_INJECTION: forcing a failure. [ 551.673635] name failslab, interval 1, probability 0, space 0, times 0 [ 551.676096] CPU: 1 PID: 7540 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 551.677280] FAULT_INJECTION: forcing a failure. [ 551.677280] name failslab, interval 1, probability 0, space 0, times 0 [ 551.677541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 551.677555] Call Trace: [ 551.682238] dump_stack+0x107/0x167 [ 551.683014] should_fail.cold+0x5/0xa [ 551.683819] ? find_held_lock+0x2c/0x110 [ 551.684673] ? create_object.isra.0+0x3a/0xa30 [ 551.685643] should_failslab+0x5/0x20 [ 551.686452] kmem_cache_alloc+0x5b/0x310 [ 551.687308] ? __task_pid_nr_ns+0x1b8/0x500 [ 551.688224] create_object.isra.0+0x3a/0xa30 [ 551.689153] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 551.690229] kmem_cache_alloc_trace+0x151/0x320 [ 551.691210] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 551.692170] proc_self_get_link+0x18b/0x200 [ 551.693092] step_into+0x1595/0x1ce0 [ 551.693885] ? lookup_fast+0x6e0/0x6e0 [ 551.694700] ? try_to_unlazy_next+0x4f0/0x4f0 [ 551.695650] walk_component+0x171/0x6a0 [ 551.696481] ? trace_hardirqs_on+0x5b/0x180 [ 551.697387] ? handle_dots.part.0+0x15c0/0x15c0 [ 551.698375] ? security_inode_permission+0xcb/0x100 [ 551.699433] link_path_walk.part.0+0x699/0xbf0 [ 551.700405] ? walk_component+0x6a0/0x6a0 [ 551.701282] ? percpu_counter_add_batch+0x8b/0x140 [ 551.702332] path_openat+0x25d/0x2770 [ 551.703145] ? path_lookupat+0x860/0x860 [ 551.704006] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 551.705114] ? lock_acquire+0x197/0x470 [ 551.705948] ? find_held_lock+0x2c/0x110 [ 551.706809] do_filp_open+0x190/0x3e0 [ 551.707609] ? may_open_dev+0xf0/0xf0 [ 551.708419] ? rwlock_bug.part.0+0x90/0x90 [ 551.709330] ? _raw_spin_unlock+0x1a/0x30 [ 551.710204] ? alloc_fd+0x2e7/0x670 [ 551.710984] do_sys_openat2+0x171/0x4d0 [ 551.711819] ? build_open_flags+0x6f0/0x6f0 [ 551.712724] ? __mutex_unlock_slowpath+0xe1/0x600 [ 551.713745] ? wait_for_completion_io+0x270/0x270 [ 551.714770] __x64_sys_openat+0x13f/0x1f0 [ 551.715639] ? __ia32_sys_open+0x1c0/0x1c0 [ 551.716528] ? ksys_write+0x1a9/0x260 [ 551.717363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 551.718473] ? syscall_enter_from_user_mode+0x1d/0x50 [ 551.719561] do_syscall_64+0x33/0x40 [ 551.720347] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 551.721437] RIP: 0033:0x7fc35e22ea04 [ 551.722221] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 551.726102] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 551.727714] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 551.729219] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 551.730721] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 551.732221] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 551.733724] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 551.735270] CPU: 0 PID: 7541 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 551.736731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 551.738491] Call Trace: [ 551.739058] dump_stack+0x107/0x167 [ 551.739842] should_fail.cold+0x5/0xa [ 551.740654] ? create_object.isra.0+0x3a/0xa30 [ 551.741634] should_failslab+0x5/0x20 [ 551.742436] kmem_cache_alloc+0x5b/0x310 [ 551.743299] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 551.744467] create_object.isra.0+0x3a/0xa30 [ 551.745405] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 551.746499] kmem_cache_alloc+0x159/0x310 [ 551.747392] security_file_alloc+0x34/0x170 [ 551.748300] __alloc_file+0xb7/0x320 [ 551.749099] alloc_empty_file+0x6d/0x170 [ 551.749964] path_openat+0xe6/0x2770 [ 551.750752] ? __lock_acquire+0x1657/0x5b00 [ 551.751680] ? path_lookupat+0x860/0x860 [ 551.752547] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 551.753663] ? lock_acquire+0x197/0x470 [ 551.754506] ? find_held_lock+0x2c/0x110 [ 551.755382] do_filp_open+0x190/0x3e0 [ 551.756184] ? may_open_dev+0xf0/0xf0 [ 551.756998] ? alloc_fd+0x2e7/0x670 [ 551.757789] ? lock_downgrade+0x6d0/0x6d0 [ 551.758657] ? do_raw_spin_lock+0x121/0x260 [ 551.759569] ? rwlock_bug.part.0+0x90/0x90 [ 551.760468] ? _raw_spin_unlock+0x1a/0x30 [ 551.761351] ? alloc_fd+0x2e7/0x670 [ 551.762140] do_sys_openat2+0x171/0x4d0 [ 551.762978] ? build_open_flags+0x6f0/0x6f0 [ 551.763884] ? __mutex_unlock_slowpath+0xe1/0x600 [ 551.764903] ? wait_for_completion_io+0x270/0x270 [ 551.765947] __x64_sys_openat+0x13f/0x1f0 [ 551.766828] ? __ia32_sys_open+0x1c0/0x1c0 [ 551.767724] ? ksys_write+0x1a9/0x260 [ 551.768543] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 551.769659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 551.770751] do_syscall_64+0x33/0x40 [ 551.771542] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 551.772631] RIP: 0033:0x7f431a77ea04 [ 551.773424] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 551.777339] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 551.778963] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 551.780492] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 551.782032] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 551.783547] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 551.785069] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 551.792314] FAULT_INJECTION: forcing a failure. [ 551.792314] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 551.795008] CPU: 0 PID: 7542 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 551.796454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 551.798218] Call Trace: [ 551.798778] dump_stack+0x107/0x167 [ 551.799552] should_fail.cold+0x5/0xa [ 551.800363] __alloc_pages_nodemask+0x182/0x600 [ 551.801379] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 551.802672] alloc_pages_current+0x187/0x280 [ 551.803608] allocate_slab+0x26f/0x380 [ 551.804440] ___slab_alloc+0x470/0x700 [ 551.805277] ? create_object.isra.0+0x3a/0xa30 [ 551.806252] ? create_object.isra.0+0x3a/0xa30 [ 551.807223] ? kmem_cache_alloc+0x301/0x310 [ 551.808126] ? create_object.isra.0+0x3a/0xa30 [ 551.809099] kmem_cache_alloc+0x301/0x310 [ 551.809986] create_object.isra.0+0x3a/0xa30 [ 551.810917] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 551.811992] kmem_cache_alloc+0x159/0x310 [ 551.812892] __d_alloc+0x2a/0x990 [ 551.813642] ? __lock_acquire+0xbb1/0x5b00 [ 551.814541] d_alloc+0x46/0x240 [ 551.815250] d_alloc_parallel+0xe9/0x1a30 [ 551.816127] ? __lock_acquire+0x1657/0x5b00 [ 551.817069] ? __d_lookup_rcu+0x6d0/0x6d0 [ 551.817965] ? lock_acquire+0x197/0x470 [ 551.818811] ? find_held_lock+0x2c/0x110 [ 551.819682] ? lockdep_init_map_type+0x2c7/0x780 [ 551.820686] ? lockdep_init_map_type+0x2c7/0x780 [ 551.821705] __lookup_slow+0x193/0x490 [ 551.822528] ? lookup_open.isra.0+0x1270/0x1270 [ 551.823551] ? selinux_inode_permission+0x401/0x640 [ 551.824601] ? selinux_path_notify+0x4d0/0x4d0 [ 551.825586] walk_component+0x41e/0x6a0 [ 551.826425] ? handle_dots.part.0+0x15c0/0x15c0 [ 551.827422] ? security_inode_permission+0xcb/0x100 [ 551.828486] ? proc_pid_attr_read+0x2b0/0x2b0 [ 551.829465] link_path_walk.part.0+0x699/0xbf0 [ 551.830451] ? walk_component+0x6a0/0x6a0 [ 551.831325] ? percpu_counter_add_batch+0x8b/0x140 [ 551.832396] path_openat+0x25d/0x2770 [ 551.833218] ? path_lookupat+0x860/0x860 [ 551.834078] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 551.835196] ? lock_acquire+0x197/0x470 [ 551.836040] ? find_held_lock+0x2c/0x110 [ 551.836912] do_filp_open+0x190/0x3e0 [ 551.837733] ? may_open_dev+0xf0/0xf0 [ 551.838554] ? simple_attr_release+0x50/0x50 [ 551.839495] ? _raw_spin_unlock+0x1a/0x30 [ 551.840383] ? alloc_fd+0x2e7/0x670 [ 551.841177] do_sys_openat2+0x171/0x4d0 [ 551.842026] ? build_open_flags+0x6f0/0x6f0 [ 551.842945] ? __mutex_unlock_slowpath+0xe1/0x600 [ 551.843963] ? wait_for_completion_io+0x270/0x270 [ 551.844983] __x64_sys_openat+0x13f/0x1f0 [ 551.845869] ? __ia32_sys_open+0x1c0/0x1c0 [ 551.846767] ? ksys_write+0x1a9/0x260 [ 551.847587] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 551.848691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 551.849806] do_syscall_64+0x33/0x40 [ 551.850604] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 551.851699] RIP: 0033:0x7f64f3e1ea04 [ 551.852486] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 551.856412] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 551.858041] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 551.859563] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 551.861097] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 551.862629] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 551.864162] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 17:20:46 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 10) 17:20:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() syz_open_procfs(r5, &(0x7f0000000000)='attr/keycreate\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 551.942592] FAULT_INJECTION: forcing a failure. [ 551.942592] name failslab, interval 1, probability 0, space 0, times 0 [ 551.945095] CPU: 0 PID: 7650 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 551.946541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 551.948285] Call Trace: [ 551.948839] dump_stack+0x107/0x167 [ 551.949621] should_fail.cold+0x5/0xa [ 551.950442] ? __d_alloc+0x2a/0x990 [ 551.951216] should_failslab+0x5/0x20 [ 551.952027] kmem_cache_alloc+0x5b/0x310 [ 551.952876] __d_alloc+0x2a/0x990 [ 551.953612] ? __lock_acquire+0xbb1/0x5b00 [ 551.954498] d_alloc+0x46/0x240 [ 551.955179] d_alloc_parallel+0xe9/0x1a30 [ 551.956046] ? __lock_acquire+0x1657/0x5b00 [ 551.956965] ? __d_lookup_rcu+0x6d0/0x6d0 [ 551.957843] ? lock_acquire+0x197/0x470 [ 551.958661] ? find_held_lock+0x2c/0x110 [ 551.959511] ? lockdep_init_map_type+0x2c7/0x780 [ 551.960497] ? lockdep_init_map_type+0x2c7/0x780 [ 551.961515] __lookup_slow+0x193/0x490 [ 551.962334] ? lookup_open.isra.0+0x1270/0x1270 [ 551.963310] ? selinux_inode_permission+0x401/0x640 [ 551.964339] ? selinux_path_notify+0x4d0/0x4d0 [ 551.965310] walk_component+0x41e/0x6a0 [ 551.966123] ? handle_dots.part.0+0x15c0/0x15c0 [ 551.967096] ? security_inode_permission+0xcb/0x100 [ 551.968127] ? proc_pid_attr_read+0x2b0/0x2b0 [ 551.969064] link_path_walk.part.0+0x699/0xbf0 [ 551.970013] ? walk_component+0x6a0/0x6a0 [ 551.970880] ? percpu_counter_add_batch+0x8b/0x140 [ 551.971916] path_openat+0x25d/0x2770 [ 551.972735] ? path_lookupat+0x860/0x860 [ 551.973603] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 551.974686] ? lock_acquire+0x197/0x470 [ 551.975521] ? find_held_lock+0x2c/0x110 [ 551.976370] do_filp_open+0x190/0x3e0 [ 551.977178] ? may_open_dev+0xf0/0xf0 [ 551.977975] ? simple_attr_release+0x50/0x50 [ 551.978913] ? _raw_spin_unlock+0x1a/0x30 [ 551.979775] ? alloc_fd+0x2e7/0x670 [ 551.980556] do_sys_openat2+0x171/0x4d0 [ 551.981407] ? build_open_flags+0x6f0/0x6f0 [ 551.982295] ? __mutex_unlock_slowpath+0xe1/0x600 [ 551.983282] ? wait_for_completion_io+0x270/0x270 [ 551.984282] __x64_sys_openat+0x13f/0x1f0 [ 551.985163] ? __ia32_sys_open+0x1c0/0x1c0 [ 551.986048] ? ksys_write+0x1a9/0x260 [ 551.986836] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 551.987905] ? syscall_enter_from_user_mode+0x1d/0x50 [ 551.988956] do_syscall_64+0x33/0x40 17:20:46 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 38) [ 551.989729] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 551.990985] RIP: 0033:0x7fc35e22ea04 [ 551.991766] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 551.995529] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 551.997101] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 551.998577] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 552.000025] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 552.001512] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 552.002983] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 552.137785] FAULT_INJECTION: forcing a failure. [ 552.137785] name failslab, interval 1, probability 0, space 0, times 0 [ 552.140187] CPU: 0 PID: 7655 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 552.141615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 552.143354] Call Trace: [ 552.143912] dump_stack+0x107/0x167 [ 552.144667] should_fail.cold+0x5/0xa [ 552.145465] ? anon_vma_clone+0xdc/0x590 [ 552.146289] should_failslab+0x5/0x20 [ 552.147074] kmem_cache_alloc+0x5b/0x310 [ 552.147913] anon_vma_clone+0xdc/0x590 [ 552.148723] anon_vma_fork+0x82/0x640 [ 552.149512] ? __vm_enough_memory+0x184/0x360 [ 552.150456] copy_process+0x72cd/0x78b0 [ 552.151333] ? __cleanup_sighand+0xb0/0xb0 [ 552.152231] ? lock_acquire+0x197/0x470 [ 552.153068] ? find_held_lock+0x2c/0x110 [ 552.153905] kernel_clone+0xe7/0x980 [ 552.154673] ? lock_downgrade+0x6d0/0x6d0 [ 552.155531] ? find_held_lock+0x2c/0x110 [ 552.156366] ? create_io_thread+0xf0/0xf0 [ 552.157216] ? ksys_write+0x12d/0x260 [ 552.158001] ? __mutex_unlock_slowpath+0xe1/0x600 [ 552.159007] __do_sys_fork+0x8a/0xc0 [ 552.159777] ? kernel_thread+0xf0/0xf0 [ 552.160604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 552.161703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 552.162749] ? trace_hardirqs_on+0x5b/0x180 [ 552.163628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 552.164682] do_syscall_64+0x33/0x40 [ 552.165460] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 552.166526] RIP: 0033:0x7f2eb7a3db19 [ 552.167296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 552.171074] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 552.172623] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 552.174087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 552.175539] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 552.177006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 552.178469] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:20:46 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 13) [ 552.227826] FAULT_INJECTION: forcing a failure. [ 552.227826] name failslab, interval 1, probability 0, space 0, times 0 [ 552.230461] CPU: 0 PID: 7725 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 552.231878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 552.233639] Call Trace: [ 552.234198] dump_stack+0x107/0x167 [ 552.234958] should_fail.cold+0x5/0xa [ 552.235736] ? create_object.isra.0+0x3a/0xa30 [ 552.236676] should_failslab+0x5/0x20 [ 552.237473] kmem_cache_alloc+0x5b/0x310 [ 552.238321] create_object.isra.0+0x3a/0xa30 [ 552.239219] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 552.240274] kmem_cache_alloc+0x159/0x310 [ 552.241131] ? find_held_lock+0x2c/0x110 [ 552.241967] ? proc_free_inode+0x20/0x20 [ 552.242808] proc_alloc_inode+0x18/0x200 [ 552.243628] ? proc_free_inode+0x20/0x20 [ 552.244464] alloc_inode+0x63/0x240 [ 552.245215] new_inode+0x23/0x250 [ 552.245947] proc_pid_make_inode+0x22/0x220 [ 552.246826] proc_pident_instantiate+0x81/0x320 [ 552.247786] proc_pident_lookup+0x1eb/0x270 [ 552.248689] __lookup_slow+0x252/0x490 [ 552.249496] ? lookup_open.isra.0+0x1270/0x1270 [ 552.250483] ? selinux_inode_permission+0x401/0x640 [ 552.251511] ? selinux_path_notify+0x4d0/0x4d0 [ 552.252444] walk_component+0x41e/0x6a0 [ 552.253281] ? handle_dots.part.0+0x15c0/0x15c0 [ 552.254235] ? security_inode_permission+0xcb/0x100 [ 552.255255] ? proc_pid_attr_read+0x2b0/0x2b0 [ 552.256183] link_path_walk.part.0+0x699/0xbf0 [ 552.257129] ? walk_component+0x6a0/0x6a0 [ 552.257933] ? percpu_counter_add_batch+0x8b/0x140 [ 552.258894] path_openat+0x25d/0x2770 [ 552.259669] ? path_lookupat+0x860/0x860 [ 552.260514] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 552.261610] ? lock_acquire+0x197/0x470 [ 552.262437] ? find_held_lock+0x2c/0x110 [ 552.263288] do_filp_open+0x190/0x3e0 [ 552.264063] ? may_open_dev+0xf0/0xf0 [ 552.264857] ? simple_attr_release+0x50/0x50 [ 552.265782] ? _raw_spin_unlock+0x1a/0x30 [ 552.266636] ? alloc_fd+0x2e7/0x670 [ 552.267399] do_sys_openat2+0x171/0x4d0 [ 552.268216] ? build_open_flags+0x6f0/0x6f0 [ 552.269121] ? __mutex_unlock_slowpath+0xe1/0x600 [ 552.270114] ? wait_for_completion_io+0x270/0x270 [ 552.271097] __x64_sys_openat+0x13f/0x1f0 [ 552.271944] ? __ia32_sys_open+0x1c0/0x1c0 [ 552.272803] ? ksys_write+0x1a9/0x260 [ 552.273595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 552.274653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 552.275700] do_syscall_64+0x33/0x40 [ 552.276441] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 552.277493] RIP: 0033:0x7f64f3e1ea04 [ 552.278253] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 552.282034] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 552.283586] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 552.285054] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c 17:20:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) r3 = fork() ptrace(0x10, r3) syz_open_procfs(r3, &(0x7f0000000000)='attr/keycreate\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 552.286512] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 552.288134] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 552.289616] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 17:20:47 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 11) 17:20:47 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 8) [ 552.339999] FAULT_INJECTION: forcing a failure. [ 552.339999] name failslab, interval 1, probability 0, space 0, times 0 [ 552.342382] CPU: 0 PID: 7765 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 552.343751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 552.345427] Call Trace: [ 552.345967] dump_stack+0x107/0x167 [ 552.346703] should_fail.cold+0x5/0xa [ 552.347455] ? create_object.isra.0+0x3a/0xa30 [ 552.348337] should_failslab+0x5/0x20 [ 552.349093] kmem_cache_alloc+0x5b/0x310 [ 552.349921] create_object.isra.0+0x3a/0xa30 [ 552.350774] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 552.351776] kmem_cache_alloc+0x159/0x310 [ 552.352594] __d_alloc+0x2a/0x990 [ 552.353299] ? __lock_acquire+0xbb1/0x5b00 [ 552.354133] d_alloc+0x46/0x240 [ 552.354793] d_alloc_parallel+0xe9/0x1a30 [ 552.355607] ? __lock_acquire+0x1657/0x5b00 [ 552.356468] ? __d_lookup_rcu+0x6d0/0x6d0 [ 552.357289] ? lock_acquire+0x197/0x470 [ 552.358071] ? find_held_lock+0x2c/0x110 [ 552.358855] ? lockdep_init_map_type+0x2c7/0x780 [ 552.359795] ? lockdep_init_map_type+0x2c7/0x780 [ 552.360730] __lookup_slow+0x193/0x490 [ 552.361510] ? lookup_open.isra.0+0x1270/0x1270 [ 552.362452] ? selinux_inode_permission+0x401/0x640 [ 552.363415] ? selinux_path_notify+0x4d0/0x4d0 [ 552.364324] walk_component+0x41e/0x6a0 [ 552.365122] ? handle_dots.part.0+0x15c0/0x15c0 [ 552.366041] ? security_inode_permission+0xcb/0x100 [ 552.367014] ? proc_pid_attr_read+0x2b0/0x2b0 [ 552.367909] link_path_walk.part.0+0x699/0xbf0 [ 552.368828] ? walk_component+0x6a0/0x6a0 [ 552.369635] ? percpu_counter_add_batch+0x8b/0x140 [ 552.370612] path_openat+0x25d/0x2770 [ 552.371374] ? path_lookupat+0x860/0x860 [ 552.372151] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 552.373183] ? lock_acquire+0x197/0x470 [ 552.373971] ? find_held_lock+0x2c/0x110 [ 552.374781] do_filp_open+0x190/0x3e0 [ 552.375524] ? may_open_dev+0xf0/0xf0 [ 552.376268] ? simple_attr_release+0x50/0x50 [ 552.377145] ? _raw_spin_unlock+0x1a/0x30 [ 552.377940] ? alloc_fd+0x2e7/0x670 [ 552.378652] do_sys_openat2+0x171/0x4d0 [ 552.379402] ? build_open_flags+0x6f0/0x6f0 [ 552.380231] ? __mutex_unlock_slowpath+0xe1/0x600 [ 552.381174] ? wait_for_completion_io+0x270/0x270 [ 552.382120] __x64_sys_openat+0x13f/0x1f0 [ 552.382917] ? __ia32_sys_open+0x1c0/0x1c0 [ 552.383728] ? ksys_write+0x1a9/0x260 [ 552.384473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 552.385489] ? syscall_enter_from_user_mode+0x1d/0x50 [ 552.386511] do_syscall_64+0x33/0x40 [ 552.387232] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 552.388213] RIP: 0033:0x7fc35e22ea04 [ 552.388937] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 552.392545] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 552.394042] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 552.395435] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 552.396796] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 552.398179] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 17:20:47 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 39) [ 552.399552] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 552.428802] FAULT_INJECTION: forcing a failure. [ 552.428802] name failslab, interval 1, probability 0, space 0, times 0 [ 552.431028] CPU: 0 PID: 7802 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 552.432331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 552.433924] Call Trace: [ 552.434434] dump_stack+0x107/0x167 [ 552.435128] should_fail.cold+0x5/0xa [ 552.435843] ? proc_self_get_link+0x18b/0x200 [ 552.436704] should_failslab+0x5/0x20 [ 552.437445] kmem_cache_alloc_trace+0x55/0x320 [ 552.438323] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 552.439192] proc_self_get_link+0x18b/0x200 [ 552.440011] step_into+0x1595/0x1ce0 [ 552.440721] ? lookup_fast+0x6e0/0x6e0 [ 552.441470] ? try_to_unlazy_next+0x4f0/0x4f0 [ 552.442334] walk_component+0x171/0x6a0 [ 552.443101] ? trace_hardirqs_on+0x5b/0x180 [ 552.443921] ? handle_dots.part.0+0x15c0/0x15c0 [ 552.444819] ? security_inode_permission+0xcb/0x100 [ 552.445784] link_path_walk.part.0+0x699/0xbf0 [ 552.446670] ? walk_component+0x6a0/0x6a0 [ 552.447454] ? percpu_counter_add_batch+0x8b/0x140 [ 552.448395] path_openat+0x25d/0x2770 [ 552.449142] ? path_lookupat+0x860/0x860 [ 552.449912] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 552.450908] ? lock_acquire+0x197/0x470 [ 552.451656] ? find_held_lock+0x2c/0x110 [ 552.452441] do_filp_open+0x190/0x3e0 [ 552.453177] ? may_open_dev+0xf0/0xf0 [ 552.453906] ? rwlock_bug.part.0+0x90/0x90 [ 552.454720] ? _raw_spin_unlock+0x1a/0x30 [ 552.455516] ? alloc_fd+0x2e7/0x670 [ 552.456234] do_sys_openat2+0x171/0x4d0 [ 552.456985] ? build_open_flags+0x6f0/0x6f0 [ 552.457855] ? __mutex_unlock_slowpath+0xe1/0x600 [ 552.458769] ? wait_for_completion_io+0x270/0x270 [ 552.459673] __x64_sys_openat+0x13f/0x1f0 [ 552.460454] ? __ia32_sys_open+0x1c0/0x1c0 [ 552.461244] ? ksys_write+0x1a9/0x260 [ 552.461930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 552.462855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 552.463814] do_syscall_64+0x33/0x40 [ 552.464503] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 552.465466] RIP: 0033:0x7f431a77ea04 [ 552.466168] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 552.469628] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 552.471059] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 552.472391] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 552.473739] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 552.475085] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 552.476427] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 552.480247] FAULT_INJECTION: forcing a failure. [ 552.480247] name failslab, interval 1, probability 0, space 0, times 0 [ 552.482839] CPU: 1 PID: 7861 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 552.484283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 552.486044] Call Trace: [ 552.486614] dump_stack+0x107/0x167 [ 552.487390] should_fail.cold+0x5/0xa [ 552.488205] ? __pmd_alloc+0x94/0x630 [ 552.489024] should_failslab+0x5/0x20 [ 552.489848] kmem_cache_alloc+0x5b/0x310 [ 552.490729] __pmd_alloc+0x94/0x630 [ 552.491508] copy_page_range+0x2bd8/0x3810 [ 552.492417] ? lock_chain_count+0x20/0x20 [ 552.493349] ? up_write+0x191/0x550 [ 552.494121] ? vm_iomap_memory+0x190/0x190 [ 552.495019] ? downgrade_write+0x3a0/0x3a0 [ 552.495915] ? anon_vma_interval_tree_insert+0x277/0x450 [ 552.497076] ? __vma_link_rb+0x540/0x700 [ 552.497945] copy_process+0x7658/0x78b0 [ 552.498823] ? __cleanup_sighand+0xb0/0xb0 [ 552.499734] ? lock_acquire+0x197/0x470 [ 552.500582] ? find_held_lock+0x2c/0x110 [ 552.501463] kernel_clone+0xe7/0x980 [ 552.502253] ? lock_downgrade+0x6d0/0x6d0 [ 552.503126] ? find_held_lock+0x2c/0x110 [ 552.503989] ? create_io_thread+0xf0/0xf0 [ 552.504895] ? ksys_write+0x12d/0x260 [ 552.505721] ? __mutex_unlock_slowpath+0xe1/0x600 [ 552.506758] __do_sys_fork+0x8a/0xc0 [ 552.507546] ? kernel_thread+0xf0/0xf0 [ 552.508393] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 552.509528] ? syscall_enter_from_user_mode+0x1d/0x50 [ 552.510618] ? trace_hardirqs_on+0x5b/0x180 [ 552.511538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 552.512632] do_syscall_64+0x33/0x40 [ 552.513443] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 552.514526] RIP: 0033:0x7f2eb7a3db19 [ 552.515315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 552.519184] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 552.520807] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 552.522326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 552.523829] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 552.525352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 552.526847] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 552.546316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 17:20:47 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 9) 17:20:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) r3 = fork() ptrace(0x10, r3) syz_open_procfs(r3, &(0x7f0000000000)='attr/keycreate\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 552.596106] FAULT_INJECTION: forcing a failure. [ 552.596106] name failslab, interval 1, probability 0, space 0, times 0 [ 552.598066] CPU: 0 PID: 7872 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 552.599243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 552.600692] Call Trace: [ 552.601161] dump_stack+0x107/0x167 [ 552.601791] should_fail.cold+0x5/0xa [ 552.602449] ? find_held_lock+0x2c/0x110 [ 552.603157] ? create_object.isra.0+0x3a/0xa30 [ 552.603947] should_failslab+0x5/0x20 [ 552.604604] kmem_cache_alloc+0x5b/0x310 [ 552.605315] ? __task_pid_nr_ns+0x1b8/0x500 [ 552.606073] create_object.isra.0+0x3a/0xa30 [ 552.606828] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 552.607710] kmem_cache_alloc_trace+0x151/0x320 [ 552.608511] ? proc_ns_dir_lookup+0x2c0/0x2c0 [ 552.609291] proc_self_get_link+0x18b/0x200 [ 552.610029] step_into+0x1595/0x1ce0 [ 552.610665] ? lookup_fast+0x6e0/0x6e0 [ 552.611323] ? try_to_unlazy_next+0x4f0/0x4f0 [ 552.612097] walk_component+0x171/0x6a0 [ 552.612761] ? trace_hardirqs_on+0x5b/0x180 [ 552.613500] ? handle_dots.part.0+0x15c0/0x15c0 [ 552.614307] ? security_inode_permission+0xcb/0x100 [ 552.615172] link_path_walk.part.0+0x699/0xbf0 [ 552.615957] ? walk_component+0x6a0/0x6a0 [ 