c815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) 12:46:24 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) 12:46:24 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x2, 0x141500) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) 12:46:24 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x5450, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:46:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) (fail_nth: 8) 12:46:24 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x100, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x10000, 0x800) ftruncate(r2, 0x4) sendfile(r2, r3, 0x0, 0x100000001) r4 = pidfd_getfd(r3, r0, 0x0) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/23, 0x17}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {r1}}, './file1\x00'}) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000200)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000001c0)=""/48, 0x30}) 12:46:24 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) fsetxattr(r2, &(0x7f0000000040)=@random={'user.', '--)+(@&*\x00'}, &(0x7f0000000080)='\xfe[\x00', 0x3, 0x2) sendfile(r1, r2, 0x0, 0x100000001) ioctl$MON_IOCX_GET(r1, 0x9204, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x100010, r0, 0x7) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r2, 0x2, 0x8000}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000300)={{r3}, 0x0, 0x0, @unused=[0x7f, 0x640, 0x2, 0x100000001], @name="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"}) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000019c0), 0x2, 0x0) ftruncate(r4, 0x40) [ 1832.914918] FAULT_INJECTION: forcing a failure. [ 1832.914918] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.916957] CPU: 0 PID: 9832 Comm: syz-executor.1 Not tainted 5.10.246 #1 [ 1832.918070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1832.919410] Call Trace: [ 1832.919845] dump_stack+0x107/0x167 [ 1832.920441] should_fail.cold+0x5/0xa [ 1832.921073] ? create_object.isra.0+0x3a/0xa30 [ 1832.921822] should_failslab+0x5/0x20 [ 1832.922450] kmem_cache_alloc+0x5b/0x310 [ 1832.923122] create_object.isra.0+0x3a/0xa30 [ 1832.923843] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1832.924680] kmem_cache_alloc+0x159/0x310 [ 1832.925430] anon_vma_clone+0xdc/0x590 [ 1832.926121] __split_vma+0x17c/0x4e0 [ 1832.926773] __do_munmap+0xf40/0x1260 [ 1832.927468] ? arch_get_unmapped_area+0x450/0x450 [ 1832.928338] mmap_region+0x7cc/0x1500 [ 1832.929033] do_mmap+0x868/0x1370 [ 1832.929666] vm_mmap_pgoff+0x198/0x1f0 [ 1832.930372] ? randomize_page+0xb0/0xb0 [ 1832.931102] ksys_mmap_pgoff+0x41c/0x560 [ 1832.931832] ? find_mergeable_anon_vma+0x250/0x250 [ 1832.932712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1832.933656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1832.934580] do_syscall_64+0x33/0x40 [ 1832.935244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1832.936155] RIP: 0033:0x7f60b2d22b19 [ 1832.936817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1832.940121] RSP: 002b:00007f60b0298188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1832.941485] RAX: ffffffffffffffda RBX: 00007f60b2e35f60 RCX: 00007f60b2d22b19 [ 1832.942767] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 1832.944049] RBP: 00007f60b02981d0 R08: 0000000000000003 R09: 0000000000000000 [ 1832.945335] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000001 [ 1832.946631] R13: 00007ffcc8ef486f R14: 00007f60b0298300 R15: 0000000000022000 12:46:24 executing program 3: r0 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r1}, 0x1, &(0x7f0000000000)=[0x400], 0x1, 0x1, [0x4, 0x3, 0xed, 0x8]}) r2 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x9208, &(0x7f0000000080)={0x0, 0x0}) 12:46:24 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) 12:46:24 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x5451, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:46:24 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x10001, 0x4001) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000080), &(0x7f00000000c0)=""/90, 0x5a}) read$usbmon(r1, &(0x7f0000000000)=""/22, 0x16) 12:46:24 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x3, 0x48103) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) 12:46:37 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) 12:46:37 executing program 5: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:46:37 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x20800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0xc018) r5 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r5, 0x9204, 0x0) 12:46:37 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x5452, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:46:37 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x10, 0xffffffffffffffff, 0x9bb8a000) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/188, 0xbc}) 12:46:37 executing program 7: prctl$PR_SET_UNALIGN(0x6, 0x3) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) 12:46:37 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x2a8000, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000140)={0x40000000000000fa, &(0x7f0000000500)}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000200)={0x5, "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"}) r2 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x4b47, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000540)={&(0x7f0000000480)=[0x0, 0x0, 0x0], 0x3, 0x381}) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000100)={&(0x7f0000000000), &(0x7f0000000040)=""/139, 0x8b}) r4 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x440000) read$usbmon(r4, &(0x7f0000000500)=""/10, 0xa) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) 12:46:37 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) (fail_nth: 9) [ 1846.443721] FAULT_INJECTION: forcing a failure. [ 1846.443721] name failslab, interval 1, probability 0, space 0, times 0 [ 1846.446267] CPU: 1 PID: 9875 Comm: syz-executor.1 Not tainted 5.10.246 #1 [ 1846.447691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1846.449444] Call Trace: [ 1846.450000] dump_stack+0x107/0x167 [ 1846.450765] should_fail.cold+0x5/0xa [ 1846.451568] ? vm_area_alloc+0x1c/0x110 [ 1846.452406] should_failslab+0x5/0x20 [ 1846.453219] kmem_cache_alloc+0x5b/0x310 [ 1846.454078] vm_area_alloc+0x1c/0x110 [ 1846.454872] mmap_region+0x982/0x1500 [ 1846.455694] do_mmap+0x868/0x1370 [ 1846.456434] vm_mmap_pgoff+0x198/0x1f0 [ 1846.457260] ? randomize_page+0xb0/0xb0 [ 1846.458119] ksys_mmap_pgoff+0x41c/0x560 [ 1846.458970] ? find_mergeable_anon_vma+0x250/0x250 [ 1846.459998] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1846.461104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1846.462196] do_syscall_64+0x33/0x40 [ 1846.462979] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1846.464052] RIP: 0033:0x7f60b2d22b19 [ 1846.464824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1846.468690] RSP: 002b:00007f60b0298188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1846.470293] RAX: ffffffffffffffda RBX: 00007f60b2e35f60 RCX: 00007f60b2d22b19 [ 1846.471796] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 1846.473315] RBP: 00007f60b02981d0 R08: 0000000000000003 R09: 0000000000000000 [ 1846.474828] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000001 [ 1846.476313] R13: 00007ffcc8ef486f R14: 00007f60b0298300 R15: 0000000000022000 12:46:37 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x5460, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:46:50 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280)) dup2(r1, r0) 12:46:50 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x100) ioctl$MON_IOCX_GET(r0, 0x4b47, 0x0) 12:46:50 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) read$usbmon(r0, &(0x7f0000000000)=""/26, 0x1a) 12:46:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) (fail_nth: 10) 12:46:50 executing program 0: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x191000) syz_io_uring_setup(0x302d, &(0x7f0000000000)={0x0, 0x23a4, 0x0, 0x0, 0x184}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 12:46:50 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) fallocate(r0, 0x60, 0x6e, 0x6b) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, r1, 0x37bd0000) 12:46:50 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x9201, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:46:50 executing program 5: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) [ 1859.384372] FAULT_INJECTION: forcing a failure. [ 1859.384372] name failslab, interval 1, probability 0, space 0, times 0 [ 1859.386920] CPU: 0 PID: 9904 Comm: syz-executor.1 Not tainted 5.10.246 #1 [ 1859.388335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1859.390082] Call Trace: [ 1859.390630] dump_stack+0x107/0x167 [ 1859.391397] should_fail.cold+0x5/0xa [ 1859.392191] ? create_object.isra.0+0x3a/0xa30 [ 1859.393138] should_failslab+0x5/0x20 [ 1859.393921] kmem_cache_alloc+0x5b/0x310 [ 1859.394770] create_object.isra.0+0x3a/0xa30 [ 1859.395673] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1859.396725] kmem_cache_alloc+0x159/0x310 [ 1859.397597] vm_area_alloc+0x1c/0x110 [ 1859.398388] mmap_region+0x982/0x1500 [ 1859.399193] do_mmap+0x868/0x1370 [ 1859.399917] vm_mmap_pgoff+0x198/0x1f0 [ 1859.400720] ? randomize_page+0xb0/0xb0 [ 1859.401567] ksys_mmap_pgoff+0x41c/0x560 [ 1859.402403] ? find_mergeable_anon_vma+0x250/0x250 [ 1859.403420] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1859.404507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1859.405576] do_syscall_64+0x33/0x40 [ 1859.406350] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1859.407411] RIP: 0033:0x7f60b2d22b19 [ 1859.408180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1859.411954] RSP: 002b:00007f60b0298188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1859.413568] RAX: ffffffffffffffda RBX: 00007f60b2e35f60 RCX: 00007f60b2d22b19 [ 1859.415044] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 1859.416524] RBP: 00007f60b02981d0 R08: 0000000000000003 R09: 0000000000000000 [ 1859.418033] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000002 [ 1859.419526] R13: 00007ffcc8ef486f R14: 00007f60b0298300 R15: 0000000000022000 12:46:50 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280)) dup2(r1, r0) 12:46:50 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x9204, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:46:50 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0xc203) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x80) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/87, 0x57}) ioctl$MON_IOCX_GET(r0, 0x4b47, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x10000) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x1000001a}, r1, 0x3, 0x0, 0x1, {0x0, r4}}, 0x2d0) 12:46:50 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xfffffffffffffff8) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000000), &(0x7f0000000040)=""/133, 0x85}) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) 12:46:50 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x9205, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:46:50 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000280)) dup2(r1, r0) 12:46:50 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x18000, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c776654dd646e6f3d", @ANYRESHEX, @ANYBLOB=',cache=mmap,dfltgid=', @ANYRESHEX=r1, @ANYBLOB=',cache=none,appraise_type=imasig,seclabel,func=BPRM_CHECK,mask=^MAY_APPEND,fscontext=staff_u,obj_user=security.ima\x00,\x00']) fchown(r0, 0xffffffffffffffff, r1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x9, r4, 0x1, 0x8, 0x6, @random="1900de9961ac"}, 0x14) bind$packet(r2, &(0x7f00000002c0)={0x11, 0x5, 0x0, 0x1, 0xff, 0x6, @random="b1f4a6611bde"}, 0x14) connect(r2, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x2, @local, 'xfrm0\x00'}}, 0x80) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0xffff, &(0x7f0000000040)=0x2) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xfe5c0) 12:46:50 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), 0x0) dup2(r1, r0) 12:46:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) (fail_nth: 11) 12:46:50 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x9208, &(0x7f0000000140)={0x0, 0x0, 0x1}) [ 1859.580165] FAULT_INJECTION: forcing a failure. [ 1859.580165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1859.582744] CPU: 0 PID: 9933 Comm: syz-executor.1 Not tainted 5.10.246 #1 [ 1859.584177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1859.585927] Call Trace: [ 1859.586488] dump_stack+0x107/0x167 [ 1859.587255] should_fail.cold+0x5/0xa [ 1859.588060] _copy_to_user+0x2e/0x180 [ 1859.588863] simple_read_from_buffer+0xcc/0x160 [ 1859.589863] proc_fail_nth_read+0x198/0x230 [ 1859.590776] ? proc_sessionid_read+0x230/0x230 [ 1859.591746] ? security_file_permission+0xb1/0xe0 [ 1859.592767] ? proc_sessionid_read+0x230/0x230 [ 1859.593740] vfs_read+0x228/0x620 [ 1859.594476] ksys_read+0x12d/0x260 [ 1859.595218] ? vfs_write+0xb10/0xb10 [ 1859.596009] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1859.597123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1859.598210] do_syscall_64+0x33/0x40 [ 1859.598996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1859.600071] RIP: 0033:0x7f60b2cd569c [ 1859.600850] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1859.604607] RSP: 002b:00007f60b0298170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1859.606214] RAX: ffffffffffffffda RBX: 0000000020ff9000 RCX: 00007f60b2cd569c [ 1859.607704] RDX: 000000000000000f RSI: 00007f60b02981e0 RDI: 0000000000000004 [ 1859.609213] RBP: 00007f60b02981d0 R08: 0000000000000000 R09: 0000000000000000 [ 1859.610707] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000002 [ 1859.612206] R13: 00007ffcc8ef486f R14: 00007f60b0298300 R15: 0000000000022000 12:47:05 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x400040) ioctl$MON_IOCX_GET(r0, 0x4b47, 0x0) 12:47:05 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) fstat(r1, &(0x7f0000000000)) fcntl$addseals(r0, 0x409, 0x9) 12:47:05 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MON_IOCX_GET(r1, 0x9208, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffec8}) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000100)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/36, 0x24}) syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x121641) 12:47:05 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x88400) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) read$usbmon(r1, &(0x7f0000000080)=""/237, 0xed) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7cece) 12:47:05 executing program 5: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:47:05 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), 0x0) dup2(r1, r0) 12:47:05 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x40049409, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:47:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) 12:47:05 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0xfffffffffffffffd, 0x36e402) ioctl$MON_IOCX_GET(r0, 0x4b47, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x44000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x103800, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000100)={0x3f0d, 0x76, 0x3}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x2c9d, 0xbfb6, 0x401, 0x2, 0x2e78}) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x38811) 12:47:05 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:47:05 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), 0x0) dup2(r1, r0) 12:47:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4002, 0x0, 0x80012, r0, 0x0) 12:47:05 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x40087602, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:47:05 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(0xffffffffffffffff, r0) 12:47:05 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x10000, 0x20200) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x400000000000000) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000040)) 12:47:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0xc6) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x10000) read$usbmon(r0, &(0x7f0000000100)=""/205, 0xcd) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={r4, r5+10000000}, 0x1, 0x0, 0x0, {0x0, r6}}, 0x7) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x2000000, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@access_user}, {@version_u}, {@mmap}, {@fscache}, {@debug={'debug', 0x3d, 0x7fff}}], [{@subj_type={'subj_type', 0x3d, 'syz'}}, {@fowner_gt={'fowner>', 0xee00}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fowner_lt={'fowner<', 0xee01}}]}}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) r8 = dup2(r0, r0) ioctl$MON_IOCQ_RING_SIZE(r8, 0x9205) 12:47:17 executing program 5: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:47:17 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0xe9, 0x800) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) 12:47:17 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(0xffffffffffffffff, r0) 12:47:17 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x40189206, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:47:17 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000001c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/233, 0xe9}) 12:47:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4004, 0x0, 0x80012, r0, 0x0) 12:47:17 executing program 4: ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0xc2040) 12:47:17 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/4096, 0x1000}) 12:47:18 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x30880) ioctl$MON_IOCX_GET(r0, 0x4b47, 0x0) 12:47:31 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x80, 0x1, 0x1, 0x3, 0x0, 0x7fff, 0x400, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000100), 0x6}, 0x41008, 0x3f, 0x1, 0x5, 0x44ba, 0x200, 0x6c, 0x0, 0x1}, 0xffffffffffffffff, 0x9, r1, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x7, 0xb3, 0x3f, 0x101, 0x2, 0x3, 0x3, 0x3ca, 0x40, 0x13d, 0x3, 0x3, 0x38, 0x1, 0x8, 0x7, 0xf8}, [{0x6474e551, 0x522f, 0x7fff, 0x2, 0x400000000, 0x6b095302, 0x3, 0x800}, {0x3, 0x1ff, 0x7fffffff, 0x7, 0x800, 0x2, 0x1f, 0x6}], "b3ad27c12707d8b2b0e7d7e391d5458f35c2b059d0bef61000eb916700f5305e63fc639ba501851252ed283474086f5c60a77ff1091ca909fb1f282df1a3b2ec66b584a411212dc7f61794c3b85c2272abf9a97692ad217871fb6affd8aff8d756b0c8e51759c94282005c8693e61563323ec7359e9ac6624df6a162134a22eb1b3ce03245c542cc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x738) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000040)=""/110, 0x6e}) 12:47:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x400a, 0x0, 0x80012, r0, 0x0) 12:47:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0xf4, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) 12:47:31 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x4b47, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6000002, 0x10, r2, 0x8000000) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x4ccf01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58af, 0x0, 0x2, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x56a0, 0xa42e, 0x1, &(0x7f0000000240)={[0x8]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r4, 0x4) sendfile(r4, r5, 0x0, 0x100000001) read$usbmon(r4, &(0x7f0000000100)=""/153, 0x99) ftruncate(r1, 0x4) sendfile(r1, r3, 0x0, 0x100000001) read$usbmon(r1, &(0x7f0000000300)=""/245, 0xf5) lseek(r3, 0xffffffffffff0994, 0x1) 12:47:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000000c0)=""/95, 0x5f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000040)={@multicast1, @private}, 0x8) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000003c0)={&(0x7f0000000300), &(0x7f0000000340)=""/78, 0x4e}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r3, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000140), &(0x7f0000000180)=""/199, 0xc7}) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) 12:47:31 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(0xffffffffffffffff, r0) 12:47:31 executing program 5: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:47:31 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x4018920a, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:47:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x9, r2, 0x1, 0x8, 0x6, @random="1900de9961ac"}, 0x14) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x5, 0x0, 0x1, 0xff, 0x6, @random="b1f4a6611bde"}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2000, 0x4) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x800) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) r4 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) socketpair(0x2b, 0x6, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@private2, @in6}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) ioctl$MON_IOCX_GET(r4, 0x9204, 0x0) read$usbmon(r4, &(0x7f0000000240)=""/21, 0x15) 12:47:31 executing program 6: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r0 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r0, 0xffffffffffffffff) 12:47:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4028, 0x0, 0x80012, r0, 0x0) 12:47:31 executing program 7: perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x9, 0x5, 0xfd, 0x9, 0x0, 0x80000001, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x3ff}, 0x8105, 0x0, 0x6, 0x4, 0x4, 0x9b, 0x75, 0x0, 0x7f, 0x0, 0xb7ed}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x400) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x6, 0x7, 0x20, 0x0, 0x95bb, 0x5c000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3a, 0x4, @perf_bp={&(0x7f0000000340), 0x4}, 0x4800, 0x5, 0xff, 0x5, 0xffffffffffff3c08, 0x3b3c02c9, 0x3, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r1, 0x8) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4b0180, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000180)={&(0x7f0000000040), &(0x7f0000000080)=""/207, 0xcf}) read$usbmon(r0, &(0x7f0000000300)=""/40, 0x28) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x4de800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r4, &(0x7f0000000240)=0x7, 0xffff) 12:47:31 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000d800}, 0x8000) r2 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x4b47, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r3, 0x4) sendfile(r3, r4, 0x0, 0x100000001) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) r6 = syz_open_dev$hiddev(&(0x7f00000003c0), 0x100, 0x801) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) dup2(r6, r7) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x8080) 12:47:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x7fffdf006000, 0x0, 0x80012, r0, 0x0) 12:47:31 executing program 6: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r0 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r0, 0xffffffffffffffff) 