552.616670] ? percpu_counter_add_batch+0x8b/0x140 [ 552.617522] path_openat+0x25d/0x2770 [ 552.618182] ? path_lookupat+0x860/0x860 [ 552.618884] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 552.619775] ? lock_acquire+0x197/0x470 [ 552.620450] ? find_held_lock+0x2c/0x110 [ 552.621247] do_filp_open+0x190/0x3e0 [ 552.621892] ? may_open_dev+0xf0/0xf0 [ 552.622550] ? rwlock_bug.part.0+0x90/0x90 [ 552.623276] ? _raw_spin_unlock+0x1a/0x30 [ 552.623977] ? alloc_fd+0x2e7/0x670 [ 552.624597] do_sys_openat2+0x171/0x4d0 [ 552.625287] ? build_open_flags+0x6f0/0x6f0 [ 552.626014] ? __mutex_unlock_slowpath+0xe1/0x600 [ 552.626823] ? wait_for_completion_io+0x270/0x270 [ 552.627660] __x64_sys_openat+0x13f/0x1f0 [ 552.628359] ? __ia32_sys_open+0x1c0/0x1c0 [ 552.629081] ? ksys_write+0x1a9/0x260 [ 552.629736] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 552.630627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 552.631494] do_syscall_64+0x33/0x40 [ 552.632112] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 552.632976] RIP: 0033:0x7f431a77ea04 [ 552.633617] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 552.636744] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 552.638033] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 552.639233] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 552.640377] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 552.641505] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 552.642622] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 17:21:02 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 14) 17:21:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) r3 = fork() ptrace(0x10, r3) syz_open_procfs(r3, &(0x7f0000000000)='attr/keycreate\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:21:02 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 40) [ 568.019157] FAULT_INJECTION: forcing a failure. [ 568.019157] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 568.021786] CPU: 1 PID: 7983 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 568.023214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 568.024954] Call Trace: [ 568.025526] dump_stack+0x107/0x167 [ 568.026287] should_fail.cold+0x5/0xa [ 568.027096] __alloc_pages_nodemask+0x182/0x600 [ 568.028067] ? lock_acquire+0x197/0x470 [ 568.028897] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 568.030166] ? lock_downgrade+0x6d0/0x6d0 [ 568.031031] ? do_raw_spin_lock+0x121/0x260 [ 568.031938] alloc_pages_current+0x187/0x280 [ 568.032870] __pmd_alloc+0x37/0x630 [ 568.033652] copy_page_range+0x2bd8/0x3810 [ 568.034541] ? lock_chain_count+0x20/0x20 [ 568.035448] ? up_write+0x191/0x550 [ 568.036206] ? vm_iomap_memory+0x190/0x190 [ 568.037086] ? downgrade_write+0x3a0/0x3a0 [ 568.037979] ? anon_vma_interval_tree_insert+0x277/0x450 [ 568.039119] ? __vma_link_rb+0x540/0x700 [ 568.039987] copy_process+0x7658/0x78b0 [ 568.040858] ? __cleanup_sighand+0xb0/0xb0 [ 568.041760] ? lock_acquire+0x197/0x470 [ 568.042593] ? find_held_lock+0x2c/0x110 [ 568.043463] kernel_clone+0xe7/0x980 [ 568.044251] ? lock_downgrade+0x6d0/0x6d0 [ 568.045122] ? find_held_lock+0x2c/0x110 [ 568.045987] ? create_io_thread+0xf0/0xf0 [ 568.046859] ? ksys_write+0x12d/0x260 [ 568.047670] ? __mutex_unlock_slowpath+0xe1/0x600 [ 568.048697] __do_sys_fork+0x8a/0xc0 [ 568.049493] ? kernel_thread+0xf0/0xf0 [ 568.050328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 568.051444] ? syscall_enter_from_user_mode+0x1d/0x50 [ 568.052535] ? trace_hardirqs_on+0x5b/0x180 [ 568.053460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 568.054563] do_syscall_64+0x33/0x40 [ 568.055349] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 568.056426] RIP: 0033:0x7f2eb7a3db19 [ 568.057222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 568.061084] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 568.062715] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 568.064231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.065768] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 568.067290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 568.068808] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 568.084475] FAULT_INJECTION: forcing a failure. [ 568.084475] name failslab, interval 1, probability 0, space 0, times 0 [ 568.088131] CPU: 1 PID: 7994 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 568.089620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 568.091399] Call Trace: [ 568.091965] dump_stack+0x107/0x167 [ 568.092743] should_fail.cold+0x5/0xa [ 568.093566] ? security_inode_alloc+0x34/0x160 [ 568.094537] should_failslab+0x5/0x20 [ 568.095353] kmem_cache_alloc+0x5b/0x310 [ 568.096232] security_inode_alloc+0x34/0x160 [ 568.097176] inode_init_always+0xa4e/0xd10 [ 568.098099] ? proc_free_inode+0x20/0x20 [ 568.098968] alloc_inode+0x84/0x240 [ 568.099740] new_inode+0x23/0x250 [ 568.100500] proc_pid_make_inode+0x22/0x220 [ 568.101429] proc_pident_instantiate+0x81/0x320 [ 568.102420] proc_pident_lookup+0x1eb/0x270 [ 568.103345] __lookup_slow+0x252/0x490 [ 568.104179] ? lookup_open.isra.0+0x1270/0x1270 [ 568.105190] ? selinux_inode_permission+0x401/0x640 [ 568.106264] ? selinux_path_notify+0x4d0/0x4d0 [ 568.107235] walk_component+0x41e/0x6a0 [ 568.108076] ? handle_dots.part.0+0x15c0/0x15c0 [ 568.109077] ? security_inode_permission+0xcb/0x100 [ 568.110170] ? proc_pid_attr_read+0x2b0/0x2b0 [ 568.111135] link_path_walk.part.0+0x699/0xbf0 [ 568.112115] ? walk_component+0x6a0/0x6a0 [ 568.112997] ? percpu_counter_add_batch+0x8b/0x140 [ 568.114052] path_openat+0x25d/0x2770 [ 568.114870] ? path_lookupat+0x860/0x860 [ 568.115733] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 568.116859] ? lock_acquire+0x197/0x470 [ 568.117711] ? find_held_lock+0x2c/0x110 [ 568.118653] do_filp_open+0x190/0x3e0 [ 568.119463] ? may_open_dev+0xf0/0xf0 [ 568.120292] ? simple_attr_release+0x50/0x50 [ 568.121245] ? _raw_spin_unlock+0x1a/0x30 [ 568.122120] ? alloc_fd+0x2e7/0x670 [ 568.122900] do_sys_openat2+0x171/0x4d0 [ 568.123742] ? build_open_flags+0x6f0/0x6f0 [ 568.124646] ? __mutex_unlock_slowpath+0xe1/0x600 [ 568.125689] ? wait_for_completion_io+0x270/0x270 [ 568.126723] __x64_sys_openat+0x13f/0x1f0 [ 568.127599] ? __ia32_sys_open+0x1c0/0x1c0 [ 568.128496] ? ksys_write+0x1a9/0x260 [ 568.129329] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 568.130438] ? syscall_enter_from_user_mode+0x1d/0x50 [ 568.131536] do_syscall_64+0x33/0x40 [ 568.132334] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 568.133433] RIP: 0033:0x7f64f3e1ea04 [ 568.134217] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 568.138148] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 568.139757] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 568.141285] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 568.142783] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 568.144301] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 568.145834] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 17:21:02 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:02 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 12) 17:21:02 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:02 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:02 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 10) [ 568.183923] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 568.218513] FAULT_INJECTION: forcing a failure. [ 568.218513] name failslab, interval 1, probability 0, space 0, times 0 [ 568.220987] CPU: 1 PID: 7989 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 568.222435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 568.224187] Call Trace: [ 568.224744] dump_stack+0x107/0x167 [ 568.225527] should_fail.cold+0x5/0xa [ 568.226334] ? proc_alloc_inode+0x18/0x200 [ 568.227225] should_failslab+0x5/0x20 [ 568.228029] kmem_cache_alloc+0x5b/0x310 [ 568.228308] FAULT_INJECTION: forcing a failure. [ 568.228308] name failslab, interval 1, probability 0, space 0, times 0 [ 568.228885] ? find_held_lock+0x2c/0x110 [ 568.228912] ? proc_free_inode+0x20/0x20 [ 568.232950] proc_alloc_inode+0x18/0x200 [ 568.233816] ? proc_free_inode+0x20/0x20 [ 568.234676] alloc_inode+0x63/0x240 [ 568.235441] new_inode+0x23/0x250 [ 568.236175] proc_pid_make_inode+0x22/0x220 [ 568.237093] proc_pident_instantiate+0x81/0x320 [ 568.238089] proc_pident_lookup+0x1eb/0x270 [ 568.239002] __lookup_slow+0x252/0x490 [ 568.239824] ? lookup_open.isra.0+0x1270/0x1270 [ 568.240826] ? selinux_inode_permission+0x401/0x640 [ 568.241886] ? selinux_path_notify+0x4d0/0x4d0 [ 568.242856] walk_component+0x41e/0x6a0 [ 568.243702] ? handle_dots.part.0+0x15c0/0x15c0 [ 568.244689] ? security_inode_permission+0xcb/0x100 [ 568.245750] ? proc_pid_attr_read+0x2b0/0x2b0 [ 568.246701] link_path_walk.part.0+0x699/0xbf0 [ 568.247672] ? walk_component+0x6a0/0x6a0 [ 568.248545] ? percpu_counter_add_batch+0x8b/0x140 [ 568.249593] path_openat+0x25d/0x2770 [ 568.250406] ? path_lookupat+0x860/0x860 [ 568.251271] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 568.252378] ? lock_acquire+0x197/0x470 [ 568.253223] ? find_held_lock+0x2c/0x110 [ 568.254095] do_filp_open+0x190/0x3e0 [ 568.254894] ? may_open_dev+0xf0/0xf0 [ 568.255714] ? simple_attr_release+0x50/0x50 [ 568.256653] ? _raw_spin_unlock+0x1a/0x30 [ 568.257532] ? alloc_fd+0x2e7/0x670 [ 568.258318] do_sys_openat2+0x171/0x4d0 [ 568.259159] ? build_open_flags+0x6f0/0x6f0 [ 568.260066] ? __mutex_unlock_slowpath+0xe1/0x600 [ 568.261079] ? wait_for_completion_io+0x270/0x270 [ 568.262117] __x64_sys_openat+0x13f/0x1f0 [ 568.262993] ? __ia32_sys_open+0x1c0/0x1c0 [ 568.263886] ? ksys_write+0x1a9/0x260 [ 568.264696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 568.265814] ? syscall_enter_from_user_mode+0x1d/0x50 [ 568.266901] do_syscall_64+0x33/0x40 [ 568.267690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 568.268767] RIP: 0033:0x7fc35e22ea04 [ 568.269555] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 568.273437] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 568.275051] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 568.276565] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 568.278076] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 568.279578] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 568.281085] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 568.282630] CPU: 0 PID: 8084 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 568.284104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 568.285902] Call Trace: [ 568.286482] dump_stack+0x107/0x167 [ 568.287272] should_fail.cold+0x5/0xa [ 568.288090] ? __d_alloc+0x2a/0x990 [ 568.288871] should_failslab+0x5/0x20 [ 568.289700] kmem_cache_alloc+0x5b/0x310 [ 568.290589] __d_alloc+0x2a/0x990 [ 568.291343] ? __lock_acquire+0xbb1/0x5b00 [ 568.292256] d_alloc+0x46/0x240 [ 568.292966] d_alloc_parallel+0xe9/0x1a30 [ 568.293868] ? __lock_acquire+0x1657/0x5b00 [ 568.294811] ? __d_lookup_rcu+0x6d0/0x6d0 [ 568.295699] ? lock_acquire+0x197/0x470 [ 568.296551] ? find_held_lock+0x2c/0x110 [ 568.297432] ? lockdep_init_map_type+0x2c7/0x780 [ 568.298456] ? lockdep_init_map_type+0x2c7/0x780 [ 568.299495] __lookup_slow+0x193/0x490 [ 568.300330] ? lookup_open.isra.0+0x1270/0x1270 [ 568.301359] ? selinux_inode_permission+0x401/0x640 [ 568.302439] ? selinux_path_notify+0x4d0/0x4d0 [ 568.303423] walk_component+0x41e/0x6a0 [ 568.304280] ? handle_dots.part.0+0x15c0/0x15c0 [ 568.305300] ? security_inode_permission+0xcb/0x100 [ 568.306375] ? proc_pid_attr_read+0x2b0/0x2b0 [ 568.307349] link_path_walk.part.0+0x699/0xbf0 [ 568.308344] ? walk_component+0x6a0/0x6a0 [ 568.309244] ? percpu_counter_add_batch+0x8b/0x140 [ 568.310311] path_openat+0x25d/0x2770 [ 568.311145] ? path_lookupat+0x860/0x860 [ 568.312026] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 568.313146] ? lock_acquire+0x197/0x470 [ 568.314010] ? find_held_lock+0x2c/0x110 [ 568.314895] do_filp_open+0x190/0x3e0 [ 568.315713] ? may_open_dev+0xf0/0xf0 [ 568.316548] ? simple_attr_release+0x50/0x50 [ 568.317513] ? _raw_spin_unlock+0x1a/0x30 [ 568.318405] ? alloc_fd+0x2e7/0x670 [ 568.319198] do_sys_openat2+0x171/0x4d0 [ 568.320059] ? build_open_flags+0x6f0/0x6f0 [ 568.320981] ? __mutex_unlock_slowpath+0xe1/0x600 [ 568.322027] ? wait_for_completion_io+0x270/0x270 [ 568.323070] __x64_sys_openat+0x13f/0x1f0 [ 568.323961] ? __ia32_sys_open+0x1c0/0x1c0 [ 568.324871] ? ksys_write+0x1a9/0x260 [ 568.325712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 568.326842] ? syscall_enter_from_user_mode+0x1d/0x50 [ 568.327953] do_syscall_64+0x33/0x40 [ 568.328754] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 568.329870] RIP: 0033:0x7f431a77ea04 [ 568.330675] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 568.334638] RSP: 002b:00007f4317d200b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 568.336274] RAX: ffffffffffffffda RBX: 00007f431a8df020 RCX: 00007f431a77ea04 [ 568.337811] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 568.339319] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 568.340854] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 568.342379] R13: 00007ffed9559d5f R14: 00007f4317d20300 R15: 0000000000022000 [ 568.355838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.357473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.359726] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:21:03 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 41) 17:21:03 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 15) [ 568.441855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.443505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.445788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:21:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:21:03 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 11) 17:21:03 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 13) [ 568.497010] FAULT_INJECTION: forcing a failure. [ 568.497010] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 568.499573] CPU: 0 PID: 8102 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 568.501036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 568.502802] Call Trace: [ 568.503369] dump_stack+0x107/0x167 [ 568.504147] should_fail.cold+0x5/0xa [ 568.504953] __alloc_pages_nodemask+0x182/0x600 [ 568.505944] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 568.507202] ? find_held_lock+0x2c/0x110 [ 568.508059] ? __pmd_alloc+0x31d/0x630 [ 568.508871] ? lock_downgrade+0x6d0/0x6d0 [ 568.509745] ? do_raw_spin_lock+0x121/0x260 [ 568.510655] alloc_pages_current+0x187/0x280 [ 568.511579] pte_alloc_one+0x16/0x1a0 [ 568.512372] __pte_alloc+0x1d/0x330 [ 568.513141] copy_page_range+0x1b62/0x3810 [ 568.514050] ? lock_chain_count+0x20/0x20 [ 568.514961] ? up_write+0x191/0x550 [ 568.515728] ? vm_iomap_memory+0x190/0x190 [ 568.516609] ? downgrade_write+0x3a0/0x3a0 [ 568.517499] ? anon_vma_interval_tree_insert+0x277/0x450 [ 568.518631] ? __vma_link_rb+0x540/0x700 [ 568.519487] copy_process+0x7658/0x78b0 [ 568.520353] ? __cleanup_sighand+0xb0/0xb0 [ 568.521256] ? lock_acquire+0x197/0x470 [ 568.522099] ? find_held_lock+0x2c/0x110 [ 568.522961] kernel_clone+0xe7/0x980 [ 568.523739] ? lock_downgrade+0x6d0/0x6d0 [ 568.524613] ? find_held_lock+0x2c/0x110 [ 568.525471] ? create_io_thread+0xf0/0xf0 [ 568.526334] ? ksys_write+0x12d/0x260 [ 568.527134] ? __mutex_unlock_slowpath+0xe1/0x600 [ 568.528166] __do_sys_fork+0x8a/0xc0 [ 568.529013] ? kernel_thread+0xf0/0xf0 [ 568.530112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 568.531533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 568.532927] ? trace_hardirqs_on+0x5b/0x180 [ 568.534138] ? syscall_enter_from_user_mode+0x1d/0x50 [ 568.535546] do_syscall_64+0x33/0x40 [ 568.536576] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 568.536799] FAULT_INJECTION: forcing a failure. [ 568.536799] name failslab, interval 1, probability 0, space 0, times 0 [ 568.537783] RIP: 0033:0x7f2eb7a3db19 [ 568.537803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 568.537814] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 568.546562] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 568.548056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.549565] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 568.551059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 568.552559] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 568.554100] CPU: 1 PID: 8107 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 568.555556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 568.557319] Call Trace: [ 568.557884] dump_stack+0x107/0x167 [ 568.558656] should_fail.cold+0x5/0xa [ 568.559468] ? create_object.isra.0+0x3a/0xa30 [ 568.560434] should_failslab+0x5/0x20 [ 568.561244] kmem_cache_alloc+0x5b/0x310 [ 568.562134] create_object.isra.0+0x3a/0xa30 [ 568.563057] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 568.564141] kmem_cache_alloc+0x159/0x310 [ 568.565022] __d_alloc+0x2a/0x990 [ 568.565771] ? __lock_acquire+0xbb1/0x5b00 [ 568.566670] d_alloc+0x46/0x240 [ 568.567366] d_alloc_parallel+0xe9/0x1a30 [ 568.568249] ? __lock_acquire+0x1657/0x5b00 [ 568.569168] ? __d_lookup_rcu+0x6d0/0x6d0 [ 568.570060] ? lock_acquire+0x197/0x470 [ 568.570894] ? find_held_lock+0x2c/0x110 [ 568.571468] FAULT_INJECTION: forcing a failure. [ 568.571468] name failslab, interval 1, probability 0, space 0, times 0 [ 568.571753] ? lockdep_init_map_type+0x2c7/0x780 [ 568.575037] ? lockdep_init_map_type+0x2c7/0x780 [ 568.576046] __lookup_slow+0x193/0x490 [ 568.576866] ? lookup_open.isra.0+0x1270/0x1270 [ 568.577880] ? selinux_inode_permission+0x401/0x640 [ 568.578940] ? selinux_path_notify+0x4d0/0x4d0 [ 568.579902] walk_component+0x41e/0x6a0 [ 568.580736] ? handle_dots.part.0+0x15c0/0x15c0 [ 568.581732] ? security_inode_permission+0xcb/0x100 [ 568.582778] ? proc_pid_attr_read+0x2b0/0x2b0 [ 568.583727] link_path_walk.part.0+0x699/0xbf0 [ 568.584704] ? walk_component+0x6a0/0x6a0 [ 568.585585] ? percpu_counter_add_batch+0x8b/0x140 [ 568.586624] path_openat+0x25d/0x2770 [ 568.587448] ? path_lookupat+0x860/0x860 [ 568.588303] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 568.589418] ? lock_acquire+0x197/0x470 [ 568.590251] ? find_held_lock+0x2c/0x110 [ 568.591113] do_filp_open+0x190/0x3e0 [ 568.591911] ? may_open_dev+0xf0/0xf0 [ 568.592725] ? simple_attr_release+0x50/0x50 [ 568.593685] ? _raw_spin_unlock+0x1a/0x30 [ 568.594554] ? alloc_fd+0x2e7/0x670 [ 568.595336] do_sys_openat2+0x171/0x4d0 [ 568.596176] ? build_open_flags+0x6f0/0x6f0 [ 568.597082] ? __mutex_unlock_slowpath+0xe1/0x600 [ 568.598110] ? wait_for_completion_io+0x270/0x270 [ 568.599131] __x64_sys_openat+0x13f/0x1f0 [ 568.600007] ? __ia32_sys_open+0x1c0/0x1c0 [ 568.600894] ? ksys_write+0x1a9/0x260 [ 568.601713] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 568.602822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 568.603907] do_syscall_64+0x33/0x40 [ 568.604691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 568.605779] RIP: 0033:0x7f431a77ea04 [ 568.606561] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 568.610463] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 568.612074] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 568.613603] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 568.615101] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 568.616611] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 568.618119] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 568.619667] CPU: 0 PID: 8109 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 568.621128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 568.622879] Call Trace: [ 568.623430] dump_stack+0x107/0x167 [ 568.624206] should_fail.cold+0x5/0xa [ 568.625004] ? create_object.isra.0+0x3a/0xa30 [ 568.625322] FAULT_INJECTION: forcing a failure. [ 568.625322] name failslab, interval 1, probability 0, space 0, times 0 [ 568.625976] should_failslab+0x5/0x20 [ 568.625996] kmem_cache_alloc+0x5b/0x310 [ 568.626022] create_object.isra.0+0x3a/0xa30 [ 568.630862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 568.632174] kmem_cache_alloc+0x159/0x310 [ 568.633302] ? find_held_lock+0x2c/0x110 [ 568.634416] ? proc_free_inode+0x20/0x20 [ 568.635510] proc_alloc_inode+0x18/0x200 [ 568.636607] ? proc_free_inode+0x20/0x20 [ 568.637697] alloc_inode+0x63/0x240 [ 568.638660] new_inode+0x23/0x250 [ 568.639584] proc_pid_make_inode+0x22/0x220 [ 568.640635] proc_pident_instantiate+0x81/0x320 [ 568.641643] proc_pident_lookup+0x1eb/0x270 [ 568.642575] __lookup_slow+0x252/0x490 [ 568.643511] ? lookup_open.isra.0+0x1270/0x1270 [ 568.644589] ? selinux_inode_permission+0x401/0x640 [ 568.645678] ? selinux_path_notify+0x4d0/0x4d0 [ 568.646649] walk_component+0x41e/0x6a0 [ 568.647473] ? handle_dots.part.0+0x15c0/0x15c0 [ 568.648445] ? security_inode_permission+0xcb/0x100 [ 568.649481] ? proc_pid_attr_read+0x2b0/0x2b0 [ 568.650424] link_path_walk.part.0+0x699/0xbf0 [ 568.651379] ? walk_component+0x6a0/0x6a0 [ 568.652237] ? percpu_counter_add_batch+0x8b/0x140 [ 568.653272] path_openat+0x25d/0x2770 [ 568.654072] ? path_lookupat+0x860/0x860 [ 568.654923] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 568.656005] ? lock_acquire+0x197/0x470 [ 568.656833] ? find_held_lock+0x2c/0x110 [ 568.657692] do_filp_open+0x190/0x3e0 [ 568.658478] ? may_open_dev+0xf0/0xf0 [ 568.659283] ? simple_attr_release+0x50/0x50 [ 568.660215] ? _raw_spin_unlock+0x1a/0x30 [ 568.661080] ? alloc_fd+0x2e7/0x670 [ 568.661858] do_sys_openat2+0x171/0x4d0 [ 568.662680] ? build_open_flags+0x6f0/0x6f0 [ 568.663565] ? __mutex_unlock_slowpath+0xe1/0x600 [ 568.664561] ? wait_for_completion_io+0x270/0x270 [ 568.665570] __x64_sys_openat+0x13f/0x1f0 [ 568.666435] ? __ia32_sys_open+0x1c0/0x1c0 [ 568.667310] ? ksys_write+0x1a9/0x260 [ 568.668106] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 568.669194] ? syscall_enter_from_user_mode+0x1d/0x50 [ 568.670274] do_syscall_64+0x33/0x40 [ 568.671059] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 568.672118] RIP: 0033:0x7fc35e22ea04 [ 568.672891] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 568.676743] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 568.678344] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 568.679840] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 568.681339] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 568.682813] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 568.684300] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 568.685825] CPU: 1 PID: 8104 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 568.687271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 568.689027] Call Trace: [ 568.689619] dump_stack+0x107/0x167 [ 568.690397] should_fail.cold+0x5/0xa [ 568.691212] ? create_object.isra.0+0x3a/0xa30 [ 568.692181] should_failslab+0x5/0x20 [ 568.692983] kmem_cache_alloc+0x5b/0x310 [ 568.693856] create_object.isra.0+0x3a/0xa30 [ 568.694779] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 568.695858] kmem_cache_alloc+0x159/0x310 [ 568.696736] security_inode_alloc+0x34/0x160 [ 568.697672] inode_init_always+0xa4e/0xd10 [ 568.698577] ? proc_free_inode+0x20/0x20 [ 568.699444] alloc_inode+0x84/0x240 [ 568.700216] new_inode+0x23/0x250 [ 568.700949] proc_pid_make_inode+0x22/0x220 [ 568.701764] proc_pident_instantiate+0x81/0x320 [ 568.702316] proc_pident_lookup+0x1eb/0x270 [ 568.702827] __lookup_slow+0x252/0x490 [ 568.703284] ? lookup_open.isra.0+0x1270/0x1270 [ 568.703842] ? selinux_inode_permission+0x401/0x640 [ 568.704438] ? selinux_path_notify+0x4d0/0x4d0 [ 568.704987] walk_component+0x41e/0x6a0 [ 568.705483] ? handle_dots.part.0+0x15c0/0x15c0 [ 568.706046] ? security_inode_permission+0xcb/0x100 [ 568.706640] ? proc_pid_attr_read+0x2b0/0x2b0 [ 568.707185] link_path_walk.part.0+0x699/0xbf0 [ 568.707741] ? walk_component+0x6a0/0x6a0 [ 568.708235] ? percpu_counter_add_batch+0x8b/0x140 [ 568.708812] path_openat+0x25d/0x2770 [ 568.709293] ? path_lookupat+0x860/0x860 [ 568.709778] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 568.710391] ? lock_acquire+0x197/0x470 [ 568.710861] ? find_held_lock+0x2c/0x110 [ 568.711345] do_filp_open+0x190/0x3e0 [ 568.711798] ? may_open_dev+0xf0/0xf0 [ 568.712267] ? simple_attr_release+0x50/0x50 [ 568.712805] ? _raw_spin_unlock+0x1a/0x30 [ 568.713314] ? alloc_fd+0x2e7/0x670 [ 568.713763] do_sys_openat2+0x171/0x4d0 [ 568.714242] ? build_open_flags+0x6f0/0x6f0 [ 568.714759] ? __mutex_unlock_slowpath+0xe1/0x600 [ 568.715347] ? wait_for_completion_io+0x270/0x270 [ 568.715933] __x64_sys_openat+0x13f/0x1f0 [ 568.716430] ? __ia32_sys_open+0x1c0/0x1c0 [ 568.716974] ? ksys_write+0x1a9/0x260 [ 568.717449] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 568.718064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 568.718683] do_syscall_64+0x33/0x40 [ 568.719136] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 568.719757] RIP: 0033:0x7f64f3e1ea04 [ 568.720202] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 568.722385] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 568.723291] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 568.724144] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 568.724983] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 568.725821] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 568.726679] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 17:21:03 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 568.784104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:21:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:21:03 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 42) 17:21:03 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 12) [ 568.907858] FAULT_INJECTION: forcing a failure. [ 568.907858] name failslab, interval 1, probability 0, space 0, times 0 [ 568.909197] CPU: 1 PID: 8125 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 568.909835] FAULT_INJECTION: forcing a failure. [ 568.909835] name failslab, interval 1, probability 0, space 0, times 0 [ 568.909980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 568.909984] Call Trace: [ 568.910001] dump_stack+0x107/0x167 [ 568.910013] should_fail.cold+0x5/0xa [ 568.910027] ? proc_alloc_inode+0x18/0x200 [ 568.910046] should_failslab+0x5/0x20 [ 568.915220] kmem_cache_alloc+0x5b/0x310 [ 568.915756] ? find_held_lock+0x2c/0x110 [ 568.916221] ? proc_free_inode+0x20/0x20 [ 568.916685] proc_alloc_inode+0x18/0x200 [ 568.917145] ? proc_free_inode+0x20/0x20 [ 568.917612] alloc_inode+0x63/0x240 [ 568.918028] new_inode+0x23/0x250 [ 568.918419] proc_pid_make_inode+0x22/0x220 [ 568.918914] proc_pident_instantiate+0x81/0x320 [ 568.919440] proc_pident_lookup+0x1eb/0x270 [ 568.919935] __lookup_slow+0x252/0x490 [ 568.920375] ? lookup_open.isra.0+0x1270/0x1270 [ 568.920916] ? selinux_inode_permission+0x401/0x640 [ 568.921490] ? selinux_path_notify+0x4d0/0x4d0 [ 568.922010] walk_component+0x41e/0x6a0 [ 568.922465] ? handle_dots.part.0+0x15c0/0x15c0 [ 568.922989] ? security_inode_permission+0xcb/0x100 [ 568.923551] ? proc_pid_attr_read+0x2b0/0x2b0 [ 568.924066] link_path_walk.part.0+0x699/0xbf0 [ 568.924585] ? walk_component+0x6a0/0x6a0 [ 568.925056] ? percpu_counter_add_batch+0x8b/0x140 [ 568.925621] path_openat+0x25d/0x2770 [ 568.926148] ? path_lookupat+0x860/0x860 [ 568.926696] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 568.927387] ? lock_acquire+0x197/0x470 [ 568.927916] ? find_held_lock+0x2c/0x110 [ 568.928481] do_filp_open+0x190/0x3e0 [ 568.928995] ? may_open_dev+0xf0/0xf0 [ 568.929509] ? simple_attr_release+0x50/0x50 [ 568.930017] ? _raw_spin_unlock+0x1a/0x30 [ 568.930488] ? alloc_fd+0x2e7/0x670 [ 568.930907] do_sys_openat2+0x171/0x4d0 [ 568.931365] ? build_open_flags+0x6f0/0x6f0 [ 568.931852] ? __mutex_unlock_slowpath+0xe1/0x600 [ 568.932401] ? wait_for_completion_io+0x270/0x270 [ 568.932952] __x64_sys_openat+0x13f/0x1f0 [ 568.933442] ? __ia32_sys_open+0x1c0/0x1c0 [ 568.933919] ? ksys_write+0x1a9/0x260 [ 568.934354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 568.934948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 568.935535] do_syscall_64+0x33/0x40 [ 568.935956] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 568.936536] RIP: 0033:0x7f431a77ea04 [ 568.936958] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 568.939041] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 568.939908] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 568.940715] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 568.941533] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 568.942339] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 568.943153] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 568.943992] CPU: 0 PID: 8126 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 568.945662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 568.947229] Call Trace: [ 568.947737] dump_stack+0x107/0x167 [ 568.948562] should_fail.cold+0x5/0xa [ 568.949350] ? ptlock_alloc+0x1d/0x70 [ 568.950060] should_failslab+0x5/0x20 [ 568.950776] kmem_cache_alloc+0x5b/0x310 [ 568.951518] ptlock_alloc+0x1d/0x70 [ 568.952177] pte_alloc_one+0x68/0x1a0 [ 568.952870] __pte_alloc+0x1d/0x330 [ 568.953550] copy_page_range+0x1b62/0x3810 [ 568.954328] ? lock_chain_count+0x20/0x20 [ 568.955108] ? up_write+0x191/0x550 [ 568.955778] ? vm_iomap_memory+0x190/0x190 [ 568.956560] ? downgrade_write+0x3a0/0x3a0 [ 568.957346] ? anon_vma_interval_tree_insert+0x277/0x450 [ 568.958366] ? __vma_link_rb+0x540/0x700 [ 568.959116] copy_process+0x7658/0x78b0 [ 568.959863] ? __cleanup_sighand+0xb0/0xb0 [ 568.960663] ? lock_acquire+0x197/0x470 [ 568.961398] ? find_held_lock+0x2c/0x110 [ 568.962146] kernel_clone+0xe7/0x980 [ 568.962817] ? lock_downgrade+0x6d0/0x6d0 [ 568.963584] ? find_held_lock+0x2c/0x110 [ 568.964324] ? create_io_thread+0xf0/0xf0 [ 568.965080] ? ksys_write+0x12d/0x260 [ 568.965805] ? __mutex_unlock_slowpath+0xe1/0x600 [ 568.966702] __do_sys_fork+0x8a/0xc0 [ 568.967391] ? kernel_thread+0xf0/0xf0 [ 568.968144] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 568.969110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 568.970072] ? trace_hardirqs_on+0x5b/0x180 [ 568.970864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 568.971813] do_syscall_64+0x33/0x40 [ 568.972500] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 568.973446] RIP: 0033:0x7f2eb7a3db19 [ 568.974122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 568.977498] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 568.978895] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 568.980205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 568.981520] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 568.982825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 568.984121] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 568.986708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.988035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.989475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:21:16 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 16) 17:21:16 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 43) 17:21:16 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:16 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 13) 17:21:16 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 14) 17:21:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:21:16 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:16 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 581.417016] FAULT_INJECTION: forcing a failure. [ 581.417016] name failslab, interval 1, probability 0, space 0, times 0 [ 581.418363] CPU: 0 PID: 8130 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 581.419167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 581.420132] Call Trace: [ 581.420463] dump_stack+0x107/0x167 [ 581.420912] should_fail.cold+0x5/0xa [ 581.421371] ? __d_alloc+0x2a/0x990 [ 581.421794] should_failslab+0x5/0x20 [ 581.422244] kmem_cache_alloc+0x5b/0x310 [ 581.422717] __d_alloc+0x2a/0x990 [ 581.423125] ? mark_lock+0xf5/0x2df0 [ 581.423558] d_alloc+0x46/0x240 [ 581.423945] d_alloc_parallel+0xe9/0x1a30 [ 581.424427] ? __d_lookup+0x396/0x760 [ 581.424895] ? lock_downgrade+0x6d0/0x6d0 [ 581.425392] ? find_held_lock+0x2c/0x110 [ 581.425894] ? __d_lookup_rcu+0x6d0/0x6d0 [ 581.426378] ? __d_lookup+0x3bf/0x760 [ 581.426852] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 581.427468] lookup_open.isra.0+0x962/0x1270 [ 581.428022] ? vfs_tmpfile+0x350/0x350 [ 581.428523] path_openat+0x972/0x2770 [ 581.428998] ? path_lookupat+0x860/0x860 [ 581.429507] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 581.430119] ? lock_acquire+0x197/0x470 [ 581.430604] ? find_held_lock+0x2c/0x110 [ 581.431093] do_filp_open+0x190/0x3e0 [ 581.431533] ? may_open_dev+0xf0/0xf0 [ 581.432008] ? simple_attr_release+0x50/0x50 [ 581.432556] ? _raw_spin_unlock+0x1a/0x30 [ 581.433062] ? alloc_fd+0x2e7/0x670 [ 581.433505] do_sys_openat2+0x171/0x4d0 [ 581.433969] ? build_open_flags+0x6f0/0x6f0 [ 581.434469] ? __mutex_unlock_slowpath+0xe1/0x600 [ 581.435033] ? wait_for_completion_io+0x270/0x270 [ 581.435632] __x64_sys_openat+0x13f/0x1f0 [ 581.436121] ? __ia32_sys_open+0x1c0/0x1c0 [ 581.436614] ? ksys_write+0x1a9/0x260 [ 581.437089] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 581.437711] ? syscall_enter_from_user_mode+0x1d/0x50 [ 581.438348] do_syscall_64+0x33/0x40 [ 581.438784] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 581.439378] RIP: 0033:0x7f64f3e1ea04 [ 581.439834] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 581.441969] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 581.442846] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 581.443666] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 581.444545] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 581.445373] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 581.446190] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 581.459283] FAULT_INJECTION: forcing a failure. [ 581.459283] name failslab, interval 1, probability 0, space 0, times 0 [ 581.460589] CPU: 0 PID: 8139 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 581.461377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 581.462322] Call Trace: [ 581.462630] dump_stack+0x107/0x167 [ 581.463050] should_fail.cold+0x5/0xa [ 581.463487] ? security_inode_alloc+0x34/0x160 [ 581.464014] should_failslab+0x5/0x20 [ 581.464450] kmem_cache_alloc+0x5b/0x310 [ 581.464920] security_inode_alloc+0x34/0x160 [ 581.465431] inode_init_always+0xa4e/0xd10 [ 581.465917] ? proc_free_inode+0x20/0x20 [ 581.466383] alloc_inode+0x84/0x240 [ 581.466798] new_inode+0x23/0x250 [ 581.467203] proc_pid_make_inode+0x22/0x220 [ 581.467695] proc_pident_instantiate+0x81/0x320 [ 581.468231] proc_pident_lookup+0x1eb/0x270 [ 581.468729] __lookup_slow+0x252/0x490 [ 581.469176] ? lookup_open.isra.0+0x1270/0x1270 [ 581.469766] ? selinux_inode_permission+0x401/0x640 [ 581.470339] ? selinux_path_notify+0x4d0/0x4d0 [ 581.470897] walk_component+0x41e/0x6a0 [ 581.471360] ? handle_dots.part.0+0x15c0/0x15c0 [ 581.471930] ? security_inode_permission+0xcb/0x100 [ 581.472510] ? proc_pid_attr_read+0x2b0/0x2b0 [ 581.473067] link_path_walk.part.0+0x699/0xbf0 [ 581.473612] ? walk_component+0x6a0/0x6a0 [ 581.474095] ? percpu_counter_add_batch+0x8b/0x140 [ 581.474668] path_openat+0x25d/0x2770 [ 581.475114] ? path_lookupat+0x860/0x860 [ 581.475594] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 581.476197] ? lock_acquire+0x197/0x470 [ 581.476690] ? find_held_lock+0x2c/0x110 [ 581.477177] do_filp_open+0x190/0x3e0 [ 581.477658] ? may_open_dev+0xf0/0xf0 [ 581.478139] ? simple_attr_release+0x50/0x50 [ 581.478678] ? _raw_spin_unlock+0x1a/0x30 [ 581.479184] ? alloc_fd+0x2e7/0x670 [ 581.479636] do_sys_openat2+0x171/0x4d0 [ 581.480129] ? finish_task_switch+0x126/0x5d0 [ 581.480681] ? finish_task_switch+0xef/0x5d0 [ 581.481189] ? build_open_flags+0x6f0/0x6f0 [ 581.481720] ? __schedule+0x82c/0x1ea0 [ 581.482177] __x64_sys_openat+0x13f/0x1f0 [ 581.482687] ? __ia32_sys_open+0x1c0/0x1c0 [ 581.483193] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 581.483832] ? syscall_enter_from_user_mode+0x1d/0x50 [ 581.484427] do_syscall_64+0x33/0x40 [ 581.484887] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 581.485492] RIP: 0033:0x7fc35e22ea04 [ 581.485949] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 581.488052] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 581.488983] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 581.489857] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 581.490721] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 581.491597] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 581.492474] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 581.497142] FAULT_INJECTION: forcing a failure. [ 581.497142] name failslab, interval 1, probability 0, space 0, times 0 [ 581.499672] CPU: 1 PID: 8134 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 581.501152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 581.502941] Call Trace: [ 581.503508] dump_stack+0x107/0x167 [ 581.504294] should_fail.cold+0x5/0xa [ 581.505120] ? create_object.isra.0+0x3a/0xa30 [ 581.506109] should_failslab+0x5/0x20 [ 581.506927] kmem_cache_alloc+0x5b/0x310 [ 581.507804] create_object.isra.0+0x3a/0xa30 [ 581.508749] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 581.509851] kmem_cache_alloc+0x159/0x310 [ 581.510746] ptlock_alloc+0x1d/0x70 [ 581.511531] pte_alloc_one+0x68/0x1a0 [ 581.511701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 581.512351] __pte_alloc+0x1d/0x330 [ 581.512378] copy_page_range+0x1b62/0x3810 [ 581.512401] ? lock_chain_count+0x20/0x20 [ 581.512461] ? up_write+0x191/0x550 [ 581.512482] ? vm_iomap_memory+0x190/0x190 [ 581.512501] ? downgrade_write+0x3a0/0x3a0 [ 581.512525] ? anon_vma_interval_tree_insert+0x277/0x450 [ 581.512548] ? __vma_link_rb+0x540/0x700 [ 581.520523] copy_process+0x7658/0x78b0 [ 581.521410] ? __cleanup_sighand+0xb0/0xb0 [ 581.522335] ? lock_acquire+0x197/0x470 [ 581.523197] ? find_held_lock+0x2c/0x110 [ 581.524069] kernel_clone+0xe7/0x980 [ 581.524866] ? lock_downgrade+0x6d0/0x6d0 [ 581.525756] ? find_held_lock+0x2c/0x110 [ 581.526622] ? create_io_thread+0xf0/0xf0 [ 581.527506] ? ksys_write+0x12d/0x260 [ 581.528327] ? __mutex_unlock_slowpath+0xe1/0x600 [ 581.529370] __do_sys_fork+0x8a/0xc0 [ 581.530160] ? kernel_thread+0xf0/0xf0 [ 581.531011] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 581.532135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 581.533240] ? trace_hardirqs_on+0x5b/0x180 [ 581.534166] ? syscall_enter_from_user_mode+0x1d/0x50 [ 581.535266] do_syscall_64+0x33/0x40 [ 581.536056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 581.537146] RIP: 0033:0x7f2eb7a3db19 [ 581.537945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 581.541871] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 581.543498] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 581.545027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.545824] FAULT_INJECTION: forcing a failure. [ 581.545824] name failslab, interval 1, probability 0, space 0, times 0 [ 581.546555] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 581.546567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 581.546578] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 581.550566] CPU: 0 PID: 8135 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 581.551384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 581.552374] Call Trace: [ 581.552694] dump_stack+0x107/0x167 [ 581.553129] should_fail.cold+0x5/0xa [ 581.553592] ? create_object.isra.0+0x3a/0xa30 [ 581.554137] should_failslab+0x5/0x20 [ 581.554588] kmem_cache_alloc+0x5b/0x310 [ 581.555076] create_object.isra.0+0x3a/0xa30 [ 581.555596] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 581.556210] kmem_cache_alloc+0x159/0x310 [ 581.556707] ? find_held_lock+0x2c/0x110 [ 581.557195] ? proc_free_inode+0x20/0x20 [ 581.557684] proc_alloc_inode+0x18/0x200 [ 581.558170] ? proc_free_inode+0x20/0x20 [ 581.558645] alloc_inode+0x63/0x240 [ 581.559074] new_inode+0x23/0x250 [ 581.559492] proc_pid_make_inode+0x22/0x220 [ 581.560013] proc_pident_instantiate+0x81/0x320 [ 581.560570] proc_pident_lookup+0x1eb/0x270 [ 581.561085] __lookup_slow+0x252/0x490 [ 581.561553] ? lookup_open.isra.0+0x1270/0x1270 [ 581.562119] ? selinux_inode_permission+0x401/0x640 [ 581.562710] ? selinux_path_notify+0x4d0/0x4d0 [ 581.563254] walk_component+0x41e/0x6a0 [ 581.563720] ? handle_dots.part.0+0x15c0/0x15c0 [ 581.564279] ? security_inode_permission+0xcb/0x100 [ 581.564868] ? proc_pid_attr_read+0x2b0/0x2b0 [ 581.565418] link_path_walk.part.0+0x699/0xbf0 [ 581.565969] ? walk_component+0x6a0/0x6a0 [ 581.566462] ? percpu_counter_add_batch+0x8b/0x140 [ 581.567049] path_openat+0x25d/0x2770 [ 581.567503] ? path_lookupat+0x860/0x860 [ 581.567984] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 581.568603] ? lock_acquire+0x197/0x470 [ 581.569075] ? find_held_lock+0x2c/0x110 [ 581.569574] do_filp_open+0x190/0x3e0 [ 581.570022] ? may_open_dev+0xf0/0xf0 [ 581.570477] ? simple_attr_release+0x50/0x50 [ 581.571002] ? _raw_spin_unlock+0x1a/0x30 [ 581.571483] ? alloc_fd+0x2e7/0x670 [ 581.571914] do_sys_openat2+0x171/0x4d0 [ 581.572377] ? build_open_flags+0x6f0/0x6f0 [ 581.572876] ? __mutex_unlock_slowpath+0xe1/0x600 [ 581.573453] ? wait_for_completion_io+0x270/0x270 [ 581.574033] __x64_sys_openat+0x13f/0x1f0 [ 581.574525] ? __ia32_sys_open+0x1c0/0x1c0 [ 581.575018] ? ksys_write+0x1a9/0x260 [ 581.575476] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 581.576101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 581.576712] do_syscall_64+0x33/0x40 [ 581.577154] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 581.577776] RIP: 0033:0x7f431a77ea04 [ 581.578210] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 581.580394] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 581.581281] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 581.582139] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 581.582986] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 581.583819] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 581.584650] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 17:21:16 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 17) [ 581.664806] FAULT_INJECTION: forcing a failure. [ 581.664806] name failslab, interval 1, probability 0, space 0, times 0 [ 581.666696] FAULT_INJECTION: forcing a failure. [ 581.666696] name failslab, interval 1, probability 0, space 0, times 0 [ 581.667284] CPU: 1 PID: 8198 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 581.669948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 581.671695] Call Trace: [ 581.672260] dump_stack+0x107/0x167 [ 581.673036] should_fail.cold+0x5/0xa [ 581.673856] ? create_object.isra.0+0x3a/0xa30 [ 581.674823] should_failslab+0x5/0x20 [ 581.675631] kmem_cache_alloc+0x5b/0x310 [ 581.676501] create_object.isra.0+0x3a/0xa30 [ 581.677438] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 581.678516] kmem_cache_alloc+0x159/0x310 [ 581.679402] __d_alloc+0x2a/0x990 [ 581.680141] ? mark_lock+0xf5/0x2df0 [ 581.680934] d_alloc+0x46/0x240 [ 581.681644] d_alloc_parallel+0xe9/0x1a30 [ 581.682521] ? __d_lookup+0x396/0x760 [ 581.683328] ? lock_downgrade+0x6d0/0x6d0 [ 581.684203] ? find_held_lock+0x2c/0x110 [ 581.685066] ? __d_lookup_rcu+0x6d0/0x6d0 [ 581.685953] ? __d_lookup+0x3bf/0x760 [ 581.686765] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 581.687881] lookup_open.isra.0+0x962/0x1270 [ 581.688817] ? vfs_tmpfile+0x350/0x350 [ 581.689692] path_openat+0x972/0x2770 [ 581.690510] ? path_lookupat+0x860/0x860 [ 581.691373] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 581.692478] ? lock_acquire+0x197/0x470 [ 581.693318] ? find_held_lock+0x2c/0x110 [ 581.694205] do_filp_open+0x190/0x3e0 [ 581.695008] ? may_open_dev+0xf0/0xf0 [ 581.695829] ? simple_attr_release+0x50/0x50 [ 581.696780] ? _raw_spin_unlock+0x1a/0x30 [ 581.697665] ? alloc_fd+0x2e7/0x670 [ 581.698447] do_sys_openat2+0x171/0x4d0 [ 581.699291] ? build_open_flags+0x6f0/0x6f0 [ 581.700199] ? __mutex_unlock_slowpath+0xe1/0x600 [ 581.701230] ? wait_for_completion_io+0x270/0x270 [ 581.702271] __x64_sys_openat+0x13f/0x1f0 [ 581.703147] ? __ia32_sys_open+0x1c0/0x1c0 [ 581.704034] ? ksys_write+0x1a9/0x260 [ 581.704848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 581.705974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 581.707069] do_syscall_64+0x33/0x40 [ 581.707858] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 581.708943] RIP: 0033:0x7f64f3e1ea04 [ 581.709738] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 581.713623] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 581.715240] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 581.716753] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 581.718269] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 581.719783] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 581.721298] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 581.722849] CPU: 0 PID: 8201 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 581.723604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 581.724513] Call Trace: [ 581.724804] dump_stack+0x107/0x167 [ 581.725197] should_fail.cold+0x5/0xa [ 581.725616] ? create_object.isra.0+0x3a/0xa30 [ 581.726108] should_failslab+0x5/0x20 [ 581.726517] kmem_cache_alloc+0x5b/0x310 [ 581.726958] create_object.isra.0+0x3a/0xa30 [ 581.727428] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 581.727972] kmem_cache_alloc+0x159/0x310 [ 581.728420] security_inode_alloc+0x34/0x160 [ 581.728894] inode_init_always+0xa4e/0xd10 [ 581.729354] ? proc_free_inode+0x20/0x20 [ 581.729789] alloc_inode+0x84/0x240 [ 581.730177] new_inode+0x23/0x250 [ 581.730551] proc_pid_make_inode+0x22/0x220 [ 581.731012] proc_pident_instantiate+0x81/0x320 [ 581.731517] proc_pident_lookup+0x1eb/0x270 [ 581.731991] __lookup_slow+0x252/0x490 [ 581.732414] ? lookup_open.isra.0+0x1270/0x1270 [ 581.732933] ? selinux_inode_permission+0x401/0x640 [ 581.733472] ? selinux_path_notify+0x4d0/0x4d0 [ 581.733962] walk_component+0x41e/0x6a0 [ 581.734386] ? handle_dots.part.0+0x15c0/0x15c0 [ 581.734884] ? security_inode_permission+0xcb/0x100 [ 581.735415] ? proc_pid_attr_read+0x2b0/0x2b0 [ 581.735896] link_path_walk.part.0+0x699/0xbf0 [ 581.736388] ? walk_component+0x6a0/0x6a0 [ 581.736837] ? percpu_counter_add_batch+0x8b/0x140 [ 581.737380] path_openat+0x25d/0x2770 [ 581.737799] ? path_lookupat+0x860/0x860 [ 581.738246] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 581.738808] ? lock_acquire+0x197/0x470 [ 581.739232] ? find_held_lock+0x2c/0x110 [ 581.739673] do_filp_open+0x190/0x3e0 [ 581.740080] ? may_open_dev+0xf0/0xf0 [ 581.740497] ? simple_attr_release+0x50/0x50 [ 581.740974] ? _raw_spin_unlock+0x1a/0x30 [ 581.741422] ? alloc_fd+0x2e7/0x670 [ 581.741817] do_sys_openat2+0x171/0x4d0 [ 581.742245] ? build_open_flags+0x6f0/0x6f0 [ 581.742703] ? __mutex_unlock_slowpath+0xe1/0x600 [ 581.743219] ? wait_for_completion_io+0x270/0x270 [ 581.743738] __x64_sys_openat+0x13f/0x1f0 [ 581.744181] ? __ia32_sys_open+0x1c0/0x1c0 [ 581.744629] ? ksys_write+0x1a9/0x260 [ 581.745042] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 581.745619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 581.746180] do_syscall_64+0x33/0x40 [ 581.746585] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 581.747141] RIP: 0033:0x7fc35e22ea04 [ 581.747545] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 581.749525] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 581.750337] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 581.751099] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 581.751872] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 581.752635] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 581.753399] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 17:21:16 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 15) 17:21:16 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 14) [ 581.775009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.775806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.776787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 581.789983] FAULT_INJECTION: forcing a failure. [ 581.789983] name failslab, interval 1, probability 0, space 0, times 0 [ 581.791235] CPU: 0 PID: 8235 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 581.791976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 581.792880] Call Trace: [ 581.793174] dump_stack+0x107/0x167 [ 581.793582] should_fail.cold+0x5/0xa [ 581.793994] ? security_inode_alloc+0x34/0x160 [ 581.794491] should_failslab+0x5/0x20 [ 581.794900] kmem_cache_alloc+0x5b/0x310 [ 581.795340] security_inode_alloc+0x34/0x160 [ 581.795813] inode_init_always+0xa4e/0xd10 [ 581.796268] ? proc_free_inode+0x20/0x20 [ 581.796707] alloc_inode+0x84/0x240 [ 581.797104] new_inode+0x23/0x250 [ 581.797485] proc_pid_make_inode+0x22/0x220 [ 581.797949] proc_pident_instantiate+0x81/0x320 [ 581.798451] proc_pident_lookup+0x1eb/0x270 [ 581.798920] __lookup_slow+0x252/0x490 [ 581.799342] ? lookup_open.isra.0+0x1270/0x1270 [ 581.799862] ? selinux_inode_permission+0x401/0x640 [ 581.800399] ? selinux_path_notify+0x4d0/0x4d0 [ 581.800890] walk_component+0x41e/0x6a0 [ 581.801317] ? handle_dots.part.0+0x15c0/0x15c0 [ 581.801828] ? security_inode_permission+0xcb/0x100 [ 581.802364] ? proc_pid_attr_read+0x2b0/0x2b0 [ 581.802853] link_path_walk.part.0+0x699/0xbf0 [ 581.803349] ? walk_component+0x6a0/0x6a0 [ 581.803795] ? percpu_counter_add_batch+0x8b/0x140 [ 581.804328] path_openat+0x25d/0x2770 [ 581.804745] ? path_lookupat+0x860/0x860 [ 581.805186] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 581.805758] ? lock_acquire+0x197/0x470 [ 581.806186] ? find_held_lock+0x2c/0x110 [ 581.806633] do_filp_open+0x190/0x3e0 [ 581.807044] ? may_open_dev+0xf0/0xf0 [ 581.807462] ? simple_attr_release+0x50/0x50 [ 581.807943] ? _raw_spin_unlock+0x1a/0x30 [ 581.808388] ? alloc_fd+0x2e7/0x670 [ 581.808791] do_sys_openat2+0x171/0x4d0 [ 581.809220] ? build_open_flags+0x6f0/0x6f0 [ 581.809688] ? __mutex_unlock_slowpath+0xe1/0x600 [ 581.810208] ? wait_for_completion_io+0x270/0x270 [ 581.810734] __x64_sys_openat+0x13f/0x1f0 [ 581.811184] ? __ia32_sys_open+0x1c0/0x1c0 [ 581.811642] ? ksys_write+0x1a9/0x260 [ 581.812059] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 581.812635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 581.813191] do_syscall_64+0x33/0x40 [ 581.813601] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 581.814199] RIP: 0033:0x7f431a77ea04 [ 581.814602] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 581.816730] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 581.817563] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 581.818332] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 581.819112] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 581.819883] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 581.820654] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 17:21:16 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 15) 17:21:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 581.896133] FAULT_INJECTION: forcing a failure. [ 581.896133] name failslab, interval 1, probability 0, space 0, times 0 [ 581.897416] CPU: 0 PID: 8261 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 581.898148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 581.899108] Call Trace: [ 581.899402] dump_stack+0x107/0x167 [ 581.899796] should_fail.cold+0x5/0xa [ 581.900209] ? create_object.isra.0+0x3a/0xa30 [ 581.900747] should_failslab+0x5/0x20 [ 581.901160] kmem_cache_alloc+0x5b/0x310 [ 581.901609] create_object.isra.0+0x3a/0xa30 [ 581.902093] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 581.902692] kmem_cache_alloc+0x159/0x310 [ 581.903150] security_inode_alloc+0x34/0x160 [ 581.903664] inode_init_always+0xa4e/0xd10 [ 581.904126] ? proc_free_inode+0x20/0x20 [ 581.904603] alloc_inode+0x84/0x240 [ 581.905026] new_inode+0x23/0x250 [ 581.905440] proc_pid_make_inode+0x22/0x220 [ 581.905949] proc_pident_instantiate+0x81/0x320 [ 581.906491] proc_pident_lookup+0x1eb/0x270 [ 581.906995] __lookup_slow+0x252/0x490 [ 581.907445] ? lookup_open.isra.0+0x1270/0x1270 [ 581.907994] ? selinux_inode_permission+0x401/0x640 [ 581.908563] ? selinux_path_notify+0x4d0/0x4d0 [ 581.909086] walk_component+0x41e/0x6a0 [ 581.909551] ? handle_dots.part.0+0x15c0/0x15c0 [ 581.910087] ? security_inode_permission+0xcb/0x100 [ 581.910669] ? proc_pid_attr_read+0x2b0/0x2b0 [ 581.911186] link_path_walk.part.0+0x699/0xbf0 [ 581.911732] ? walk_component+0x6a0/0x6a0 [ 581.912222] ? percpu_counter_add_batch+0x8b/0x140 [ 581.912803] path_openat+0x25d/0x2770 [ 581.913251] ? path_lookupat+0x860/0x860 [ 581.913742] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 581.914359] ? lock_acquire+0x197/0x470 [ 581.914822] ? find_held_lock+0x2c/0x110 [ 581.915310] do_filp_open+0x190/0x3e0 [ 581.915757] ? may_open_dev+0xf0/0xf0 [ 581.916215] ? simple_attr_release+0x50/0x50 [ 581.916741] ? _raw_spin_unlock+0x1a/0x30 [ 581.917233] ? alloc_fd+0x2e7/0x670 [ 581.917670] do_sys_openat2+0x171/0x4d0 [ 581.918139] ? build_open_flags+0x6f0/0x6f0 [ 