12:47:31 executing program 6: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r0 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r0, 0xffffffffffffffff) 12:47:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x80012, r0, 0x0) 12:47:32 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:47:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x80012, r0, 0x0) 12:47:45 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x4b47, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setresuid(r1, r1, 0x0) syz_io_uring_setup(0x5dc9, &(0x7f00000000c0)={0x0, 0x84b1, 0x1, 0x1, 0x2bf}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(r0, r1, r3) 12:47:45 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x400, 0x200700) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/164, 0xa4}) 12:47:45 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4607004003000000000100000002000300010000004302000000000000400000000000000056010000000000000500000007003800010001003f00040007000000010100000100000000000000d112000000000000000000000000000004000000000000000800000000000000ff000000000000008c9ff48ceba4ad1f28f7100cf59c34509f2da576536f215dc9502531093cb2b3627558ac56c30618d3f5177e86089faef82bad682be0d385fc2341d048344c9acb91e61076ad60167b9d29bf72c2ab3a25b5ce25ec7fc19a6f60b2bf56c7e46f1e44ac52bfc9ef584306695306edee8c329257bf752de9e2ae3d130bc1079f00"/2295], 0x8f7) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0xd9) 12:47:45 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xfffffffe, 0x400c42) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) 12:47:45 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x4020940d, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:47:45 executing program 5: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:47:45 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4002, 0x0, 0x80012, r0, 0x0) 12:47:45 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x400, 0x138) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) 12:47:45 executing program 6: perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x9, 0x5, 0xfd, 0x9, 0x0, 0x80000001, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x3ff}, 0x8105, 0x0, 0x6, 0x4, 0x4, 0x9b, 0x75, 0x0, 0x7f, 0x0, 0xb7ed}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x400) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x6, 0x7, 0x20, 0x0, 0x95bb, 0x5c000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3a, 0x4, @perf_bp={&(0x7f0000000340), 0x4}, 0x4800, 0x5, 0xff, 0x5, 0xffffffffffff3c08, 0x3b3c02c9, 0x3, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r1, 0x8) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4b0180, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000180)={&(0x7f0000000040), &(0x7f0000000080)=""/207, 0xcf}) read$usbmon(r0, &(0x7f0000000300)=""/40, 0x28) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x4de800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r4, &(0x7f0000000240)=0x7, 0xffff) 12:47:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x80012, r0, 0x0) 12:47:45 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x80086601, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:47:45 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000010c0)=""/4094, 0xffe}) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) 12:47:45 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x60000000000}}, './file1\x00'}) r2 = dup2(r0, r1) ioctl$MON_IOCX_GET(r2, 0x4b47, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r3, 0x4) sendfile(r3, r3, 0x0, 0x8d) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x810, r4, 0x8) 12:47:45 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x2000, 0xb) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000000c0)={0x0, 0x400, 0x0, 0x7fff, 0x2, [{0x9, 0x1, 0x800, '\x00', 0x1202}, {0x5, 0x401, 0xc0}]}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x0, @broadcast, 0x4e21, 0x3, 'none\x00', 0x10, 0x0, 0x54}, 0x2c) r2 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x9208, 0x0) 12:47:59 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x28, 0x80012, r0, 0x0) 12:47:59 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x2) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) 12:47:59 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:47:59 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) dup2(r1, r0) ioctl$MON_IOCX_GET(r0, 0x4b47, 0x0) 12:47:59 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x5) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) 12:47:59 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x80087601, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:47:59 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) 12:47:59 executing program 5: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:48:00 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x80089203, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:48:00 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa00, 0x80012, r0, 0x0) 12:48:00 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1800c00}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x400, 0x70bd27, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040840) r1 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r1, 0x9204, 0x0) 12:48:00 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000000c0)=""/162, 0xa2}) 12:48:00 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:48:00 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/172, 0xac}) 12:48:00 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x4b47, 0x0) 12:48:00 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:48:00 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2800, 0x80012, r0, 0x0) 12:48:00 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x2, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x401, 0x480400) 12:48:00 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:48:23 executing program 7: io_setup(0xb8, &(0x7f0000000040)=0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000001080)={[0x6db1]}, 0x8, 0x0) io_cancel(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, &(0x7f0000000080)="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", 0x1000, 0x81, 0x0, 0x3, r2}, &(0x7f0000001100)) syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffffffffc, 0x240000) 12:48:23 executing program 5: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:48:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) dup2(r1, r0) ioctl$MON_IOCX_GET(r0, 0x4b47, 0x0) 12:48:23 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x163b, 0x46040) ioctl$MON_IOCX_GET(r0, 0x4b47, 0x0) 12:48:23 executing program 6: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, 0xffffffffffffffff, 0x0) 12:48:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0045878, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:48:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x80012, r0, 0x0) 12:48:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x220801) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) 12:48:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) dup2(r1, r0) ioctl$MON_IOCX_GET(r0, 0x4b47, 0x0) 12:48:23 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x80) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000080)=""/200, 0xc8}, {&(0x7f0000000180)=""/248, 0xf8}, {&(0x7f0000000280)=""/94, 0x5e}], 0x3, &(0x7f0000000340)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x2140) fchown(r1, 0xee00, r2) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) 12:48:23 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x3a4, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x3, 0x24}}}}, [@NL80211_ATTR_BEACON_HEAD={0x1a2, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @from_mac=@broadcast, {0x6, 0x7}}, @ver_80211n={0x0, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xf97, @random=0x100, 0xc00, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x0, 0xb2, 0x7}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x60}}, @val={0x76, 0x6, {0xff, 0x8e, 0x23, 0xe5e5}}, [{0xdd, 0x69, "91d2e509ce8230a2ce133df6a972a6009ea62e9a427b6b1561d9b5e723e68f26e158cc0a860c42fefbfe8dedd0144335f0ca980cca374c6b4aaf9855c5ac6d9f8a1063f7649fb3b254ae7fd86109ca2cac31e80513adbb938dd6db499c67a714251638b2fced05ae92"}, {0xdd, 0xda, "265a0895584951a072688501a5282b8b82936875a0abed829768fbd2a368ca48da0d11c4534936b8bee2766efc8b6d326f5347bde1cd6aec19475c34a9eed60ae40ed1f9cd4fc09797258448d3925b140a1b0283528a37373f912b07bf654742a21e030fe4adb798bc355a84cadd32c4f2cf2137a63a52a65583e1aae0c5ad296103828c35788c667ce3a80113190906106e4eff7561d286dc0ee173f960c79190521f8473f9965ab844d36f1db75d3be89d217911058d0da93edf11fd212e24c8c7359990e0c636a612d6decffef55cbd616e3547d84fbc1913"}]}}, @NL80211_ATTR_IE={0xf1, 0x2a, [@perr={0x84, 0xbc, {0x3f, 0xc, [@not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x2, @device_a, 0x4}, @ext={{}, @device_a, 0x5, @device_b, 0x30}, @ext={{}, @device_a, 0x1, @device_b, 0x12}, @ext={{}, @device_b, 0x9, @device_b, 0xa}, @not_ext={{}, @device_a, 0xff, "", 0x2a}, @not_ext={{}, @device_a, 0x8, "", 0x2a}, @not_ext={{}, @device_b, 0x1, "", 0x32}, @ext={{}, @broadcast, 0x401, @device_b, 0x6}, @not_ext={{}, @broadcast, 0x5, "", 0x32}, @not_ext={{}, @broadcast, 0x75c8, "", 0x19}, @not_ext={{}, @broadcast, 0x6, "", 0x3b}]}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x4, @device_b, 0xd6c, @device_b, 0x782, 0x8, @device_a, 0x9}}, @cf={0x4, 0x6, {0x3, 0x2, 0x4a, 0x7}}]}, @NL80211_ATTR_FTM_RESPONDER={0xe4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x84, 0x3, "c8886e5343d346906f7b82109f9aa59a1b004e58ae6ca58cdc0be345c1d5d5e5bcdc9d55771f8a7acd2eb7d4bdd83939b2d1c7d23f00bc093b21e06fa93a7a33a7d2d58b58ddcdf677d68dfab8213f4e3b9d68323f5bcf689347e4ba09490b0e1f8c18f18f5d3082e2cd02fb40ed2dfe1d13cc4cf2a2742abb049ae73f6eaa4a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5c, 0x3, "ff4269a0398a1d2c5c2a7dd8e0218e2272bd44ece063dbeac8f6789b53679b95bcf54cfa20a895957e05d0d04617d6b9990de321efeea9cdd508d5091e097af04e13adee6747f46cc5ea1c6bc072898fe019ef3ee7ec7755"}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x4020}, 0x20004001) r1 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x428081) ioctl$MON_IOCX_GET(r1, 0x4b47, 0x0) 12:48:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x400000, 0x80012, r0, 0x0) 12:48:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) dup2(0xffffffffffffffff, r0) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000000)={0x0, 0x0}) open(&(0x7f0000000180)='./file0\x00', 0x2000, 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000140)={&(0x7f00000001c0), &(0x7f0000000080)=""/143, 0x8f}) 12:48:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:48:23 executing program 6: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, 0xffffffffffffffff, 0x0) 12:48:38 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) 12:48:38 executing program 5: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:48:38 executing program 6: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, 0xffffffffffffffff, 0x0) 12:48:38 executing program 3: ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x8000000200, 0x100) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) 12:48:38 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:48:38 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x9, 0x14241) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) signalfd4(r2, &(0x7f0000000040)={[0x4]}, 0x8, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$MON_IOCX_GET(r0, 0x4b47, 0x0) 12:48:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x800000, 0x80012, r0, 0x0) 12:48:38 executing program 7: syz_open_dev$usbmon(&(0x7f0000000000), 0x541c, 0x34d240) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x80, 0x4) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) 12:48:38 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x300}) 12:48:38 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x80012, r0, 0x0) 12:48:38 executing program 6: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:48:39 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0xc8400) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f00000001c0)=""/55, 0x37}) ioctl$MON_IOCX_GET(r0, 0x4b47, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x1ff) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000000), &(0x7f0000000040)=""/51, 0x33}) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000240)) read$usbmon(r0, &(0x7f0000000100)=""/104, 0x68) 12:48:39 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x101500) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/196, 0xc4}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1) 12:48:39 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x18000, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c776654dd646e6f3d", @ANYRESHEX, @ANYBLOB=',cache=mmap,dfltgid=', @ANYRESHEX=r1, @ANYBLOB=',cache=none,appraise_type=imasig,seclabel,func=BPRM_CHECK,mask=^MAY_APPEND,fscontext=staff_u,obj_user=security.ima\x00,\x00']) fchown(r0, 0xee01, r1) 12:48:53 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x80012, r0, 0x0) 12:48:53 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x1000812, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r2, 0x4) sendfile(r2, r3, 0x0, 0x100000001) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getdents64(r1, &(0x7f0000002480)=""/4130, 0x1022) r5 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r5, 0x9208, 0x0) 12:48:53 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) (fail_nth: 1) 12:48:53 executing program 5: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:48:53 executing program 6: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:48:53 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) 12:48:53 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:48:53 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001540), 0x16c40, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000001580)={0x80000000, {{0xa, 0x4e22, 0x20f, @remote, 0xdb1e}}}, 0x88) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001440)=[{{&(0x7f0000000040)=@tipc=@id, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/129, 0x81}, {&(0x7f0000000180)=""/247, 0xf7}], 0x2, &(0x7f00000002c0)=""/212, 0xd4}, 0x2}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/60, 0x3c}], 0x1, &(0x7f0000000440)=""/4096, 0x1000}, 0xe1194c6}], 0x2, 0x20, &(0x7f0000001500)={r3, r4+10000000}) syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000001640)={{0xcc, 0x4, 0x40, 0x3c1, 0x10e, 0x8001, 0x19a, 0x6c}, "36daba9da714376c58029e1e08", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x82d) 12:48:53 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000000, 0x80012, r0, 0x0) [ 1981.838641] FAULT_INJECTION: forcing a failure. [ 1981.838641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1981.840123] CPU: 0 PID: 10297 Comm: syz-executor.4 Not tainted 5.10.246 #1 [ 1981.840968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1981.841994] Call Trace: [ 1981.842332] dump_stack+0x107/0x167 [ 1981.842779] should_fail.cold+0x5/0xa [ 1981.843249] _copy_to_user+0x2e/0x180 [ 1981.843719] simple_read_from_buffer+0xcc/0x160 [ 1981.844292] proc_fail_nth_read+0x198/0x230 [ 1981.844820] ? proc_sessionid_read+0x230/0x230 [ 1981.845378] ? security_file_permission+0xb1/0xe0 [ 1981.845984] ? proc_sessionid_read+0x230/0x230 [ 1981.846542] vfs_read+0x228/0x620 [ 1981.846971] ksys_read+0x12d/0x260 [ 1981.847408] ? vfs_write+0xb10/0xb10 [ 1981.847868] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1981.848505] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1981.849131] do_syscall_64+0x33/0x40 [ 1981.849594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1981.850216] RIP: 0033:0x7f66b7d0d69c [ 1981.850684] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1981.852919] RSP: 002b:00007f66b52d0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1981.853867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f66b7d0d69c [ 1981.854751] RDX: 000000000000000f RSI: 00007f66b52d01e0 RDI: 0000000000000005 [ 1981.855626] RBP: 00007f66b52d01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.856506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1981.857391] R13: 00007ffd49ebea2f R14: 00007f66b52d0300 R15: 0000000000022000 12:48:53 executing program 6: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:48:53 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x7) r1 = dup3(r0, r0, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000000c0)=""/74, 0x4a}) ioctl$MON_IOCX_GET(r0, 0x9208, &(0x7f0000000080)={0x0, 0x0}) 12:48:53 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa000000, 0x80012, r0, 0x0) 12:48:53 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 1) 12:48:53 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) [ 1981.931569] loop0: detected capacity change from 0 to 32768 [ 1981.952455] FAULT_INJECTION: forcing a failure. [ 1981.952455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1981.953910] CPU: 0 PID: 10317 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1981.954711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1981.955672] Call Trace: [ 1981.955983] dump_stack+0x107/0x167 [ 1981.956407] should_fail.cold+0x5/0xa [ 1981.956852] _copy_from_user+0x2e/0x1b0 [ 1981.957321] io_uring_setup+0x9b/0x2980 [ 1981.957799] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1981.958366] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1981.958953] ? wait_for_completion_io+0x270/0x270 [ 1981.959517] ? rcu_read_lock_any_held+0x75/0xa0 [ 1981.960059] ? vfs_write+0x354/0xb10 [ 1981.960492] ? fput_many+0x2f/0x1a0 [ 1981.960916] ? ksys_write+0x1a9/0x260 [ 1981.961361] ? __ia32_sys_read+0xb0/0xb0 [ 1981.961847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1981.962459] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1981.963064] do_syscall_64+0x33/0x40 [ 1981.963498] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1981.964099] RIP: 0033:0x7f55325f0b19 [ 1981.964535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1981.966720] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1981.967604] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 1981.968432] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 1981.969261] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 1981.970102] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 1981.970925] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:49:10 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x28000000, 0x80012, r0, 0x0) 12:49:10 executing program 2: r0 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7940, &(0x7f0000000040)={0x0, 0x2f9f, 0x0, 0x3, 0x3a5, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x4007, @fd=r3, 0x100000001, 0x0, 0x0, 0x12, 0x1, {0x1}}, 0xc262) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001180)={0x0, 0x1}) r4 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r5, 0x4) sendfile(r5, r6, 0x0, 0x100000001) read$usbmon(r5, &(0x7f0000000180)=""/4096, 0x1000) 12:49:10 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x10800) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) 12:49:10 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) 12:49:10 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 2) 12:49:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x2) r2 = signalfd4(r0, &(0x7f0000000140)={[0x3]}, 0x8, 0x0) openat(r2, &(0x7f0000000180)='./file1\x00', 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000100)=0x5) ftruncate(r0, 0x4) sendfile(r0, r1, 0x0, 0x100000001) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/151) r3 = syz_io_uring_setup(0x8782e, &(0x7f0000000580)={0x0, 0xfffffffc}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000000)) dup2(r3, 0xffffffffffffffff) 12:49:10 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="90f23ee48414c664c5a43f762e4c066fb46c651599634978ad436839c78464320b6c96b3b20424870f3c2c06ff5d7954554895fb52ffeef44cb8428f018a7311e03dc310105175dc9c0211c4c3d97278f61e53c32677695a579612fbb8f5ba448869626a4ccaeaae7114a481e103e8e43576e44b8a1a88966a66b6e6b4868bf5132cbfb5bc28aa11f6dcafe94048bd40f1c5f93a760b22174a742576098c9f3a6cacab94927a4600b7455033a85d92450a398e67a065f49012273455707ce4f6ac3de7ab8003c8cdf8491d17087e25e66d7112c059f9f340c35262df6b049113566fbdd3f51963793385ba78d21a42e3a68ed5c340c7ae8e7c2912decbc2e8175a88728d5aaf4822588b5fc88aee41ed9174cc588c519b0c5869ff2d65e08d1b7821c97c58cb1be4f1c62363215f99f391d5441860295b530603b1976c54e83096e8942a43b55f24c3584a1f136a7f0d5ef95f557d2baecf95628bb94d7f1cf3bb70a37631af2938e91dbae32061fdb3e543e2c6ff3b003cf22fb97f78b59e0f97e9bae1ab06e67f32249b75ee87e1026f9856b9ed12135e6474800b00e9b304ac081713976ac37945d55ca0da28b9f4a6e2fb34cc12e8ab3f97cd3131eaa574858c0edc20098bbcd4fb98e10a3e1b88137d9b55cafe856a7fdfc52b870d13baf1025873d59cf7a73c4977ce2486005a2801c2f3b6ffd7ea4b95d6ea2d78a6b8b762c15ce619d64cf415ad208e6ecc922322251412bdafc6cc3bded6cf5b141f69a06ca222d18162d4caf3b70ba20407830be2a0b4d63fe3ea0aa668c4f6fe84bf98c2849de40db25fea70f0216c1df234e515b68fad8975e787c6c834aeff0fff9ddee36943907373d4d9b90554efd06020853cda7b28d77b515682678493081f7cf695cb23c20f791f36b8dcf209f4572de40de199fb323774b39d006299c24033a9670b63efaf60763843e57262aa2300cc3d8a00c41b1058d01496946d425e094c47feb6c05ac0e419af3519cedaeb69d798f6a8a0f6228be14c6896332eb4d233587d75107b472ec90573454d047feb3cce7ef7b4411c62bf805bc3c16d06d396546dfdff8e309cc97f47c0bdb1f145c961c1dbaae974296b1d9d726478d00bcda517db8ba710ea53e754f54181907b60c69b161145b437aa5fbb9cb55b7740dfd7ba18507369a582788206d9a513955b024c4b738adc72c93bb20a83787ba7736f66d7d0e201475050b7769b9083ccf66b34054fe8dd73023e9a936f67f2299dde07f5601a9e9fb478e1007824de649557be2676c8132ab6a20cc422a0dcec5828c240bebf8b8194c6077f70f7bc9f882693b9328512ec2f86c201661e1ac676feedb439ae38cb3bf0769348528540cf4c82fef3b38979639264d32966c4a54a829fdd28d21abe01d0d44999a3c70b8c216b90d375f0c73acaef274af90d96fed4394170f916780399a814b8684f0208626656a93f26fecdfa69ec34433d0021e96b4d977fe40c0a765cb9fb78f66b6098a49d450a87d515dbf467af3384e8ef356293bd4e8e2b06cfe5bbf6de5d393496d692029b083f8fb0f129be9007d4f1421c2398679f899357a97f9ca79ba1bb862d169e9d1ddf1d20accb950530f06e193db66724b3d12a0de09e9af272d4ca52b447d94b244407796fe08538bda0e9323bcbd9d6b3831bd80e2ab65786f1a2e8d64bb6a646514ac975068f70959a82f26a232da659eba634dab2d2c63fa0025079158bb5ff8f4da275099c68cf7bd59a6f440e6cd2bf313f846ec78194a8b22c1c9a106046cd5b01336d0bd9d6707397845b4033eb280b1f3c52d16efad9d488d4fe5c8052e78d992e155717719c49061927b0692340ad021438c71fac159817920b43ba0ac658720d8fe8b04a29c4dd0db5188c3951db8921426b2f1ec1b76d2c16d4d9b14eab6193a728fdb2f38ea193d6213337d1bed670afdab0d5d135b31dc60c0c900aa731ca0ef76cb26946d361b9beae8771c77115ed4d268190b60a2f4ffc1c5b5d30e6a996f9113352ac856a04bb42f0a6bd897f488698cd18a3367daf55b5487cbecee292a331fef96109bfa62eb7ed97a201401097123c8b06b7f8b90c0b195c2a40c74a19c4f0dd7e0a46da2f2a54b4082fa3ed2e7bcd64d394c1e60d219789623e03a70ea36decd1756cda599be2db946381a365c7795f960651b7e053201aafce20a270ec3470d7c13c0dac954b8dd8032c7668dc5740e8cb050dda39e286d211d63d9f8bc4f79838f5bbdd5d790b972dbba633b0bcd74a306ee02a0954741bcab06b3c78c61c95f1af9d10eb52b4e854764b0f78ffba56f4f83c15483105cc28c3a4f218b0f6bba100b545f1189a8103eac586eed81301eb70a7c446849d4cbcd9c521d10f70c6189ded9d8b48612d16a1a074564a67e882186da0c3828056aeb33ed98d6dbe5bbf591616f53edbd3684d7e393ed2ba808f1f5e434b970ab74ecdd616c703aaa4436e5fdec0dc44690ade613c8c99ba3033522025536e5b2d77102925eb1bb6970e5f9abcc0a4b2617169bafe95950fd4a7c02280a0ed2ca5096a1013fa62fb5200297e5e3a3ec64f8a80f268b08c37c051d7c8c2ac2499304d0cc9de38582ddb5710137aacf914c6567f9dbe33347723b4d2051b242bd50cca9ac78009202f6ecf8bae1415325f93581d82da36529ba569f00c1e62d2df4d1669cd62801448c1701ba8a53888de08e0618bc49e2d490e4dac43704fb8710d8e93d376d1179cf10fa18933fe975f266dfe45f53f92c7ddf32f71c74ed9f4c2c0bdca9d264ad8097c5939a0d8954156c75d8deeae5fa37178866622a700e50c9e7645ebeca7198ee248dd0ccbbc5e7ccd3c1afc9758b9b4d4926a7c391d0c2a13a0d87370de45409a380d6315fa2ce5adbf96c2f204bfec15beb54f053c638043030decfc8ff619944eefd96e378f2ee51a01234f8668b34aba36897896690616d499b7598d0b42072b07f217602cc8d43a3b44ac9d2bc19d3d1d3511365c53cafe8e412b2005ec908f2ca1fd00c0388e6e008ff968b735c0876c023430e12db4fa8e6f0fa6295de1779ca16aefaae37a8dd2aabac1fc14c67df6e287bf5bf0de1e00168996c58103088aa0e95b509ec834c68333a862cc5fefcb928772b32ad7d93abebc5c27b88d903f5d1902c248390ccc429ce0a0cd01b86e81d1dd62691a6b50a59fa51a44712dcb583b4281e9f764fc33c400a905fe890d239168091a56935dec0b071ed151c130f6c49b4b22ccb3152ebed7c7c85808d8d0e59550db98eb98242fb05f7e462bd4aa8ee010cbcdc23d4bbfb70f8538f2923a7078efdefbbb31c926fa2bac21aa99f666bc0073e57811255014bd3e9427515b61738ea4d8fd60276062343a2137fadddac497cdbc85fc23d63bf4adadb210cd8e2aa5caa39e81fbf1f5bab85f3ee5a741fb7f6bada7633efb46677b34aa3a49c60320f7ef436c0a02e89d5324daf7a3dc9c86b26f7bdc344b00b97a540924afcbbe671a3990b5d0a4621732580e04e1c4e7050b4759b37110570191a899afa12ff950d8b2066f4d57e5a210e9aa5ea70ab0e542cba52feed3e9b468f1b49d1b10ac4f0f7ccadace4b61f1b8a688bc0bbbf08e76199b889c7ed3e51100c3887fd0b85e0bdf97513b7997e1432192a9b16626ec183926da4783d222d804ad4d7cab74edae4113ae2af3d945f1ce16ff5df7cff5bc1a16b8c821dfaeff3e8c26d31472e71314bdec810496545877a18a66558e583b636fbf532c1f4f49f8d787ff1a3d44dbd1c971f9b3cd5489fb9c8c7e051e588ae5a5c1d1825aa8057296c85e3eaa019640475ebccb07896ea63c9d52aaf3ccf4322b8818a72ea93a91411009d938ef50b0febd075451ed490981aa22af8cf7f6893a1fae385b98d7b9c5103811a614ba05d6c8c2183ab4e209453a1991d9dcca6684b0290f53f9698edf8ce66765a0c360cbbcb885996ab7717b558776604b1844434e0d76ae2e51a7721b447e6e1b654f545944f8a68b72a24020a18292009717acd9ed1c1964e2fb8f147a8ec890078389cc7aed9d179306d00588bf2c5de4133e47722a9cde447adb3991c600e94b507702c4d03fb100c06e83ea6e5f94b3c729ecaa59cb5ead61507270fca669f126fc93ee038c9e9674cd8216df2b09129e0f1531b0c2538c7c8dd7fdf7f4fc5446166ee7cbad06caaf0c8c2e1b3e1ee60f516cafd189451d96f797ffc53897a5f19352e87bdb68cb728b1feacd7106acd6ad22944249fe9afc194e384c54569b940b3511a4f313f7159f6c52349112c2616914c4097fb5e98d448f001db1d1cc0ed28eb311aca71d4385826982ed170f3f3d0007b93e13bfc1952a2146de7b85a8f913f2708de08660ac53e02b837a63bf02c5699cf938340c52e1509bd26bb39e86fa30d3be2a4e8d5a371e2b730b5bacb3789f63a1050848a4eb16350e3cdaafed0d92d31c5585cd37e7f581547702e7d8148097b651b2c449ed53a2cc6a744b186565413a0e803f0a01d896e9bea217014416c12664a343c2492d8acdda4a254c3a090af6b422a27cebcfccecb1166affdf8fc77aad4457d5dfa1a1025232a4fbd3714525e1bdbe205eed8d1d73fb14b0e67f08ca2461a2fa8a3a28114cd87547a6d56197d2fa3788985457a5df3b4055dcb76b4cf9868ddefdabfc35275309bf26e0cb92ee5c252a9639f3eaa604f796eb36e1bbe7385f538e5ca2713ec80efc455458a7881d406bb8d9ad3dd405c0c8a84c4d08649a4b71e56587403d803988c5dda350dc417a466c732a779dd1374eb00984cc27b82e1a409e84cb376c27686cfd39cd5976849d2b62778127811dfdfb8340016efdf7e87c65639dbac756401d0d272329f4f2e5eb6fe6a36482202406817fa61d0a1053858fa127f1422be47b31b4d9b96b73484b0959e8b1ed896cbf64a6e93a2ffddc0db1d0b638018e6cc3afcf787a6eb3dac04d0035b6195c90a52c3da4d3420d31915b94f60f9af7a79fea0ba661992e24106a653124eae88b795798b4234f880f868f4953fa2651ae3da8657117a8921a0d19ea1a1c37a4766ff76911af8454bc295b718b9097974a7f66114a8759c47f3e5ccda81d14753090889d574184378fa4042e03d86810f6d94c3f61007a39b8c319f799039ee94e4cce5d59396a850a478925fc44aba4c602c2b62bea6b3db183c38b9cdb76a92770263b4c8d1a0caebe7141f306d07b30ef6b112088cea94bc9a8e9de007aca1caab9075f573546d4358642515602081b55d940a9f4aa654772b003ad839df6a384ded2bae2020f5f5f801796c260db96ff9381fb6f0767e5d18f0647b91fdaa3ed5a66212b3fb7a12e621a6baa0132c2f6e7674c25124c0f0a28455298269b3cbe61106f49a45b78519b37407b4a372294834d4cd6c6cb73de537cfb6a6525303d042212b66e7e71bbae1b3c4dc03278e8b51d4ace6ea5b3aab679e586a4487ec9873136ab29544fb9666d1a81935c1c05f21f7051790dcfe3fbaa0e3f19beecad449939e78e593763bf4e1fec0c5e0f2e18604bb55e941b433b74cb003c428ffde37d9e644abfcc0d2535ca64e973ef7cc9cdc369cd85c4886baf15f8c798237d3d7475bad4408eb150e9275e3a028ff94e0ae4a0d27cb2475ffedf238e51b825daa6686122c4a5e5f77b3b19ab0663a0bdac2c31669f3bc1d6023f17e05ed61a3f95eff867f0e34b352cc10e105ff8b0147d8f151d24a21114067fedcb263944758d84573566d19fab4f3695c40b176d733b", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:49:10 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) [ 1998.718200] FAULT_INJECTION: forcing a failure. [ 1998.718200] name failslab, interval 1, probability 0, space 0, times 0 [ 1998.721086] CPU: 0 PID: 10342 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1998.722842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1998.724940] Call Trace: [ 1998.725623] dump_stack+0x107/0x167 [ 1998.726545] should_fail.cold+0x5/0xa [ 1998.727505] ? io_uring_setup+0x258/0x2980 [ 1998.728577] should_failslab+0x5/0x20 [ 1998.729547] kmem_cache_alloc_trace+0x55/0x320 [ 1998.730698] io_uring_setup+0x258/0x2980 [ 1998.731739] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1998.732968] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1998.734250] ? wait_for_completion_io+0x270/0x270 [ 1998.735486] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1998.736806] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1998.738095] do_syscall_64+0x33/0x40 [ 1998.739034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1998.740327] RIP: 0033:0x7f55325f0b19 [ 1998.741254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1998.745167] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1998.746723] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 1998.748184] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 1998.749675] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 1998.751148] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 1998.752608] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:49:10 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xffffffffffffb, 0x80012, r0, 0x0) 12:49:10 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) 12:49:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r0, 0x4) sendfile(r0, r1, 0x0, 0x100000001) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000), 0x4) syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) r5 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58af, 0x0, 0x2, 0x0, 0x0) io_uring_enter(r5, 0x3747, 0xd8ae, 0x1, &(0x7f0000000180)={[0xffffffff00000001]}, 0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x6d9b, &(0x7f0000000040)={0x0, 0x5b53, 0x20, 0x1, 0x3a1, 0x0, r0}, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) 12:49:10 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x40000000000000, 0x80012, r0, 0x0) 12:49:10 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) read$usbmon(r0, &(0x7f00000000c0)=""/229, 0xe5) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000080)={&(0x7f0000000000), &(0x7f0000000040)=""/63, 0x3f}) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) 12:49:10 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) [ 1998.845769] loop0: detected capacity change from 0 to 32768 12:49:10 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x80000000000000, 0x80012, r0, 0x0) 12:49:10 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 3) [ 1998.899929] FAULT_INJECTION: forcing a failure. [ 1998.899929] name failslab, interval 1, probability 0, space 0, times 0 [ 1998.901301] CPU: 1 PID: 10368 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 1998.902105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1998.903068] Call Trace: [ 1998.903375] dump_stack+0x107/0x167 [ 1998.903791] should_fail.cold+0x5/0xa [ 1998.904227] ? create_object.isra.0+0x3a/0xa30 [ 1998.904756] should_failslab+0x5/0x20 [ 1998.905189] kmem_cache_alloc+0x5b/0x310 [ 1998.905671] create_object.isra.0+0x3a/0xa30 [ 1998.906173] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1998.906757] kmem_cache_alloc_trace+0x151/0x320 [ 1998.907295] io_uring_setup+0x258/0x2980 [ 1998.907760] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1998.908317] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1998.908890] ? wait_for_completion_io+0x270/0x270 [ 1998.909453] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1998.910174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1998.910859] do_syscall_64+0x33/0x40 [ 1998.911289] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1998.911880] RIP: 0033:0x7f55325f0b19 [ 1998.912306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1998.914431] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1998.915299] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 1998.916115] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 1998.916930] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 1998.917749] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 1998.918562] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:49:22 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x3fffffffffb, 0x1a4c2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(r0, r1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) 12:49:22 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r2, 0x0) dup2(r1, r0) 12:49:22 executing program 2: r0 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x5a081, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x96) r4 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r0, 0x200}, {r1, 0x2000}, {r2, 0x4004}, {0xffffffffffffffff, 0xc410}, {r3, 0xb145}, {0xffffffffffffffff, 0x285}, {r4, 0x8020}, {0xffffffffffffffff, 0x204}, {0xffffffffffffffff, 0x108}], 0x9, &(0x7f0000000300)={r5, r6+60000000}, &(0x7f0000000340)={[0x4]}, 0x8) r7 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x200000) read$usbmon(r8, &(0x7f0000000040)=""/93, 0x5d) 12:49:22 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 4) [ 2010.758506] FAULT_INJECTION: forcing a failure. [ 2010.758506] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2010.759924] CPU: 1 PID: 10383 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2010.760729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2010.761677] Call Trace: [ 2010.761990] dump_stack+0x107/0x167 [ 2010.762413] should_fail.cold+0x5/0xa [ 2010.762846] __alloc_pages_nodemask+0x182/0x600 [ 2010.763387] ? lock_release+0x680/0x680 [ 2010.763844] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2010.764544] ? lock_downgrade+0x6d0/0x6d0 [ 2010.765017] alloc_pages_current+0x187/0x280 [ 2010.765531] kmalloc_order+0x35/0x160 [ 2010.765981] kmalloc_order_trace+0x14/0xa0 [ 2010.766471] io_uring_setup+0x33c/0x2980 [ 2010.766940] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2010.767498] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2010.768084] ? wait_for_completion_io+0x270/0x270 [ 2010.768652] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2010.769256] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2010.769844] do_syscall_64+0x33/0x40 [ 2010.770277] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2010.770872] RIP: 0033:0x7f55325f0b19 [ 2010.771291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2010.773429] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2010.774292] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2010.775115] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2010.775919] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2010.776743] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2010.777548] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:49:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000000000000, 0x80012, r0, 0x0) 12:49:22 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:49:22 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) 12:49:22 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="90f23ee48414c664c5a43f762e4c066fb46c651599634978ad436839c78464320b6c96b3b20424870f3c2c06ff5d7954554895fb52ffeef44cb8428f018a7311e03dc310105175dc9c0211c4c3d97278f61e53c32677695a579612fbb8f5ba448869626a4ccaeaae7114a481e103e8e43576e44b8a1a88966a66b6e6b4868bf5132cbfb5bc28aa11f6dcafe94048bd40f1c5f93a760b22174a742576098c9f3a6cacab94927a4600b7455033a85d92450a398e67a065f49012273455707ce4f6ac3de7ab8003c8cdf8491d17087e25e66d7112c059f9f340c35262df6b049113566fbdd3f51963793385ba78d21a42e3a68ed5c340c7ae8e7c2912decbc2e8175a88728d5aaf4822588b5fc88aee41ed9174cc588c519b0c5869ff2d65e08d1b7821c97c58cb1be4f1c62363215f99f391d5441860295b530603b1976c54e83096e8942a43b55f24c3584a1f136a7f0d5ef95f557d2baecf95628bb94d7f1cf3bb70a37631af2938e91dbae32061fdb3e543e2c6ff3b003cf22fb97f78b59e0f97e9bae1ab06e67f32249b75ee87e1026f9856b9ed12135e6474800b00e9b304ac081713976ac37945d55ca0da28b9f4a6e2fb34cc12e8ab3f97cd3131eaa574858c0edc20098bbcd4fb98e10a3e1b88137d9b55cafe856a7fdfc52b870d13baf1025873d59cf7a73c4977ce2486005a2801c2f3b6ffd7ea4b95d6ea2d78a6b8b762c15ce619d64cf415ad208e6ecc922322251412bdafc6cc3bded6cf5b141f69a06ca222d18162d4caf3b70ba20407830be2a0b4d63fe3ea0aa668c4f6fe84bf98c2849de40db25fea70f0216c1df234e515b68fad8975e787c6c834aeff0fff9ddee36943907373d4d9b90554efd06020853cda7b28d77b515682678493081f7cf695cb23c20f791f36b8dcf209f4572de40de199fb323774b39d006299c24033a9670b63efaf60763843e57262aa2300cc3d8a00c41b1058d01496946d425e094c47feb6c05ac0e419af3519cedaeb69d798f6a8a0f6228be14c6896332eb4d233587d75107b472ec90573454d047feb3cce7ef7b4411c62bf805bc3c16d06d396546dfdff8e309cc97f47c0bdb1f145c961c1dbaae974296b1d9d726478d00bcda517db8ba710ea53e754f54181907b60c69b161145b437aa5fbb9cb55b7740dfd7ba18507369a582788206d9a513955b024c4b738adc72c93bb20a83787ba7736f66d7d0e201475050b7769b9083ccf66b34054fe8dd73023e9a936f67f2299dde07f5601a9e9fb478e1007824de649557be2676c8132ab6a20cc422a0dcec5828c240bebf8b8194c6077f70f7bc9f882693b9328512ec2f86c201661e1ac676feedb439ae38cb3bf0769348528540cf4c82fef3b38979639264d32966c4a54a829fdd28d21abe01d0d44999a3c70b8c216b90d375f0c73acaef274af90d96fed4394170f916780399a814b8684f0208626656a93f26fecdfa69ec34433d0021e96b4d977fe40c0a765cb9fb78f66b6098a49d450a87d515dbf467af3384e8ef356293bd4e8e2b06cfe5bbf6de5d393496d692029b083f8fb0f129be9007d4f1421c2398679f899357a97f9ca79ba1bb862d169e9d1ddf1d20accb950530f06e193db66724b3d12a0de09e9af272d4ca52b447d94b244407796fe08538bda0e9323bcbd9d6b3831bd80e2ab65786f1a2e8d64bb6a646514ac975068f70959a82f26a232da659eba634dab2d2c63fa0025079158bb5ff8f4da275099c68cf7bd59a6f440e6cd2bf313f846ec78194a8b22c1c9a106046cd5b01336d0bd9d6707397845b4033eb280b1f3c52d16efad9d488d4fe5c8052e78d992e155717719c49061927b0692340ad021438c71fac159817920b43ba0ac658720d8fe8b04a29c4dd0db5188c3951db8921426b2f1ec1b76d2c16d4d9b14eab6193a728fdb2f38ea193d6213337d1bed670afdab0d5d135b31dc60c0c900aa731ca0ef76cb26946d361b9beae8771c77115ed4d268190b60a2f4ffc1c5b5d30e6a996f9113352ac856a04bb42f0a6bd897f488698cd18a3367daf55b5487cbecee292a331fef96109bfa62eb7ed97a201401097123c8b06b7f8b90c0b195c2a40c74a19c4f0dd7e0a46da2f2a54b4082fa3ed2e7bcd64d394c1e60d219789623e03a70ea36decd1756cda599be2db946381a365c7795f960651b7e053201aafce20a270ec3470d7c13c0dac954b8dd8032c7668dc5740e8cb050dda39e286d211d63d9f8bc4f79838f5bbdd5d790b972dbba633b0bcd74a306ee02a0954741bcab06b3c78c61c95f1af9d10eb52b4e854764b0f78ffba56f4f83c15483105cc28c3a4f218b0f6bba100b545f1189a8103eac586eed81301eb70a7c446849d4cbcd9c521d10f70c6189ded9d8b48612d16a1a074564a67e882186da0c3828056aeb33ed98d6dbe5bbf591616f53edbd3684d7e393ed2ba808f1f5e434b970ab74ecdd616c703aaa4436e5fdec0dc44690ade613c8c99ba3033522025536e5b2d77102925eb1bb6970e5f9abcc0a4b2617169bafe95950fd4a7c02280a0ed2ca5096a1013fa62fb5200297e5e3a3ec64f8a80f268b08c37c051d7c8c2ac2499304d0cc9de38582ddb5710137aacf914c6567f9dbe33347723b4d2051b242bd50cca9ac78009202f6ecf8bae1415325f93581d82da36529ba569f00c1e62d2df4d1669cd62801448c1701ba8a53888de08e0618bc49e2d490e4dac43704fb8710d8e93d376d1179cf10fa18933fe975f266dfe45f53f92c7ddf32f71c74ed9f4c2c0bdca9d264ad8097c5939a0d8954156c75d8deeae5fa37178866622a700e50c9e7645ebeca7198ee248dd0ccbbc5e7ccd3c1afc9758b9b4d4926a7c391d0c2a13a0d87370de45409a380d6315fa2ce5adbf96c2f204bfec15beb54f053c638043030decfc8ff619944eefd96e378f2ee51a01234f8668b34aba36897896690616d499b7598d0b42072b07f217602cc8d43a3b44ac9d2bc19d3d1d3511365c53cafe8e412b2005ec908f2ca1fd00c0388e6e008ff968b735c0876c023430e12db4fa8e6f0fa6295de1779ca16aefaae37a8dd2aabac1fc14c67df6e287bf5bf0de1e00168996c58103088aa0e95b509ec834c68333a862cc5fefcb928772b32ad7d93abebc5c27b88d903f5d1902c248390ccc429ce0a0cd01b86e81d1dd62691a6b50a59fa51a44712dcb583b4281e9f764fc33c400a905fe890d239168091a56935dec0b071ed151c130f6c49b4b22ccb3152ebed7c7c85808d8d0e59550db98eb98242fb05f7e462bd4aa8ee010cbcdc23d4bbfb70f8538f2923a7078efdefbbb31c926fa2bac21aa99f666bc0073e57811255014bd3e9427515b61738ea4d8fd60276062343a2137fadddac497cdbc85fc23d63bf4adadb210cd8e2aa5caa39e81fbf1f5bab85f3ee5a741fb7f6bada7633efb46677b34aa3a49c60320f7ef436c0a02e89d5324daf7a3dc9c86b26f7bdc344b00b97a540924afcbbe671a3990b5d0a4621732580e04e1c4e7050b4759b37110570191a899afa12ff950d8b2066f4d57e5a210e9aa5ea70ab0e542cba52feed3e9b468f1b49d1b10ac4f0f7ccadace4b61f1b8a688bc0bbbf08e76199b889c7ed3e51100c3887fd0b85e0bdf97513b7997e1432192a9b16626ec183926da4783d222d804ad4d7cab74edae4113ae2af3d945f1ce16ff5df7cff5bc1a16b8c821dfaeff3e8c26d31472e71314bdec810496545877a18a66558e583b636fbf532c1f4f49f8d787ff1a3d44dbd1c971f9b3cd5489fb9c8c7e051e588ae5a5c1d1825aa8057296c85e3eaa019640475ebccb07896ea63c9d52aaf3ccf4322b8818a72ea93a91411009d938ef50b0febd075451ed490981aa22af8cf7f6893a1fae385b98d7b9c5103811a614ba05d6c8c2183ab4e209453a1991d9dcca6684b0290f53f9698edf8ce66765a0c360cbbcb885996ab7717b558776604b1844434e0d76ae2e51a7721b447e6e1b654f545944f8a68b72a24020a18292009717acd9ed1c1964e2fb8f147a8ec890078389cc7aed9d179306d00588bf2c5de4133e47722a9cde447adb3991c600e94b507702c4d03fb100c06e83ea6e5f94b3c729ecaa59cb5ead61507270fca669f126fc93ee038c9e9674cd8216df2b09129e0f1531b0c2538c7c8dd7fdf7f4fc5446166ee7cbad06caaf0c8c2e1b3e1ee60f516cafd189451d96f797ffc53897a5f19352e87bdb68cb728b1feacd7106acd6ad22944249fe9afc194e384c54569b940b3511a4f313f7159f6c52349112c2616914c4097fb5e98d448f001db1d1cc0ed28eb311aca71d4385826982ed170f3f3d0007b93e13bfc1952a2146de7b85a8f913f2708de08660ac53e02b837a63bf02c5699cf938340c52e1509bd26bb39e86fa30d3be2a4e8d5a371e2b730b5bacb3789f63a1050848a4eb16350e3cdaafed0d92d31c5585cd37e7f581547702e7d8148097b651b2c449ed53a2cc6a744b186565413a0e803f0a01d896e9bea217014416c12664a343c2492d8acdda4a254c3a090af6b422a27cebcfccecb1166affdf8fc77aad4457d5dfa1a1025232a4fbd3714525e1bdbe205eed8d1d73fb14b0e67f08ca2461a2fa8a3a28114cd87547a6d56197d2fa3788985457a5df3b4055dcb76b4cf9868ddefdabfc35275309bf26e0cb92ee5c252a9639f3eaa604f796eb36e1bbe7385f538e5ca2713ec80efc455458a7881d406bb8d9ad3dd405c0c8a84c4d08649a4b71e56587403d803988c5dda350dc417a466c732a779dd1374eb00984cc27b82e1a409e84cb376c27686cfd39cd5976849d2b62778127811dfdfb8340016efdf7e87c65639dbac756401d0d272329f4f2e5eb6fe6a36482202406817fa61d0a1053858fa127f1422be47b31b4d9b96b73484b0959e8b1ed896cbf64a6e93a2ffddc0db1d0b638018e6cc3afcf787a6eb3dac04d0035b6195c90a52c3da4d3420d31915b94f60f9af7a79fea0ba661992e24106a653124eae88b795798b4234f880f868f4953fa2651ae3da8657117a8921a0d19ea1a1c37a4766ff76911af8454bc295b718b9097974a7f66114a8759c47f3e5ccda81d14753090889d574184378fa4042e03d86810f6d94c3f61007a39b8c319f799039ee94e4cce5d59396a850a478925fc44aba4c602c2b62bea6b3db183c38b9cdb76a92770263b4c8d1a0caebe7141f306d07b30ef6b112088cea94bc9a8e9de007aca1caab9075f573546d4358642515602081b55d940a9f4aa654772b003ad839df6a384ded2bae2020f5f5f801796c260db96ff9381fb6f0767e5d18f0647b91fdaa3ed5a66212b3fb7a12e621a6baa0132c2f6e7674c25124c0f0a28455298269b3cbe61106f49a45b78519b37407b4a372294834d4cd6c6cb73de537cfb6a6525303d042212b66e7e71bbae1b3c4dc03278e8b51d4ace6ea5b3aab679e586a4487ec9873136ab29544fb9666d1a81935c1c05f21f7051790dcfe3fbaa0e3f19beecad449939e78e593763bf4e1fec0c5e0f2e18604bb55e941b433b74cb003c428ffde37d9e644abfcc0d2535ca64e973ef7cc9cdc369cd85c4886baf15f8c798237d3d7475bad4408eb150e9275e3a028ff94e0ae4a0d27cb2475ffedf238e51b825daa6686122c4a5e5f77b3b19ab0663a0bdac2c31669f3bc1d6023f17e05ed61a3f95eff867f0e34b352cc10e105ff8b0147d8f151d24a21114067fedcb263944758d84573566d19fab4f3695c40b176d733b", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:49:22 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) 12:49:22 executing program 4: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xffffffc4}) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x82, 0x7, 0x1, 0x3f, 0x0, 0x80, 0x42808, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8ea, 0x1, @perf_config_ext={0x9}, 0x40000, 0xf3c, 0xfffffff7, 0x6, 0xdd0, 0x1000, 0x2, 0x0, 0xffff8000, 0x0, 0x7}, r0, 0xc, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x400) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x40, 0x40, 0x45, 0x2, 0x0, 0x101, 0x4008, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1000, 0x5, @perf_bp={&(0x7f0000000180), 0x2}, 0x4214, 0x5, 0x1c2, 0x9, 0x1, 0x2, 0x1, 0x0, 0x7fffffff, 0x0, 0x1f}, 0xffffffffffffffff, 0xf, r1, 0xb) r2 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x80) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000340)={&(0x7f0000000080), &(0x7f00000000c0)=""/136, 0x88}) r4 = syz_io_uring_setup(0x783e, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r4, r2) fsetxattr$security_selinux(r2, &(0x7f00000001c0), &(0x7f0000000240)='system_u:object_r:login_exec_t:s0\x00', 0x22, 0x1) syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x800) 12:49:22 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) 12:49:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000000000000, 0x80012, r0, 0x0) 12:49:22 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:49:22 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 5) 12:49:22 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0xee6d8000) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) 12:49:22 executing program 6: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, 0xffffffffffffffff, 0x0) [ 2010.918704] FAULT_INJECTION: forcing a failure. [ 2010.918704] name failslab, interval 1, probability 0, space 0, times 0 [ 2010.920108] CPU: 1 PID: 10413 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2010.920909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2010.921887] Call Trace: [ 2010.922203] dump_stack+0x107/0x167 [ 2010.922626] should_fail.cold+0x5/0xa [ 2010.923069] ? create_object.isra.0+0x3a/0xa30 [ 2010.923603] should_failslab+0x5/0x20 [ 2010.924047] kmem_cache_alloc+0x5b/0x310 [ 2010.924525] create_object.isra.0+0x3a/0xa30 [ 2010.925034] ? kasan_unpoison_shadow+0x33/0x50 [ 2010.925570] kmalloc_order+0xfe/0x160 [ 2010.926008] kmalloc_order_trace+0x14/0xa0 [ 