581.918645] ? __mutex_unlock_slowpath+0xe1/0x600 [ 581.919211] ? wait_for_completion_io+0x270/0x270 [ 581.919749] __x64_sys_openat+0x13f/0x1f0 [ 581.920235] ? __ia32_sys_open+0x1c0/0x1c0 [ 581.920716] ? ksys_write+0x1a9/0x260 [ 581.921156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 581.921766] ? syscall_enter_from_user_mode+0x1d/0x50 [ 581.922355] do_syscall_64+0x33/0x40 [ 581.922784] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 581.923380] RIP: 0033:0x7f431a77ea04 [ 581.923808] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 581.925931] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 581.926803] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 581.927625] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 581.928444] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 581.929262] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 581.930092] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 595.791147] FAULT_INJECTION: forcing a failure. [ 595.791147] name failslab, interval 1, probability 0, space 0, times 0 [ 595.792987] CPU: 0 PID: 8373 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 595.794053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 595.795336] Call Trace: [ 595.795745] dump_stack+0x107/0x167 [ 595.796307] should_fail.cold+0x5/0xa [ 595.796894] ? proc_alloc_inode+0x18/0x200 [ 595.797554] should_failslab+0x5/0x20 [ 595.798136] kmem_cache_alloc+0x5b/0x310 [ 595.798770] ? proc_free_inode+0x20/0x20 [ 595.799395] proc_alloc_inode+0x18/0x200 [ 595.800024] ? proc_free_inode+0x20/0x20 [ 595.800917] alloc_inode+0x63/0x240 [ 595.801489] new_inode+0x23/0x250 [ 595.802019] proc_pid_make_inode+0x22/0x220 [ 595.802687] proc_ns_instantiate+0x55/0x100 [ 595.803344] proc_ns_dir_lookup+0x210/0x2c0 [ 595.804011] lookup_open.isra.0+0x79f/0x1270 [ 595.804693] ? vfs_tmpfile+0x350/0x350 [ 595.805300] path_openat+0x972/0x2770 [ 595.805903] ? path_lookupat+0x860/0x860 [ 595.806528] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 595.807333] ? lock_acquire+0x197/0x470 [ 595.807936] ? find_held_lock+0x2c/0x110 [ 595.808565] do_filp_open+0x190/0x3e0 [ 595.809144] ? may_open_dev+0xf0/0xf0 [ 595.809740] ? simple_attr_release+0x50/0x50 [ 595.810428] ? _raw_spin_unlock+0x1a/0x30 [ 595.811065] ? alloc_fd+0x2e7/0x670 [ 595.811626] do_sys_openat2+0x171/0x4d0 [ 595.812235] ? build_open_flags+0x6f0/0x6f0 [ 595.812885] ? __mutex_unlock_slowpath+0xe1/0x600 [ 595.813622] ? wait_for_completion_io+0x270/0x270 [ 595.814369] __x64_sys_openat+0x13f/0x1f0 [ 595.815004] ? __ia32_sys_open+0x1c0/0x1c0 [ 595.815641] ? ksys_write+0x1a9/0x260 [ 595.816234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 595.817037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 595.817826] do_syscall_64+0x33/0x40 [ 595.818389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 595.819178] RIP: 0033:0x7f64f3e1ea04 [ 595.819745] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 595.822545] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 595.823712] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 595.824780] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 595.825884] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 595.826971] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 595.828047] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 17:21:30 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 16) 17:21:30 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:21:30 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:30 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:30 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 18) 17:21:30 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 44) 17:21:30 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 16) [ 595.844123] FAULT_INJECTION: forcing a failure. [ 595.844123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 595.845587] CPU: 0 PID: 8380 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 595.846679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 595.847926] Call Trace: [ 595.848252] dump_stack+0x107/0x167 [ 595.848794] should_fail.cold+0x5/0xa [ 595.849048] FAULT_INJECTION: forcing a failure. [ 595.849048] name failslab, interval 1, probability 0, space 0, times 0 [ 595.849378] __alloc_pages_nodemask+0x182/0x600 [ 595.852410] ? _raw_spin_unlock_irq+0x1f/0x30 [ 595.853081] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 595.853996] alloc_pages_current+0x187/0x280 [ 595.854675] pte_alloc_one+0x16/0x1a0 [ 595.855250] __pte_alloc+0x1d/0x330 [ 595.855805] copy_page_range+0x1b62/0x3810 [ 595.856469] ? up_write+0x191/0x550 [ 595.857017] ? vm_iomap_memory+0x190/0x190 [ 595.857661] ? downgrade_write+0x3a0/0x3a0 [ 595.858293] ? anon_vma_interval_tree_insert+0x277/0x450 [ 595.859107] ? __vma_link_rb+0x540/0x700 [ 595.859717] copy_process+0x7658/0x78b0 [ 595.860330] ? __cleanup_sighand+0xb0/0xb0 [ 595.860975] ? lock_acquire+0x197/0x470 [ 595.861575] ? find_held_lock+0x2c/0x110 [ 595.862190] kernel_clone+0xe7/0x980 [ 595.862736] ? lock_downgrade+0x6d0/0x6d0 [ 595.863346] ? find_held_lock+0x2c/0x110 [ 595.863954] ? create_io_thread+0xf0/0xf0 [ 595.864577] ? ksys_write+0x12d/0x260 [ 595.865143] ? __mutex_unlock_slowpath+0xe1/0x600 [ 595.865875] __do_sys_fork+0x8a/0xc0 [ 595.866424] ? kernel_thread+0xf0/0xf0 [ 595.867014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 595.867796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 595.868566] ? trace_hardirqs_on+0x5b/0x180 [ 595.869211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 595.869990] do_syscall_64+0x33/0x40 [ 595.870540] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 595.871301] RIP: 0033:0x7f2eb7a3db19 [ 595.871854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 595.874619] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 595.875754] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 595.876814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 595.877885] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 595.878957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 595.879791] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 595.880883] CPU: 1 PID: 8381 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 595.882332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 595.884063] Call Trace: [ 595.884617] dump_stack+0x107/0x167 [ 595.885385] should_fail.cold+0x5/0xa [ 595.886216] ? __d_alloc+0x2a/0x990 [ 595.886982] should_failslab+0x5/0x20 [ 595.887788] kmem_cache_alloc+0x5b/0x310 [ 595.888659] __d_alloc+0x2a/0x990 [ 595.889399] ? mark_lock+0xf5/0x2df0 [ 595.890200] d_alloc+0x46/0x240 [ 595.890900] d_alloc_parallel+0xe9/0x1a30 [ 595.891780] ? __d_lookup+0x396/0x760 [ 595.892587] ? lock_downgrade+0x6d0/0x6d0 [ 595.893457] ? find_held_lock+0x2c/0x110 [ 595.894336] ? __d_lookup_rcu+0x6d0/0x6d0 [ 595.895216] ? __d_lookup+0x3bf/0x760 [ 595.896028] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 595.897146] lookup_open.isra.0+0x962/0x1270 [ 595.898093] ? vfs_tmpfile+0x350/0x350 [ 595.898950] path_openat+0x972/0x2770 [ 595.899771] ? path_lookupat+0x860/0x860 [ 595.900627] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 595.901738] ? lock_acquire+0x197/0x470 [ 595.902572] ? find_held_lock+0x2c/0x110 [ 595.903444] do_filp_open+0x190/0x3e0 [ 595.904242] ? may_open_dev+0xf0/0xf0 [ 595.905052] ? simple_attr_release+0x50/0x50 [ 595.906000] ? _raw_spin_unlock+0x1a/0x30 [ 595.906873] ? alloc_fd+0x2e7/0x670 [ 595.907655] do_sys_openat2+0x171/0x4d0 [ 595.908487] ? build_open_flags+0x6f0/0x6f0 [ 595.909380] ? __mutex_unlock_slowpath+0xe1/0x600 [ 595.910399] ? wait_for_completion_io+0x270/0x270 [ 595.911426] __x64_sys_openat+0x13f/0x1f0 [ 595.912285] ? __ia32_sys_open+0x1c0/0x1c0 [ 595.913165] ? ksys_write+0x1a9/0x260 [ 595.913980] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 595.915082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 595.916171] do_syscall_64+0x33/0x40 [ 595.916958] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 595.918038] RIP: 0033:0x7fc35e22ea04 [ 595.918813] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 595.922657] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 595.924231] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 595.925731] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 595.927220] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 595.928706] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 595.930205] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 17:21:30 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 19) 17:21:30 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 595.988003] FAULT_INJECTION: forcing a failure. [ 595.988003] name failslab, interval 1, probability 0, space 0, times 0 [ 595.989289] CPU: 0 PID: 8386 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 595.990063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 595.990980] Call Trace: [ 595.991280] dump_stack+0x107/0x167 [ 595.991686] should_fail.cold+0x5/0xa [ 595.992111] ? __d_alloc+0x2a/0x990 [ 595.992513] should_failslab+0x5/0x20 [ 595.992935] kmem_cache_alloc+0x5b/0x310 [ 595.993389] __d_alloc+0x2a/0x990 [ 595.993784] ? mark_lock+0xf5/0x2df0 [ 595.994198] d_alloc+0x46/0x240 [ 595.994565] d_alloc_parallel+0xe9/0x1a30 [ 595.995025] ? __d_lookup+0x396/0x760 [ 595.995446] ? lock_downgrade+0x6d0/0x6d0 [ 595.995905] ? find_held_lock+0x2c/0x110 [ 595.996358] ? __d_lookup_rcu+0x6d0/0x6d0 [ 595.996816] ? __d_lookup+0x3bf/0x760 [ 595.997240] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 595.997830] lookup_open.isra.0+0x962/0x1270 [ 595.998319] ? vfs_tmpfile+0x350/0x350 [ 595.998769] path_openat+0x972/0x2770 [ 595.999198] ? path_lookupat+0x860/0x860 [ 595.999650] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 596.000227] ? lock_acquire+0x197/0x470 [ 596.000666] ? find_held_lock+0x2c/0x110 [ 596.001122] do_filp_open+0x190/0x3e0 [ 596.001547] ? may_open_dev+0xf0/0xf0 [ 596.001975] ? simple_attr_release+0x50/0x50 [ 596.002468] ? _raw_spin_unlock+0x1a/0x30 [ 596.002927] ? alloc_fd+0x2e7/0x670 [ 596.003337] do_sys_openat2+0x171/0x4d0 [ 596.003778] ? build_open_flags+0x6f0/0x6f0 [ 596.004254] ? __mutex_unlock_slowpath+0xe1/0x600 [ 596.004792] ? wait_for_completion_io+0x270/0x270 [ 596.005324] __x64_sys_openat+0x13f/0x1f0 [ 596.005791] ? __ia32_sys_open+0x1c0/0x1c0 [ 596.006252] ? ksys_write+0x1a9/0x260 [ 596.006674] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.007250] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.007816] do_syscall_64+0x33/0x40 [ 596.008225] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 596.008786] RIP: 0033:0x7f431a77ea04 [ 596.009195] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 596.011222] RSP: 002b:00007f4317d200b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 596.012064] RAX: ffffffffffffffda RBX: 00007f431a8df020 RCX: 00007f431a77ea04 [ 596.012845] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 596.013634] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 596.014415] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 596.015197] R13: 00007ffed9559d5f R14: 00007f4317d20300 R15: 0000000000022000 17:21:30 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 45) [ 596.054417] FAULT_INJECTION: forcing a failure. [ 596.054417] name failslab, interval 1, probability 0, space 0, times 0 [ 596.055830] CPU: 0 PID: 8457 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 596.056775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 596.057918] Call Trace: [ 596.058290] dump_stack+0x107/0x167 [ 596.058791] should_fail.cold+0x5/0xa [ 596.059310] ? create_object.isra.0+0x3a/0xa30 [ 596.059937] should_failslab+0x5/0x20 [ 596.060455] kmem_cache_alloc+0x5b/0x310 [ 596.061016] create_object.isra.0+0x3a/0xa30 [ 596.061624] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 596.062325] kmem_cache_alloc+0x159/0x310 [ 596.062899] ? proc_free_inode+0x20/0x20 [ 596.063450] proc_alloc_inode+0x18/0x200 [ 596.063998] ? proc_free_inode+0x20/0x20 [ 596.064551] alloc_inode+0x63/0x240 [ 596.065057] new_inode+0x23/0x250 [ 596.065548] proc_pid_make_inode+0x22/0x220 [ 596.066139] proc_ns_instantiate+0x55/0x100 [ 596.066735] proc_ns_dir_lookup+0x210/0x2c0 [ 596.067334] lookup_open.isra.0+0x79f/0x1270 [ 596.067940] ? vfs_tmpfile+0x350/0x350 [ 596.068487] path_openat+0x972/0x2770 [ 596.069024] ? path_lookupat+0x860/0x860 [ 596.069583] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 596.070296] ? lock_acquire+0x197/0x470 [ 596.070844] ? find_held_lock+0x2c/0x110 [ 596.071399] do_filp_open+0x190/0x3e0 [ 596.071931] ? may_open_dev+0xf0/0xf0 [ 596.072460] ? simple_attr_release+0x50/0x50 [ 596.073068] ? _raw_spin_unlock+0x1a/0x30 [ 596.073642] ? alloc_fd+0x2e7/0x670 [ 596.074145] do_sys_openat2+0x171/0x4d0 [ 596.074691] ? build_open_flags+0x6f0/0x6f0 [ 596.075288] ? __mutex_unlock_slowpath+0xe1/0x600 [ 596.075959] ? wait_for_completion_io+0x270/0x270 [ 596.076632] __x64_sys_openat+0x13f/0x1f0 [ 596.077204] ? __ia32_sys_open+0x1c0/0x1c0 [ 596.077786] ? ksys_write+0x1a9/0x260 [ 596.078312] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.079038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.079744] do_syscall_64+0x33/0x40 [ 596.080254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 596.080964] RIP: 0033:0x7f64f3e1ea04 [ 596.081480] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 596.084011] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 596.085061] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 596.086038] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 596.087031] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 596.087997] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 596.088973] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 596.096773] FAULT_INJECTION: forcing a failure. [ 596.096773] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 596.098456] CPU: 0 PID: 8458 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 596.099380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 596.100519] Call Trace: [ 596.100882] dump_stack+0x107/0x167 [ 596.101395] should_fail.cold+0x5/0xa [ 596.101921] __alloc_pages_nodemask+0x182/0x600 [ 596.102565] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 596.103388] ? find_held_lock+0x2c/0x110 [ 596.103956] ? __pmd_alloc+0x31d/0x630 [ 596.104492] ? lock_downgrade+0x6d0/0x6d0 [ 596.105065] ? do_raw_spin_lock+0x121/0x260 [ 596.105666] alloc_pages_current+0x187/0x280 [ 596.106270] pte_alloc_one+0x16/0x1a0 [ 596.106799] __pte_alloc+0x1d/0x330 [ 596.107306] copy_page_range+0x1b62/0x3810 [ 596.107895] ? lock_chain_count+0x20/0x20 [ 596.108487] ? up_write+0x191/0x550 [ 596.108997] ? vm_iomap_memory+0x190/0x190 [ 596.109585] ? downgrade_write+0x3a0/0x3a0 [ 596.110166] ? anon_vma_interval_tree_insert+0x277/0x450 [ 596.110918] ? __vma_link_rb+0x540/0x700 [ 596.111491] copy_process+0x7658/0x78b0 [ 596.112062] ? __cleanup_sighand+0xb0/0xb0 [ 596.112643] ? lock_acquire+0x197/0x470 [ 596.113195] ? find_held_lock+0x2c/0x110 [ 596.113750] kernel_clone+0xe7/0x980 [ 596.114267] ? lock_downgrade+0x6d0/0x6d0 [ 596.114835] ? find_held_lock+0x2c/0x110 [ 596.115396] ? create_io_thread+0xf0/0xf0 [ 596.115971] ? ksys_write+0x12d/0x260 [ 596.116507] ? __mutex_unlock_slowpath+0xe1/0x600 [ 596.117176] __do_sys_fork+0x8a/0xc0 [ 596.117693] ? kernel_thread+0xf0/0xf0 [ 596.118247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.118966] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.119676] ? trace_hardirqs_on+0x5b/0x180 [ 596.120269] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.120973] do_syscall_64+0x33/0x40 [ 596.121490] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 596.122199] RIP: 0033:0x7f2eb7a3db19 [ 596.122706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 596.125237] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 596.126287] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 596.127263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 596.128249] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 596.129229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 17:21:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r1}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 596.130221] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 596.164775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:21:30 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 17) 17:21:30 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 17) [ 596.218060] FAULT_INJECTION: forcing a failure. [ 596.218060] name failslab, interval 1, probability 0, space 0, times 0 [ 596.219625] CPU: 0 PID: 8497 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 596.220560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 596.221702] Call Trace: [ 596.222075] dump_stack+0x107/0x167 [ 596.222578] should_fail.cold+0x5/0xa [ 596.223104] ? create_object.isra.0+0x3a/0xa30 [ 596.223736] should_failslab+0x5/0x20 [ 596.224269] kmem_cache_alloc+0x5b/0x310 [ 596.224834] create_object.isra.0+0x3a/0xa30 [ 596.225430] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 596.226136] kmem_cache_alloc+0x159/0x310 [ 596.226700] __d_alloc+0x2a/0x990 [ 596.227109] ? mark_lock+0xf5/0x2df0 [ 596.227629] d_alloc+0x46/0x240 [ 596.228083] d_alloc_parallel+0xe9/0x1a30 [ 596.228664] ? __d_lookup+0x396/0x760 [ 596.229188] ? lock_downgrade+0x6d0/0x6d0 [ 596.229754] ? find_held_lock+0x2c/0x110 [ 596.230322] ? __d_lookup_rcu+0x6d0/0x6d0 [ 596.230896] ? __d_lookup+0x3bf/0x760 [ 596.231423] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.232138] lookup_open.isra.0+0x962/0x1270 [ 596.232745] ? vfs_tmpfile+0x350/0x350 [ 596.233300] path_openat+0x972/0x2770 [ 596.233831] ? path_lookupat+0x860/0x860 [ 596.234396] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 596.235123] ? lock_acquire+0x197/0x470 [ 596.235672] ? find_held_lock+0x2c/0x110 [ 596.236238] do_filp_open+0x190/0x3e0 [ 596.236752] ? may_open_dev+0xf0/0xf0 [ 596.237291] ? simple_attr_release+0x50/0x50 [ 596.237913] ? _raw_spin_unlock+0x1a/0x30 [ 596.238486] ? alloc_fd+0x2e7/0x670 [ 596.238989] do_sys_openat2+0x171/0x4d0 [ 596.239541] ? build_open_flags+0x6f0/0x6f0 [ 596.240128] ? __mutex_unlock_slowpath+0xe1/0x600 [ 596.240825] ? wait_for_completion_io+0x270/0x270 [ 596.241498] __x64_sys_openat+0x13f/0x1f0 [ 596.242072] ? __ia32_sys_open+0x1c0/0x1c0 [ 596.242657] ? ksys_write+0x1a9/0x260 [ 596.243187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.243909] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.244615] do_syscall_64+0x33/0x40 [ 596.245134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 596.245768] RIP: 0033:0x7fc35e22ea04 [ 596.246171] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 596.248144] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 596.248970] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 596.249743] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 596.250510] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 596.251277] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 596.252048] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 596.286559] FAULT_INJECTION: forcing a failure. [ 596.286559] name failslab, interval 1, probability 0, space 0, times 0 [ 596.287971] CPU: 0 PID: 8499 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 596.288890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 596.290064] Call Trace: [ 596.290432] dump_stack+0x107/0x167 [ 596.290931] should_fail.cold+0x5/0xa [ 596.291455] ? __d_alloc+0x2a/0x990 [ 596.291957] should_failslab+0x5/0x20 [ 596.292488] kmem_cache_alloc+0x5b/0x310 [ 596.293052] __d_alloc+0x2a/0x990 [ 596.293533] ? mark_lock+0xf5/0x2df0 [ 596.294049] d_alloc+0x46/0x240 [ 596.294509] d_alloc_parallel+0xe9/0x1a30 [ 596.295081] ? __d_lookup+0x396/0x760 [ 596.295609] ? lock_downgrade+0x6d0/0x6d0 [ 596.296189] ? find_held_lock+0x2c/0x110 [ 596.296744] ? __d_lookup_rcu+0x6d0/0x6d0 [ 596.297322] ? __d_lookup+0x3bf/0x760 [ 596.297852] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.298579] lookup_open.isra.0+0x962/0x1270 [ 596.299196] ? vfs_tmpfile+0x350/0x350 [ 596.299749] path_openat+0x972/0x2770 [ 596.300289] ? path_lookupat+0x860/0x860 [ 596.300848] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 596.301566] ? lock_acquire+0x197/0x470 [ 596.302118] ? find_held_lock+0x2c/0x110 [ 596.302684] do_filp_open+0x190/0x3e0 [ 596.303210] ? may_open_dev+0xf0/0xf0 [ 596.303736] ? simple_attr_release+0x50/0x50 [ 596.304348] ? _raw_spin_unlock+0x1a/0x30 [ 596.304912] ? alloc_fd+0x2e7/0x670 [ 596.305422] do_sys_openat2+0x171/0x4d0 [ 596.305977] ? build_open_flags+0x6f0/0x6f0 [ 596.306563] ? __mutex_unlock_slowpath+0xe1/0x600 [ 596.307224] ? wait_for_completion_io+0x270/0x270 [ 596.307887] __x64_sys_openat+0x13f/0x1f0 [ 596.308455] ? __ia32_sys_open+0x1c0/0x1c0 [ 596.309035] ? ksys_write+0x1a9/0x260 [ 596.309566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 596.310285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 596.311003] do_syscall_64+0x33/0x40 [ 596.311512] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 596.312218] RIP: 0033:0x7f431a77ea04 [ 596.312730] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 596.314919] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 596.315742] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 596.316514] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 596.317279] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 596.318050] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 596.318815] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 596.400491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.401348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.402201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:21:44 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 46) 17:21:44 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:44 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:44 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 20) 17:21:44 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 18) 17:21:44 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 18) 17:21:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r1}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:21:44 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 609.363574] FAULT_INJECTION: forcing a failure. [ 609.363574] name failslab, interval 1, probability 0, space 0, times 0 [ 609.366129] CPU: 0 PID: 8619 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 609.367613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 609.369375] Call Trace: [ 609.369948] dump_stack+0x107/0x167 [ 609.370725] should_fail.cold+0x5/0xa [ 609.371539] ? create_object.isra.0+0x3a/0xa30 [ 609.372506] should_failslab+0x5/0x20 [ 609.373296] kmem_cache_alloc+0x5b/0x310 [ 609.374166] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 609.375414] create_object.isra.0+0x3a/0xa30 [ 609.376351] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 609.377452] kmem_cache_alloc+0x159/0x310 [ 609.378325] ptlock_alloc+0x1d/0x70 [ 609.379075] pte_alloc_one+0x68/0x1a0 [ 609.379893] __pte_alloc+0x1d/0x330 [ 609.380683] copy_page_range+0x1b62/0x3810 [ 609.381627] ? up_write+0x191/0x550 [ 609.382387] ? vm_iomap_memory+0x190/0x190 [ 609.383261] ? downgrade_write+0x3a0/0x3a0 [ 609.384133] ? anon_vma_interval_tree_insert+0x277/0x450 [ 609.385274] ? __vma_link_rb+0x540/0x700 [ 609.386130] copy_process+0x7658/0x78b0 [ 609.386998] ? __cleanup_sighand+0xb0/0xb0 [ 609.387880] ? lock_acquire+0x197/0x470 [ 609.388700] ? find_held_lock+0x2c/0x110 [ 609.389536] kernel_clone+0xe7/0x980 [ 609.390301] ? lock_downgrade+0x6d0/0x6d0 [ 609.391185] ? find_held_lock+0x2c/0x110 [ 609.392020] ? create_io_thread+0xf0/0xf0 [ 609.392885] ? ksys_write+0x12d/0x260 [ 609.393692] ? __mutex_unlock_slowpath+0xe1/0x600 [ 609.394689] __do_sys_fork+0x8a/0xc0 [ 609.395444] ? kernel_thread+0xf0/0xf0 [ 609.396265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 609.397345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 609.398417] ? trace_hardirqs_on+0x5b/0x180 [ 609.399299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 609.400368] do_syscall_64+0x33/0x40 [ 609.401168] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 609.402512] RIP: 0033:0x7f2eb7a3db19 [ 609.403482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 609.408191] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 609.410145] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 609.411681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 609.413199] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 609.414862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 609.416409] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 609.431619] FAULT_INJECTION: forcing a failure. [ 609.431619] name failslab, interval 1, probability 0, space 0, times 0 [ 609.434293] CPU: 1 PID: 8621 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 609.435879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 609.437828] Call Trace: [ 609.438444] dump_stack+0x107/0x167 [ 609.438961] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 609.439284] should_fail.cold+0x5/0xa [ 609.439306] ? security_inode_alloc+0x34/0x160 [ 609.439326] should_failslab+0x5/0x20 [ 609.439346] kmem_cache_alloc+0x5b/0x310 [ 609.439373] security_inode_alloc+0x34/0x160 [ 609.443945] FAULT_INJECTION: forcing a failure. [ 609.443945] name failslab, interval 1, probability 0, space 0, times 0 [ 609.444822] inode_init_always+0xa4e/0xd10 [ 609.444841] ? proc_free_inode+0x20/0x20 [ 609.444865] alloc_inode+0x84/0x240 [ 609.450975] new_inode+0x23/0x250 [ 609.451794] proc_pid_make_inode+0x22/0x220 [ 609.452805] proc_ns_instantiate+0x55/0x100 [ 609.453797] proc_ns_dir_lookup+0x210/0x2c0 [ 609.454780] lookup_open.isra.0+0x79f/0x1270 [ 609.455779] ? vfs_tmpfile+0x350/0x350 [ 609.456691] path_openat+0x972/0x2770 [ 609.457566] ? path_lookupat+0x860/0x860 [ 609.458494] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 609.459659] ? lock_acquire+0x197/0x470 [ 609.460544] ? find_held_lock+0x2c/0x110 [ 609.461492] do_filp_open+0x190/0x3e0 [ 609.462365] ? may_open_dev+0xf0/0xf0 [ 609.463229] ? simple_attr_release+0x50/0x50 [ 609.464231] ? _raw_spin_unlock+0x1a/0x30 [ 609.465159] ? alloc_fd+0x2e7/0x670 [ 609.465997] do_sys_openat2+0x171/0x4d0 [ 609.466895] ? build_open_flags+0x6f0/0x6f0 [ 609.467858] ? __mutex_unlock_slowpath+0xe1/0x600 [ 609.468942] ? wait_for_completion_io+0x270/0x270 [ 609.470041] __x64_sys_openat+0x13f/0x1f0 [ 609.470970] ? __ia32_sys_open+0x1c0/0x1c0 [ 609.471910] ? ksys_write+0x1a9/0x260 [ 609.472770] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 609.473943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 