2010.926501] io_uring_setup+0x33c/0x2980 [ 2010.926979] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2010.927531] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2010.928114] ? wait_for_completion_io+0x270/0x270 [ 2010.928685] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2010.929298] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2010.929918] do_syscall_64+0x33/0x40 [ 2010.930343] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2010.930929] RIP: 0033:0x7f55325f0b19 [ 2010.931366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2010.933491] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2010.934378] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2010.935200] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2010.936022] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2010.936842] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2010.937673] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2010.958231] loop0: detected capacity change from 0 to 32768 12:49:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x400000000000000, 0x80012, r0, 0x0) 12:49:22 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x99) [ 2022.766852] FAULT_INJECTION: forcing a failure. [ 2022.766852] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.769610] CPU: 0 PID: 10436 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2022.771274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.773238] Call Trace: [ 2022.773874] dump_stack+0x107/0x167 [ 2022.774737] should_fail.cold+0x5/0xa [ 2022.775642] ? io_uring_setup+0x40b/0x2980 [ 2022.776642] should_failslab+0x5/0x20 [ 2022.777544] kmem_cache_alloc_trace+0x55/0x320 [ 2022.778645] io_uring_setup+0x40b/0x2980 [ 2022.779606] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2022.780748] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2022.781955] ? wait_for_completion_io+0x270/0x270 [ 2022.783118] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.784359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.785583] do_syscall_64+0x33/0x40 [ 2022.786473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.787683] RIP: 0033:0x7f55325f0b19 [ 2022.788559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.792897] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2022.794693] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2022.796368] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2022.798052] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2022.799730] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2022.801408] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:49:34 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:49:34 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x101482) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x3}) read$usbmon(r0, &(0x7f0000000000)=""/252, 0xfc) 12:49:34 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) 12:49:34 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 6) 12:49:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa00000000000000, 0x80012, r0, 0x0) 12:49:34 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) r3 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r6 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) dup2(r3, r1) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x10000) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x7, 0xef9, &(0x7f0000000240)=[{&(0x7f0000000000)="e1851e8dcfd2c1bd99dc010b16ef1c30e3b0efe71a7d35758d60ca54994c84e6b57c1c46b4ed3817a777dcc2f6453db717b18824975c4308e7d6ad13eb25e8ed38acc012428f298f59e5d2d37924f270408887ffb4ff13090abb25d60ae418ec3b4cbb1a454e170bcfaa9580f050bf275066799b4a48c45726c1937b30100dfa686b4a4b4fe21ea27c5ec891", 0x8c}, {&(0x7f00000000c0)="df0fa1c677f20a83c85249bdf2d1f5ab475a68a61e9095492283d95cad60f2d2c4a56809164c38aca0a9ec3f130c526bb1fe797308d6b1f8779e389972df7c07426619a3e5c6ed949ea4b67b2904a5c57e7d9c0f9ba002aca77e2d605f661b03c9a2a79df67e51b98cab509f4177c1662bcf1e7a079f8374ebf0cffd990582d5852b7fb4cf1c4ce7947b9f2083b24e7df1e9ec251470e3bf919684139b2ef9eb3baf074bad271396f09880db35c64bf9a2f9806f96f5e06a3ebed2c0ea9cc4743add2bbe67d76c5af5e19d05b6799d85f79232266fa0bae4", 0xd8}, {&(0x7f00000001c0)="a9", 0x1}], 0x3, 0x1, 0x1, {0x1, r11}}, 0x4) dup2(r1, r0) 12:49:34 executing program 6: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, 0xffffffffffffffff, 0x0) 12:49:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2800000000000000, 0x80012, r0, 0x0) 12:49:34 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x2010, r1, 0x5a684000) r2 = syz_io_uring_setup(0x717, &(0x7f0000000580)={0x0, 0x0, 0x8, 0x2000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r4, 0x4) sendfile(r4, r5, 0x0, 0x100000001) read$usbmon(r4, &(0x7f0000000040)=""/118, 0x76) r6 = dup2(r2, r0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x10, r6, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1ff, 0x1, 0x0, {0x0, 0x0, r0}}, 0xfff) 12:49:34 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0xfffffffffffffffc, 0x200040) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) read$usbmon(r0, &(0x7f00000000c0)=""/75, 0x4b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22000, 0x10a) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x1f}) 12:49:34 executing program 6: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, 0xffffffffffffffff, 0x0) 12:49:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xfbffffffffff0f00, 0x80012, r0, 0x0) 12:49:34 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:49:34 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x9208, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x18, 0x32, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4, 0x1}]}, 0x18}}, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000000), &(0x7f0000000040)=""/160, 0xa0}) [ 2022.889417] tc_dump_action: action bad kind 12:49:49 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 1) 12:49:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x2) 12:49:49 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x200, 0x5e1182) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:49:49 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 7) 12:49:49 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) (fail_nth: 1) [ 2038.114220] FAULT_INJECTION: forcing a failure. 12:49:49 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r0, 0xf799, 0x8a, 0xffffffffffffff01}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x20, 0x2, 0xff, 0x1, 0x0, 0x7, 0x40, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x3, 0x80000001}, 0x2600, 0x80000001, 0x26e, 0x8, 0x3, 0xd959, 0x8001, 0x0, 0x7, 0x0, 0x80000}, 0x0, 0xc, r2, 0xa) syz_io_uring_setup(0x1df1, &(0x7f0000000000)={0x0, 0x8be1, 0x8, 0x1, 0x25f}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 2038.114220] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.117158] CPU: 0 PID: 10481 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 2038.118691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 12:49:49 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:49:49 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) [ 2038.120536] Call Trace: [ 2038.121145] dump_stack+0x107/0x167 [ 2038.121939] should_fail.cold+0x5/0xa [ 2038.122774] ? vm_area_dup+0x78/0x290 [ 2038.123605] should_failslab+0x5/0x20 [ 2038.124438] kmem_cache_alloc+0x5b/0x310 [ 2038.125333] vm_area_dup+0x78/0x290 [ 2038.126139] ? kernel_text_address+0xf2/0x120 [ 2038.127124] ? mark_lock+0xf5/0x2df0 [ 2038.127944] ? lock_chain_count+0x20/0x20 [ 2038.128848] ? avc_has_extended_perms+0xf40/0xf40 [ 2038.129905] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 2038.130920] ? lock_downgrade+0x6d0/0x6d0 [ 2038.131824] ? __lock_acquire+0x1657/0x5b00 [ 2038.132775] ? vm_area_alloc+0x110/0x110 [ 2038.133667] ? __lock_acquire+0x1657/0x5b00 [ 2038.134627] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2038.135764] ? vmacache_find+0x55/0x2a0 [ 2038.136625] __split_vma+0xa8/0x4e0 [ 2038.137417] __do_munmap+0x365/0x1260 [ 2038.138255] ? arch_get_unmapped_area+0x450/0x450 [ 2038.139298] mmap_region+0x7cc/0x1500 [ 2038.140129] do_mmap+0x868/0x1370 [ 2038.140887] vm_mmap_pgoff+0x198/0x1f0 [ 2038.141736] ? randomize_page+0xb0/0xb0 [ 2038.142610] ksys_mmap_pgoff+0x41c/0x560 [ 2038.143487] ? find_mergeable_anon_vma+0x250/0x250 [ 2038.144586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.145753] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.146862] do_syscall_64+0x33/0x40 [ 2038.147663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.148761] RIP: 0033:0x7fe76baefb19 [ 2038.149562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.153543] RSP: 002b:00007fe769065188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2038.154217] FAULT_INJECTION: forcing a failure. [ 2038.154217] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.155206] RAX: ffffffffffffffda RBX: 00007fe76bc02f60 RCX: 00007fe76baefb19 [ 2038.158149] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 2038.159680] RBP: 00007fe7690651d0 R08: 0000000000000003 R09: 0000000000000000 [ 2038.161194] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000001 [ 2038.162722] R13: 00007ffda63d3c6f R14: 00007fe769065300 R15: 0000000000022000 [ 2038.164262] CPU: 1 PID: 10486 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2038.165125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.166163] Call Trace: [ 2038.166492] dump_stack+0x107/0x167 [ 2038.166935] should_fail.cold+0x5/0xa [ 2038.167400] ? mon_bin_ioctl+0x46f/0xcc0 [ 2038.167890] should_failslab+0x5/0x20 [ 2038.168350] __kmalloc+0x72/0x390 [ 2038.168773] mon_bin_ioctl+0x46f/0xcc0 [ 2038.169247] ? wait_for_completion_io+0x270/0x270 [ 2038.169855] ? mon_bin_get_event+0x440/0x440 [ 2038.170394] ? selinux_file_ioctl+0xb6/0x270 [ 2038.170938] ? mon_bin_get_event+0x440/0x440 [ 2038.171480] __x64_sys_ioctl+0x19a/0x210 [ 2038.171975] do_syscall_64+0x33/0x40 [ 2038.172434] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.173057] RIP: 0033:0x7f6bde1e2b19 [ 2038.173564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.175808] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2038.176733] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2038.177599] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2038.178477] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2038.179339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2038.180203] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2038.183400] FAULT_INJECTION: forcing a failure. 12:49:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x4) [ 2038.183400] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.186267] CPU: 0 PID: 10491 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2038.187752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.189519] Call Trace: [ 2038.190095] dump_stack+0x107/0x167 [ 2038.190874] should_fail.cold+0x5/0xa [ 2038.191685] ? create_object.isra.0+0x3a/0xa30 [ 2038.192656] should_failslab+0x5/0x20 [ 2038.193467] kmem_cache_alloc+0x5b/0x310 [ 2038.194346] create_object.isra.0+0x3a/0xa30 [ 2038.195279] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2038.196365] kmem_cache_alloc_trace+0x151/0x320 [ 2038.197363] io_uring_setup+0x40b/0x2980 [ 2038.198265] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2038.199310] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2038.200379] ? wait_for_completion_io+0x270/0x270 [ 2038.201422] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.202533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.203627] do_syscall_64+0x33/0x40 [ 2038.204413] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.205498] RIP: 0033:0x7f55325f0b19 12:49:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0xa) [ 2038.206308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.210273] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2038.211879] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2038.213384] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2038.214924] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2038.216431] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2038.217941] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:49:49 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 2) 12:49:49 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x48e81) syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x521401) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000040), &(0x7f0000000300)=""/144, 0x90}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) [ 2038.259095] FAULT_INJECTION: forcing a failure. [ 2038.259095] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.260508] CPU: 1 PID: 10504 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2038.261317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.262299] Call Trace: [ 2038.262610] dump_stack+0x107/0x167 [ 2038.263037] should_fail.cold+0x5/0xa [ 2038.263488] ? create_object.isra.0+0x3a/0xa30 [ 2038.264027] should_failslab+0x5/0x20 [ 2038.264474] kmem_cache_alloc+0x5b/0x310 [ 2038.264952] create_object.isra.0+0x3a/0xa30 [ 2038.265467] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2038.266073] __kmalloc+0x16e/0x390 [ 2038.266495] mon_bin_ioctl+0x46f/0xcc0 [ 2038.266951] ? wait_for_completion_io+0x270/0x270 [ 2038.267516] ? mon_bin_get_event+0x440/0x440 [ 2038.268039] ? selinux_file_ioctl+0xb6/0x270 [ 2038.268557] ? mon_bin_get_event+0x440/0x440 [ 2038.269079] __x64_sys_ioctl+0x19a/0x210 [ 2038.269558] do_syscall_64+0x33/0x40 [ 2038.270008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.270612] RIP: 0033:0x7f6bde1e2b19 [ 2038.271044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.273188] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2038.274089] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2038.274918] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2038.275748] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2038.276578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2038.277412] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:49:49 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000040)={0x0, 0xf5d3, 0x0, 0x3, 0x31f}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) dup2(r1, r0) 12:49:49 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:49:49 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) (fail_nth: 2) 12:49:49 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 8) 12:49:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x28) 12:49:49 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x76]}, 0x8) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000080)={&(0x7f0000000040), &(0x7f0000000180)=""/4096, 0x1000}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) [ 2038.369206] FAULT_INJECTION: forcing a failure. [ 2038.369206] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.371736] CPU: 0 PID: 10511 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 2038.373188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.374955] Call Trace: [ 2038.375520] dump_stack+0x107/0x167 [ 2038.376293] should_fail.cold+0x5/0xa [ 2038.377099] ? create_object.isra.0+0x3a/0xa30 [ 2038.378087] should_failslab+0x5/0x20 [ 2038.378894] kmem_cache_alloc+0x5b/0x310 [ 2038.379755] create_object.isra.0+0x3a/0xa30 [ 2038.380687] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2038.381768] kmem_cache_alloc+0x159/0x310 [ 2038.382653] vm_area_dup+0x78/0x290 [ 2038.383431] ? kernel_text_address+0xf2/0x120 [ 2038.384384] ? mark_lock+0xf5/0x2df0 [ 2038.385186] ? lock_chain_count+0x20/0x20 [ 2038.386076] ? avc_has_extended_perms+0xf40/0xf40 [ 2038.387097] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 2038.388080] ? lock_downgrade+0x6d0/0x6d0 [ 2038.388955] ? __lock_acquire+0x1657/0x5b00 [ 2038.389888] ? vm_area_alloc+0x110/0x110 [ 2038.390749] ? __lock_acquire+0x1657/0x5b00 [ 2038.391674] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2038.392777] ? vmacache_find+0x55/0x2a0 [ 2038.393616] __split_vma+0xa8/0x4e0 [ 2038.394401] __do_munmap+0x365/0x1260 [ 2038.395205] ? arch_get_unmapped_area+0x450/0x450 [ 2038.396229] mmap_region+0x7cc/0x1500 [ 2038.397044] do_mmap+0x868/0x1370 [ 2038.397806] vm_mmap_pgoff+0x198/0x1f0 [ 2038.398643] ? randomize_page+0xb0/0xb0 [ 2038.399541] ksys_mmap_pgoff+0x41c/0x560 [ 2038.400409] ? find_mergeable_anon_vma+0x250/0x250 [ 2038.401444] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.402563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.403647] do_syscall_64+0x33/0x40 [ 2038.404429] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.405504] RIP: 0033:0x7fe76baefb19 [ 2038.406293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.410194] RSP: 002b:00007fe769065188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 12:49:49 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 3) [ 2038.411783] RAX: ffffffffffffffda RBX: 00007fe76bc02f60 RCX: 00007fe76baefb19 [ 2038.413443] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 2038.414953] RBP: 00007fe7690651d0 R08: 0000000000000003 R09: 0000000000000000 [ 2038.416439] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000001 [ 2038.417948] R13: 00007ffda63d3c6f R14: 00007fe769065300 R15: 0000000000022000 12:49:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0xa00) [ 2038.437954] FAULT_INJECTION: forcing a failure. [ 2038.437954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2038.438472] FAULT_INJECTION: forcing a failure. [ 2038.438472] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.440636] CPU: 1 PID: 10520 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2038.444310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.446079] Call Trace: [ 2038.446645] dump_stack+0x107/0x167 [ 2038.447422] should_fail.cold+0x5/0xa [ 2038.448239] __alloc_pages_nodemask+0x182/0x600 [ 2038.449224] ? lock_release+0x680/0x680 [ 2038.450079] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2038.451356] ? lock_downgrade+0x6d0/0x6d0 [ 2038.452238] alloc_pages_current+0x187/0x280 [ 2038.453175] get_zeroed_page+0x14/0xb0 [ 2038.454003] ? kasan_unpoison_shadow+0x33/0x50 [ 2038.454973] mon_alloc_buff+0xed/0x250 [ 2038.455802] mon_bin_ioctl+0x493/0xcc0 [ 2038.456636] ? wait_for_completion_io+0x270/0x270 [ 2038.457655] ? mon_bin_get_event+0x440/0x440 [ 2038.458601] ? selinux_file_ioctl+0xb6/0x270 [ 2038.459537] ? mon_bin_get_event+0x440/0x440 [ 2038.460478] __x64_sys_ioctl+0x19a/0x210 [ 2038.461341] do_syscall_64+0x33/0x40 [ 2038.462149] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.463236] RIP: 0033:0x7f6bde1e2b19 [ 2038.464023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.467940] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2038.469559] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2038.471075] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2038.472592] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2038.474113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2038.475635] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2038.477173] CPU: 0 PID: 10521 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2038.478649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.480391] Call Trace: [ 2038.480954] dump_stack+0x107/0x167 [ 2038.481751] should_fail.cold+0x5/0xa [ 2038.482550] ? create_object.isra.0+0x3a/0xa30 [ 2038.483514] should_failslab+0x5/0x20 [ 2038.484310] kmem_cache_alloc+0x5b/0x310 [ 2038.485165] create_object.isra.0+0x3a/0xa30 [ 2038.486106] kmemleak_alloc_percpu+0xa0/0x100 [ 2038.487049] pcpu_alloc+0x4e2/0x1240 [ 2038.487843] ? io_tctx_exit_cb+0xf0/0xf0 [ 2038.488694] percpu_ref_init+0x31/0x3d0 [ 2038.489539] io_uring_setup+0x47a/0x2980 [ 2038.490455] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2038.491483] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2038.492548] ? wait_for_completion_io+0x270/0x270 [ 2038.493582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.494698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.495792] do_syscall_64+0x33/0x40 [ 2038.496583] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2038.497666] RIP: 0033:0x7f55325f0b19 [ 2038.498459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.502370] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2038.503975] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2038.505475] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2038.506983] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2038.508484] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2038.510006] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:50:07 executing program 2: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0xff00, 0x40, 0x8000, 0x81, 0x5, 0x4, 0x4}, 0xc) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:50:07 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) 12:50:07 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:50:07 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) (fail_nth: 3) 12:50:07 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x2800) [ 2055.633824] FAULT_INJECTION: forcing a failure. [ 2055.633824] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.636701] CPU: 0 PID: 10535 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 2055.638400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2055.640438] Call Trace: [ 2055.641083] dump_stack+0x107/0x167 [ 2055.641979] should_fail.cold+0x5/0xa [ 2055.642913] ? anon_vma_clone+0xdc/0x590 [ 2055.643908] should_failslab+0x5/0x20 [ 2055.644824] kmem_cache_alloc+0x5b/0x310 [ 2055.645833] anon_vma_clone+0xdc/0x590 [ 2055.646783] __split_vma+0x17c/0x4e0 [ 2055.647689] __do_munmap+0x365/0x1260 [ 2055.648625] ? arch_get_unmapped_area+0x450/0x450 [ 2055.649814] mmap_region+0x7cc/0x1500 [ 2055.650760] do_mmap+0x868/0x1370 [ 2055.651625] vm_mmap_pgoff+0x198/0x1f0 [ 2055.652573] ? randomize_page+0xb0/0xb0 [ 2055.653554] ksys_mmap_pgoff+0x41c/0x560 [ 2055.654548] ? find_mergeable_anon_vma+0x250/0x250 [ 2055.655744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2055.657016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2055.658289] do_syscall_64+0x33/0x40 [ 2055.659192] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2055.660444] RIP: 0033:0x7fe76baefb19 [ 2055.661345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2055.665820] RSP: 002b:00007fe769065188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2055.667648] RAX: ffffffffffffffda RBX: 00007fe76bc02f60 RCX: 00007fe76baefb19 [ 2055.669357] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 2055.671087] RBP: 00007fe7690651d0 R08: 0000000000000003 R09: 0000000000000000 [ 2055.672811] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000001 [ 2055.674552] R13: 00007ffda63d3c6f R14: 00007fe769065300 R15: 0000000000022000 12:50:07 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) dup2(r1, r0) r3 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) io_uring_enter(r3, 0x1a75, 0xc233, 0x3, &(0x7f0000000480)={[0x9]}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r6 = dup2(r1, r1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f00000004c0)) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x10000) syz_io_uring_submit(r4, r2, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r7, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="9b58c2e07e3da234711f7636a70da55eedbb60beb224e26ac64d0fc808696e6f4bfbb726b10158e209f208c35e9b4df45a598d734e183892355c61d74b0c99191ef2147c428f4ccea2f61fcacb5ab1ba9dbcee0627106c951b64e334a77091270904b2a0386300b700b7cb865287db53466fb45b5b8637290bbe264505a404fbfe1391153bd9adf7ea1b5d353ef3f76d205cae506e8212d09f0369539ca881e5bf7abb4fef9e12f74a8d906768e28f056ebd77eabe51eb6bb3aefbad030be136052dfa04c0", 0xc5}, {&(0x7f0000000180)="dff01a728d1ba8d47d476865bc3a090cca09838bd2e21e4a9c0649c6a8", 0x1d}, {&(0x7f00000002c0)="b8faffdf75973666469e1184f30920ca800e2029a5dfe3330301cbfb31d39920748917c659607d3b8eb7e3ee2fc14d3c92ecce1f03da5ca73d5c870abfdd77842d9a", 0x42}, {&(0x7f00000001c0)="47fa0ee4b0eeb81ea9ba143549d6cba5b582d7e01550dd6d515efaa276efc64c086b78113ce0903e306459d3042d504738d29d18a4fc7f1790", 0x39}, {&(0x7f0000000240)="459d591002aabffdb404c3db8dcdacb33df8b9839eaa43b6ad0095f281f47fdf8ff3cd82e2852d347a", 0x29}], 0x5, &(0x7f00000003c0)=[{0x38, 0x3b, 0x81, "13853f56c0e4dfd4ff191dd40a929d51d38e6547a924de682f4cac229056f64bdd00"}], 0x38}, 0x0, 0x0, 0x1, {0x0, r8}}, 0x7fff) 12:50:07 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 9) 12:50:07 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 4) 12:50:07 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x4000) [ 2055.705860] FAULT_INJECTION: forcing a failure. [ 2055.705860] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.708643] CPU: 0 PID: 10551 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2055.710319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2055.712322] Call Trace: [ 2055.712961] dump_stack+0x107/0x167 [ 2055.713852] should_fail.cold+0x5/0xa [ 2055.714769] ? create_object.isra.0+0x3a/0xa30 [ 2055.715863] should_failslab+0x5/0x20 [ 2055.716770] kmem_cache_alloc+0x5b/0x310 [ 2055.717757] create_object.isra.0+0x3a/0xa30 [ 2055.718827] kmemleak_alloc_percpu+0xa0/0x100 [ 2055.719913] pcpu_alloc+0x4e2/0x1240 [ 2055.720819] ? io_tctx_exit_cb+0xf0/0xf0 [ 2055.721814] percpu_ref_init+0x31/0x3d0 [ 2055.722781] io_uring_setup+0x47a/0x2980 [ 2055.723749] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2055.724902] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2055.726126] ? wait_for_completion_io+0x270/0x270 [ 2055.727294] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2055.728540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2055.729760] do_syscall_64+0x33/0x40 [ 2055.730655] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2055.731883] RIP: 0033:0x7f55325f0b19 [ 2055.732775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2055.737189] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2055.739010] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 12:50:07 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x80) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000080), &(0x7f0000000400)=""/169, 0xa9}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000200)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000380)=""/87, 0x57}) r3 = syz_io_uring_setup(0x782c, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000280)) dup2(r3, r0) [ 2055.740691] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2055.742490] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2055.744163] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2055.745860] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2055.749108] FAULT_INJECTION: forcing a failure. [ 2055.749108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2055.751550] CPU: 1 PID: 10550 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2055.752904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2055.754547] Call Trace: [ 2055.755062] dump_stack+0x107/0x167 [ 2055.755771] should_fail.cold+0x5/0xa [ 2055.756521] __alloc_pages_nodemask+0x182/0x600 [ 2055.757433] ? lock_release+0x680/0x680 [ 2055.758208] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2055.759374] ? lock_downgrade+0x6d0/0x6d0 [ 2055.760177] alloc_pages_current+0x187/0x280 [ 2055.761019] get_zeroed_page+0x14/0xb0 [ 2055.761772] ? kasan_unpoison_shadow+0x33/0x50 [ 2055.762682] mon_alloc_buff+0xed/0x250 [ 2055.763439] mon_bin_ioctl+0x493/0xcc0 [ 2055.764189] ? wait_for_completion_io+0x270/0x270 [ 2055.765117] ? mon_bin_get_event+0x440/0x440 [ 2055.765988] ? selinux_file_ioctl+0xb6/0x270 [ 2055.766846] ? mon_bin_get_event+0x440/0x440 [ 2055.767693] __x64_sys_ioctl+0x19a/0x210 [ 2055.768472] do_syscall_64+0x33/0x40 [ 2055.769185] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2055.770174] RIP: 0033:0x7f6bde1e2b19 [ 2055.770894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2055.774435] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2055.775902] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2055.777273] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2055.778647] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2055.780007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2055.781362] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:50:07 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 10) 12:50:07 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x400000) [ 2055.839201] FAULT_INJECTION: forcing a failure. [ 2055.839201] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.841951] CPU: 0 PID: 10560 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2055.843558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2055.845476] Call Trace: [ 2055.846094] dump_stack+0x107/0x167 [ 2055.846937] should_fail.cold+0x5/0xa [ 2055.847815] ? percpu_ref_init+0xd8/0x3d0 [ 2055.848768] should_failslab+0x5/0x20 [ 2055.849642] kmem_cache_alloc_trace+0x55/0x320 [ 2055.850701] ? io_tctx_exit_cb+0xf0/0xf0 [ 2055.851631] percpu_ref_init+0xd8/0x3d0 [ 2055.852545] io_uring_setup+0x47a/0x2980 [ 2055.853478] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2055.854622] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2055.855786] ? wait_for_completion_io+0x270/0x270 [ 2055.856910] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2055.858121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2055.859300] do_syscall_64+0x33/0x40 [ 2055.860160] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2055.861336] RIP: 0033:0x7f55325f0b19 [ 2055.862195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2055.866379] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2055.868099] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2055.869711] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2055.871327] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2055.872935] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2055.874552] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:50:21 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x142) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:50:21 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) msgsnd(0x0, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:50:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x800000) 12:50:21 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) (fail_nth: 4) 12:50:21 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 5) 12:50:21 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 11) 12:50:21 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:50:21 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) read$usbmon(r0, &(0x7f0000000600)=""/4096, 0x1000) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000380)={0x1, 0x3, 0x1000, 0xffffffffffffff75, &(0x7f0000000100)="c7bce683104dcd2b4be44e61f38a98542b1bdaeb358c3da5712978039ed381ef6c0e84ad925e379bae09e039ccf8f106f17795e73acb96374e1a70998e88a7fbcedc9f02987b617664d0d54f955baefe384a7b552da32c0587fe6bb9ca7a07d234aa38290f6dc851e41686c1270f21bae2677f1fe3a9defa9195d10c2810139eeb6336708568a41802d4982557532dced58b46a285155400960d07be9ad2ba0e440058040557d905c6f28b6530456e1eab1711d2130d24d1ee21e5b9476c5dec215f563df134d6", 0xbd, 0x0, &(0x7f00000002c0)="b563c6567b5435d0689dba59ab6507e43cb36d2e10fc558690f4a3d0eae30b09a3bdcce7cfeba5fd560cd143b087ab8d223fb0d30aaa1ff8d139e92623d3657f2ab1fcf64c3c3542541539cae4512caebdd02edd2bd3fa99eeedff71867882cb63f96e2ad7071f948fdafdb6f06e0d7746ca8a56669145c768c711a6645b3a49c0ab790b53f332e2d15d58081aae63e06b735b317fe89918f3e5abcdab885c376909f8add79a4c162a655b911fe9bbfc70087a51197e5dd965a4afedd8"}) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000440)={0x0, 0xfffffffe}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000004c0)) r3 = fcntl$dupfd(r1, 0x0, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, r3, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) setresuid(r4, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000500)=ANY=[@ANYBLOB="000000800000000100840000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0xffffffffffffffff, @ANYBLOB='./file0\x00']) fchown(r0, r4, r5) syz_io_uring_setup(0x7888, &(0x7f0000000000)={0x0, 0xe287, 0x20, 0x3, 0x271, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r7 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) io_uring_enter(r7, 0x58af, 0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r7, 0x0, &(0x7f0000000240)=""/54, 0x36, 0x2}, 0x7f) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) dup2(r1, r0) [ 2069.933866] FAULT_INJECTION: forcing a failure. [ 2069.933866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2069.936892] CPU: 1 PID: 10577 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2069.938638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2069.940714] Call Trace: [ 2069.941379] dump_stack+0x107/0x167 [ 2069.942287] should_fail.cold+0x5/0xa [ 2069.943233] __alloc_pages_nodemask+0x182/0x600 [ 2069.944387] ? lock_release+0x680/0x680 [ 2069.945378] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2069.946905] ? lock_downgrade+0x6d0/0x6d0 [ 2069.947940] alloc_pages_current+0x187/0x280 [ 2069.949043] get_zeroed_page+0x14/0xb0 [ 2069.950014] ? kasan_unpoison_shadow+0x33/0x50 [ 2069.951160] mon_alloc_buff+0xed/0x250 [ 2069.952129] mon_bin_ioctl+0x493/0xcc0 [ 2069.953095] ? wait_for_completion_io+0x270/0x270 [ 2069.954320] ? mon_bin_get_event+0x440/0x440 [ 2069.955441] ? selinux_file_ioctl+0xb6/0x270 [ 2069.956564] ? mon_bin_get_event+0x440/0x440 [ 2069.957668] __x64_sys_ioctl+0x19a/0x210 [ 2069.958697] do_syscall_64+0x33/0x40 [ 2069.959621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2069.960903] RIP: 0033:0x7f6bde1e2b19 [ 2069.961833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2069.966477] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2069.968385] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2069.970336] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2069.972232] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2069.974038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2069.975426] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2069.984886] FAULT_INJECTION: forcing a failure. [ 2069.984886] name failslab, interval 1, probability 0, space 0, times 0 [ 2069.987071] CPU: 1 PID: 10584 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2069.988412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2069.988434] FAULT_INJECTION: forcing a failure. [ 2069.988434] name failslab, interval 1, probability 0, space 0, times 0 [ 2069.990042] Call Trace: [ 2069.990065] dump_stack+0x107/0x167 [ 2069.990083] should_fail.cold+0x5/0xa [ 2069.993305] ? create_object.isra.0+0x3a/0xa30 [ 2069.994208] should_failslab+0x5/0x20 [ 2069.994958] kmem_cache_alloc+0x5b/0x310 [ 2069.995762] create_object.isra.0+0x3a/0xa30 [ 2069.996594] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2069.997589] kmem_cache_alloc_trace+0x151/0x320 [ 2069.998503] ? io_tctx_exit_cb+0xf0/0xf0 [ 2069.999287] percpu_ref_init+0xd8/0x3d0 [ 2069.999895] io_uring_setup+0x47a/0x2980 [ 2070.000690] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2070.001628] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2070.002404] ? wait_for_completion_io+0x270/0x270 [ 2070.003351] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2070.004144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2070.005130] do_syscall_64+0x33/0x40 [ 2070.005865] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2070.006643] RIP: 0033:0x7f55325f0b19 [ 2070.007366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2070.010951] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2070.012439] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2070.013840] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2070.015256] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2070.016668] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2070.018077] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2070.019500] CPU: 0 PID: 10587 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 2070.020309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2070.021260] Call Trace: [ 2070.021575] dump_stack+0x107/0x167 [ 2070.022002] should_fail.cold+0x5/0xa [ 2070.022436] ? create_object.isra.0+0x3a/0xa30 [ 2070.022948] should_failslab+0x5/0x20 [ 2070.023378] kmem_cache_alloc+0x5b/0x310 [ 2070.023839] create_object.isra.0+0x3a/0xa30 [ 2070.024335] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2070.024913] kmem_cache_alloc+0x159/0x310 [ 2070.025410] anon_vma_clone+0xdc/0x590 [ 2070.025866] __split_vma+0x17c/0x4e0 [ 2070.026300] __do_munmap+0x365/0x1260 [ 2070.026735] ? arch_get_unmapped_area+0x450/0x450 [ 2070.027295] mmap_region+0x7cc/0x1500 [ 2070.027744] do_mmap+0x868/0x1370 [ 2070.028140] vm_mmap_pgoff+0x198/0x1f0 [ 2070.028584] ? randomize_page+0xb0/0xb0 [ 2070.029036] ksys_mmap_pgoff+0x41c/0x560 [ 2070.029517] ? find_mergeable_anon_vma+0x250/0x250 [ 2070.030090] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2070.030688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2070.031277] do_syscall_64+0x33/0x40 [ 2070.031698] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2070.032274] RIP: 0033:0x7fe76baefb19 [ 2070.032702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2070.034782] RSP: 002b:00007fe769065188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2070.035647] RAX: ffffffffffffffda RBX: 00007fe76bc02f60 RCX: 00007fe76baefb19 [ 2070.036469] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 2070.037274] RBP: 00007fe7690651d0 R08: 0000000000000003 R09: 0000000000000000 [ 2070.038092] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000001 [ 2070.038902] R13: 00007ffda63d3c6f R14: 00007fe769065300 R15: 0000000000022000 12:50:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x1000000) 12:50:21 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) (fail_nth: 5) 12:50:21 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 6) [ 2070.097539] FAULT_INJECTION: forcing a failure. [ 2070.097539] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.100068] FAULT_INJECTION: forcing a failure. [ 2070.100068] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2070.100093] CPU: 0 PID: 10597 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2070.100099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2070.100103] Call Trace: [ 2070.100119] dump_stack+0x107/0x167 [ 2070.100131] should_fail.cold+0x5/0xa [ 2070.100145] __alloc_pages_nodemask+0x182/0x600 [ 2070.100157] ? lock_release+0x680/0x680 [ 2070.100167] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2070.100180] ? lock_downgrade+0x6d0/0x6d0 [ 2070.100198] alloc_pages_current+0x187/0x280 [ 2070.100212] get_zeroed_page+0x14/0xb0 [ 2070.100221] ? kasan_unpoison_shadow+0x33/0x50 [ 2070.100232] mon_alloc_buff+0xed/0x250 [ 2070.100245] mon_bin_ioctl+0x493/0xcc0 [ 2070.100256] ? wait_for_completion_io+0x270/0x270 [ 2070.100266] ? mon_bin_get_event+0x440/0x440 [ 2070.100280] ? selinux_file_ioctl+0xb6/0x270 [ 2070.100292] ? mon_bin_get_event+0x440/0x440 [ 2070.100305] __x64_sys_ioctl+0x19a/0x210 [ 2070.100316] do_syscall_64+0x33/0x40 [ 2070.100326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2070.100333] RIP: 0033:0x7f6bde1e2b19 [ 2070.100343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2070.100348] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2070.100359] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2070.100364] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2070.100370] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2070.100375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2070.100381] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2070.123431] FAULT_INJECTION: forcing a failure. [ 2070.123431] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.125641] CPU: 1 PID: 10595 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 2070.125657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2070.138459] Call Trace: [ 2070.138985] dump_stack+0x107/0x167 [ 2070.139692] should_fail.cold+0x5/0xa [ 2070.140423] ? vm_area_dup+0x78/0x290 [ 2070.141148] should_failslab+0x5/0x20 [ 2070.141905] kmem_cache_alloc+0x5b/0x310 [ 2070.142694] vm_area_dup+0x78/0x290 [ 2070.143252] ? find_held_lock+0x2c/0x110 [ 2070.144040] ? __vma_adjust+0x66e/0x2510 [ 2070.144654] ? lock_downgrade+0x6d0/0x6d0 [ 2070.145473] ? up_write+0x191/0x550 [ 2070.146183] ? downgrade_write+0x3a0/0x3a0 [ 2070.146989] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 2070.148037] ? vm_area_alloc+0x110/0x110 [ 2070.148817] ? __vma_adjust+0xbb8/0x2510 [ 2070.149615] ? vmacache_find+0x55/0x2a0 [ 2070.150385] __split_vma+0xa8/0x4e0 [ 2070.151091] __do_munmap+0xf40/0x1260 [ 2070.151831] ? arch_get_unmapped_area+0x450/0x450 [ 2070.152765] mmap_region+0x7cc/0x1500 [ 2070.153354] do_mmap+0x868/0x1370 [ 2070.154034] vm_mmap_pgoff+0x198/0x1f0 [ 2070.154778] ? randomize_page+0xb0/0xb0 [ 2070.155558] ksys_mmap_pgoff+0x41c/0x560 [ 2070.156174] ? find_mergeable_anon_vma+0x250/0x250 [ 2070.157125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2070.158145] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2070.159136] do_syscall_64+0x33/0x40 [ 2070.159859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2070.160839] RIP: 0033:0x7fe76baefb19 [ 2070.161556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2070.165096] RSP: 002b:00007fe769065188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2070.166422] RAX: ffffffffffffffda RBX: 00007fe76bc02f60 RCX: 00007fe76baefb19 [ 2070.167804] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 2070.169183] RBP: 00007fe7690651d0 R08: 0000000000000003 R09: 0000000000000000 [ 2070.170577] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000001 [ 2070.171958] R13: 00007ffda63d3c6f R14: 00007fe769065300 R15: 0000000000022000 [ 2070.173374] CPU: 0 PID: 10600 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2070.174226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2070.175173] Call Trace: [ 2070.175482] dump_stack+0x107/0x167 [ 2070.175915] should_fail.cold+0x5/0xa [ 2070.176376] ? create_object.isra.0+0x3a/0xa30 [ 2070.176900] should_failslab+0x5/0x20 [ 2070.177342] kmem_cache_alloc+0x5b/0x310 [ 2070.177811] create_object.isra.0+0x3a/0xa30 12:50:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x2000000) 12:50:21 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 12) 12:50:21 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 7) [ 2070.178316] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2070.179075] kmem_cache_alloc_trace+0x151/0x320 [ 2070.179610] ? io_tctx_exit_cb+0xf0/0xf0 [ 2070.180073] percpu_ref_init+0xd8/0x3d0 [ 2070.180519] io_uring_setup+0x47a/0x2980 [ 2070.180984] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2070.181525] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2070.182098] ? wait_for_completion_io+0x270/0x270 [ 2070.182654] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2070.183249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2070.183839] do_syscall_64+0x33/0x40 [ 2070.184264] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2070.184840] RIP: 0033:0x7f55325f0b19 [ 2070.185266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2070.187334] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2070.188198] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2070.189014] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2070.189831] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2070.190637] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2070.191449] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:50:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x4000000) [ 2070.205892] loop0: detected capacity change from 0 to 32768 12:50:21 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) (fail_nth: 6) [ 2070.241825] FAULT_INJECTION: forcing a failure. [ 2070.241825] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.243172] CPU: 0 PID: 10607 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 2070.243964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2070.244909] Call Trace: [ 2070.245215] dump_stack+0x107/0x167 [ 2070.245636] should_fail.cold+0x5/0xa [ 2070.246090] ? create_object.isra.0+0x3a/0xa30 [ 2070.246623] should_failslab+0x5/0x20 [ 2070.247071] kmem_cache_alloc+0x5b/0x310 [ 2070.247538] create_object.isra.0+0x3a/0xa30 [ 2070.248044] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2070.248631] kmem_cache_alloc+0x159/0x310 [ 2070.249125] vm_area_dup+0x78/0x290 [ 2070.249542] ? find_held_lock+0x2c/0x110 [ 2070.250016] ? __vma_adjust+0x66e/0x2510 [ 2070.250477] ? lock_downgrade+0x6d0/0x6d0 [ 2070.250961] ? up_write+0x191/0x550 [ 2070.251374] ? downgrade_write+0x3a0/0x3a0 [ 2070.251856] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 2070.252470] ? vm_area_alloc+0x110/0x110 [ 2070.252930] ? __vma_adjust+0xbb8/0x2510 [ 2070.253400] ? vmacache_find+0x55/0x2a0 [ 2070.253864] __split_vma+0xa8/0x4e0 [ 2070.254277] __do_munmap+0xf40/0x1260 [ 2070.254658] FAULT_INJECTION: forcing a failure. [ 2070.254658] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2070.254721] ? arch_get_unmapped_area+0x450/0x450 [ 2070.257195] mmap_region+0x7cc/0x1500 [ 2070.257648] do_mmap+0x868/0x1370 [ 2070.258092] vm_mmap_pgoff+0x198/0x1f0 [ 2070.258552] ? randomize_page+0xb0/0xb0 [ 2070.259022] ksys_mmap_pgoff+0x41c/0x560 [ 2070.259497] ? find_mergeable_anon_vma+0x250/0x250 [ 2070.260075] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2070.260687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2070.261300] do_syscall_64+0x33/0x40 [ 2070.261745] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2070.262355] RIP: 0033:0x7fe76baefb19 [ 2070.262792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2070.264959] RSP: 002b:00007fe769065188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2070.265869] RAX: ffffffffffffffda RBX: 00007fe76bc02f60 RCX: 00007fe76baefb19 [ 2070.266693] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 2070.267497] RBP: 00007fe7690651d0 R08: 0000000000000003 R09: 0000000000000000 [ 2070.268312] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000001 [ 2070.269124] R13: 00007ffda63d3c6f R14: 00007fe769065300 R15: 0000000000022000 [ 2070.269962] CPU: 1 PID: 10608 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2070.271299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2070.272617] Call Trace: [ 2070.273047] dump_stack+0x107/0x167 [ 2070.273642] should_fail.cold+0x5/0xa [ 2070.274275] __alloc_pages_nodemask+0x182/0x600 [ 2070.275038] ? lock_release+0x680/0x680 [ 2070.275682] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2070.276646] ? lock_downgrade+0x6d0/0x6d0 [ 2070.277370] alloc_pages_current+0x187/0x280 [ 2070.278236] get_zeroed_page+0x14/0xb0 [ 2070.278865] ? kasan_unpoison_shadow+0x33/0x50 [ 2070.279748] mon_alloc_buff+0xed/0x250 [ 2070.280520] mon_bin_ioctl+0x493/0xcc0 [ 2070.281277] ? wait_for_completion_io+0x270/0x270 [ 2070.282220] ? mon_bin_get_event+0x440/0x440 [ 2070.283034] ? selinux_file_ioctl+0xb6/0x270 [ 2070.283756] ? mon_bin_get_event+0x440/0x440 [ 2070.284503] __x64_sys_ioctl+0x19a/0x210 [ 2070.285164] do_syscall_64+0x33/0x40 [ 2070.285767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2070.286754] RIP: 0033:0x7f6bde1e2b19 [ 2070.287462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2070.290588] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2070.291796] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2070.292925] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2070.294087] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2070.295229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2070.296372] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2085.089482] FAULT_INJECTION: forcing a failure. [ 2085.089482] name failslab, interval 1, probability 0, space 0, times 0 [ 2085.090902] CPU: 0 PID: 10627 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 2085.091721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.092718] Call Trace: [ 2085.093044] dump_stack+0x107/0x167 [ 2085.093483] should_fail.cold+0x5/0xa [ 2085.093955] ? anon_vma_clone+0xdc/0x590 [ 2085.094444] should_failslab+0x5/0x20 [ 2085.095235] kmem_cache_alloc+0x5b/0x310 [ 2085.095718] anon_vma_clone+0xdc/0x590 [ 2085.096181] __split_vma+0x17c/0x4e0 [ 2085.096622] __do_munmap+0xf40/0x1260 [ 2085.097074] ? arch_get_unmapped_area+0x450/0x450 [ 2085.097649] mmap_region+0x7cc/0x1500 [ 2085.098122] do_mmap+0x868/0x1370 [ 2085.098536] vm_mmap_pgoff+0x198/0x1f0 [ 2085.098996] ? randomize_page+0xb0/0xb0 [ 2085.099475] ksys_mmap_pgoff+0x41c/0x560 [ 2085.099958] ? find_mergeable_anon_vma+0x250/0x250 [ 2085.100540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2085.101160] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2085.101774] do_syscall_64+0x33/0x40 [ 2085.102267] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2085.103031] RIP: 0033:0x7fe76baefb19 [ 2085.103477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.104303] FAULT_INJECTION: forcing a failure. [ 2085.104303] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2085.105696] RSP: 002b:00007fe769065188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2085.105709] RAX: ffffffffffffffda RBX: 00007fe76bc02f60 RCX: 00007fe76baefb19 [ 2085.105715] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 2085.105721] RBP: 00007fe7690651d0 R08: 0000000000000003 R09: 0000000000000000 [ 2085.105727] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000001 [ 2085.105745] R13: 00007ffda63d3c6f R14: 00007fe769065300 R15: 0000000000022000 [ 2085.113871] CPU: 1 PID: 10625 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2085.115690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.117781] Call Trace: 12:50:36 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 8) 12:50:36 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:50:36 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000001c0)) r2 = syz_open_dev$hiddev(&(0x7f0000000040), 0x3f, 0x101100) syz_open_dev$usbmon(&(0x7f0000000180), 0x8, 0xc0040) ioctl$FICLONE(r2, 0x40049409, r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r4, 0x4) sendfile(r4, r5, 0x0, 0x100000001) read$usbmon(r5, &(0x7f0000000080)=""/44, 0x2c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000200)) r6 = dup2(r0, r3) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="14c452170600000900"]) sendfile(r7, r2, &(0x7f0000000100)=0x6, 0xf1) 12:50:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0xa000000) 12:50:36 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) (fail_nth: 7) 12:50:36 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) msgsnd(0x0, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:50:36 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) syz_open_dev$usbmon(&(0x7f0000000000), 0x20, 0x1) 12:50:36 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 13) [ 2085.118466] dump_stack+0x107/0x167 [ 2085.119671] should_fail.cold+0x5/0xa [ 2085.120644] __alloc_pages_nodemask+0x182/0x600 [ 2085.121826] ? lock_release+0x680/0x680 [ 2085.122850] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2085.124379] ? lock_downgrade+0x6d0/0x6d0 [ 2085.125446] alloc_pages_current+0x187/0x280 [ 2085.125963] FAULT_INJECTION: forcing a failure. [ 2085.125963] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2085.126564] get_zeroed_page+0x14/0xb0 [ 2085.126584] ? kasan_unpoison_shadow+0x33/0x50 [ 2085.126611] mon_alloc_buff+0xed/0x250 [ 2085.131092] mon_bin_ioctl+0x493/0xcc0 [ 2085.132079] ? wait_for_completion_io+0x270/0x270 [ 2085.133309] ? mon_bin_get_event+0x440/0x440 [ 2085.134439] ? selinux_file_ioctl+0xb6/0x270 [ 2085.135557] ? mon_bin_get_event+0x440/0x440 [ 2085.136664] __x64_sys_ioctl+0x19a/0x210 [ 2085.137693] do_syscall_64+0x33/0x40 [ 2085.138647] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2085.139783] RIP: 0033:0x7f6bde1e2b19 [ 2085.140568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.144461] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2085.146061] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2085.147575] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2085.149083] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2085.150600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2085.152108] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2085.153636] CPU: 0 PID: 10633 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2085.154455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.155411] Call Trace: [ 2085.155730] dump_stack+0x107/0x167 [ 2085.156159] should_fail.cold+0x5/0xa [ 2085.156616] __alloc_pages_nodemask+0x182/0x600 [ 2085.157157] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2085.157862] ? cap_capable+0x1cd/0x230 [ 2085.158325] alloc_pages_current+0x187/0x280 [ 2085.158837] __get_free_pages+0xc/0xa0 [ 2085.159287] io_uring_setup+0xf9a/0x2980 [ 2085.159775] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2085.160380] ? wait_for_completion_io+0x270/0x270 [ 2085.160954] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2085.161567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2085.162334] do_syscall_64+0x33/0x40 [ 2085.162918] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2085.163517] RIP: 0033:0x7f55325f0b19 [ 2085.163950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.166114] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2085.167001] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2085.167828] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2085.168661] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2085.169493] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2085.170339] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:50:36 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r2 = dup2(r1, r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0xcd, 0x3, 0x80000001}) 12:50:36 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) (fail_nth: 8) 12:50:36 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 14) 12:50:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x28000000) [ 2085.230286] FAULT_INJECTION: forcing a failure. [ 2085.230286] name failslab, interval 1, probability 0, space 0, times 0 [ 2085.231704] CPU: 0 PID: 10642 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 2085.232510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.233462] Call Trace: [ 2085.233773] dump_stack+0x107/0x167 [ 2085.234208] should_fail.cold+0x5/0xa [ 2085.234649] ? create_object.isra.0+0x3a/0xa30 [ 2085.235191] should_failslab+0x5/0x20 [ 2085.235626] kmem_cache_alloc+0x5b/0x310 [ 2085.236106] create_object.isra.0+0x3a/0xa30 [ 2085.236617] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2085.237201] kmem_cache_alloc+0x159/0x310 [ 2085.237687] anon_vma_clone+0xdc/0x590 [ 2085.238155] __split_vma+0x17c/0x4e0 [ 2085.238581] __do_munmap+0xf40/0x1260 [ 2085.239023] ? arch_get_unmapped_area+0x450/0x450 [ 2085.239584] mmap_region+0x7cc/0x1500 [ 2085.240024] do_mmap+0x868/0x1370 [ 2085.240430] vm_mmap_pgoff+0x198/0x1f0 [ 2085.240888] ? randomize_page+0xb0/0xb0 [ 2085.241354] ksys_mmap_pgoff+0x41c/0x560 [ 2085.241820] ? find_mergeable_anon_vma+0x250/0x250 [ 2085.242398] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2085.243006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2085.243603] do_syscall_64+0x33/0x40 [ 2085.244038] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2085.244628] RIP: 0033:0x7fe76baefb19 [ 2085.245055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.247172] RSP: 002b:00007fe769065188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2085.248044] RAX: ffffffffffffffda RBX: 00007fe76bc02f60 RCX: 00007fe76baefb19 [ 2085.248859] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 2085.249674] RBP: 00007fe7690651d0 R08: 0000000000000003 R09: 0000000000000000 [ 2085.250507] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000001 [ 2085.251323] R13: 00007ffda63d3c6f R14: 00007fe769065300 R15: 0000000000022000 12:50:36 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 9) [ 2085.268289] FAULT_INJECTION: forcing a failure. [ 2085.268289] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2085.269692] CPU: 0 PID: 10647 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2085.270491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.271465] Call Trace: [ 2085.271773] dump_stack+0x107/0x167 [ 2085.272195] should_fail.cold+0x5/0xa [ 2085.272635] __alloc_pages_nodemask+0x182/0x600 [ 2085.273181] ? lock_release+0x680/0x680 [ 2085.273634] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2085.274330] ? lock_downgrade+0x6d0/0x6d0 [ 2085.274808] alloc_pages_current+0x187/0x280 [ 2085.275317] get_zeroed_page+0x14/0xb0 [ 2085.275764] ? kasan_unpoison_shadow+0x33/0x50 [ 2085.276292] mon_alloc_buff+0xed/0x250 [ 2085.276741] mon_bin_ioctl+0x493/0xcc0 [ 2085.277188] ? wait_for_completion_io+0x270/0x270 [ 2085.277744] ? mon_bin_get_event+0x440/0x440 [ 2085.278268] ? selinux_file_ioctl+0xb6/0x270 [ 2085.278775] ? mon_bin_get_event+0x440/0x440 [ 2085.279279] __x64_sys_ioctl+0x19a/0x210 [ 2085.279745] do_syscall_64+0x33/0x40 [ 2085.280189] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2085.280787] RIP: 0033:0x7f6bde1e2b19 [ 2085.281230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.283357] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2085.284223] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2085.285036] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 12:50:36 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="810500005c00004000000000", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) r3 = openat2(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x191043, 0x88, 0x1}, 0x18) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) read$usbmon(r2, &(0x7f0000000040)=""/231, 0xe7) dup2(r1, r0) [ 2085.285844] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2085.286840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2085.287662] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2085.291880] FAULT_INJECTION: forcing a failure. [ 2085.291880] name failslab, interval 1, probability 0, space 0, times 0 [ 2085.293201] CPU: 0 PID: 10651 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2085.294009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.294963] Call Trace: [ 2085.295274] dump_stack+0x107/0x167 [ 2085.295693] should_fail.cold+0x5/0xa [ 2085.296129] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2085.296767] should_failslab+0x5/0x20 [ 2085.297204] kmem_cache_alloc_trace+0x55/0x320 [ 2085.297732] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2085.298357] io_uring_setup+0x14f6/0x2980 [ 2085.298605] loop0: detected capacity change from 0 to 32768 [ 2085.298845] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2085.300638] ? wait_for_completion_io+0x270/0x270 [ 2085.301203] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2085.301803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2085.302405] do_syscall_64+0x33/0x40 [ 2085.302836] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2085.303419] RIP: 0033:0x7f55325f0b19 [ 2085.303843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.305971] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2085.306850] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2085.307668] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2085.308486] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2085.309303] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2085.310120] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:50:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0xffffffffffffb) 12:50:36 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) (fail_nth: 9) 12:50:36 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 10) [ 2085.359354] FAULT_INJECTION: forcing a failure. [ 2085.359354] name failslab, interval 1, probability 0, space 0, times 0 [ 2085.360746] CPU: 0 PID: 10656 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 2085.361540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.362488] Call Trace: [ 2085.362791] dump_stack+0x107/0x167 [ 2085.363206] should_fail.cold+0x5/0xa [ 2085.363648] ? vm_area_alloc+0x1c/0x110 [ 2085.364101] should_failslab+0x5/0x20 [ 2085.364536] kmem_cache_alloc+0x5b/0x310 [ 2085.365005] vm_area_alloc+0x1c/0x110 [ 2085.365437] mmap_region+0x982/0x1500 [ 2085.365878] do_mmap+0x868/0x1370 [ 2085.366282] vm_mmap_pgoff+0x198/0x1f0 [ 2085.366728] ? randomize_page+0xb0/0xb0 [ 2085.367186] ksys_mmap_pgoff+0x41c/0x560 [ 2085.367652] ? find_mergeable_anon_vma+0x250/0x250 [ 2085.368211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2085.368810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2085.369398] do_syscall_64+0x33/0x40 [ 2085.369819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2085.370411] RIP: 0033:0x7fe76baefb19 [ 2085.370833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.372921] RSP: 002b:00007fe769065188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2085.373801] RAX: ffffffffffffffda RBX: 00007fe76bc02f60 RCX: 00007fe76baefb19 [ 2085.374618] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 2085.375432] RBP: 00007fe7690651d0 R08: 0000000000000003 R09: 0000000000000000 [ 2085.376241] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000001 [ 2085.377056] R13: 00007ffda63d3c6f R14: 00007fe769065300 R15: 0000000000022000 [ 2085.380326] FAULT_INJECTION: forcing a failure. [ 2085.380326] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2085.381691] CPU: 0 PID: 10660 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2085.382484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.383426] Call Trace: [ 2085.383725] dump_stack+0x107/0x167 [ 2085.384141] should_fail.cold+0x5/0xa [ 2085.384578] __alloc_pages_nodemask+0x182/0x600 [ 2085.385104] ? lock_release+0x680/0x680 [ 2085.385554] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2085.386243] ? lock_downgrade+0x6d0/0x6d0 [ 2085.386715] alloc_pages_current+0x187/0x280 [ 2085.387212] get_zeroed_page+0x14/0xb0 [ 2085.387653] ? kasan_unpoison_shadow+0x33/0x50 [ 2085.388170] mon_alloc_buff+0xed/0x250 [ 2085.388616] mon_bin_ioctl+0x493/0xcc0 [ 2085.389058] ? wait_for_completion_io+0x270/0x270 [ 2085.389606] ? mon_bin_get_event+0x440/0x440 [ 2085.390110] ? selinux_file_ioctl+0xb6/0x270 [ 2085.390613] ? mon_bin_get_event+0x440/0x440 [ 2085.391112] __x64_sys_ioctl+0x19a/0x210 [ 2085.391573] do_syscall_64+0x33/0x40 [ 2085.391995] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2085.392578] RIP: 0033:0x7f6bde1e2b19 [ 2085.393005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.395158] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2085.396033] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2085.396845] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2085.397651] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2085.398466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2085.399277] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:50:50 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) write$binfmt_elf64(r1, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x3f, 0x2, 0x9, 0x81, 0x2, 0x3, 0xec1f, 0x384, 0x40, 0xec, 0x1, 0x40, 0x38, 0x2, 0x9, 0x2, 0x2}, [{0x4, 0x2, 0xfffffffffffffffb, 0x5, 0x8001, 0x1, 0x7b6de2eb, 0x5}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1578) 12:50:50 executing program 2: ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) 12:50:50 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) msgsnd(0x0, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:50:50 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 15) [ 2099.450213] FAULT_INJECTION: forcing a failure. [ 2099.450213] name failslab, interval 1, probability 0, space 0, times 0 [ 2099.452686] CPU: 0 PID: 10675 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2099.454177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2099.455938] Call Trace: [ 2099.456501] dump_stack+0x107/0x167 [ 2099.457274] should_fail.cold+0x5/0xa [ 2099.458092] ? create_object.isra.0+0x3a/0xa30 [ 2099.459054] should_failslab+0x5/0x20 [ 2099.459855] kmem_cache_alloc+0x5b/0x310 [ 2099.460717] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2099.461986] create_object.isra.0+0x3a/0xa30 [ 2099.462918] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2099.463994] kmem_cache_alloc_trace+0x151/0x320 [ 2099.464982] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2099.466140] io_uring_setup+0x14f6/0x2980 [ 2099.467021] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2099.468092] ? wait_for_completion_io+0x270/0x270 [ 2099.469124] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2099.470241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2099.471329] do_syscall_64+0x33/0x40 [ 2099.472113] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2099.473203] RIP: 0033:0x7f55325f0b19 12:50:50 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 11) 12:50:50 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) (fail_nth: 10) 12:50:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x40000000000000) 12:50:50 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) [ 2099.474086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2099.478057] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2099.479659] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2099.481161] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2099.482667] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2099.484180] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2099.485681] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2099.499470] FAULT_INJECTION: forcing a failure. [ 2099.499470] name failslab, interval 1, probability 0, space 0, times 0 [ 2099.501930] CPU: 0 PID: 10686 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 2099.503417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2099.505178] Call Trace: [ 2099.505739] dump_stack+0x107/0x167 [ 2099.506520] should_fail.cold+0x5/0xa [ 2099.507329] ? create_object.isra.0+0x3a/0xa30 [ 2099.508296] should_failslab+0x5/0x20 [ 2099.509102] kmem_cache_alloc+0x5b/0x310 [ 2099.509968] create_object.isra.0+0x3a/0xa30 [ 2099.510915] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2099.511995] kmem_cache_alloc+0x159/0x310 [ 2099.512875] vm_area_alloc+0x1c/0x110 [ 2099.513689] mmap_region+0x982/0x1500 [ 2099.514525] do_mmap+0x868/0x1370 [ 2099.515282] vm_mmap_pgoff+0x198/0x1f0 [ 2099.516112] ? randomize_page+0xb0/0xb0 [ 2099.516967] ksys_mmap_pgoff+0x41c/0x560 [ 2099.517832] ? find_mergeable_anon_vma+0x250/0x250 [ 2099.518885] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2099.519995] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2099.521096] do_syscall_64+0x33/0x40 [ 2099.521881] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2099.522974] RIP: 0033:0x7fe76baefb19 [ 2099.523768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2099.527660] RSP: 002b:00007fe769065188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2099.529266] RAX: ffffffffffffffda RBX: 00007fe76bc02f60 RCX: 00007fe76baefb19 [ 2099.530805] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000000020ff9000 [ 2099.532320] RBP: 00007fe7690651d0 R08: 0000000000000003 R09: 0000000000000000 [ 2099.533835] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000002 [ 2099.535368] R13: 00007ffda63d3c6f R14: 00007fe769065300 R15: 0000000000022000 [ 2099.537115] FAULT_INJECTION: forcing a failure. [ 2099.537115] name fail_page_alloc, interval 1, probability 0, space 0, times 0 12:50:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x80000000000000) [ 2099.539653] CPU: 0 PID: 10685 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2099.541276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2099.543050] Call Trace: [ 2099.543606] dump_stack+0x107/0x167 [ 2099.544380] should_fail.cold+0x5/0xa [ 2099.545184] __alloc_pages_nodemask+0x182/0x600 [ 2099.546178] ? lock_release+0x680/0x680 [ 2099.547021] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2099.548302] ? lock_downgrade+0x6d0/0x6d0 [ 2099.549196] alloc_pages_current+0x187/0x280 [ 2099.550148] get_zeroed_page+0x14/0xb0 [ 2099.550962] ? kasan_unpoison_shadow+0x33/0x50 [ 2099.551931] mon_alloc_buff+0xed/0x250 [ 2099.552763] mon_bin_ioctl+0x493/0xcc0 [ 2099.553589] ? wait_for_completion_io+0x270/0x270 [ 2099.554618] ? mon_bin_get_event+0x440/0x440 [ 2099.555550] ? selinux_file_ioctl+0xb6/0x270 [ 2099.556483] ? mon_bin_get_event+0x440/0x440 [ 2099.557413] __x64_sys_ioctl+0x19a/0x210 [ 2099.558293] do_syscall_64+0x33/0x40 [ 2099.559092] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2099.560175] RIP: 0033:0x7f6bde1e2b19 12:50:50 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0xffff, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000040), &(0x7f0000000080)=""/61, 0x3d}) r3 = syz_io_uring_setup(0x7a2e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r3, r0) [ 2099.560964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2099.564897] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2099.566509] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2099.568012] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2099.569512] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2099.571025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2099.572522] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:50:51 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x8, 