609.475088] do_syscall_64+0x33/0x40 [ 609.475912] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 609.477049] RIP: 0033:0x7f64f3e1ea04 [ 609.477889] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 609.481975] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 609.483672] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 609.485233] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 609.486802] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 609.488364] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 609.489940] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 609.491549] CPU: 0 PID: 8626 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 609.493001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 609.494746] Call Trace: [ 609.495304] dump_stack+0x107/0x167 [ 609.496078] should_fail.cold+0x5/0xa [ 609.496905] ? proc_alloc_inode+0x18/0x200 [ 609.497819] should_failslab+0x5/0x20 [ 609.498630] kmem_cache_alloc+0x5b/0x310 [ 609.499505] ? proc_free_inode+0x20/0x20 [ 609.500360] proc_alloc_inode+0x18/0x200 [ 609.501221] ? proc_free_inode+0x20/0x20 [ 609.502093] alloc_inode+0x63/0x240 [ 609.502861] new_inode+0x23/0x250 [ 609.503593] proc_pid_make_inode+0x22/0x220 [ 609.504711] proc_ns_instantiate+0x55/0x100 [ 609.505847] proc_ns_dir_lookup+0x210/0x2c0 [ 609.506982] lookup_open.isra.0+0x79f/0x1270 [ 609.508149] ? vfs_tmpfile+0x350/0x350 [ 609.509196] path_openat+0x972/0x2770 [ 609.510194] ? path_lookupat+0x860/0x860 [ 609.511238] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 609.512510] ? lock_acquire+0x197/0x470 [ 609.513377] ? find_held_lock+0x2c/0x110 [ 609.514266] do_filp_open+0x190/0x3e0 [ 609.515190] ? may_open_dev+0xf0/0xf0 [ 609.516037] ? simple_attr_release+0x50/0x50 [ 609.517027] ? _raw_spin_unlock+0x1a/0x30 [ 609.517927] ? alloc_fd+0x2e7/0x670 [ 609.518705] FAULT_INJECTION: forcing a failure. [ 609.518705] name failslab, interval 1, probability 0, space 0, times 0 [ 609.518724] do_sys_openat2+0x171/0x4d0 [ 609.518750] ? build_open_flags+0x6f0/0x6f0 [ 609.522849] ? __mutex_unlock_slowpath+0xe1/0x600 [ 609.523880] ? wait_for_completion_io+0x270/0x270 [ 609.524904] __x64_sys_openat+0x13f/0x1f0 [ 609.525798] ? __ia32_sys_open+0x1c0/0x1c0 [ 609.526689] ? ksys_write+0x1a9/0x260 [ 609.527510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 609.528622] ? syscall_enter_from_user_mode+0x1d/0x50 [ 609.529735] do_syscall_64+0x33/0x40 [ 609.530526] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 609.531610] RIP: 0033:0x7fc35e22ea04 [ 609.532559] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 609.536479] RSP: 002b:00007fc35b7d00b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 609.538102] RAX: ffffffffffffffda RBX: 00007fc35e38f020 RCX: 00007fc35e22ea04 [ 609.539611] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 609.541116] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 609.542634] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 609.544150] R13: 00007ffd357e2a9f R14: 00007fc35b7d0300 R15: 0000000000022000 [ 609.545701] CPU: 1 PID: 8638 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 609.547401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 609.549423] Call Trace: [ 609.550092] dump_stack+0x107/0x167 [ 609.550993] should_fail.cold+0x5/0xa [ 609.551924] ? __d_alloc+0x2a/0x990 [ 609.552808] should_failslab+0x5/0x20 [ 609.553752] kmem_cache_alloc+0x5b/0x310 [ 609.554755] __d_alloc+0x2a/0x990 [ 609.555594] ? mark_lock+0xf5/0x2df0 [ 609.556516] d_alloc+0x46/0x240 [ 609.557330] d_alloc_parallel+0xe9/0x1a30 [ 609.558353] ? __d_lookup+0x396/0x760 [ 609.559270] ? lock_downgrade+0x6d0/0x6d0 [ 609.560276] ? find_held_lock+0x2c/0x110 [ 609.561266] ? __d_lookup_rcu+0x6d0/0x6d0 [ 609.562276] ? __d_lookup+0x3bf/0x760 [ 609.563205] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 609.564483] lookup_open.isra.0+0x962/0x1270 [ 609.565565] ? vfs_tmpfile+0x350/0x350 [ 609.566564] path_openat+0x972/0x2770 [ 609.567502] ? path_lookupat+0x860/0x860 [ 609.568493] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 609.569783] ? lock_acquire+0x197/0x470 [ 609.570745] ? find_held_lock+0x2c/0x110 [ 609.571724] do_filp_open+0x190/0x3e0 [ 609.572622] ? may_open_dev+0xf0/0xf0 [ 609.573559] ? simple_attr_release+0x50/0x50 [ 609.574648] ? _raw_spin_unlock+0x1a/0x30 [ 609.575637] ? alloc_fd+0x2e7/0x670 [ 609.576513] do_sys_openat2+0x171/0x4d0 [ 609.577481] ? build_open_flags+0x6f0/0x6f0 [ 609.578529] ? __mutex_unlock_slowpath+0xe1/0x600 [ 609.579692] ? wait_for_completion_io+0x270/0x270 [ 609.580858] __x64_sys_openat+0x13f/0x1f0 [ 609.581885] ? __ia32_sys_open+0x1c0/0x1c0 [ 609.582904] ? ksys_write+0x1a9/0x260 [ 609.583836] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 609.585089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 609.586311] do_syscall_64+0x33/0x40 [ 609.587207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 609.588445] RIP: 0033:0x7f431a77ea04 [ 609.589342] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 609.593774] RSP: 002b:00007f4317d200b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 609.595559] RAX: ffffffffffffffda RBX: 00007f431a8df020 RCX: 00007f431a77ea04 [ 609.597220] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 609.598899] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 609.600570] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 609.602251] R13: 00007ffed9559d5f R14: 00007f4317d20300 R15: 0000000000022000 17:21:44 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 21) [ 609.699811] FAULT_INJECTION: forcing a failure. [ 609.699811] name failslab, interval 1, probability 0, space 0, times 0 [ 609.702473] CPU: 0 PID: 8733 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 609.703939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 609.705660] Call Trace: [ 609.706218] dump_stack+0x107/0x167 [ 609.706977] should_fail.cold+0x5/0xa [ 609.707776] ? create_object.isra.0+0x3a/0xa30 [ 609.708721] should_failslab+0x5/0x20 [ 609.709505] kmem_cache_alloc+0x5b/0x310 [ 609.710364] create_object.isra.0+0x3a/0xa30 17:21:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r1}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 609.711275] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 609.712691] kmem_cache_alloc+0x159/0x310 [ 609.713558] security_inode_alloc+0x34/0x160 [ 609.714702] inode_init_always+0xa4e/0xd10 [ 609.715604] ? proc_free_inode+0x20/0x20 [ 609.716447] alloc_inode+0x84/0x240 [ 609.717214] new_inode+0x23/0x250 [ 609.717951] proc_pid_make_inode+0x22/0x220 [ 609.718874] proc_ns_instantiate+0x55/0x100 [ 609.719799] proc_ns_dir_lookup+0x210/0x2c0 [ 609.720695] lookup_open.isra.0+0x79f/0x1270 [ 609.721621] ? vfs_tmpfile+0x350/0x350 [ 609.722460] path_openat+0x972/0x2770 [ 609.723266] ? path_lookupat+0x860/0x860 [ 609.724121] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 609.725210] ? lock_acquire+0x197/0x470 [ 609.726038] ? find_held_lock+0x2c/0x110 [ 609.726897] do_filp_open+0x190/0x3e0 [ 609.727689] ? may_open_dev+0xf0/0xf0 [ 609.728492] ? simple_attr_release+0x50/0x50 [ 609.729413] ? _raw_spin_unlock+0x1a/0x30 [ 609.730290] ? alloc_fd+0x2e7/0x670 [ 609.731067] do_sys_openat2+0x171/0x4d0 [ 609.731900] ? build_open_flags+0x6f0/0x6f0 [ 609.732794] ? __mutex_unlock_slowpath+0xe1/0x600 [ 609.733800] ? wait_for_completion_io+0x270/0x270 [ 609.734813] __x64_sys_openat+0x13f/0x1f0 [ 609.735673] ? __ia32_sys_open+0x1c0/0x1c0 [ 609.736690] ? ksys_write+0x1a9/0x260 [ 609.737714] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 609.738909] ? syscall_enter_from_user_mode+0x1d/0x50 [ 609.740000] do_syscall_64+0x33/0x40 [ 609.740761] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 609.741837] RIP: 0033:0x7f64f3e1ea04 [ 609.742653] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 609.746418] RSP: 002b:00007f64f13c00b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 609.747966] RAX: ffffffffffffffda RBX: 00007f64f3f7f020 RCX: 00007f64f3e1ea04 [ 609.749416] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 609.750906] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 609.752358] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 609.753819] R13: 00007ffd98d1b0ef R14: 00007f64f13c0300 R15: 0000000000022000 17:21:44 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 19) 17:21:44 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 47) [ 609.857268] FAULT_INJECTION: forcing a failure. [ 609.857268] name failslab, interval 1, probability 0, space 0, times 0 [ 609.859938] CPU: 1 PID: 8779 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 609.861527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 609.863454] Call Trace: [ 609.864059] dump_stack+0x107/0x167 [ 609.864885] should_fail.cold+0x5/0xa [ 609.865769] ? create_object.isra.0+0x3a/0xa30 [ 609.866810] should_failslab+0x5/0x20 [ 609.867680] kmem_cache_alloc+0x5b/0x310 [ 609.868620] create_object.isra.0+0x3a/0xa30 [ 609.869633] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 609.870807] kmem_cache_alloc+0x159/0x310 [ 609.871754] ? proc_free_inode+0x20/0x20 [ 609.872684] proc_alloc_inode+0x18/0x200 [ 609.873621] ? proc_free_inode+0x20/0x20 [ 609.874549] alloc_inode+0x63/0x240 [ 609.875376] new_inode+0x23/0x250 [ 609.876169] proc_pid_make_inode+0x22/0x220 [ 609.877152] proc_ns_instantiate+0x55/0x100 [ 609.878148] proc_ns_dir_lookup+0x210/0x2c0 [ 609.879145] lookup_open.isra.0+0x79f/0x1270 [ 609.880153] ? vfs_tmpfile+0x350/0x350 [ 609.881075] path_openat+0x972/0x2770 [ 609.881966] ? path_lookupat+0x860/0x860 [ 609.882899] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 609.884095] ? lock_acquire+0x197/0x470 [ 609.884998] ? find_held_lock+0x2c/0x110 [ 609.885946] do_filp_open+0x190/0x3e0 [ 609.886824] ? may_open_dev+0xf0/0xf0 [ 609.887713] ? simple_attr_release+0x50/0x50 [ 609.888741] ? _raw_spin_unlock+0x1a/0x30 [ 609.889696] ? alloc_fd+0x2e7/0x670 [ 609.890539] do_sys_openat2+0x171/0x4d0 [ 609.891455] ? build_open_flags+0x6f0/0x6f0 [ 609.892438] ? __mutex_unlock_slowpath+0xe1/0x600 [ 609.893542] ? wait_for_completion_io+0x270/0x270 [ 609.894664] __x64_sys_openat+0x13f/0x1f0 [ 609.895610] ? __ia32_sys_open+0x1c0/0x1c0 [ 609.896569] ? ksys_write+0x1a9/0x260 [ 609.897446] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 609.898660] ? syscall_enter_from_user_mode+0x1d/0x50 [ 609.899840] do_syscall_64+0x33/0x40 [ 609.900691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 609.901869] RIP: 0033:0x7fc35e22ea04 [ 609.902720] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 609.906946] RSP: 002b:00007fc35b7d00b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 609.908684] RAX: ffffffffffffffda RBX: 00007fc35e38f020 RCX: 00007fc35e22ea04 [ 609.910319] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 609.911957] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 609.913595] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 609.915243] R13: 00007ffd357e2a9f R14: 00007fc35b7d0300 R15: 0000000000022000 [ 609.951243] FAULT_INJECTION: forcing a failure. [ 609.951243] name failslab, interval 1, probability 0, space 0, times 0 [ 609.953935] CPU: 1 PID: 8802 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 609.955499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 609.957398] Call Trace: [ 609.958037] dump_stack+0x107/0x167 [ 609.958878] should_fail.cold+0x5/0xa [ 609.959751] ? ptlock_alloc+0x1d/0x70 [ 609.960629] should_failslab+0x5/0x20 [ 609.961506] kmem_cache_alloc+0x5b/0x310 [ 609.962446] ptlock_alloc+0x1d/0x70 [ 609.963289] pte_alloc_one+0x68/0x1a0 [ 609.964164] __pte_alloc+0x1d/0x330 [ 609.964996] copy_page_range+0x1b62/0x3810 [ 609.966022] ? up_write+0x191/0x550 [ 609.966846] ? vm_iomap_memory+0x190/0x190 [ 609.967802] ? downgrade_write+0x3a0/0x3a0 [ 609.968770] ? anon_vma_interval_tree_insert+0x277/0x450 [ 609.970005] ? __vma_link_rb+0x540/0x700 [ 609.970927] copy_process+0x7658/0x78b0 [ 609.971861] ? __cleanup_sighand+0xb0/0xb0 [ 609.972841] ? lock_acquire+0x197/0x470 [ 609.973764] ? find_held_lock+0x2c/0x110 [ 609.974693] kernel_clone+0xe7/0x980 [ 609.975543] ? lock_downgrade+0x6d0/0x6d0 [ 609.976480] ? find_held_lock+0x2c/0x110 [ 609.977408] ? create_io_thread+0xf0/0xf0 [ 609.978377] ? ksys_write+0x12d/0x260 [ 609.979255] ? __mutex_unlock_slowpath+0xe1/0x600 [ 609.980354] __do_sys_fork+0x8a/0xc0 [ 609.981205] ? kernel_thread+0xf0/0xf0 [ 609.982109] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 609.983295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 609.984454] ? trace_hardirqs_on+0x5b/0x180 [ 609.985432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 609.986597] do_syscall_64+0x33/0x40 [ 609.987450] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 609.988614] RIP: 0033:0x7f2eb7a3db19 [ 609.989458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 609.993621] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 609.995323] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 609.996918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 609.998559] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 610.000170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 610.001790] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:21:44 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 22) 17:21:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() ptrace(0x10, r5) syz_open_procfs(r5, &(0x7f0000000000)='attr/keycreate\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:21:44 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 19) 17:21:44 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 20) [ 610.163129] FAULT_INJECTION: forcing a failure. [ 610.163129] name failslab, interval 1, probability 0, space 0, times 0 [ 610.165484] CPU: 0 PID: 8848 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 610.166869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.168595] Call Trace: [ 610.169137] dump_stack+0x107/0x167 [ 610.169881] should_fail.cold+0x5/0xa [ 610.170646] ? create_object.isra.0+0x3a/0xa30 [ 610.171556] should_failslab+0x5/0x20 [ 610.172313] kmem_cache_alloc+0x5b/0x310 [ 610.173131] create_object.isra.0+0x3a/0xa30 [ 610.174027] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 610.175067] kmem_cache_alloc+0x159/0x310 [ 610.175906] ? proc_free_inode+0x20/0x20 [ 610.176739] proc_alloc_inode+0x18/0x200 [ 610.177563] ? proc_free_inode+0x20/0x20 [ 610.178372] alloc_inode+0x63/0x240 [ 610.179091] new_inode+0x23/0x250 [ 610.179767] proc_pid_make_inode+0x22/0x220 [ 610.180658] proc_ns_instantiate+0x55/0x100 [ 610.181708] proc_ns_dir_lookup+0x210/0x2c0 [ 610.182579] lookup_open.isra.0+0x79f/0x1270 [ 610.183631] ? vfs_tmpfile+0x350/0x350 [ 610.184480] path_openat+0x972/0x2770 [ 610.185385] ? path_lookupat+0x860/0x860 [ 610.186198] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 610.187450] ? lock_acquire+0x197/0x470 [ 610.188251] ? find_held_lock+0x2c/0x110 [ 610.189213] do_filp_open+0x190/0x3e0 [ 610.189820] FAULT_INJECTION: forcing a failure. [ 610.189820] name failslab, interval 1, probability 0, space 0, times 0 [ 610.190004] ? may_open_dev+0xf0/0xf0 [ 610.190036] ? simple_attr_release+0x50/0x50 [ 610.190065] ? _raw_spin_unlock+0x1a/0x30 [ 610.194944] ? alloc_fd+0x2e7/0x670 [ 610.195657] do_sys_openat2+0x171/0x4d0 [ 610.196429] ? build_open_flags+0x6f0/0x6f0 [ 610.197259] ? __mutex_unlock_slowpath+0xe1/0x600 [ 610.198177] ? wait_for_completion_io+0x270/0x270 [ 610.199100] __x64_sys_openat+0x13f/0x1f0 [ 610.199900] ? __ia32_sys_open+0x1c0/0x1c0 [ 610.200689] ? ksys_write+0x1a9/0x260 [ 610.201442] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 610.202450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 610.203459] do_syscall_64+0x33/0x40 [ 610.204167] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 610.205176] RIP: 0033:0x7f431a77ea04 [ 610.205889] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 610.209357] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 610.210794] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 610.212154] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 610.213511] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 610.214851] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 610.216203] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 610.217585] CPU: 1 PID: 8850 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 610.219188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.221074] Call Trace: [ 610.221178] FAULT_INJECTION: forcing a failure. [ 610.221178] name failslab, interval 1, probability 0, space 0, times 0 [ 610.221685] dump_stack+0x107/0x167 [ 610.221717] should_fail.cold+0x5/0xa [ 610.225452] ? alloc_inode+0x171/0x240 [ 610.226353] should_failslab+0x5/0x20 [ 610.227230] kmem_cache_alloc+0x5b/0x310 [ 610.228178] alloc_inode+0x171/0x240 [ 610.229024] new_inode_pseudo+0x14/0xe0 [ 610.229933] __ns_get_path+0x120/0x7e0 [ 610.230820] ns_get_path+0x3d/0xa0 [ 610.231631] proc_ns_get_link+0x10a/0x210 [ 610.232575] ? proc_ns_readlink+0x280/0x280 [ 610.233560] ? proc_ns_readlink+0x280/0x280 [ 610.234553] step_into+0x16f1/0x1ce0 [ 610.235399] ? lookup_fast+0x6e0/0x6e0 [ 610.236282] ? _down_write_nest_lock+0x160/0x160 [ 610.237362] path_openat+0x499/0x2770 [ 610.238244] ? path_lookupat+0x860/0x860 [ 610.239165] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 610.240352] ? lock_acquire+0x197/0x470 [ 610.241246] ? find_held_lock+0x2c/0x110 [ 610.242187] do_filp_open+0x190/0x3e0 [ 610.243050] ? may_open_dev+0xf0/0xf0 [ 610.243932] ? _raw_spin_unlock+0x1a/0x30 [ 610.244867] ? alloc_fd+0x2e7/0x670 [ 610.245709] do_sys_openat2+0x171/0x4d0 [ 610.246613] ? build_open_flags+0x6f0/0x6f0 [ 610.247581] ? __mutex_unlock_slowpath+0xe1/0x600 [ 610.248680] ? wait_for_completion_io+0x270/0x270 [ 610.249780] __x64_sys_openat+0x13f/0x1f0 [ 610.250718] ? __ia32_sys_open+0x1c0/0x1c0 [ 610.251667] ? ksys_write+0x1a9/0x260 [ 610.252541] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 610.253734] ? syscall_enter_from_user_mode+0x1d/0x50 [ 610.254915] do_syscall_64+0x33/0x40 [ 610.255761] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 610.256932] RIP: 0033:0x7f64f3e1ea04 [ 610.257782] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 610.261973] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 610.263704] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 610.265324] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 610.266956] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 610.268574] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 610.270205] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 610.271856] CPU: 0 PID: 8849 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 610.273107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.274613] Call Trace: [ 610.275099] dump_stack+0x107/0x167 [ 610.275758] should_fail.cold+0x5/0xa [ 610.276444] ? security_inode_alloc+0x34/0x160 [ 610.277275] should_failslab+0x5/0x20 [ 610.277980] kmem_cache_alloc+0x5b/0x310 [ 610.278730] security_inode_alloc+0x34/0x160 [ 610.279528] inode_init_always+0xa4e/0xd10 [ 610.280293] ? proc_free_inode+0x20/0x20 [ 610.281060] alloc_inode+0x84/0x240 [ 610.281735] new_inode+0x23/0x250 [ 610.282375] proc_pid_make_inode+0x22/0x220 [ 610.283159] proc_ns_instantiate+0x55/0x100 [ 610.283940] proc_ns_dir_lookup+0x210/0x2c0 [ 610.284738] lookup_open.isra.0+0x79f/0x1270 [ 610.285564] ? vfs_tmpfile+0x350/0x350 [ 610.286309] path_openat+0x972/0x2770 [ 610.287018] ? path_lookupat+0x860/0x860 [ 610.287762] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 610.288703] ? lock_acquire+0x197/0x470 [ 610.289591] ? find_held_lock+0x2c/0x110 [ 610.290396] do_filp_open+0x190/0x3e0 [ 610.291084] ? may_open_dev+0xf0/0xf0 [ 610.291772] ? simple_attr_release+0x50/0x50 [ 610.292575] ? _raw_spin_unlock+0x1a/0x30 [ 610.293318] ? alloc_fd+0x2e7/0x670 [ 610.293991] do_sys_openat2+0x171/0x4d0 [ 610.294712] ? build_open_flags+0x6f0/0x6f0 [ 610.295485] ? __mutex_unlock_slowpath+0xe1/0x600 [ 610.296351] ? wait_for_completion_io+0x270/0x270 [ 610.297219] __x64_sys_openat+0x13f/0x1f0 [ 610.298144] ? __ia32_sys_open+0x1c0/0x1c0 [ 610.298899] ? ksys_write+0x1a9/0x260 [ 610.299592] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 610.300519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 610.301443] do_syscall_64+0x33/0x40 [ 610.302132] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 610.303040] RIP: 0033:0x7fc35e22ea04 [ 610.303714] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 610.306990] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 610.308338] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 610.309617] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 610.310866] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 610.312129] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 610.313382] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 610.335012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 17:21:45 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:45 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 20) 17:21:45 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:45 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:45 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 21) [ 610.443114] FAULT_INJECTION: forcing a failure. [ 610.443114] name failslab, interval 1, probability 0, space 0, times 0 [ 610.445406] CPU: 1 PID: 8932 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 610.446778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.448421] Call Trace: [ 610.448956] dump_stack+0x107/0x167 [ 610.449693] should_fail.cold+0x5/0xa [ 610.450453] ? security_inode_alloc+0x34/0x160 [ 610.451359] should_failslab+0x5/0x20 [ 610.452112] kmem_cache_alloc+0x5b/0x310 [ 610.452922] security_inode_alloc+0x34/0x160 [ 610.453795] inode_init_always+0xa4e/0xd10 [ 610.454632] ? proc_free_inode+0x20/0x20 [ 610.455438] alloc_inode+0x84/0x240 [ 610.456154] new_inode+0x23/0x250 [ 610.456836] proc_pid_make_inode+0x22/0x220 [ 610.457694] proc_ns_instantiate+0x55/0x100 [ 610.458545] proc_ns_dir_lookup+0x210/0x2c0 [ 610.459301] FAULT_INJECTION: forcing a failure. [ 610.459301] name failslab, interval 1, probability 0, space 0, times 0 [ 610.459417] lookup_open.isra.0+0x79f/0x1270 [ 610.462003] ? vfs_tmpfile+0x350/0x350 [ 610.462798] path_openat+0x972/0x2770 [ 610.463565] ? path_lookupat+0x860/0x860 [ 610.464373] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 610.465404] ? lock_acquire+0x197/0x470 [ 610.466200] ? find_held_lock+0x2c/0x110 [ 610.467005] do_filp_open+0x190/0x3e0 [ 610.467760] ? may_open_dev+0xf0/0xf0 [ 610.468524] ? simple_attr_release+0x50/0x50 [ 610.469393] ? _raw_spin_unlock+0x1a/0x30 [ 610.470220] ? alloc_fd+0x2e7/0x670 [ 610.470951] do_sys_openat2+0x171/0x4d0 [ 610.471735] ? build_open_flags+0x6f0/0x6f0 [ 610.472586] ? __mutex_unlock_slowpath+0xe1/0x600 [ 610.473540] ? wait_for_completion_io+0x270/0x270 [ 610.474510] __x64_sys_openat+0x13f/0x1f0 [ 610.475331] ? __ia32_sys_open+0x1c0/0x1c0 [ 610.476158] ? ksys_write+0x1a9/0x260 [ 610.476915] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 610.477960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 610.478981] do_syscall_64+0x33/0x40 [ 610.479715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 610.480726] RIP: 0033:0x7f431a77ea04 [ 610.481462] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 610.485092] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 610.486605] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 610.488023] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 610.489427] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 610.490842] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 610.492246] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 610.493700] CPU: 0 PID: 8940 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 610.494774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.496041] Call Trace: [ 610.496447] dump_stack+0x107/0x167 17:21:45 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 48) [ 610.497013] should_fail.cold+0x5/0xa [ 610.497820] ? create_object.isra.0+0x3a/0xa30 [ 610.498527] should_failslab+0x5/0x20 [ 610.499114] kmem_cache_alloc+0x5b/0x310 [ 610.499730] create_object.isra.0+0x3a/0xa30 [ 610.500397] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 610.501174] kmem_cache_alloc+0x159/0x310 [ 610.501812] security_inode_alloc+0x34/0x160 [ 610.502504] inode_init_always+0xa4e/0xd10 [ 610.503159] ? proc_free_inode+0x20/0x20 [ 610.503775] alloc_inode+0x84/0x240 [ 610.504323] new_inode+0x23/0x250 [ 610.504839] proc_pid_make_inode+0x22/0x220 [ 610.505488] proc_ns_instantiate+0x55/0x100 [ 610.506169] proc_ns_dir_lookup+0x210/0x2c0 [ 610.506814] lookup_open.isra.0+0x79f/0x1270 [ 610.507482] ? vfs_tmpfile+0x350/0x350 [ 610.508098] path_openat+0x972/0x2770 [ 610.508673] ? path_lookupat+0x860/0x860 [ 610.509297] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 610.510107] ? lock_acquire+0x197/0x470 [ 610.510695] ? find_held_lock+0x2c/0x110 [ 610.511324] do_filp_open+0x190/0x3e0 [ 610.511900] ? may_open_dev+0xf0/0xf0 [ 610.512476] ? simple_attr_release+0x50/0x50 [ 610.513161] ? _raw_spin_unlock+0x1a/0x30 [ 610.513782] ? alloc_fd+0x2e7/0x670 [ 610.514348] do_sys_openat2+0x171/0x4d0 [ 610.514960] ? build_open_flags+0x6f0/0x6f0 [ 610.515597] ? __mutex_unlock_slowpath+0xe1/0x600 [ 610.516331] ? wait_for_completion_io+0x270/0x270 [ 610.517071] __x64_sys_openat+0x13f/0x1f0 [ 610.517698] ? __ia32_sys_open+0x1c0/0x1c0 [ 610.518335] ? ksys_write+0x1a9/0x260 [ 610.518917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 610.519686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 610.520461] do_syscall_64+0x33/0x40 [ 610.521026] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 610.521785] RIP: 0033:0x7fc35e22ea04 [ 610.522358] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 610.525103] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 610.526265] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 610.527344] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 610.528421] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 610.529501] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 610.530622] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 610.563214] FAULT_INJECTION: forcing a failure. [ 610.563214] name failslab, interval 1, probability 0, space 0, times 0 [ 610.564884] CPU: 0 PID: 8963 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 610.565878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 610.567092] Call Trace: [ 610.567476] dump_stack+0x107/0x167 [ 610.568016] should_fail.cold+0x5/0xa [ 610.568571] ? create_object.isra.0+0x3a/0xa30 [ 610.569256] should_failslab+0x5/0x20 [ 610.569828] kmem_cache_alloc+0x5b/0x310 [ 610.570449] create_object.isra.0+0x3a/0xa30 [ 610.571096] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 610.571827] kmem_cache_alloc+0x159/0x310 [ 610.572448] vm_area_dup+0x78/0x290 [ 610.573001] ? _cond_resched+0x10/0x30 [ 610.573555] ? copy_page_range+0x24e9/0x3810 [ 610.574234] ? vm_area_alloc+0x110/0x110 [ 610.574819] ? up_write+0x191/0x550 [ 610.575359] ? vm_iomap_memory+0x190/0x190 [ 610.575983] ? downgrade_write+0x3a0/0x3a0 [ 610.576600] ? anon_vma_interval_tree_insert+0x277/0x450 [ 610.577409] ? __vma_link_rb+0x540/0x700 [ 610.578034] copy_process+0x298b/0x78b0 [ 610.578621] ? __cleanup_sighand+0xb0/0xb0 [ 610.579257] ? lock_acquire+0x197/0x470 [ 610.579828] ? find_held_lock+0x2c/0x110 [ 610.580414] kernel_clone+0xe7/0x980 [ 610.580961] ? lock_downgrade+0x6d0/0x6d0 [ 610.581550] ? find_held_lock+0x2c/0x110 [ 610.582175] ? create_io_thread+0xf0/0xf0 [ 610.582785] ? ksys_write+0x12d/0x260 [ 610.583353] ? __mutex_unlock_slowpath+0xe1/0x600 [ 610.584076] __do_sys_fork+0x8a/0xc0 [ 610.584611] ? kernel_thread+0xf0/0xf0 [ 610.585200] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 610.586000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 610.586737] ? trace_hardirqs_on+0x5b/0x180 [ 610.587367] ? syscall_enter_from_user_mode+0x1d/0x50 [ 610.588125] do_syscall_64+0x33/0x40 [ 610.588668] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 610.589417] RIP: 0033:0x7f2eb7a3db19 [ 610.589996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 610.592652] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 610.593772] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 610.594820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 610.595855] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 610.596925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 610.597985] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 610.785065] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 610.929102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.930295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.931520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 610.950422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.951683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.952788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.954104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.955241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 610.957175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 623.940145] FAULT_INJECTION: forcing a failure. [ 623.940145] name failslab, interval 1, probability 0, space 0, times 0 [ 623.942995] CPU: 1 PID: 8980 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 623.944677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 623.946740] Call Trace: [ 623.947398] dump_stack+0x107/0x167 [ 623.948301] should_fail.cold+0x5/0xa [ 623.949240] ? alloc_inode+0x171/0x240 [ 623.950214] should_failslab+0x5/0x20 [ 623.951158] kmem_cache_alloc+0x5b/0x310 [ 623.952166] alloc_inode+0x171/0x240 [ 623.953081] new_inode_pseudo+0x14/0xe0 [ 623.954069] __ns_get_path+0x120/0x7e0 [ 623.955030] ns_get_path+0x3d/0xa0 [ 623.955919] proc_ns_get_link+0x10a/0x210 [ 623.956951] ? proc_ns_readlink+0x280/0x280 [ 623.958041] ? proc_ns_readlink+0x280/0x280 [ 623.959114] step_into+0x16f1/0x1ce0 [ 623.960417] ? lookup_fast+0x6e0/0x6e0 [ 623.960726] FAULT_INJECTION: forcing a failure. [ 623.960726] name failslab, interval 1, probability 0, space 0, times 0 [ 623.961379] ? _down_write_nest_lock+0x160/0x160 [ 623.961418] path_openat+0x499/0x2770 [ 623.964791] ? path_lookupat+0x860/0x860 [ 623.965828] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 623.967156] ? lock_acquire+0x197/0x470 [ 623.968157] ? find_held_lock+0x2c/0x110 [ 623.969198] do_filp_open+0x190/0x3e0 [ 623.970161] ? may_open_dev+0xf0/0xf0 [ 623.971149] ? _raw_spin_unlock+0x1a/0x30 [ 623.972176] ? alloc_fd+0x2e7/0x670 [ 623.973096] do_sys_openat2+0x171/0x4d0 [ 623.974121] ? build_open_flags+0x6f0/0x6f0 [ 623.975202] ? __mutex_unlock_slowpath+0xe1/0x600 [ 623.976417] ? wait_for_completion_io+0x270/0x270 [ 623.977631] __x64_sys_openat+0x13f/0x1f0 [ 623.978575] ? __ia32_sys_open+0x1c0/0x1c0 [ 623.979452] ? ksys_write+0x1a9/0x260 [ 623.980267] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 623.981357] ? syscall_enter_from_user_mode+0x1d/0x50 [ 623.982433] do_syscall_64+0x33/0x40 [ 623.983210] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 623.984270] RIP: 0033:0x7fc35e22ea04 [ 623.985035] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 623.988867] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 623.990470] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 623.991968] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 623.993449] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 623.994947] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 623.996433] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 623.997943] CPU: 0 PID: 8975 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 623.998736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 623.999680] Call Trace: [ 623.999990] dump_stack+0x107/0x167 [ 624.000405] should_fail.cold+0x5/0xa [ 624.000840] ? vm_area_dup+0x78/0x290 [ 624.001274] should_failslab+0x5/0x20 [ 624.001716] kmem_cache_alloc+0x5b/0x310 [ 624.002197] ? lock_downgrade+0x6d0/0x6d0 [ 624.002680] vm_area_dup+0x78/0x290 [ 624.003109] ? _cond_resched+0x10/0x30 [ 624.003556] ? copy_page_range+0x24e9/0x3810 [ 624.004076] ? vm_area_alloc+0x110/0x110 [ 624.004542] ? vm_iomap_memory+0x190/0x190 [ 624.005024] ? up_write+0x191/0x550 [ 624.005439] ? downgrade_write+0x3a0/0x3a0 [ 624.005943] ? down_write_killable+0x180/0x180 [ 624.006041] FAULT_INJECTION: forcing a failure. [ 624.006041] name failslab, interval 1, probability 0, space 0, times 0 [ 624.006468] ? __vma_link_rb+0x540/0x700 [ 624.009213] ? vm_stat_account+0xcd/0x170 [ 624.009688] copy_process+0x298b/0x78b0 [ 624.010165] ? __cleanup_sighand+0xb0/0xb0 [ 624.010651] ? lock_acquire+0x197/0x470 [ 624.011108] ? find_held_lock+0x2c/0x110 [ 624.011571] kernel_clone+0xe7/0x980 [ 624.011994] ? lock_downgrade+0x6d0/0x6d0 [ 624.012462] ? find_held_lock+0x2c/0x110 [ 624.012923] ? create_io_thread+0xf0/0xf0 [ 624.013394] ? ksys_write+0x12d/0x260 [ 624.013836] ? __mutex_unlock_slowpath+0xe1/0x600 [ 624.014386] __do_sys_fork+0x8a/0xc0 [ 624.014807] ? kernel_thread+0xf0/0xf0 [ 624.015257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 624.015851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.016434] ? trace_hardirqs_on+0x5b/0x180 [ 624.016924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.017506] do_syscall_64+0x33/0x40 [ 624.017939] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 624.018518] RIP: 0033:0x7f2eb7a3db19 [ 624.018940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 624.021020] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 624.021885] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 624.022684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 624.023483] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 624.024281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 624.025082] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 624.025913] CPU: 1 PID: 8978 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 624.027340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.029094] Call Trace: [ 624.029660] dump_stack+0x107/0x167 [ 624.030439] should_fail.cold+0x5/0xa [ 624.031245] ? create_object.isra.0+0x3a/0xa30 [ 624.032202] should_failslab+0x5/0x20 [ 624.033004] kmem_cache_alloc+0x5b/0x310 [ 624.033874] create_object.isra.0+0x3a/0xa30 [ 624.034798] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 624.035886] kmem_cache_alloc+0x159/0x310 [ 624.036762] alloc_inode+0x171/0x240 [ 624.037558] new_inode_pseudo+0x14/0xe0 [ 624.038396] __ns_get_path+0x120/0x7e0 [ 624.039217] ns_get_path+0x3d/0xa0 [ 624.039966] proc_ns_get_link+0x10a/0x210 [ 624.040463] FAULT_INJECTION: forcing a failure. [ 624.040463] name failslab, interval 1, probability 0, space 0, times 0 [ 624.040824] ? proc_ns_readlink+0x280/0x280 [ 624.042969] ? proc_ns_readlink+0x280/0x280 [ 624.043867] step_into+0x16f1/0x1ce0 [ 624.044646] ? lookup_fast+0x6e0/0x6e0 [ 624.045457] ? _down_write_nest_lock+0x160/0x160 [ 624.046459] path_openat+0x499/0x2770 [ 624.047257] ? path_lookupat+0x860/0x860 [ 624.048107] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 624.049198] ? lock_acquire+0x197/0x470 [ 624.050029] ? find_held_lock+0x2c/0x110 [ 624.050900] do_filp_open+0x190/0x3e0 [ 624.051694] ? may_open_dev+0xf0/0xf0 [ 624.052516] ? _raw_spin_unlock+0x1a/0x30 [ 624.053378] ? alloc_fd+0x2e7/0x670 [ 624.054155] do_sys_openat2+0x171/0x4d0 [ 624.054988] ? build_open_flags+0x6f0/0x6f0 [ 624.055882] ? __mutex_unlock_slowpath+0xe1/0x600 [ 624.056891] ? wait_for_completion_io+0x270/0x270 [ 624.057908] __x64_sys_openat+0x13f/0x1f0 [ 624.058769] ? __ia32_sys_open+0x1c0/0x1c0 [ 624.059646] ? ksys_write+0x1a9/0x260 [ 624.060456] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 624.061559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.062649] do_syscall_64+0x33/0x40 [ 624.063437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 624.064501] RIP: 0033:0x7f64f3e1ea04 [ 624.065283] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 624.069098] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 624.070708] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 624.072203] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 624.073681] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 624.075162] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 624.076636] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 624.078144] CPU: 0 PID: 8985 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 624.078917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.079831] Call Trace: [ 624.080128] dump_stack+0x107/0x167 [ 624.080533] should_fail.cold+0x5/0xa [ 624.080959] ? security_inode_alloc+0x34/0x160 [ 624.081462] should_failslab+0x5/0x20 [ 624.081891] kmem_cache_alloc+0x5b/0x310 [ 624.082342] security_inode_alloc+0x34/0x160 [ 624.082834] inode_init_always+0xa4e/0xd10 [ 624.083307] ? proc_free_inode+0x20/0x20 [ 624.083758] alloc_inode+0x84/0x240 [ 624.084159] new_inode+0x23/0x250 [ 624.084544] proc_pid_make_inode+0x22/0x220 [ 624.085022] proc_ns_instantiate+0x55/0x100 [ 624.085502] proc_ns_dir_lookup+0x210/0x2c0 [ 624.085990] lookup_open.isra.0+0x79f/0x1270 [ 624.086480] ? vfs_tmpfile+0x350/0x350 [ 624.086925] path_openat+0x972/0x2770 [ 624.087349] ? path_lookupat+0x860/0x860 [ 624.087801] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 624.088374] ? lock_acquire+0x197/0x470 [ 624.088809] ? find_held_lock+0x2c/0x110 [ 624.089262] do_filp_open+0x190/0x3e0 [ 624.089679] ? may_open_dev+0xf0/0xf0 [ 624.090112] ? simple_attr_release+0x50/0x50 [ 624.090603] ? _raw_spin_unlock+0x1a/0x30 [ 624.091058] ? alloc_fd+0x2e7/0x670 [ 624.091464] do_sys_openat2+0x171/0x4d0 [ 624.091904] ? build_open_flags+0x6f0/0x6f0 [ 624.092374] ? __mutex_unlock_slowpath+0xe1/0x600 [ 624.092904] ? wait_for_completion_io+0x270/0x270 [ 624.093437] __x64_sys_openat+0x13f/0x1f0 [ 624.093899] ? __ia32_sys_open+0x1c0/0x1c0 [ 624.094358] ? ksys_write+0x1a9/0x260 [ 624.094783] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 624.095359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.095924] do_syscall_64+0x33/0x40 [ 624.096332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 624.096892] RIP: 0033:0x7f431a77ea04 [ 624.097299] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 624.099321] RSP: 002b:00007f4317d200b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 624.100154] RAX: ffffffffffffffda RBX: 00007f431a8df020 RCX: 00007f431a77ea04 [ 624.100935] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 624.101714] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 624.102502] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 624.103281] R13: 00007ffed9559d5f R14: 00007f4317d20300 R15: 0000000000022000 17:21:58 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 23) 17:21:58 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:58 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:58 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 22) 17:21:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() ptrace(0x10, r5) syz_open_procfs(r5, &(0x7f0000000000)='attr/keycreate\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:21:58 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 49) 17:21:58 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:21:58 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 21) [ 624.131086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:21:58 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 23) [ 624.167379] FAULT_INJECTION: forcing a failure. [ 624.167379] name failslab, interval 1, probability 0, space 0, times 0 [ 624.168676] CPU: 0 PID: 8992 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 624.169405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.170303] Call Trace: [ 624.170591] dump_stack+0x107/0x167 [ 624.170981] should_fail.cold+0x5/0xa [ 624.171391] ? create_object.isra.0+0x3a/0xa30 [ 624.171882] should_failslab+0x5/0x20 [ 624.172290] kmem_cache_alloc+0x5b/0x310 [ 624.172731] create_object.isra.0+0x3a/0xa30 [ 624.173202] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 624.173753] kmem_cache_alloc+0x159/0x310 [ 624.174209] alloc_inode+0x171/0x240 [ 624.174617] new_inode_pseudo+0x14/0xe0 [ 624.175051] __ns_get_path+0x120/0x7e0 [ 624.175475] ns_get_path+0x3d/0xa0 [ 624.175867] proc_ns_get_link+0x10a/0x210 [ 624.176318] ? proc_ns_readlink+0x280/0x280 [ 624.176794] ? proc_ns_readlink+0x280/0x280 [ 624.177260] step_into+0x16f1/0x1ce0 [ 624.177669] ? lookup_fast+0x6e0/0x6e0 [ 624.178102] ? _down_write_nest_lock+0x160/0x160 [ 624.178619] path_openat+0x499/0x2770 [ 624.179030] ? path_lookupat+0x860/0x860 [ 624.179464] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 624.180023] ? lock_acquire+0x197/0x470 [ 624.180446] ? find_held_lock+0x2c/0x110 [ 624.180885] do_filp_open+0x190/0x3e0 [ 624.181289] ? may_open_dev+0xf0/0xf0 [ 624.181708] ? _raw_spin_unlock+0x1a/0x30 [ 624.182155] ? alloc_fd+0x2e7/0x670 [ 624.182550] do_sys_openat2+0x171/0x4d0 [ 624.182975] ? build_open_flags+0x6f0/0x6f0 [ 624.183432] ? __mutex_unlock_slowpath+0xe1/0x600 [ 624.183948] ? wait_for_completion_io+0x270/0x270 [ 624.184467] __x64_sys_openat+0x13f/0x1f0 [ 624.184915] ? __ia32_sys_open+0x1c0/0x1c0 [ 624.185364] ? ksys_write+0x1a9/0x260 [ 624.185778] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 624.186339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.186891] do_syscall_64+0x33/0x40 [ 624.187291] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 624.187838] RIP: 0033:0x7fc35e22ea04 [ 624.188237] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 624.190234] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 624.191068] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 624.191845] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 624.192625] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 624.193402] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 624.194176] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 17:21:58 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 24) [ 624.234492] FAULT_INJECTION: forcing a failure. [ 624.234492] name failslab, interval 1, probability 0, space 0, times 0 [ 624.236886] CPU: 1 PID: 9035 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 624.238331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.240060] Call Trace: [ 624.240621] dump_stack+0x107/0x167 [ 624.241385] should_fail.cold+0x5/0xa [ 624.242193] ? security_inode_alloc+0x34/0x160 [ 624.243145] should_failslab+0x5/0x20 [ 624.243948] kmem_cache_alloc+0x5b/0x310 [ 624.244809] security_inode_alloc+0x34/0x160 [ 624.245747] inode_init_always+0xa4e/0xd10 [ 624.246632] alloc_inode+0x84/0x240 [ 624.247394] new_inode_pseudo+0x14/0xe0 [ 624.248228] __ns_get_path+0x120/0x7e0 [ 624.249048] ns_get_path+0x3d/0xa0 [ 624.249808] proc_ns_get_link+0x10a/0x210 [ 624.250674] ? proc_ns_readlink+0x280/0x280 [ 624.251590] ? proc_ns_readlink+0x280/0x280 [ 624.252484] step_into+0x16f1/0x1ce0 [ 624.253271] ? lookup_fast+0x6e0/0x6e0 [ 624.254101] ? _down_write_nest_lock+0x160/0x160 [ 624.255108] path_openat+0x499/0x2770 [ 624.255921] ? path_lookupat+0x860/0x860 [ 624.256786] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 624.257888] ? lock_acquire+0x197/0x470 [ 624.258733] ? find_held_lock+0x2c/0x110 [ 624.259589] do_filp_open+0x190/0x3e0 [ 624.260381] ? may_open_dev+0xf0/0xf0 [ 624.261198] ? _raw_spin_unlock+0x1a/0x30 [ 624.262080] ? alloc_fd+0x2e7/0x670 [ 624.262850] do_sys_openat2+0x171/0x4d0 [ 624.263688] ? build_open_flags+0x6f0/0x6f0 [ 624.264589] ? __mutex_unlock_slowpath+0xe1/0x600 [ 624.265605] ? wait_for_completion_io+0x270/0x270 [ 624.266627] __x64_sys_openat+0x13f/0x1f0 [ 624.267492] ? __ia32_sys_open+0x1c0/0x1c0 [ 624.268372] ? ksys_write+0x1a9/0x260 [ 624.269181] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 624.270293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.271380] do_syscall_64+0x33/0x40 [ 624.272163] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 624.273239] RIP: 0033:0x7f64f3e1ea04 [ 624.274024] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 624.277896] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 624.279515] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 624.281028] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 624.282532] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 624.284019] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 624.285528] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 17:21:59 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 24) [ 624.320082] FAULT_INJECTION: forcing a failure. [ 624.320082] name failslab, interval 1, probability 0, space 0, times 0 [ 624.321346] CPU: 0 PID: 9100 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 624.322098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.323006] Call Trace: [ 624.323301] dump_stack+0x107/0x167 [ 624.323703] should_fail.cold+0x5/0xa [ 624.324123] ? security_inode_alloc+0x34/0x160 [ 624.324622] should_failslab+0x5/0x20 [ 624.325049] kmem_cache_alloc+0x5b/0x310 [ 624.325500] security_inode_alloc+0x34/0x160 [ 624.325998] inode_init_always+0xa4e/0xd10 [ 624.326468] alloc_inode+0x84/0x240 [ 624.326867] new_inode_pseudo+0x14/0xe0 [ 624.327310] __ns_get_path+0x120/0x7e0 [ 624.327739] ns_get_path+0x3d/0xa0 [ 624.328133] proc_ns_get_link+0x10a/0x210 [ 624.328585] ? proc_ns_readlink+0x280/0x280 [ 624.329063] ? proc_ns_readlink+0x280/0x280 [ 624.329532] step_into+0x16f1/0x1ce0 [ 624.329946] ? lookup_fast+0x6e0/0x6e0 [ 624.330375] ? _down_write_nest_lock+0x160/0x160 [ 624.330900] path_openat+0x499/0x2770 [ 624.331321] ? path_lookupat+0x860/0x860 [ 624.331771] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 624.332341] ? lock_acquire+0x197/0x470 [ 624.332778] ? find_held_lock+0x2c/0x110 [ 624.333226] do_filp_open+0x190/0x3e0 [ 624.333646] ? may_open_dev+0xf0/0xf0 [ 624.334083] ? _raw_spin_unlock+0x1a/0x30 [ 624.334535] ? alloc_fd+0x2e7/0x670 [ 624.334941] do_sys_openat2+0x171/0x4d0 [ 624.335379] ? build_open_flags+0x6f0/0x6f0 [ 624.335848] ? __mutex_unlock_slowpath+0xe1/0x600 [ 624.336373] ? wait_for_completion_io+0x270/0x270 [ 624.336905] __x64_sys_openat+0x13f/0x1f0 [ 624.337358] ? __ia32_sys_open+0x1c0/0x1c0 [ 624.337826] ? ksys_write+0x1a9/0x260 [ 624.338243] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 624.338822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.339390] do_syscall_64+0x33/0x40 [ 624.339799] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 624.340357] RIP: 0033:0x7fc35e22ea04 [ 624.340765] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 624.342779] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 624.343620] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 624.344401] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 624.345182] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 624.345968] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 624.346757] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 17:21:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() ptrace(0x10, r5) syz_open_procfs(r5, &(0x7f0000000000)='attr/keycreate\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 624.394506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.396017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 17:21:59 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 50) [ 624.425227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 624.441558] FAULT_INJECTION: forcing a failure. [ 624.441558] name failslab, interval 1, probability 0, space 0, times 0 [ 624.443969] CPU: 1 PID: 9106 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 624.445414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.447180] Call Trace: [ 624.447737] dump_stack+0x107/0x167 [ 624.448513] should_fail.cold+0x5/0xa [ 624.449319] ? create_object.isra.0+0x3a/0xa30 [ 624.450293] should_failslab+0x5/0x20 [ 624.451100] kmem_cache_alloc+0x5b/0x310 [ 624.451956] create_object.isra.0+0x3a/0xa30 [ 624.452889] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 624.454003] kmem_cache_alloc+0x159/0x310 [ 624.454884] vm_area_dup+0x78/0x290 [ 624.455663] ? _cond_resched+0x10/0x30 [ 624.456485] ? copy_page_range+0x24e9/0x3810 [ 624.457443] ? vm_area_alloc+0x110/0x110 [ 624.458321] ? up_write+0x191/0x550 [ 624.459093] ? vm_iomap_memory+0x190/0x190 [ 624.459987] ? downgrade_write+0x3a0/0x3a0 [ 624.460895] ? anon_vma_interval_tree_insert+0x277/0x450 [ 624.462060] ? __vma_link_rb+0x540/0x700 [ 624.462930] copy_process+0x298b/0x78b0 [ 624.463805] ? __cleanup_sighand+0xb0/0xb0 [ 624.464718] ? lock_acquire+0x197/0x470 [ 624.465552] ? find_held_lock+0x2c/0x110 [ 624.466416] kernel_clone+0xe7/0x980 [ 624.467200] ? lock_downgrade+0x6d0/0x6d0 17:21:59 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r1}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 624.468069] ? find_held_lock+0x2c/0x110 [ 624.469059] ? create_io_thread+0xf0/0xf0 [ 624.469964] ? ksys_write+0x12d/0x260 [ 624.470769] ? __mutex_unlock_slowpath+0xe1/0x600 [ 624.471779] __do_sys_fork+0x8a/0xc0 [ 624.472559] ? kernel_thread+0xf0/0xf0 [ 624.473394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 624.474493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.475558] ? trace_hardirqs_on+0x5b/0x180 [ 624.476454] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.477532] do_syscall_64+0x33/0x40 [ 624.478318] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 624.479378] RIP: 0033:0x7f2eb7a3db19 17:21:59 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 624.480155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 624.484090] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 624.485675] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 624.487170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 624.488650] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 624.490136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 624.491617] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:21:59 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 25) [ 624.530826] FAULT_INJECTION: forcing a failure. [ 624.530826] name failslab, interval 1, probability 0, space 0, times 0 [ 624.533109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 624.535040] CPU: 1 PID: 9115 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 624.536493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.538271] Call Trace: [ 624.538830] dump_stack+0x107/0x167 [ 624.539599] should_fail.cold+0x5/0xa [ 624.540405] ? create_object.isra.0+0x3a/0xa30 [ 624.541366] should_failslab+0x5/0x20 [ 624.542174] kmem_cache_alloc+0x5b/0x310 [ 624.543030] create_object.isra.0+0x3a/0xa30 [ 624.543957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 624.545019] kmem_cache_alloc+0x159/0x310 [ 624.545916] security_inode_alloc+0x34/0x160 17:21:59 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 22) [ 624.546837] inode_init_always+0xa4e/0xd10 [ 624.547896] alloc_inode+0x84/0x240 [ 624.548671] new_inode_pseudo+0x14/0xe0 [ 624.549510] __ns_get_path+0x120/0x7e0 [ 624.550350] ns_get_path+0x3d/0xa0 [ 624.551112] proc_ns_get_link+0x10a/0x210 [ 624.551996] ? proc_ns_readlink+0x280/0x280 [ 624.552906] ? proc_ns_readlink+0x280/0x280 [ 624.553816] step_into+0x16f1/0x1ce0 [ 624.554600] ? lookup_fast+0x6e0/0x6e0 17:21:59 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 624.555422] ? _down_write_nest_lock+0x160/0x160 [ 624.556524] path_openat+0x499/0x2770 [ 624.557337] ? path_lookupat+0x860/0x860 [ 624.558213] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 624.559324] ? lock_acquire+0x197/0x470 [ 624.560156] ? find_held_lock+0x2c/0x110 [ 624.561022] do_filp_open+0x190/0x3e0 [ 624.561838] ? may_open_dev+0xf0/0xf0 [ 624.562675] ? _raw_spin_unlock+0x1a/0x30 [ 624.563551] ? alloc_fd+0x2e7/0x670 [ 624.564323] do_sys_openat2+0x171/0x4d0 [ 624.565155] ? build_open_flags+0x6f0/0x6f0 [ 624.566069] ? __mutex_unlock_slowpath+0xe1/0x600 [ 624.567084] ? wait_for_completion_io+0x270/0x270 [ 624.568106] __x64_sys_openat+0x13f/0x1f0 [ 624.568979] ? __ia32_sys_open+0x1c0/0x1c0 [ 624.569896] ? ksys_write+0x1a9/0x260 [ 624.570711] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 624.571818] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.572899] do_syscall_64+0x33/0x40 [ 624.573676] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 624.574751] RIP: 0033:0x7fc35e22ea04 [ 624.575526] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 624.579448] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 624.581070] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 624.582598] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 624.584123] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 624.585647] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 624.585950] FAULT_INJECTION: forcing a failure. [ 624.585950] name failslab, interval 1, probability 0, space 0, times 0 [ 624.587150] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 624.589270] CPU: 0 PID: 9117 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 624.590015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.590904] Call Trace: [ 624.591196] dump_stack+0x107/0x167 [ 624.591590] should_fail.cold+0x5/0xa [ 624.592003] ? create_object.isra.0+0x3a/0xa30 [ 624.592498] should_failslab+0x5/0x20 [ 624.592907] kmem_cache_alloc+0x5b/0x310 [ 624.593345] create_object.isra.0+0x3a/0xa30 [ 624.593822] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 624.594369] kmem_cache_alloc+0x159/0x310 [ 624.594817] ? proc_free_inode+0x20/0x20 [ 624.595252] proc_alloc_inode+0x18/0x200 [ 624.595684] ? proc_free_inode+0x20/0x20 [ 624.596121] alloc_inode+0x63/0x240 [ 624.596510] new_inode+0x23/0x250 [ 624.596883] proc_pid_make_inode+0x22/0x220 [ 624.597347] proc_ns_instantiate+0x55/0x100 [ 624.597820] proc_ns_dir_lookup+0x210/0x2c0 [ 624.598286] lookup_open.isra.0+0x79f/0x1270 [ 624.598762] ? vfs_tmpfile+0x350/0x350 [ 624.599196] path_openat+0x972/0x2770 [ 624.599611] ? path_lookupat+0x860/0x860 [ 624.600052] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 624.600614] ? lock_acquire+0x197/0x470 [ 624.601040] ? find_held_lock+0x2c/0x110 [ 624.601480] do_filp_open+0x190/0x3e0 [ 624.601894] ? may_open_dev+0xf0/0xf0 [ 624.602309] ? simple_attr_release+0x50/0x50 [ 624.602786] ? _raw_spin_unlock+0x1a/0x30 [ 624.603230] ? alloc_fd+0x2e7/0x670 [ 624.603626] do_sys_openat2+0x171/0x4d0 [ 624.604052] ? build_open_flags+0x6f0/0x6f0 [ 624.604512] ? __mutex_unlock_slowpath+0xe1/0x600 [ 624.605029] ? wait_for_completion_io+0x270/0x270 [ 624.605550] __x64_sys_openat+0x13f/0x1f0 [ 624.606002] ? __ia32_sys_open+0x1c0/0x1c0 [ 624.606454] ? ksys_write+0x1a9/0x260 [ 624.606864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 624.607428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.607982] do_syscall_64+0x33/0x40 [ 624.608381] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 624.608929] RIP: 0033:0x7f431a77ea04 [ 624.609329] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 624.611308] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 624.612121] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 624.612882] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 624.613645] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 624.614414] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 624.615179] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 17:21:59 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 51) 17:21:59 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r1}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 624.665659] FAULT_INJECTION: forcing a failure. [ 624.665659] name failslab, interval 1, probability 0, space 0, times 0 [ 624.668072] CPU: 1 PID: 9125 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 624.669506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.671232] Call Trace: [ 624.671787] dump_stack+0x107/0x167 [ 624.672553] should_fail.cold+0x5/0xa [ 624.673348] ? vm_area_dup+0x78/0x290 [ 624.674151] should_failslab+0x5/0x20 [ 624.674948] kmem_cache_alloc+0x5b/0x310 [ 624.675807] ? lock_downgrade+0x6d0/0x6d0 [ 624.676669] vm_area_dup+0x78/0x290 [ 624.677452] ? _cond_resched+0x10/0x30 [ 624.678269] ? copy_page_range+0x24e9/0x3810 [ 624.679222] ? vm_area_alloc+0x110/0x110 [ 624.680099] ? vm_iomap_memory+0x190/0x190 [ 624.681000] ? up_write+0x191/0x550 [ 624.681784] ? downgrade_write+0x3a0/0x3a0 [ 624.682674] ? down_write_killable+0x180/0x180 [ 624.683632] ? __vma_link_rb+0x540/0x700 [ 624.684504] ? vm_stat_account+0xcd/0x170 [ 624.685383] copy_process+0x298b/0x78b0 [ 624.686262] ? __cleanup_sighand+0xb0/0xb0 [ 624.687165] ? lock_acquire+0x197/0x470 [ 624.688011] ? find_held_lock+0x2c/0x110 [ 624.688882] kernel_clone+0xe7/0x980 [ 624.689670] ? lock_downgrade+0x6d0/0x6d0 [ 624.690567] ? find_held_lock+0x2c/0x110 [ 624.691441] ? create_io_thread+0xf0/0xf0 [ 624.692324] ? ksys_write+0x12d/0x260 [ 624.693143] ? __mutex_unlock_slowpath+0xe1/0x600 [ 624.694186] __do_sys_fork+0x8a/0xc0 [ 624.694958] ? kernel_thread+0xf0/0xf0 [ 624.695797] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 624.696930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.698021] ? trace_hardirqs_on+0x5b/0x180 [ 624.698946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.700059] do_syscall_64+0x33/0x40 [ 624.700845] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 624.701941] RIP: 0033:0x7f2eb7a3db19 [ 624.702726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 624.706650] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 624.708287] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 624.709807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 624.711320] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 624.712851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 624.714364] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:21:59 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r1}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = fork() ptrace(0x10, r4) syz_open_procfs(r4, &(0x7f0000000000)='attr/keycreate\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 624.750631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.751471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.752328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:21:59 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 25) [ 624.809079] FAULT_INJECTION: forcing a failure. [ 624.809079] name failslab, interval 1, probability 0, space 0, times 0 [ 624.810330] CPU: 0 PID: 9132 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 624.811064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 624.811951] Call Trace: [ 624.812241] dump_stack+0x107/0x167 [ 624.812632] should_fail.cold+0x5/0xa [ 624.813043] ? create_object.isra.0+0x3a/0xa30 [ 624.813532] should_failslab+0x5/0x20 [ 624.813954] kmem_cache_alloc+0x5b/0x310 [ 624.814398] create_object.isra.0+0x3a/0xa30 [ 624.814869] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 624.815414] kmem_cache_alloc+0x159/0x310 [ 624.815862] security_inode_alloc+0x34/0x160 [ 624.816336] inode_init_always+0xa4e/0xd10 [ 624.816795] alloc_inode+0x84/0x240 [ 624.817186] new_inode_pseudo+0x14/0xe0 [ 624.817613] __ns_get_path+0x120/0x7e0 [ 624.818044] ns_get_path+0x3d/0xa0 [ 624.818429] proc_ns_get_link+0x10a/0x210 [ 624.818872] ? proc_ns_readlink+0x280/0x280 [ 624.819338] ? proc_ns_readlink+0x280/0x280 [ 624.819803] step_into+0x16f1/0x1ce0 [ 624.820204] ? lookup_fast+0x6e0/0x6e0 [ 624.820624] ? _down_write_nest_lock+0x160/0x160 [ 624.821140] path_openat+0x499/0x2770 [ 624.821552] ? path_lookupat+0x860/0x860 [ 624.821996] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 624.822556] ? lock_acquire+0x197/0x470 [ 624.822984] ? find_held_lock+0x2c/0x110 [ 624.823423] do_filp_open+0x190/0x3e0 [ 624.823830] ? may_open_dev+0xf0/0xf0 [ 624.824254] ? _raw_spin_unlock+0x1a/0x30 [ 624.824698] ? alloc_fd+0x2e7/0x670 [ 624.825094] do_sys_openat2+0x171/0x4d0 [ 624.825521] ? build_open_flags+0x6f0/0x6f0 [ 624.825989] ? __mutex_unlock_slowpath+0xe1/0x600 [ 624.826506] ? wait_for_completion_io+0x270/0x270 [ 624.827026] __x64_sys_openat+0x13f/0x1f0 [ 624.827474] ? __ia32_sys_open+0x1c0/0x1c0 [ 624.827929] ? ksys_write+0x1a9/0x260 [ 624.828340] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 624.828911] ? syscall_enter_from_user_mode+0x1d/0x50 [ 624.829466] do_syscall_64+0x33/0x40 [ 624.829877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 624.830426] RIP: 0033:0x7f64f3e1ea04 [ 624.830827] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 624.832809] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 624.833624] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 624.834395] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 624.835160] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 624.835922] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 624.836686] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 626.028999] Bluetooth: hci5: command 0x0406 tx timeout 17:22:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() ptrace(0x10, r5) syz_open_procfs(r5, &(0x7f0000000000)='attr/keycreate\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:22:11 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:22:11 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:22:11 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 26) 17:22:11 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 23) 17:22:11 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:22:11 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 26) 17:22:11 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 52) [ 636.414488] FAULT_INJECTION: forcing a failure. [ 636.414488] name failslab, interval 1, probability 0, space 0, times 0 [ 636.416953] CPU: 0 PID: 9148 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 636.418461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 636.420278] Call Trace: [ 636.420869] dump_stack+0x107/0x167 [ 636.421672] should_fail.cold+0x5/0xa [ 636.422523] ? create_object.isra.0+0x3a/0xa30 [ 636.423521] should_failslab+0x5/0x20 [ 636.424362] kmem_cache_alloc+0x5b/0x310 [ 636.425261] create_object.isra.0+0x3a/0xa30 [ 636.426231] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 636.427350] kmem_cache_alloc+0x159/0x310 [ 636.428265] alloc_inode+0x171/0x240 [ 636.429088] new_inode_pseudo+0x14/0xe0 [ 636.429974] __ns_get_path+0x120/0x7e0 [ 636.430834] ns_get_path+0x3d/0xa0 [ 636.431620] proc_ns_get_link+0x10a/0x210 [ 636.432532] ? proc_ns_readlink+0x280/0x280 [ 636.433489] ? proc_ns_readlink+0x280/0x280 [ 636.434442] step_into+0x16f1/0x1ce0 [ 636.435268] ? lookup_fast+0x6e0/0x6e0 [ 636.436123] ? _down_write_nest_lock+0x160/0x160 [ 636.437172] path_openat+0x499/0x2770 [ 636.438024] ? path_lookupat+0x860/0x860 [ 636.438913] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 636.440028] FAULT_INJECTION: forcing a failure. [ 636.440028] name failslab, interval 1, probability 0, space 0, times 0 [ 636.440047] ? lock_acquire+0x197/0x470 [ 636.440071] ? find_held_lock+0x2c/0x110 [ 636.444179] do_filp_open+0x190/0x3e0 [ 636.445000] ? may_open_dev+0xf0/0xf0 [ 636.445849] ? _raw_spin_unlock+0x1a/0x30 [ 636.446753] ? alloc_fd+0x2e7/0x670 [ 636.447549] do_sys_openat2+0x171/0x4d0 [ 636.448412] ? build_open_flags+0x6f0/0x6f0 [ 636.449340] ? __mutex_unlock_slowpath+0xe1/0x600 [ 636.450393] ? wait_for_completion_io+0x270/0x270 [ 636.451444] __x64_sys_openat+0x13f/0x1f0 [ 636.452338] ? __ia32_sys_open+0x1c0/0x1c0 [ 636.453245] ? ksys_write+0x1a9/0x260 [ 636.454085] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 636.455223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 636.456337] do_syscall_64+0x33/0x40 [ 636.457143] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 636.458238] RIP: 0033:0x7f431a77ea04 [ 636.459022] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 636.462970] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 636.464615] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 636.466165] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 636.467709] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 636.469250] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 636.470805] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 636.472378] CPU: 1 PID: 9144 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 636.473864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 636.475626] Call Trace: [ 636.476190] dump_stack+0x107/0x167 [ 636.477035] should_fail.cold+0x5/0xa [ 636.477937] ? __d_alloc+0x2a/0x990 [ 636.478705] should_failslab+0x5/0x20 [ 636.479722] kmem_cache_alloc+0x5b/0x310 [ 636.480633] __d_alloc+0x2a/0x990 [ 636.481503] __ns_get_path+0x300/0x7e0 [ 636.482392] ns_get_path+0x3d/0xa0 [ 636.483141] proc_ns_get_link+0x10a/0x210 [ 636.483770] FAULT_INJECTION: forcing a failure. [ 636.483770] name failslab, interval 1, probability 0, space 0, times 0 [ 636.484014] ? proc_ns_readlink+0x280/0x280 [ 636.484042] ? proc_ns_readlink+0x280/0x280 [ 636.484057] step_into+0x16f1/0x1ce0 [ 636.484083] ? lookup_fast+0x6e0/0x6e0 [ 636.489737] ? _down_write_nest_lock+0x160/0x160 [ 636.490761] path_openat+0x499/0x2770 [ 636.491573] ? path_lookupat+0x860/0x860 [ 636.492431] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 636.493533] ? lock_acquire+0x197/0x470 [ 636.494377] ? find_held_lock+0x2c/0x110 [ 636.495239] do_filp_open+0x190/0x3e0 [ 636.496035] ? may_open_dev+0xf0/0xf0 [ 636.496866] ? _raw_spin_unlock+0x1a/0x30 [ 636.497734] ? alloc_fd+0x2e7/0x670 [ 636.498519] do_sys_openat2+0x171/0x4d0 [ 636.499365] ? build_open_flags+0x6f0/0x6f0 [ 636.500270] ? __mutex_unlock_slowpath+0xe1/0x600 [ 636.501289] ? wait_for_completion_io+0x270/0x270 [ 636.502329] __x64_sys_openat+0x13f/0x1f0 [ 636.503200] ? __ia32_sys_open+0x1c0/0x1c0 [ 636.504081] ? ksys_write+0x1a9/0x260 [ 636.504893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 636.506001] ? syscall_enter_from_user_mode+0x1d/0x50 [ 636.507091] do_syscall_64+0x33/0x40 [ 636.507877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 636.508956] RIP: 0033:0x7f64f3e1ea04 [ 636.509739] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 636.513609] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 636.515224] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 636.516740] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 636.518250] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 636.519746] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 636.521259] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 636.522823] CPU: 0 PID: 9149 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 636.524283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 636.526051] Call Trace: [ 636.526618] dump_stack+0x107/0x167 [ 636.527396] should_fail.cold+0x5/0xa [ 636.528216] ? create_object.isra.0+0x3a/0xa30 [ 636.529185] should_failslab+0x5/0x20 [ 636.530012] kmem_cache_alloc+0x5b/0x310 [ 636.530293] FAULT_INJECTION: forcing a failure. [ 636.530293] name failslab, interval 1, probability 0, space 0, times 0 [ 636.530889] create_object.isra.0+0x3a/0xa30 [ 636.534165] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 636.535275] kmem_cache_alloc+0x159/0x310 [ 636.536187] vm_area_dup+0x78/0x290 [ 636.536986] ? _cond_resched+0x10/0x30 [ 636.537833] ? copy_page_range+0x24e9/0x3810 [ 636.538833] ? vm_area_alloc+0x110/0x110 [ 636.539720] ? vm_iomap_memory+0x190/0x190 [ 636.540635] ? up_write+0x191/0x550 [ 636.541428] ? downgrade_write+0x3a0/0x3a0 [ 636.542346] ? down_write_killable+0x180/0x180 [ 636.543339] ? __vma_link_rb+0x540/0x700 [ 636.544214] ? vm_stat_account+0xcd/0x170 [ 636.545107] copy_process+0x298b/0x78b0 [ 636.546009] ? __cleanup_sighand+0xb0/0xb0 [ 636.546933] ? lock_acquire+0x197/0x470 [ 636.547800] ? find_held_lock+0x2c/0x110 [ 636.548683] kernel_clone+0xe7/0x980 [ 636.549487] ? lock_downgrade+0x6d0/0x6d0 [ 636.550387] ? find_held_lock+0x2c/0x110 [ 636.551263] ? create_io_thread+0xf0/0xf0 [ 636.552155] ? ksys_write+0x12d/0x260 [ 636.552986] ? __mutex_unlock_slowpath+0xe1/0x600 [ 636.554045] __do_sys_fork+0x8a/0xc0 [ 636.554848] ? kernel_thread+0xf0/0xf0 [ 636.555707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 636.556844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 636.557964] ? trace_hardirqs_on+0x5b/0x180 [ 636.558897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 636.560012] do_syscall_64+0x33/0x40 [ 636.560818] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 636.561939] RIP: 0033:0x7f2eb7a3db19 [ 636.562741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 636.566730] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 636.568374] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 636.569925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 636.571471] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 636.573013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 636.574564] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 636.576142] CPU: 1 PID: 9151 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 636.577632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 636.579434] Call Trace: [ 636.580004] dump_stack+0x107/0x167 [ 636.580792] should_fail.cold+0x5/0xa [ 636.581632] ? __d_alloc+0x2a/0x990 [ 636.582433] should_failslab+0x5/0x20 [ 636.583257] kmem_cache_alloc+0x5b/0x310 [ 636.584144] __d_alloc+0x2a/0x990 [ 636.584900] __ns_get_path+0x300/0x7e0 [ 636.585746] ns_get_path+0x3d/0xa0 [ 636.586534] proc_ns_get_link+0x10a/0x210 [ 636.587441] ? proc_ns_readlink+0x280/0x280 [ 636.588415] ? proc_ns_readlink+0x280/0x280 [ 636.589347] step_into+0x16f1/0x1ce0 [ 636.590188] ? lookup_fast+0x6e0/0x6e0 [ 636.591033] ? _down_write_nest_lock+0x160/0x160 [ 636.592068] path_openat+0x499/0x2770 [ 636.592900] ? path_lookupat+0x860/0x860 [ 636.593799] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 636.594964] ? lock_acquire+0x197/0x470 [ 636.595834] ? find_held_lock+0x2c/0x110 [ 636.596721] do_filp_open+0x190/0x3e0 [ 636.597559] ? may_open_dev+0xf0/0xf0 [ 636.598434] ? _raw_spin_unlock+0x1a/0x30 [ 636.599354] ? alloc_fd+0x2e7/0x670 [ 636.600161] do_sys_openat2+0x171/0x4d0 [ 636.601041] ? build_open_flags+0x6f0/0x6f0 [ 636.601984] ? __mutex_unlock_slowpath+0xe1/0x600 [ 636.603029] ? wait_for_completion_io+0x270/0x270 [ 636.604083] __x64_sys_openat+0x13f/0x1f0 [ 636.604992] ? __ia32_sys_open+0x1c0/0x1c0 [ 636.605940] ? ksys_write+0x1a9/0x260 [ 636.606778] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 636.607910] ? syscall_enter_from_user_mode+0x1d/0x50 [ 636.609024] do_syscall_64+0x33/0x40 [ 636.609827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 636.610965] RIP: 0033:0x7fc35e22ea04 [ 636.611786] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 636.615818] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 636.617453] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 636.618979] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 636.620481] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 636.621999] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 636.623507] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 636.725415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 17:22:11 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 24) 17:22:11 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 27) [ 636.843418] FAULT_INJECTION: forcing a failure. [ 636.843418] name failslab, interval 1, probability 0, space 0, times 0 [ 636.846271] CPU: 1 PID: 9261 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 636.847967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 636.850020] Call Trace: [ 636.850675] dump_stack+0x107/0x167 [ 636.851587] should_fail.cold+0x5/0xa [ 636.852523] ? security_inode_alloc+0x34/0x160 [ 636.853648] should_failslab+0x5/0x20 [ 636.854595] kmem_cache_alloc+0x5b/0x310 [ 636.855600] security_inode_alloc+0x34/0x160 [ 636.856685] inode_init_always+0xa4e/0xd10 [ 636.857729] alloc_inode+0x84/0x240 [ 636.858639] new_inode_pseudo+0x14/0xe0 [ 636.859621] __ns_get_path+0x120/0x7e0 [ 636.860585] ns_get_path+0x3d/0xa0 [ 636.861466] proc_ns_get_link+0x10a/0x210 [ 636.862503] ? proc_ns_readlink+0x280/0x280 [ 636.863580] ? proc_ns_readlink+0x280/0x280 [ 636.864637] step_into+0x16f1/0x1ce0 [ 636.865560] ? lookup_fast+0x6e0/0x6e0 [ 636.866532] ? _down_write_nest_lock+0x160/0x160 [ 636.867718] path_openat+0x499/0x2770 [ 636.868670] ? path_lookupat+0x860/0x860 [ 636.869681] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 636.870981] ? lock_acquire+0x197/0x470 [ 636.871949] ? find_held_lock+0x2c/0x110 [ 636.872973] do_filp_open+0x190/0x3e0 [ 636.873903] ? may_open_dev+0xf0/0xf0 [ 636.874858] ? _raw_spin_unlock+0x1a/0x30 [ 636.875871] ? alloc_fd+0x2e7/0x670 [ 636.876774] do_sys_openat2+0x171/0x4d0 [ 636.877756] ? build_open_flags+0x6f0/0x6f0 [ 636.878807] ? __mutex_unlock_slowpath+0xe1/0x600 [ 636.879989] ? wait_for_completion_io+0x270/0x270 [ 636.881178] __x64_sys_openat+0x13f/0x1f0 [ 636.882201] ? __ia32_sys_open+0x1c0/0x1c0 [ 636.883244] ? ksys_write+0x1a9/0x260 [ 636.884179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 636.885463] ? syscall_enter_from_user_mode+0x1d/0x50 [ 636.886738] do_syscall_64+0x33/0x40 [ 636.887646] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 636.888898] RIP: 0033:0x7f431a77ea04 [ 636.889808] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 636.894345] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 636.896196] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 636.897956] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 636.899723] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 636.901464] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 636.903195] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 637.088857] FAULT_INJECTION: forcing a failure. [ 637.088857] name failslab, interval 1, probability 0, space 0, times 0 [ 637.090861] CPU: 0 PID: 9265 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 637.092054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 637.093510] Call Trace: [ 637.093988] dump_stack+0x107/0x167 [ 637.094624] should_fail.cold+0x5/0xa [ 637.095292] ? __d_alloc+0x2a/0x990 [ 637.095921] should_failslab+0x5/0x20 [ 637.096587] kmem_cache_alloc+0x5b/0x310 [ 637.097295] __d_alloc+0x2a/0x990 [ 637.097924] __ns_get_path+0x300/0x7e0 [ 637.098611] ns_get_path+0x3d/0xa0 [ 637.099242] proc_ns_get_link+0x10a/0x210 [ 637.099966] ? proc_ns_readlink+0x280/0x280 [ 637.100704] ? proc_ns_readlink+0x280/0x280 [ 637.101456] step_into+0x16f1/0x1ce0 [ 637.102113] ? lookup_fast+0x6e0/0x6e0 [ 637.102802] ? _down_write_nest_lock+0x160/0x160 [ 637.103645] path_openat+0x499/0x2770 [ 637.104317] ? path_lookupat+0x860/0x860 [ 637.105030] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 637.105956] ? lock_acquire+0x197/0x470 [ 637.106647] ? find_held_lock+0x2c/0x110 [ 637.107367] do_filp_open+0x190/0x3e0 [ 637.108038] ? may_open_dev+0xf0/0xf0 [ 637.108733] ? _raw_spin_unlock+0x1a/0x30 [ 637.109465] ? alloc_fd+0x2e7/0x670 [ 637.110121] do_sys_openat2+0x171/0x4d0 [ 637.110822] ? build_open_flags+0x6f0/0x6f0 [ 637.111568] ? __mutex_unlock_slowpath+0xe1/0x600 [ 637.112415] ? wait_for_completion_io+0x270/0x270 [ 637.113278] __x64_sys_openat+0x13f/0x1f0 [ 637.114009] ? __ia32_sys_open+0x1c0/0x1c0 [ 637.114740] ? ksys_write+0x1a9/0x260 [ 637.115409] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 637.116327] ? syscall_enter_from_user_mode+0x1d/0x50 [ 637.117232] do_syscall_64+0x33/0x40 [ 637.117887] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 637.118776] RIP: 0033:0x7fc35e22ea04 [ 637.119430] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 637.122613] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 637.123954] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 637.125197] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 637.126455] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 637.127707] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 637.128953] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 641.774007] Bluetooth: hci4: command 0x0409 tx timeout [ 643.821002] Bluetooth: hci4: command 0x041b tx timeout [ 645.868984] Bluetooth: hci4: command 0x040f tx timeout [ 646.624353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.626706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.632742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 646.692191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.694687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.697511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 647.917007] Bluetooth: hci4: command 0x0419 tx timeout 17:22:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() ptrace(0x10, r5) syz_open_procfs(r5, &(0x7f0000000000)='attr/keycreate\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:22:36 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:22:36 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 25) 17:22:36 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:22:36 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 27) 17:22:36 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 53) 17:22:36 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) pwritev2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)="e10de7241ead01197b7490afc0af1f6ccc5a5266fb6fbf96e3c4dc4d3aba4ac1612123f1978747ef044bcdc557a33d170c9d26b8ef7bc0", 0x37}, {&(0x7f0000000700)="bddbce4a6d057e5bc8290a2ccbef994e05d02895818f6525a811cc5d05de45b95c8090e63fe06128fee8025c11ca9c1ed8c4080e7ed622882bcadcbd2d56e10a949fe86e57d28a8ec8e540bd598b1bc662a7b5c1473bf2d1a065231b5229b78d87f94d2e977120fc4752a35ff7b57b51042b9380a5b0a2a82e1db0d005f87041427d01c14fb5799c66c59e373555ce88bb1c3abc81b48e86ff19", 0x9a}, {&(0x7f00000008c0)="f2564466d08f69d24b120067cd9426c2c370629cc599f998ac1112747616b5b7262d2374de1a0885ee808934da3d6e6dadb32a736d80c6da2866d8373dcf3dafddb3cd931dfae5d2155de8fe16c271dfa20091cade8b1a07ecef7ced91155e15347aeea5ecdf1e14f3428011376f731b69c531dd27bb8652955f0110e27049fe06cc0fcb35683697f97537adf1c3298c3c5c4480fe6db7444a", 0x99}], 0x3, 0x9, 0x3, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 17:22:36 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 28) [ 661.633548] FAULT_INJECTION: forcing a failure. [ 661.633548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 661.636127] CPU: 0 PID: 9738 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 661.637580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 661.639350] Call Trace: [ 661.639916] dump_stack+0x107/0x167 [ 661.640691] should_fail.cold+0x5/0xa [ 661.641504] __alloc_pages_nodemask+0x182/0x600 [ 661.642502] ? lookup_memtype+0x5b/0x200 [ 661.643367] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 661.644658] alloc_pages_current+0x187/0x280 [ 661.645593] pte_alloc_one+0x16/0x1a0 [ 661.646410] __pte_alloc+0x1d/0x330 [ 661.647186] copy_page_range+0x1b62/0x3810 [ 661.648085] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 661.649237] ? vm_iomap_memory+0x190/0x190 [ 661.650144] ? up_write+0x191/0x550 [ 661.650917] ? downgrade_write+0x3a0/0x3a0 [ 661.651809] ? down_write_killable+0x180/0x180 [ 661.652774] ? __vma_link_rb+0x540/0x700 [ 661.653640] copy_process+0x7658/0x78b0 [ 661.654529] ? __cleanup_sighand+0xb0/0xb0 [ 661.655439] ? lock_acquire+0x197/0x470 [ 661.656292] ? find_held_lock+0x2c/0x110 [ 661.657155] kernel_clone+0xe7/0x980 [ 661.657944] ? lock_downgrade+0x6d0/0x6d0 [ 661.658848] ? find_held_lock+0x2c/0x110 [ 661.659737] ? create_io_thread+0xf0/0xf0 [ 661.660652] ? ksys_write+0x12d/0x260 [ 661.661240] FAULT_INJECTION: forcing a failure. [ 661.661240] name failslab, interval 1, probability 0, space 0, times 0 [ 661.661487] ? __mutex_unlock_slowpath+0xe1/0x600 [ 661.661517] __do_sys_fork+0x8a/0xc0 [ 661.665950] ? kernel_thread+0xf0/0xf0 [ 661.666821] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 661.667963] ? syscall_enter_from_user_mode+0x1d/0x50 [ 661.669079] ? trace_hardirqs_on+0x5b/0x180 [ 661.670018] ? syscall_enter_from_user_mode+0x1d/0x50 [ 661.671147] do_syscall_64+0x33/0x40 [ 661.671961] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 