0x280003) read$usbmon(r0, &(0x7f0000000080)=""/172, 0xac) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={0x0, 0x0, 0x40}) [ 2099.639478] loop0: detected capacity change from 0 to 32768 12:50:51 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) (fail_nth: 11) 12:50:51 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 12) 12:50:51 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 16) 12:50:51 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x100000000000000) 12:50:51 executing program 2: ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r0, 0x4) sendfile(r0, r1, 0x0, 0x100000001) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x27}}, './file0\x00'}) 12:50:51 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r2, 0x4) sendfile(r2, r3, 0x0, 0x100000001) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r4, 0x4) r6 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) io_uring_enter(r6, 0x58af, 0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4f, 0xff, 0x5, 0x8, 0x3, 0x6, 0x5, 0x6, 0x40, 0x3e0, 0xfffffffa, 0x9f, 0x38, 0x2, 0x6, 0xff6b}, [{0x60000004, 0x58, 0x4, 0x9, 0x7, 0x10001, 0x0, 0x71}, {0x6, 0x6, 0x2, 0x3311fa7a, 0xfffffffffffffffe, 0x7, 0x2, 0x9}], "08809141e3baf773db417312c8c41c7c94e2d065af866fa236858af1c5c2c68ac63a27c5eb51da3e9f970c113221e0e0ae6a1cf058968725e035b63d23a03f249c486ece284ebb4184a6e823db1f79ce5e20c2d5361e6f0af27b02e8b9fb242770f9fe", ['\x00', '\x00', '\x00', '\x00']}, 0x513) sendfile(r4, r5, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5, {0x4}}, './file1\x00'}) openat(r4, &(0x7f0000000040)='./file1\x00', 0x40, 0x45) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0xc1, 0x1) [ 2099.754291] FAULT_INJECTION: forcing a failure. [ 2099.754291] name failslab, interval 1, probability 0, space 0, times 0 [ 2099.756705] CPU: 0 PID: 10705 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2099.758175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2099.759922] Call Trace: [ 2099.760481] dump_stack+0x107/0x167 [ 2099.761247] should_fail.cold+0x5/0xa [ 2099.762105] ? create_object.isra.0+0x3a/0xa30 [ 2099.763058] should_failslab+0x5/0x20 [ 2099.763861] kmem_cache_alloc+0x5b/0x310 [ 2099.764717] create_object.isra.0+0x3a/0xa30 [ 2099.765846] kmemleak_alloc_percpu+0xa0/0x100 [ 2099.766826] pcpu_alloc+0x4e2/0x1240 [ 2099.767626] ? io_async_queue_proc+0x80/0x80 [ 2099.768556] percpu_ref_init+0x31/0x3d0 [ 2099.769400] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2099.770555] io_uring_setup+0x14f6/0x2980 [ 2099.771440] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2099.772517] ? wait_for_completion_io+0x270/0x270 [ 2099.773561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2099.774686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2099.775784] do_syscall_64+0x33/0x40 [ 2099.776573] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2099.777665] RIP: 0033:0x7f55325f0b19 [ 2099.778468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2099.782385] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2099.783991] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2099.785499] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2099.787025] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2099.788536] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2099.790057] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2099.801492] FAULT_INJECTION: forcing a failure. [ 2099.801492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2099.803977] CPU: 0 PID: 10712 Comm: syz-executor.6 Not tainted 5.10.246 #1 [ 2099.805563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2099.805768] FAULT_INJECTION: forcing a failure. [ 2099.805768] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2099.807316] Call Trace: [ 2099.807368] dump_stack+0x107/0x167 [ 2099.807396] should_fail.cold+0x5/0xa [ 2099.811958] _copy_to_user+0x2e/0x180 [ 2099.812770] simple_read_from_buffer+0xcc/0x160 [ 2099.813761] proc_fail_nth_read+0x198/0x230 [ 2099.814690] ? proc_sessionid_read+0x230/0x230 [ 2099.815651] ? security_file_permission+0xb1/0xe0 [ 2099.816682] ? proc_sessionid_read+0x230/0x230 [ 2099.817642] vfs_read+0x228/0x620 [ 2099.818392] ksys_read+0x12d/0x260 [ 2099.819149] ? vfs_write+0xb10/0xb10 [ 2099.819974] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2099.821083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2099.822194] do_syscall_64+0x33/0x40 [ 2099.822976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2099.824054] RIP: 0033:0x7fe76baa269c [ 2099.824837] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2099.828726] RSP: 002b:00007fe769065170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2099.830343] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fe76baa269c [ 2099.831847] RDX: 000000000000000f RSI: 00007fe7690651e0 RDI: 0000000000000004 [ 2099.833347] RBP: 00007fe7690651d0 R08: 0000000000000000 R09: 0000000000000000 [ 2099.834857] R10: 0000000000080012 R11: 0000000000000246 R12: 0000000000000002 [ 2099.836359] R13: 00007ffda63d3c6f R14: 00007fe769065300 R15: 0000000000022000 [ 2099.837897] CPU: 1 PID: 10709 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2099.839417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2099.841191] Call Trace: [ 2099.841758] dump_stack+0x107/0x167 [ 2099.842540] should_fail.cold+0x5/0xa [ 2099.843361] __alloc_pages_nodemask+0x182/0x600 [ 2099.844348] ? lock_release+0x680/0x680 [ 2099.845197] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2099.846484] ? lock_downgrade+0x6d0/0x6d0 [ 2099.847374] alloc_pages_current+0x187/0x280 [ 2099.848308] get_zeroed_page+0x14/0xb0 [ 2099.849129] ? kasan_unpoison_shadow+0x33/0x50 [ 2099.850111] mon_alloc_buff+0xed/0x250 [ 2099.850946] mon_bin_ioctl+0x493/0xcc0 [ 2099.851782] ? wait_for_completion_io+0x270/0x270 [ 2099.852813] ? mon_bin_get_event+0x440/0x440 [ 2099.853753] ? selinux_file_ioctl+0xb6/0x270 [ 2099.854700] ? mon_bin_get_event+0x440/0x440 [ 2099.855638] __x64_sys_ioctl+0x19a/0x210 [ 2099.856505] do_syscall_64+0x33/0x40 [ 2099.857300] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2099.858401] RIP: 0033:0x7f6bde1e2b19 [ 2099.859184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2099.863085] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2099.864709] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2099.866240] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2099.867752] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2099.869258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2099.870771] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:50:51 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x200000000000000) [ 2113.273435] FAULT_INJECTION: forcing a failure. [ 2113.273435] name failslab, interval 1, probability 0, space 0, times 0 [ 2113.276162] CPU: 0 PID: 10731 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2113.277790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2113.279768] Call Trace: [ 2113.280396] dump_stack+0x107/0x167 [ 2113.281272] should_fail.cold+0x5/0xa [ 2113.282190] ? create_object.isra.0+0x3a/0xa30 [ 2113.283268] should_failslab+0x5/0x20 [ 2113.284165] kmem_cache_alloc+0x5b/0x310 [ 2113.285137] create_object.isra.0+0x3a/0xa30 [ 2113.286199] kmemleak_alloc_percpu+0xa0/0x100 [ 2113.287267] pcpu_alloc+0x4e2/0x1240 [ 2113.288165] ? io_async_queue_proc+0x80/0x80 [ 2113.289195] percpu_ref_init+0x31/0x3d0 [ 2113.290166] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2113.291621] io_uring_setup+0x14f6/0x2980 [ 2113.292604] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2113.293779] ? wait_for_completion_io+0x270/0x270 [ 2113.294932] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2113.296142] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2113.297354] do_syscall_64+0x33/0x40 [ 2113.298230] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2113.299438] RIP: 0033:0x7f55325f0b19 [ 2113.300306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2113.304611] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2113.306393] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2113.308052] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2113.309721] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2113.311398] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2113.313040] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2113.319491] FAULT_INJECTION: forcing a failure. [ 2113.319491] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2113.322355] CPU: 0 PID: 10737 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2113.323961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2113.325908] Call Trace: [ 2113.326538] dump_stack+0x107/0x167 [ 2113.327588] should_fail.cold+0x5/0xa [ 2113.328471] __alloc_pages_nodemask+0x182/0x600 [ 2113.329553] ? lock_release+0x680/0x680 [ 2113.330487] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2113.331889] ? lock_downgrade+0x6d0/0x6d0 [ 2113.332871] alloc_pages_current+0x187/0x280 [ 2113.333896] get_zeroed_page+0x14/0xb0 [ 2113.334796] ? kasan_unpoison_shadow+0x33/0x50 [ 2113.335849] mon_alloc_buff+0xed/0x250 [ 2113.336766] mon_bin_ioctl+0x493/0xcc0 [ 2113.337667] ? wait_for_completion_io+0x270/0x270 [ 2113.338789] ? mon_bin_get_event+0x440/0x440 [ 2113.339808] ? selinux_file_ioctl+0xb6/0x270 [ 2113.340819] ? mon_bin_get_event+0x440/0x440 [ 2113.341831] __x64_sys_ioctl+0x19a/0x210 [ 2113.342774] do_syscall_64+0x33/0x40 [ 2113.343628] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2113.344803] RIP: 0033:0x7f6bde1e2b19 [ 2113.345653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2113.349867] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2113.351622] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2113.353260] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2113.354895] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2113.356521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2113.357894] FAULT_INJECTION: forcing a failure. 12:51:04 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 13) 12:51:04 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) 12:51:04 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) r1 = msgget(0x0, 0x172) msgsnd(r1, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="90f23ee48414c664c5a43f762e4c066fb46c651599634978ad436839c78464320b6c96b3b20424870f3c2c06ff5d7954554895fb52ffeef44cb8428f018a7311e03dc310105175dc9c0211c4c3d97278f61e53c32677695a579612fbb8f5ba448869626a4ccaeaae7114a481e103e8e43576e44b8a1a88966a66b6e6b4868bf5132cbfb5bc28aa11f6dcafe94048bd40f1c5f93a760b22174a742576098c9f3a6cacab94927a4600b7455033a85d92450a398e67a065f49012273455707ce4f6ac3de7ab8003c8cdf8491d17087e25e66d7112c059f9f340c35262df6b049113566fbdd3f51963793385ba78d21a42e3a68ed5c340c7ae8e7c2912decbc2e8175a88728d5aaf4822588b5fc88aee41ed9174cc588c519b0c5869ff2d65e08d1b7821c97c58cb1be4f1c62363215f99f391d5441860295b530603b1976c54e83096e8942a43b55f24c3584a1f136a7f0d5ef95f557d2baecf95628bb94d7f1cf3bb70a37631af2938e91dbae32061fdb3e543e2c6ff3b003cf22fb97f78b59e0f97e9bae1ab06e67f32249b75ee87e1026f9856b9ed12135e6474800b00e9b304ac081713976ac37945d55ca0da28b9f4a6e2fb34cc12e8ab3f97cd3131eaa574858c0edc20098bbcd4fb98e10a3e1b88137d9b55cafe856a7fdfc52b870d13baf1025873d59cf7a73c4977ce2486005a2801c2f3b6ffd7ea4b95d6ea2d78a6b8b762c15ce619d64cf415ad208e6ecc922322251412bdafc6cc3bded6cf5b141f69a06ca222d18162d4caf3b70ba20407830be2a0b4d63fe3ea0aa668c4f6fe84bf98c2849de40db25fea70f0216c1df234e515b68fad8975e787c6c834aeff0fff9ddee36943907373d4d9b90554efd06020853cda7b28d77b515682678493081f7cf695cb23c20f791f36b8dcf209f4572de40de199fb323774b39d006299c24033a9670b63efaf60763843e57262aa2300cc3d8a00c41b1058d01496946d425e094c47feb6c05ac0e419af3519cedaeb69d798f6a8a0f6228be14c6896332eb4d233587d75107b472ec90573454d047feb3cce7ef7b4411c62bf805bc3c16d06d396546dfdff8e309cc97f47c0bdb1f145c961c1dbaae974296b1d9d726478d00bcda517db8ba710ea53e754f54181907b60c69b161145b437aa5fbb9cb55b7740dfd7ba18507369a582788206d9a513955b024c4b738adc72c93bb20a83787ba7736f66d7d0e201475050b7769b9083ccf66b34054fe8dd73023e9a936f67f2299dde07f5601a9e9fb478e1007824de649557be2676c8132ab6a20cc422a0dcec5828c240bebf8b8194c6077f70f7bc9f882693b9328512ec2f86c201661e1ac676feedb439ae38cb3bf0769348528540cf4c82fef3b38979639264d32966c4a54a829fdd28d21abe01d0d44999a3c70b8c216b90d375f0c73acaef274af90d96fed4394170f916780399a814b8684f0208626656a93f26fecdfa69ec34433d0021e96b4d977fe40c0a765cb9fb78f66b6098a49d450a87d515dbf467af3384e8ef356293bd4e8e2b06cfe5bbf6de5d393496d692029b083f8fb0f129be9007d4f1421c2398679f899357a97f9ca79ba1bb862d169e9d1ddf1d20accb950530f06e193db66724b3d12a0de09e9af272d4ca52b447d94b244407796fe08538bda0e9323bcbd9d6b3831bd80e2ab65786f1a2e8d64bb6a646514ac975068f70959a82f26a232da659eba634dab2d2c63fa0025079158bb5ff8f4da275099c68cf7bd59a6f440e6cd2bf313f846ec78194a8b22c1c9a106046cd5b01336d0bd9d6707397845b4033eb280b1f3c52d16efad9d488d4fe5c8052e78d992e155717719c49061927b0692340ad021438c71fac159817920b43ba0ac658720d8fe8b04a29c4dd0db5188c3951db8921426b2f1ec1b76d2c16d4d9b14eab6193a728fdb2f38ea193d6213337d1bed670afdab0d5d135b31dc60c0c900aa731ca0ef76cb26946d361b9beae8771c77115ed4d268190b60a2f4ffc1c5b5d30e6a996f9113352ac856a04bb42f0a6bd897f488698cd18a3367daf55b5487cbecee292a331fef96109bfa62eb7ed97a201401097123c8b06b7f8b90c0b195c2a40c74a19c4f0dd7e0a46da2f2a54b4082fa3ed2e7bcd64d394c1e60d219789623e03a70ea36decd1756cda599be2db946381a365c7795f960651b7e053201aafce20a270ec3470d7c13c0dac954b8dd8032c7668dc5740e8cb050dda39e286d211d63d9f8bc4f79838f5bbdd5d790b972dbba633b0bcd74a306ee02a0954741bcab06b3c78c61c95f1af9d10eb52b4e854764b0f78ffba56f4f83c15483105cc28c3a4f218b0f6bba100b545f1189a8103eac586eed81301eb70a7c446849d4cbcd9c521d10f70c6189ded9d8b48612d16a1a074564a67e882186da0c3828056aeb33ed98d6dbe5bbf591616f53edbd3684d7e393ed2ba808f1f5e434b970ab74ecdd616c703aaa4436e5fdec0dc44690ade613c8c99ba3033522025536e5b2d77102925eb1bb6970e5f9abcc0a4b2617169bafe95950fd4a7c02280a0ed2ca5096a1013fa62fb5200297e5e3a3ec64f8a80f268b08c37c051d7c8c2ac2499304d0cc9de38582ddb5710137aacf914c6567f9dbe33347723b4d2051b242bd50cca9ac78009202f6ecf8bae1415325f93581d82da36529ba569f00c1e62d2df4d1669cd62801448c1701ba8a53888de08e0618bc49e2d490e4dac43704fb8710d8e93d376d1179cf10fa18933fe975f266dfe45f53f92c7ddf32f71c74ed9f4c2c0bdca9d264ad8097c5939a0d8954156c75d8deeae5fa37178866622a700e50c9e7645ebeca7198ee248dd0ccbbc5e7ccd3c1afc9758b9b4d4926a7c391d0c2a13a0d87370de45409a380d6315fa2ce5adbf96c2f204bfec15beb54f053c638043030decfc8ff619944eefd96e378f2ee51a01234f8668b34aba36897896690616d499b7598d0b42072b07f217602cc8d43a3b44ac9d2bc19d3d1d3511365c53cafe8e412b2005ec908f2ca1fd00c0388e6e008ff968b735c0876c023430e12db4fa8e6f0fa6295de1779ca16aefaae37a8dd2aabac1fc14c67df6e287bf5bf0de1e00168996c58103088aa0e95b509ec834c68333a862cc5fefcb928772b32ad7d93abebc5c27b88d903f5d1902c248390ccc429ce0a0cd01b86e81d1dd62691a6b50a59fa51a44712dcb583b4281e9f764fc33c400a905fe890d239168091a56935dec0b071ed151c130f6c49b4b22ccb3152ebed7c7c85808d8d0e59550db98eb98242fb05f7e462bd4aa8ee010cbcdc23d4bbfb70f8538f2923a7078efdefbbb31c926fa2bac21aa99f666bc0073e57811255014bd3e9427515b61738ea4d8fd60276062343a2137fadddac497cdbc85fc23d63bf4adadb210cd8e2aa5caa39e81fbf1f5bab85f3ee5a741fb7f6bada7633efb46677b34aa3a49c60320f7ef436c0a02e89d5324daf7a3dc9c86b26f7bdc344b00b97a540924afcbbe671a3990b5d0a4621732580e04e1c4e7050b4759b37110570191a899afa12ff950d8b2066f4d57e5a210e9aa5ea70ab0e542cba52feed3e9b468f1b49d1b10ac4f0f7ccadace4b61f1b8a688bc0bbbf08e76199b889c7ed3e51100c3887fd0b85e0bdf97513b7997e1432192a9b16626ec183926da4783d222d804ad4d7cab74edae4113ae2af3d945f1ce16ff5df7cff5bc1a16b8c821dfaeff3e8c26d31472e71314bdec810496545877a18a66558e583b636fbf532c1f4f49f8d787ff1a3d44dbd1c971f9b3cd5489fb9c8c7e051e588ae5a5c1d1825aa8057296c85e3eaa019640475ebccb07896ea63c9d52aaf3ccf4322b8818a72ea93a91411009d938ef50b0febd075451ed490981aa22af8cf7f6893a1fae385b98d7b9c5103811a614ba05d6c8c2183ab4e209453a1991d9dcca6684b0290f53f9698edf8ce66765a0c360cbbcb885996ab7717b558776604b1844434e0d76ae2e51a7721b447e6e1b654f545944f8a68b72a24020a18292009717acd9ed1c1964e2fb8f147a8ec890078389cc7aed9d179306d00588bf2c5de4133e47722a9cde447adb3991c600e94b507702c4d03fb100c06e83ea6e5f94b3c729ecaa59cb5ead61507270fca669f126fc93ee038c9e9674cd8216df2b09129e0f1531b0c2538c7c8dd7fdf7f4fc5446166ee7cbad06caaf0c8c2e1b3e1ee60f516cafd189451d96f797ffc53897a5f19352e87bdb68cb728b1feacd7106acd6ad22944249fe9afc194e384c54569b940b3511a4f313f7159f6c52349112c2616914c4097fb5e98d448f001db1d1cc0ed28eb311aca71d4385826982ed170f3f3d0007b93e13bfc1952a2146de7b85a8f913f2708de08660ac53e02b837a63bf02c5699cf938340c52e1509bd26bb39e86fa30d3be2a4e8d5a371e2b730b5bacb3789f63a1050848a4eb16350e3cdaafed0d92d31c5585cd37e7f581547702e7d8148097b651b2c449ed53a2cc6a744b186565413a0e803f0a01d896e9bea217014416c12664a343c2492d8acdda4a254c3a090af6b422a27cebcfccecb1166affdf8fc77aad4457d5dfa1a1025232a4fbd3714525e1bdbe205eed8d1d73fb14b0e67f08ca2461a2fa8a3a28114cd87547a6d56197d2fa3788985457a5df3b4055dcb76b4cf9868ddefdabfc35275309bf26e0cb92ee5c252a9639f3eaa604f796eb36e1bbe7385f538e5ca2713ec80efc455458a7881d406bb8d9ad3dd405c0c8a84c4d08649a4b71e56587403d803988c5dda350dc417a466c732a779dd1374eb00984cc27b82e1a409e84cb376c27686cfd39cd5976849d2b62778127811dfdfb8340016efdf7e87c65639dbac756401d0d272329f4f2e5eb6fe6a36482202406817fa61d0a1053858fa127f1422be47b31b4d9b96b73484b0959e8b1ed896cbf64a6e93a2ffddc0db1d0b638018e6cc3afcf787a6eb3dac04d0035b6195c90a52c3da4d3420d31915b94f60f9af7a79fea0ba661992e24106a653124eae88b795798b4234f880f868f4953fa2651ae3da8657117a8921a0d19ea1a1c37a4766ff76911af8454bc295b718b9097974a7f66114a8759c47f3e5ccda81d14753090889d574184378fa4042e03d86810f6d94c3f61007a39b8c319f799039ee94e4cce5d59396a850a478925fc44aba4c602c2b62bea6b3db183c38b9cdb76a92770263b4c8d1a0caebe7141f306d07b30ef6b112088cea94bc9a8e9de007aca1caab9075f573546d4358642515602081b55d940a9f4aa654772b003ad839df6a384ded2bae2020f5f5f801796c260db96ff9381fb6f0767e5d18f0647b91fdaa3ed5a66212b3fb7a12e621a6baa0132c2f6e7674c25124c0f0a28455298269b3cbe61106f49a45b78519b37407b4a372294834d4cd6c6cb73de537cfb6a6525303d042212b66e7e71bbae1b3c4dc03278e8b51d4ace6ea5b3aab679e586a4487ec9873136ab29544fb9666d1a81935c1c05f21f7051790dcfe3fbaa0e3f19beecad449939e78e593763bf4e1fec0c5e0f2e18604bb55e941b433b74cb003c428ffde37d9e644abfcc0d2535ca64e973ef7cc9cdc369cd85c4886baf15f8c798237d3d7475bad4408eb150e9275e3a028ff94e0ae4a0d27cb2475ffedf238e51b825daa6686122c4a5e5f77b3b19ab0663a0bdac2c31669f3bc1d6023f17e05ed61a3f95eff867f0e34b352cc10e105ff8b0147d8f151d24a21114067fedcb263944758d84573566d19fab4f3695c40b176d733b", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:51:04 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 17) 12:51:04 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) dup2(r0, r1) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:51:04 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x400000000000000) 12:51:04 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000080)={&(0x7f0000000000), &(0x7f0000000040)=""/10, 0xa}) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) 12:51:04 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:51:04 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4004, 0x2, 0x80012, r0, 0x0) 12:51:04 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 18) [ 2113.357894] name failslab, interval 1, probability 0, space 0, times 0 [ 2113.358159] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2113.360902] CPU: 1 PID: 10746 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2113.361802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2113.362901] Call Trace: [ 2113.363248] dump_stack+0x107/0x167 [ 2113.363727] should_fail.cold+0x5/0xa [ 2113.364222] ? percpu_ref_init+0xd8/0x3d0 [ 2113.364759] should_failslab+0x5/0x20 [ 2113.365263] kmem_cache_alloc_trace+0x55/0x320 [ 2113.365853] ? io_async_queue_proc+0x80/0x80 [ 2113.366431] percpu_ref_init+0xd8/0x3d0 [ 2113.366964] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2113.367691] io_uring_setup+0x14f6/0x2980 [ 2113.368238] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2113.368902] ? wait_for_completion_io+0x270/0x270 [ 2113.369552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2113.370257] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2113.370941] do_syscall_64+0x33/0x40 [ 2113.371440] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2113.372114] RIP: 0033:0x7f55325f0b19 [ 2113.372607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2113.375020] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2113.376002] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2113.376936] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2113.377880] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2113.378828] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2113.379762] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:51:04 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 19) 12:51:04 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0xa00000000000000) 12:51:04 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x7fffdf006000, 0x2, 0x80012, r0, 0x0) 12:51:04 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 14) 12:51:04 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x7ffffffff000, 0x2, 0x80012, r0, 0x0) [ 2113.477156] FAULT_INJECTION: forcing a failure. [ 2113.477156] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2113.478699] CPU: 1 PID: 10760 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2113.479555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2113.480572] Call Trace: [ 2113.480910] dump_stack+0x107/0x167 [ 2113.481359] should_fail.cold+0x5/0xa [ 2113.481833] __alloc_pages_nodemask+0x182/0x600 [ 2113.482425] ? lock_release+0x680/0x680 [ 2113.482924] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2113.483671] ? lock_downgrade+0x6d0/0x6d0 [ 2113.484190] alloc_pages_current+0x187/0x280 [ 2113.484734] get_zeroed_page+0x14/0xb0 [ 2113.485239] ? kasan_unpoison_shadow+0x33/0x50 [ 2113.485803] mon_alloc_buff+0xed/0x250 [ 2113.486296] mon_bin_ioctl+0x493/0xcc0 [ 2113.486780] ? wait_for_completion_io+0x270/0x270 [ 2113.487375] ? mon_bin_get_event+0x440/0x440 [ 2113.487926] ? selinux_file_ioctl+0xb6/0x270 [ 2113.488435] FAULT_INJECTION: forcing a failure. [ 2113.488435] name failslab, interval 1, probability 0, space 0, times 0 [ 2113.488475] ? mon_bin_get_event+0x440/0x440 [ 2113.491382] __x64_sys_ioctl+0x19a/0x210 [ 2113.491881] do_syscall_64+0x33/0x40 [ 2113.492340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2113.492967] RIP: 0033:0x7f6bde1e2b19 [ 2113.493424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2113.495682] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2113.496613] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2113.497492] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2113.498378] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2113.499256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2113.500130] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2113.501027] CPU: 0 PID: 10761 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2113.501276] loop0: detected capacity change from 0 to 32768 [ 2113.502525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 12:51:04 