661.673074] RIP: 0033:0x7f2eb7a3db19 [ 661.673880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 661.677904] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 661.679567] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 661.681122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.682678] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 661.684223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 661.685773] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 661.687374] CPU: 1 PID: 9740 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 661.689024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 661.689527] FAULT_INJECTION: forcing a failure. [ 661.689527] name failslab, interval 1, probability 0, space 0, times 0 [ 661.690966] Call Trace: [ 661.690996] dump_stack+0x107/0x167 [ 661.691024] should_fail.cold+0x5/0xa [ 661.695688] ? __d_alloc+0x2a/0x990 [ 661.696533] should_failslab+0x5/0x20 [ 661.697416] kmem_cache_alloc+0x5b/0x310 [ 661.698377] __d_alloc+0x2a/0x990 [ 661.699188] __ns_get_path+0x300/0x7e0 [ 661.700093] ns_get_path+0x3d/0xa0 [ 661.700922] proc_ns_get_link+0x10a/0x210 [ 661.701883] ? proc_ns_readlink+0x280/0x280 [ 661.702901] ? proc_ns_readlink+0x280/0x280 [ 661.703897] step_into+0x16f1/0x1ce0 [ 661.704766] ? lookup_fast+0x6e0/0x6e0 [ 661.705670] ? _down_write_nest_lock+0x160/0x160 [ 661.706789] path_openat+0x499/0x2770 [ 661.707683] ? path_lookupat+0x860/0x860 [ 661.708627] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 661.709839] ? lock_acquire+0x197/0x470 [ 661.710772] ? find_held_lock+0x2c/0x110 [ 661.711725] do_filp_open+0x190/0x3e0 [ 661.712606] ? may_open_dev+0xf0/0xf0 [ 661.713516] ? _raw_spin_unlock+0x1a/0x30 [ 661.714492] ? alloc_fd+0x2e7/0x670 [ 661.715347] do_sys_openat2+0x171/0x4d0 [ 661.716273] ? build_open_flags+0x6f0/0x6f0 [ 661.717269] ? __mutex_unlock_slowpath+0xe1/0x600 [ 661.718395] ? wait_for_completion_io+0x270/0x270 [ 661.719523] __x64_sys_openat+0x13f/0x1f0 [ 661.720484] ? __ia32_sys_open+0x1c0/0x1c0 [ 661.721458] ? ksys_write+0x1a9/0x260 [ 661.722355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 661.723573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 661.724771] do_syscall_64+0x33/0x40 [ 661.725635] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 661.726833] RIP: 0033:0x7fc35e22ea04 [ 661.727699] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 661.731978] RSP: 002b:00007fc35b7f10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 661.733741] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e22ea04 [ 661.735402] RDX: 0000000000000000 RSI: 00007fc35e2d4f82 RDI: 00000000ffffff9c [ 661.737056] RBP: 00007fc35e2d4f82 R08: 0000000000000000 R09: 0000000000000000 [ 661.738718] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 661.740369] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 661.742050] CPU: 0 PID: 9739 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 661.743582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 661.745384] Call Trace: [ 661.745959] dump_stack+0x107/0x167 [ 661.746759] should_fail.cold+0x5/0xa [ 661.747586] ? create_object.isra.0+0x3a/0xa30 [ 661.748575] should_failslab+0x5/0x20 [ 661.749399] kmem_cache_alloc+0x5b/0x310 [ 661.750291] create_object.isra.0+0x3a/0xa30 [ 661.751243] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 661.752356] kmem_cache_alloc+0x159/0x310 [ 661.753270] __d_alloc+0x2a/0x990 [ 661.754032] __ns_get_path+0x300/0x7e0 [ 661.754889] ns_get_path+0x3d/0xa0 [ 661.755675] proc_ns_get_link+0x10a/0x210 [ 661.756591] ? proc_ns_readlink+0x280/0x280 [ 661.757547] ? proc_ns_readlink+0x280/0x280 [ 661.758492] step_into+0x16f1/0x1ce0 [ 661.759308] ? lookup_fast+0x6e0/0x6e0 [ 661.760157] ? _down_write_nest_lock+0x160/0x160 [ 661.761200] path_openat+0x499/0x2770 [ 661.762036] ? path_lookupat+0x860/0x860 [ 661.762936] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 661.764081] ? lock_acquire+0x197/0x470 [ 661.764948] ? find_held_lock+0x2c/0x110 [ 661.765844] do_filp_open+0x190/0x3e0 [ 661.766677] ? may_open_dev+0xf0/0xf0 [ 661.767534] ? _raw_spin_unlock+0x1a/0x30 [ 661.768439] ? alloc_fd+0x2e7/0x670 [ 661.769246] do_sys_openat2+0x171/0x4d0 [ 661.770134] ? build_open_flags+0x6f0/0x6f0 [ 661.771079] ? __mutex_unlock_slowpath+0xe1/0x600 [ 661.772133] ? wait_for_completion_io+0x270/0x270 [ 661.773189] __x64_sys_openat+0x13f/0x1f0 [ 661.774079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 661.775900] ? __ia32_sys_open+0x1c0/0x1c0 [ 661.775914] ? ksys_write+0x1a9/0x260 [ 661.775940] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 661.775960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 661.775985] do_syscall_64+0x33/0x40 [ 661.780871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 661.781992] RIP: 0033:0x7f64f3e1ea04 [ 661.782807] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 661.786857] RSP: 002b:00007f64f13e10b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 661.788518] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e1ea04 [ 661.790082] RDX: 0000000000000000 RSI: 00007f64f3ec4f82 RDI: 00000000ffffff9c [ 661.791653] RBP: 00007f64f3ec4f82 R08: 0000000000000000 R09: 0000000000000000 [ 661.793214] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 661.794787] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 [ 661.813785] FAULT_INJECTION: forcing a failure. [ 661.813785] name failslab, interval 1, probability 0, space 0, times 0 [ 661.816696] CPU: 1 PID: 9744 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 661.818312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 661.820260] Call Trace: [ 661.820885] dump_stack+0x107/0x167 [ 661.821732] should_fail.cold+0x5/0xa [ 661.822628] ? create_object.isra.0+0x3a/0xa30 [ 661.823685] should_failslab+0x5/0x20 [ 661.824568] kmem_cache_alloc+0x5b/0x310 [ 661.825519] create_object.isra.0+0x3a/0xa30 [ 661.826543] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 661.827725] kmem_cache_alloc+0x159/0x310 [ 661.828701] security_inode_alloc+0x34/0x160 [ 661.829731] inode_init_always+0xa4e/0xd10 [ 661.830723] alloc_inode+0x84/0x240 [ 661.831580] new_inode_pseudo+0x14/0xe0 [ 661.832509] __ns_get_path+0x120/0x7e0 [ 661.833416] ns_get_path+0x3d/0xa0 [ 661.834265] proc_ns_get_link+0x10a/0x210 [ 661.835236] ? proc_ns_readlink+0x280/0x280 [ 661.836252] ? proc_ns_readlink+0x280/0x280 [ 661.837257] step_into+0x16f1/0x1ce0 [ 661.838139] ? lookup_fast+0x6e0/0x6e0 [ 661.839045] ? _down_write_nest_lock+0x160/0x160 [ 661.840174] path_openat+0x499/0x2770 [ 661.841068] ? path_lookupat+0x860/0x860 [ 661.842024] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 661.843251] ? lock_acquire+0x197/0x470 [ 661.844182] ? find_held_lock+0x2c/0x110 [ 661.845147] do_filp_open+0x190/0x3e0 [ 661.846031] ? may_open_dev+0xf0/0xf0 [ 661.846957] ? _raw_spin_unlock+0x1a/0x30 [ 661.847926] ? alloc_fd+0x2e7/0x670 [ 661.848780] do_sys_openat2+0x171/0x4d0 [ 661.849714] ? build_open_flags+0x6f0/0x6f0 [ 661.850734] ? __mutex_unlock_slowpath+0xe1/0x600 [ 661.851876] ? wait_for_completion_io+0x270/0x270 [ 661.853002] __x64_sys_openat+0x13f/0x1f0 [ 661.853964] ? __ia32_sys_open+0x1c0/0x1c0 [ 661.854947] ? ksys_write+0x1a9/0x260 [ 661.855847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 661.857085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 661.858307] do_syscall_64+0x33/0x40 [ 661.859182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 661.860379] RIP: 0033:0x7f431a77ea04 [ 661.861247] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 661.865529] RSP: 002b:00007f4317d200b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 661.867302] RAX: ffffffffffffffda RBX: 00007f431a8df020 RCX: 00007f431a77ea04 [ 661.868962] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 661.870629] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 661.872295] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 661.873966] R13: 00007ffed9559d5f R14: 00007f4317d20300 R15: 0000000000022000 17:22:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@getpolicy={0x58, 0x15, 0x1, 0x70bd27, 0x0, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x1}, [@XFRMA_IF_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() ptrace(0x10, r5) syz_open_procfs(r5, &(0x7f0000000000)='attr/keycreate\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) [ 661.949409] ------------[ cut here ]------------ [ 661.950569] WARNING: CPU: 0 PID: 9738 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 661.952525] Modules linked in: [ 661.953263] CPU: 0 PID: 9738 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 661.954793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 661.956577] RIP: 0010:get_pat_info+0x216/0x270 [ 661.957584] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 31 89 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 1a 89 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 a5 a2 5a 00 e9 [ 661.967210] RSP: 0018:ffff88804683f778 EFLAGS: 00010212 [ 661.968387] RAX: 000000000001eed1 RBX: ffff88800cec0f00 RCX: ffffc9000422a000 [ 661.969943] RDX: 0000000000040000 RSI: ffffffff81124466 RDI: 0000000000000007 [ 661.971494] RBP: ffff88804683f830 R08: 0000000000000000 R09: ffff88804683f700 [ 661.973047] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 661.974601] R13: 1ffff11008d07eef R14: 0000000000000000 R15: ffff88800cec0f50 [ 661.976155] FS: 00007f2eb4fb3700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 661.977917] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.979194] CR2: 0000001b2ef25000 CR3: 00000000367ea000 CR4: 0000000000350ef0 [ 661.980739] Call Trace: [ 661.981342] ? pgprot_writethrough+0xc0/0xc0 [ 661.982349] ? memtype_seq_stop+0x20/0x20 [ 661.983277] untrack_pfn+0xdc/0x240 [ 661.984081] ? track_pfn_insert+0x150/0x150 [ 661.985036] ? lock_downgrade+0x6d0/0x6d0 [ 661.985942] ? uprobe_munmap+0x1c/0x560 [ 661.987537] unmap_single_vma+0x1bc/0x300 [ 661.989025] unmap_vmas+0x16d/0x300 [ 661.989797] ? zap_vma_ptes+0x100/0x100 [ 661.990758] exit_mmap+0x27f/0x4f0 [ 661.991543] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 661.992688] mmput+0xca/0x340 [ 661.993381] copy_process+0x6450/0x78b0 [ 661.994293] ? __cleanup_sighand+0xb0/0xb0 [ 661.995226] ? lock_acquire+0x197/0x470 [ 661.996099] ? find_held_lock+0x2c/0x110 [ 661.996983] kernel_clone+0xe7/0x980 [ 661.997775] ? lock_downgrade+0x6d0/0x6d0 [ 661.998688] ? find_held_lock+0x2c/0x110 [ 661.999569] ? create_io_thread+0xf0/0xf0 [ 662.000462] ? ksys_write+0x12d/0x260 [ 662.001314] ? __mutex_unlock_slowpath+0xe1/0x600 [ 662.002378] __do_sys_fork+0x8a/0xc0 [ 662.003192] ? kernel_thread+0xf0/0xf0 [ 662.004049] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 662.005180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 662.006303] ? trace_hardirqs_on+0x5b/0x180 [ 662.007233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 662.008326] do_syscall_64+0x33/0x40 [ 662.009128] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 662.010228] RIP: 0033:0x7f2eb7a3db19 [ 662.011029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 662.014885] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 662.016543] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 662.018058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 662.019565] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 662.021054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 662.022550] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 [ 662.024048] irq event stamp: 2211 [ 662.024760] hardirqs last enabled at (2219): [] console_unlock+0x92d/0xb40 [ 662.026547] hardirqs last disabled at (2228): [] console_unlock+0x839/0xb40 [ 662.028348] softirqs last enabled at (1912): [] asm_call_irq_on_stack+0x12/0x20 [ 662.030250] softirqs last disabled at (1871): [] asm_call_irq_on_stack+0x12/0x20 [ 662.032115] ---[ end trace 4b22451dbb702b23 ]--- 17:22:36 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 29) 17:22:36 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 28) [ 662.073735] FAULT_INJECTION: forcing a failure. [ 662.073735] name failslab, interval 1, probability 0, space 0, times 0 [ 662.076152] CPU: 0 PID: 9852 Comm: syz-executor.6 Tainted: G W 5.10.246 #1 [ 662.077808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.079500] Call Trace: [ 662.080050] dump_stack+0x107/0x167 [ 662.080782] should_fail.cold+0x5/0xa [ 662.081555] ? create_object.isra.0+0x3a/0xa30 [ 662.082486] should_failslab+0x5/0x20 [ 662.083255] kmem_cache_alloc+0x5b/0x310 [ 662.084078] create_object.isra.0+0x3a/0xa30 [ 662.084968] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 662.085993] kmem_cache_alloc+0x159/0x310 [ 662.086871] create_new_namespaces+0x30/0xb20 [ 662.087775] __do_sys_setns+0x213/0x17b0 [ 662.088595] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 662.089509] ? switch_task_namespaces+0xd0/0xd0 [ 662.090463] ? ksys_write+0x1a9/0x260 [ 662.091249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 662.092319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 662.093364] do_syscall_64+0x33/0x40 [ 662.094134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 662.095171] RIP: 0033:0x7fc35e27d107 [ 662.095922] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 662.099648] RSP: 002b:00007fc35b7f1128 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 662.101177] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e27d107 [ 662.102616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ef [ 662.104039] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 662.105462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 662.106907] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 17:22:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() ptrace(0x10, r5) syz_open_procfs(r5, &(0x7f0000000000)='attr/keycreate\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:22:37 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 30) 17:22:37 executing program 2: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 26) [ 662.270718] FAULT_INJECTION: forcing a failure. [ 662.270718] name failslab, interval 1, probability 0, space 0, times 0 [ 662.272836] CPU: 0 PID: 9959 Comm: syz-executor.6 Tainted: G W 5.10.246 #1 [ 662.274337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.275845] Call Trace: [ 662.276330] dump_stack+0x107/0x167 [ 662.276995] should_fail.cold+0x5/0xa [ 662.277692] ? alloc_inode+0x171/0x240 [ 662.278407] should_failslab+0x5/0x20 [ 662.279101] kmem_cache_alloc+0x5b/0x310 [ 662.279836] ? lock_downgrade+0x6d0/0x6d0 [ 662.280588] alloc_inode+0x171/0x240 [ 662.281266] new_inode_pseudo+0x14/0xe0 [ 662.281980] __ns_get_path+0x120/0x7e0 [ 662.282689] ns_get_path+0x3d/0xa0 [ 662.283328] perf_fill_ns_link_info+0x76/0x1f0 [ 662.284140] ? perf_output_sample_regs+0x130/0x130 [ 662.285027] ? cred_has_capability.isra.0+0x143/0x2b0 [ 662.285928] FAULT_INJECTION: forcing a failure. [ 662.285928] name failslab, interval 1, probability 0, space 0, times 0 [ 662.285954] ? cred_has_capability.isra.0+0x152/0x2b0 [ 662.285977] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 662.289537] perf_event_namespaces.part.0+0xb0/0x180 [ 662.290457] ? perf_event_task+0x1c0/0x1c0 [ 662.291226] ? do_raw_spin_unlock+0x4f/0x220 [ 662.292008] perf_event_namespaces+0x3b/0x50 [ 662.292792] __do_sys_setns+0xd0a/0x17b0 [ 662.293516] ? __x64_sys_openat+0x13f/0x1f0 [ 662.294294] ? switch_task_namespaces+0xd0/0xd0 [ 662.295124] ? ksys_write+0x1a9/0x260 [ 662.295809] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 662.296750] ? syscall_enter_from_user_mode+0x1d/0x50 [ 662.297668] do_syscall_64+0x33/0x40 [ 662.298340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 662.299248] RIP: 0033:0x7fc35e27d107 [ 662.299918] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 662.303182] RSP: 002b:00007fc35b7f1128 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 662.304520] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e27d107 [ 662.305767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ef [ 662.307030] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 662.308284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 662.309540] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 662.310831] CPU: 1 PID: 9961 Comm: syz-executor.2 Tainted: G W 5.10.246 #1 [ 662.312164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.313525] Call Trace: [ 662.313957] dump_stack+0x107/0x167 [ 662.314559] should_fail.cold+0x5/0xa [ 662.315176] ? __d_alloc+0x2a/0x990 [ 662.315769] should_failslab+0x5/0x20 [ 662.316390] kmem_cache_alloc+0x5b/0x310 [ 662.317053] __d_alloc+0x2a/0x990 [ 662.317609] __ns_get_path+0x300/0x7e0 [ 662.318230] ns_get_path+0x3d/0xa0 [ 662.318790] proc_ns_get_link+0x10a/0x210 [ 662.319453] ? proc_ns_readlink+0x280/0x280 [ 662.320145] ? proc_ns_readlink+0x280/0x280 [ 662.320834] step_into+0x16f1/0x1ce0 [ 662.321447] ? lookup_fast+0x6e0/0x6e0 [ 662.322070] ? _down_write_nest_lock+0x160/0x160 [ 662.322857] path_openat+0x499/0x2770 [ 662.323469] ? path_lookupat+0x860/0x860 [ 662.324121] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 662.324980] ? lock_acquire+0x197/0x470 [ 662.325637] ? find_held_lock+0x2c/0x110 [ 662.326306] do_filp_open+0x190/0x3e0 [ 662.326921] ? may_open_dev+0xf0/0xf0 [ 662.327569] ? _raw_spin_unlock+0x1a/0x30 [ 662.328243] ? alloc_fd+0x2e7/0x670 [ 662.328837] do_sys_openat2+0x171/0x4d0 [ 662.329462] ? build_open_flags+0x6f0/0x6f0 [ 662.330179] ? __mutex_unlock_slowpath+0xe1/0x600 [ 662.330952] ? wait_for_completion_io+0x270/0x270 [ 662.331720] __x64_sys_openat+0x13f/0x1f0 [ 662.332399] ? __ia32_sys_open+0x1c0/0x1c0 [ 662.333088] ? ksys_write+0x1a9/0x260 [ 662.333699] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 662.334563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 662.335396] do_syscall_64+0x33/0x40 [ 662.335996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 662.336817] RIP: 0033:0x7f431a77ea04 [ 662.337413] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 662.340393] RSP: 002b:00007f4317d410b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 662.341630] RAX: ffffffffffffffda RBX: 00007f431a8def60 RCX: 00007f431a77ea04 [ 662.342792] RDX: 0000000000000000 RSI: 00007f431a824f82 RDI: 00000000ffffff9c [ 662.343945] RBP: 00007f431a824f82 R08: 0000000000000000 R09: 0000000000000000 [ 662.345108] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 662.346244] R13: 00007ffed9559d5f R14: 00007f4317d41300 R15: 0000000000022000 [ 662.421203] FAULT_INJECTION: forcing a failure. [ 662.421203] name failslab, interval 1, probability 0, space 0, times 0 [ 662.423112] CPU: 1 PID: 10027 Comm: syz-executor.5 Tainted: G W 5.10.246 #1 [ 662.424453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.425798] Call Trace: [ 662.426231] dump_stack+0x107/0x167 [ 662.426827] should_fail.cold+0x5/0xa [ 662.427442] ? create_new_namespaces+0x30/0xb20 [ 662.428182] should_failslab+0x5/0x20 [ 662.428788] kmem_cache_alloc+0x5b/0x310 [ 662.429436] create_new_namespaces+0x30/0xb20 [ 662.430162] __do_sys_setns+0x213/0x17b0 [ 662.430818] ? __x64_sys_openat+0x13f/0x1f0 [ 662.431505] ? switch_task_namespaces+0xd0/0xd0 [ 662.432243] ? ksys_write+0x1a9/0x260 [ 662.432848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 662.433673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 662.434513] do_syscall_64+0x33/0x40 [ 662.435099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 662.435924] RIP: 0033:0x7f64f3e6d107 [ 662.436522] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 662.439439] RSP: 002b:00007f64f13e1128 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 662.440637] RAX: ffffffffffffffda RBX: 00007f64f3f7ef60 RCX: 00007f64f3e6d107 [ 662.441775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ef [ 662.442922] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 662.444056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 662.445183] R13: 00007ffd98d1b0ef R14: 00007f64f13e1300 R15: 0000000000022000 17:22:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = fork() ptrace(0x10, r5) syz_open_procfs(r5, &(0x7f0000000000)='attr/keycreate\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xfffffffffffffe7d, 0x34}, 0x0) 17:22:37 executing program 4: syz_io_uring_setup(0x2203, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() (fail_nth: 54) 17:22:37 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f0000000640)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3ed8ee94", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x13, 0xffffffffffffffff, 0xe6b8a000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) [ 662.505781] FAULT_INJECTION: forcing a failure. [ 662.505781] name failslab, interval 1, probability 0, space 0, times 0 [ 662.507698] CPU: 0 PID: 10065 Comm: syz-executor.4 Tainted: G W 5.10.246 #1 [ 662.508943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.510304] Call Trace: [ 662.510711] dump_stack+0x107/0x167 [ 662.511314] should_fail.cold+0x5/0xa [ 662.511914] ? vm_area_dup+0x78/0x290 [ 662.512512] should_failslab+0x5/0x20 [ 662.513096] kmem_cache_alloc+0x5b/0x310 [ 662.513751] ? lock_downgrade+0x6d0/0x6d0 [ 662.514405] vm_area_dup+0x78/0x290 [ 662.514973] ? _cond_resched+0x10/0x30 [ 662.515570] ? copy_page_range+0x24e9/0x3810 [ 662.516291] ? vm_area_alloc+0x110/0x110 [ 662.516941] ? vm_iomap_memory+0x190/0x190 [ 662.517602] ? up_write+0x191/0x550 [ 662.518178] ? downgrade_write+0x3a0/0x3a0 [ 662.518843] ? down_write_killable+0x180/0x180 [ 662.519527] ? __vma_link_rb+0x540/0x700 [ 662.520149] copy_process+0x298b/0x78b0 [ 662.520795] ? __cleanup_sighand+0xb0/0xb0 [ 662.521487] ? lock_acquire+0x197/0x470 [ 662.522135] ? find_held_lock+0x2c/0x110 [ 662.522797] kernel_clone+0xe7/0x980 [ 662.523391] ? lock_downgrade+0x6d0/0x6d0 [ 662.524067] ? find_held_lock+0x2c/0x110 [ 662.524728] ? create_io_thread+0xf0/0xf0 [ 662.525383] ? ksys_write+0x12d/0x260 [ 662.525997] ? __mutex_unlock_slowpath+0xe1/0x600 [ 662.526731] __do_sys_fork+0x8a/0xc0 [ 662.527283] ? kernel_thread+0xf0/0xf0 [ 662.527871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 662.528666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 662.529468] ? trace_hardirqs_on+0x5b/0x180 [ 662.530137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 662.530920] do_syscall_64+0x33/0x40 [ 662.531477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 662.532230] RIP: 0033:0x7f2eb7a3db19 [ 662.532788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 662.535509] RSP: 002b:00007f2eb4fb3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039 [ 662.536659] RAX: ffffffffffffffda RBX: 00007f2eb7b50f60 RCX: 00007f2eb7a3db19 [ 662.537707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 662.538762] RBP: 00007f2eb4fb31d0 R08: 0000000000000000 R09: 0000000000000000 [ 662.539847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 662.540903] R13: 00007ffe6bcaa19f R14: 00007f2eb4fb3300 R15: 0000000000022000 17:22:37 executing program 6: perf_event_open(&(0x7f0000001b00)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (fail_nth: 31) [ 662.563231] FAULT_INJECTION: forcing a failure. [ 662.563231] name failslab, interval 1, probability 0, space 0, times 0 [ 662.565091] CPU: 1 PID: 10070 Comm: syz-executor.6 Tainted: G W 5.10.246 #1 [ 662.566420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 662.567758] Call Trace: [ 662.568190] dump_stack+0x107/0x167 [ 662.568776] should_fail.cold+0x5/0xa [ 662.569388] ? create_object.isra.0+0x3a/0xa30 [ 662.570129] should_failslab+0x5/0x20 [ 662.570748] kmem_cache_alloc+0x5b/0x310 [ 662.571412] create_object.isra.0+0x3a/0xa30 [ 662.572120] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 662.572949] kmem_cache_alloc+0x159/0x310 [ 662.573623] ? lock_downgrade+0x6d0/0x6d0 [ 662.574288] alloc_inode+0x171/0x240 [ 662.574880] new_inode_pseudo+0x14/0xe0 [ 662.575525] __ns_get_path+0x120/0x7e0 [ 662.576152] ns_get_path+0x3d/0xa0 [ 662.576726] perf_fill_ns_link_info+0x76/0x1f0 [ 662.577470] ? perf_output_sample_regs+0x130/0x130 [ 662.578294] ? cred_has_capability.isra.0+0x143/0x2b0 [ 662.579122] ? cred_has_capability.isra.0+0x152/0x2b0 [ 662.579961] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 662.580745] perf_event_namespaces.part.0+0xb0/0x180 [ 662.581562] ? perf_event_task+0x1c0/0x1c0 [ 662.582256] ? do_raw_spin_unlock+0x4f/0x220 [ 662.582958] perf_event_namespaces+0x3b/0x50 [ 662.583658] __do_sys_setns+0xd0a/0x17b0 [ 662.584311] ? __x64_sys_openat+0x13f/0x1f0 [ 662.585011] ? switch_task_namespaces+0xd0/0xd0 [ 662.585749] ? ksys_write+0x1a9/0x260 [ 662.586377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 662.587236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 662.588060] do_syscall_64+0x33/0x40 [ 662.588657] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 662.589487] RIP: 0033:0x7fc35e27d107 [ 662.590094] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 662.593063] RSP: 002b:00007fc35b7f1128 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 662.594273] RAX: ffffffffffffffda RBX: 00007fc35e38ef60 RCX: 00007fc35e27d107 [ 662.595422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ef [ 662.596576] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 662.597750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 662.598906] R13: 00007ffd357e2a9f R14: 00007fc35b7f1300 R15: 0000000000022000 [ 662.665770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 662.903103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.904102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.905689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready VM DIAGNOSIS: 17:22:36 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822e5bcc RDI=ffffffff879f8240 RBP=ffffffff879f8200 RSP=ffff88804683f0b0 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3f095 R14=fffffbfff0f3f04a R15=dffffc0000000000 RIP=ffffffff822e5c20 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2eb4fb3700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2ef25000 CR3=00000000367ea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000000000ff00000000 XMM01=ff000000000000000000000100000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f2eb7b247c800007f2eb7b247c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000001afd42a0974 RBX=0000000000000000 RCX=00000000000006e0 RDX=00000000000001af RSI=ffff88806cf27980 RDI=0000000000000860 RBP=ffff88806cf27980 RSP=ffff88806cf09ec8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000860 R13=0000000000000000 R14=ffff88806cf2eab8 R15=0000000000000000 RIP=ffffffff810e1371 RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdc579b1700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f45e73f35c8 CR3=0000000046a84000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000