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x2800000000000000) [ 2113.502530] Call Trace: [ 2113.502553] dump_stack+0x107/0x167 [ 2113.506461] should_fail.cold+0x5/0xa [ 2113.507270] ? create_object.isra.0+0x3a/0xa30 [ 2113.508245] should_failslab+0x5/0x20 [ 2113.509050] kmem_cache_alloc+0x5b/0x310 [ 2113.509922] create_object.isra.0+0x3a/0xa30 [ 2113.510859] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2113.511936] kmem_cache_alloc_trace+0x151/0x320 [ 2113.512918] ? io_async_queue_proc+0x80/0x80 [ 2113.513844] percpu_ref_init+0xd8/0x3d0 [ 2113.514700] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2113.515851] io_uring_setup+0x14f6/0x2980 [ 2113.516735] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2113.517803] ? wait_for_completion_io+0x270/0x270 [ 2113.518853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2113.519963] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2113.521059] do_syscall_64+0x33/0x40 [ 2113.521848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2113.522939] RIP: 0033:0x7f55325f0b19 [ 2113.523720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2113.527579] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2113.529187] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2113.530692] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2113.532194] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2113.533699] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2113.535207] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:51:16 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 20) 12:51:16 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) r1 = msgget(0x0, 0x172) msgsnd(r1, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:51:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0xfbffffffffff0f00) 12:51:16 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 15) 12:51:16 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x80012, r0, 0x0) 12:51:16 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) 12:51:16 executing program 2: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040040) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:51:16 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)) r3 = dup2(r1, r0) r4 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x2022, 0x1}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x3, 0x400, 0x0, 0x4, 0x0, 0x1}, 0x28dcfa9c) syz_io_uring_complete(r2) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x1481, &(0x7f0000000100)={0x0, 0xec8b, 0x0, 0x0, 0x3a6, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x1ff, &(0x7f0000000040)=[r3, r0, r3, r8, r9], 0x5, 0x0, 0x1, {0x0, r10}}, 0x5) 12:51:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x7a5a4494, 0x10440) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x2, 0x400000) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000180)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/146, 0x92}) r2 = socket$inet(0x2, 0x80000, 0x5) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000001c0)=0x2) [ 2125.319926] FAULT_INJECTION: forcing a failure. [ 2125.319926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2125.321294] CPU: 0 PID: 10777 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2125.322085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.323035] Call Trace: [ 2125.323340] dump_stack+0x107/0x167 [ 2125.323758] should_fail.cold+0x5/0xa [ 2125.324191] _copy_to_user+0x2e/0x180 [ 2125.324622] io_uring_setup+0x11b5/0x2980 [ 2125.325093] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2125.325662] ? wait_for_completion_io+0x270/0x270 [ 2125.326248] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2125.326927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2125.327507] do_syscall_64+0x33/0x40 [ 2125.327927] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2125.328503] RIP: 0033:0x7f55325f0b19 [ 2125.328928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2125.331011] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2125.331873] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2125.332677] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2125.333481] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2125.334292] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2125.335103] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2125.353421] FAULT_INJECTION: forcing a failure. [ 2125.353421] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2125.354879] CPU: 0 PID: 10792 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2125.355661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.356591] Call Trace: [ 2125.356893] dump_stack+0x107/0x167 [ 2125.357305] should_fail.cold+0x5/0xa [ 2125.357738] __alloc_pages_nodemask+0x182/0x600 [ 2125.358273] ? lock_release+0x680/0x680 [ 2125.358723] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2125.359405] ? lock_downgrade+0x6d0/0x6d0 [ 2125.359876] alloc_pages_current+0x187/0x280 [ 2125.360375] get_zeroed_page+0x14/0xb0 [ 2125.360820] ? kasan_unpoison_shadow+0x33/0x50 [ 2125.361341] mon_alloc_buff+0xed/0x250 [ 2125.361783] mon_bin_ioctl+0x493/0xcc0 [ 2125.362254] ? wait_for_completion_io+0x270/0x270 [ 2125.362807] ? mon_bin_get_event+0x440/0x440 [ 2125.363313] ? selinux_file_ioctl+0xb6/0x270 [ 2125.363813] ? mon_bin_get_event+0x440/0x440 [ 2125.364314] __x64_sys_ioctl+0x19a/0x210 [ 2125.364778] do_syscall_64+0x33/0x40 [ 2125.365200] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2125.365784] RIP: 0033:0x7f6bde1e2b19 [ 2125.366214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2125.368294] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2125.369152] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2125.369958] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2125.370775] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2125.371578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2125.372394] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:51:16 executing program 4: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) 12:51:16 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x80012, r0, 0x0) 12:51:16 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 21) 12:51:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x40000) syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x88000) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/32, 0x20}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) [ 2125.435689] FAULT_INJECTION: forcing a failure. [ 2125.435689] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.437047] CPU: 0 PID: 10800 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2125.437831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.438800] Call Trace: [ 2125.439110] dump_stack+0x107/0x167 [ 2125.439528] should_fail.cold+0x5/0xa [ 2125.439959] ? __d_alloc+0x2a/0x990 [ 2125.440375] should_failslab+0x5/0x20 [ 2125.440805] kmem_cache_alloc+0x5b/0x310 [ 2125.441267] __d_alloc+0x2a/0x990 [ 2125.441662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2125.442259] d_alloc_pseudo+0x19/0x70 [ 2125.442690] alloc_file_pseudo+0xce/0x250 [ 2125.443163] ? alloc_file+0x5a0/0x5a0 [ 2125.443601] ? alloc_file_pseudo+0x22/0x250 [ 2125.444089] anon_inode_getfile+0xc8/0x1f0 [ 2125.444573] io_uring_setup+0x138b/0x2980 [ 2125.445049] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2125.445625] ? wait_for_completion_io+0x270/0x270 [ 2125.446189] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2125.446788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2125.447368] do_syscall_64+0x33/0x40 [ 2125.447785] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2125.448362] RIP: 0033:0x7f55325f0b19 [ 2125.448781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2125.450859] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2125.451726] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2125.452529] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2125.453341] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2125.454144] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2125.454953] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2125.473145] loop0: detected capacity change from 0 to 32768 12:51:16 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)) dup2(r1, r0) syz_io_uring_setup(0x6c3a, &(0x7f0000000000)={0x0, 0xb2b4, 0x10, 0x1, 0x262}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x80800}, 0x100) 12:51:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r0, 0x4) sendfile(r0, r1, 0x0, 0x100000001) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000040)=0x1c, 0x800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x6c0a}}, './file0\x00'}) r4 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) openat(r5, &(0x7f0000000280)='./file1\x00', 0x80000, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x80, 0x8, 0x200, 0xfffffff7, {{0xf, 0x4, 0x3, 0x0, 0x3c, 0x65, 0x0, 0x3f, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0xc7, 0x1, 0x7, [{@local, 0x5}]}, @lsrr={0x83, 0xb, 0x31, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @generic={0x89, 0x10, "fc11004f3cd11ead92be92bf4900"}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@private0, @dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xdd, 0x1a23, 0x7, 0x100, 0x3, 0x8, r6}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000900)={{0x1, 0x1, 0x18, r4, {0x3f}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a80)={'sit0\x00', &(0x7f0000000a00)={'sit0\x00', r6, 0x0, 0x5, 0x9, 0x8000, 0x3, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x80, 0x5ab, 0x80}}) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000ac0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x67, r8}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r4, 0x0) r9 = open(&(0x7f0000000440)='./file1\x00', 0x101000, 0xb2) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000800c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r10, 0x300, 0x270bd2d, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040843}, 0x4040) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 12:51:31 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x4) 12:51:31 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x20040) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x7, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x20000004) syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x40) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) 12:51:31 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x0, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:51:31 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 16) 12:51:31 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 22) [ 2139.633987] FAULT_INJECTION: forcing a failure. [ 2139.633987] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2139.635621] CPU: 1 PID: 10833 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2139.636502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.637553] Call Trace: [ 2139.637898] dump_stack+0x107/0x167 [ 2139.638364] should_fail.cold+0x5/0xa [ 2139.638848] __alloc_pages_nodemask+0x182/0x600 [ 2139.639447] ? lock_release+0x680/0x680 [ 2139.639948] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2139.640708] ? lock_downgrade+0x6d0/0x6d0 [ 2139.641246] alloc_pages_current+0x187/0x280 [ 2139.641801] get_zeroed_page+0x14/0xb0 [ 2139.642301] ? kasan_unpoison_shadow+0x33/0x50 [ 2139.642873] mon_alloc_buff+0xed/0x250 [ 2139.643367] mon_bin_ioctl+0x493/0xcc0 [ 2139.643861] ? wait_for_completion_io+0x270/0x270 [ 2139.644467] ? mon_bin_get_event+0x440/0x440 [ 2139.645030] ? selinux_file_ioctl+0xb6/0x270 [ 2139.645580] ? mon_bin_get_event+0x440/0x440 [ 2139.646136] __x64_sys_ioctl+0x19a/0x210 [ 2139.646664] do_syscall_64+0x33/0x40 [ 2139.647131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2139.647775] RIP: 0033:0x7f6bde1e2b19 [ 2139.648255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.650722] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2139.651905] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2139.652802] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2139.653119] FAULT_INJECTION: forcing a failure. [ 2139.653119] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.653699] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2139.653706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2139.653713] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2139.661168] CPU: 0 PID: 10839 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2139.662839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.664824] Call Trace: [ 2139.665463] dump_stack+0x107/0x167 [ 2139.666353] should_fail.cold+0x5/0xa [ 2139.667272] ? create_object.isra.0+0x3a/0xa30 [ 2139.668367] should_failslab+0x5/0x20 [ 2139.669275] kmem_cache_alloc+0x5b/0x310 [ 2139.670254] create_object.isra.0+0x3a/0xa30 [ 2139.671301] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2139.672521] kmem_cache_alloc+0x159/0x310 [ 2139.673510] __d_alloc+0x2a/0x990 [ 2139.674341] ? find_held_lock+0x2c/0x110 [ 2139.675308] d_alloc_pseudo+0x19/0x70 [ 2139.676212] alloc_file_pseudo+0xce/0x250 [ 2139.677181] ? trace_hardirqs_on+0x5b/0x180 [ 2139.678206] ? alloc_file+0x5a0/0x5a0 [ 2139.679124] anon_inode_getfile+0xc8/0x1f0 [ 2139.680130] io_uring_setup+0x138b/0x2980 [ 2139.681108] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2139.682323] ? wait_for_completion_io+0x270/0x270 [ 2139.683488] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.684742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.685965] do_syscall_64+0x33/0x40 [ 2139.686852] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2139.688062] RIP: 0033:0x7f55325f0b19 12:51:31 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r4, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x3001}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) dup2(r1, r0) r6 = signalfd4(r0, &(0x7f0000000000)={[0xfffffffffffffff8]}, 0x8, 0x800) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x29, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x1, 'lblc\x00', 0x8, 0x400, 0x52}, 0x2c) 12:51:31 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffffffffc, 0x15b7c3) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x80012, r0, 0x0) 12:51:31 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) r1 = msgget(0x0, 0x172) msgsnd(r1, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) [ 2139.688945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.693477] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2139.695270] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2139.696943] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2139.698626] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2139.700308] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2139.701957] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:51:31 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x4000) 12:51:31 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 17) [ 2139.726672] FAULT_INJECTION: forcing a failure. [ 2139.726672] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2139.729429] CPU: 0 PID: 10848 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2139.731007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.732903] Call Trace: [ 2139.733494] dump_stack+0x107/0x167 [ 2139.734327] should_fail.cold+0x5/0xa [ 2139.735186] __alloc_pages_nodemask+0x182/0x600 [ 2139.736247] ? lock_release+0x680/0x680 [ 2139.737145] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2139.738520] ? lock_downgrade+0x6d0/0x6d0 [ 2139.739458] alloc_pages_current+0x187/0x280 [ 2139.740451] get_zeroed_page+0x14/0xb0 [ 2139.741322] ? kasan_unpoison_shadow+0x33/0x50 [ 2139.742367] mon_alloc_buff+0xed/0x250 [ 2139.743243] mon_bin_ioctl+0x493/0xcc0 [ 2139.744125] ? wait_for_completion_io+0x270/0x270 [ 2139.745201] ? mon_bin_get_event+0x440/0x440 [ 2139.746198] ? selinux_file_ioctl+0xb6/0x270 [ 2139.747202] ? mon_bin_get_event+0x440/0x440 [ 2139.748198] __x64_sys_ioctl+0x19a/0x210 [ 2139.749109] do_syscall_64+0x33/0x40 [ 2139.749949] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2139.751100] RIP: 0033:0x7f6bde1e2b19 [ 2139.751940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.756072] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2139.757787] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2139.759405] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2139.761009] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2139.762609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2139.764201] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2139.779451] FAULT_INJECTION: forcing a failure. [ 2139.779451] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.780941] CPU: 1 PID: 10852 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2139.781772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.782783] Call Trace: [ 2139.783108] dump_stack+0x107/0x167 [ 2139.783552] should_fail.cold+0x5/0xa [ 2139.784011] ? __alloc_file+0x21/0x320 [ 2139.784481] should_failslab+0x5/0x20 [ 2139.784939] kmem_cache_alloc+0x5b/0x310 [ 2139.785432] __alloc_file+0x21/0x320 [ 2139.785881] alloc_empty_file+0x6d/0x170 [ 2139.786378] alloc_file+0x5e/0x5a0 [ 2139.786808] alloc_file_pseudo+0x16a/0x250 [ 2139.787317] ? alloc_file+0x5a0/0x5a0 [ 2139.787781] anon_inode_getfile+0xc8/0x1f0 [ 2139.788296] io_uring_setup+0x138b/0x2980 [ 2139.788796] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2139.789403] ? wait_for_completion_io+0x270/0x270 [ 2139.789990] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.790627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.791246] do_syscall_64+0x33/0x40 [ 2139.791692] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2139.792305] RIP: 0033:0x7f55325f0b19 [ 2139.792751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.794950] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2139.795862] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2139.796714] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2139.797562] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2139.798423] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2139.799268] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:51:31 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 23) 12:51:31 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc4}) r1 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:51:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = signalfd(r0, &(0x7f0000000080)={[0x4a]}, 0x8) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x8) read$usbmon(r0, &(0x7f0000000000)=""/117, 0x75) [ 2139.821493] loop0: detected capacity change from 0 to 32768 12:51:31 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7, 0x7f, 0x0, 0x0, 0x2}) 12:51:31 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x400000) 12:51:31 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 24) 12:51:31 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x1000000) 12:51:31 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000080)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000600)=""/4096, 0x1000}) r3 = syz_io_uring_setup(0x5cca, &(0x7f0000000580)={0x0, 0x2fb5, 0x20, 0x0, 0x800}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000000)) dup2(r3, r0) [ 2139.919001] FAULT_INJECTION: forcing a failure. [ 2139.919001] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.920416] CPU: 1 PID: 10867 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2139.921212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.922160] Call Trace: [ 2139.922473] dump_stack+0x107/0x167 [ 2139.922893] should_fail.cold+0x5/0xa [ 2139.923336] ? create_object.isra.0+0x3a/0xa30 [ 2139.923860] should_failslab+0x5/0x20 [ 2139.924294] kmem_cache_alloc+0x5b/0x310 [ 2139.924760] create_object.isra.0+0x3a/0xa30 [ 2139.925262] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2139.925847] kmem_cache_alloc+0x159/0x310 [ 2139.926340] __alloc_file+0x21/0x320 [ 2139.926766] alloc_empty_file+0x6d/0x170 [ 2139.927232] alloc_file+0x5e/0x5a0 [ 2139.927639] alloc_file_pseudo+0x16a/0x250 [ 2139.928122] ? alloc_file+0x5a0/0x5a0 [ 2139.928569] anon_inode_getfile+0xc8/0x1f0 [ 2139.929053] io_uring_setup+0x138b/0x2980 [ 2139.929538] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2139.930116] ? wait_for_completion_io+0x270/0x270 [ 2139.930692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.931287] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.931877] do_syscall_64+0x33/0x40 [ 2139.932301] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2139.932886] RIP: 0033:0x7f55325f0b19 [ 2139.933311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.935418] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2139.936285] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2139.937097] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2139.937913] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2139.938737] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2139.939551] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:51:31 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x0, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:51:31 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 18) 12:51:31 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 25) 12:51:31 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x4000000) 12:51:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r0, 0x4) sendfile(r0, r1, 0x0, 0x100000001) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000300)=[{{0x77359400}, 0x2, 0x101, 0x3ff}, {{0x77359400}, 0x4, 0x4, 0x9f5}, {{r2, r3/1000+10000}, 0x1, 0xff81, 0x80}, {{0x77359400}, 0x1f, 0x8, 0x142ad915}, {{r4, r5/1000+10000}, 0x11, 0x401, 0x55}, {{0x0, 0x2710}, 0x3, 0x3f, 0x6}], 0x90) r6 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000040), &(0x7f0000000080)=""/46, 0x2e}) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x989, 0x103002) r8 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x400, 0x0, 0x0, 0x2b3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000100)) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000140)={0x0, 0x8000}) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) dup2(r7, r10) ftruncate(r9, 0x4) sendfile(r9, r10, 0x0, 0x100000001) ioctl$MON_IOCT_RING_SIZE(r9, 0x9204, 0xefbaa) dup2(r8, r6) [ 2140.491429] FAULT_INJECTION: forcing a failure. [ 2140.491429] name failslab, interval 1, probability 0, space 0, times 0 [ 2140.494292] CPU: 0 PID: 10884 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2140.495764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2140.497518] Call Trace: [ 2140.498084] dump_stack+0x107/0x167 [ 2140.498863] should_fail.cold+0x5/0xa [ 2140.499672] ? security_file_alloc+0x34/0x170 [ 2140.500620] should_failslab+0x5/0x20 [ 2140.501426] kmem_cache_alloc+0x5b/0x310 [ 2140.502300] security_file_alloc+0x34/0x170 [ 2140.503215] __alloc_file+0xb7/0x320 [ 2140.504010] alloc_empty_file+0x6d/0x170 [ 2140.504872] alloc_file+0x5e/0x5a0 [ 2140.505636] alloc_file_pseudo+0x16a/0x250 [ 2140.506538] ? alloc_file+0x5a0/0x5a0 [ 2140.507358] anon_inode_getfile+0xc8/0x1f0 [ 2140.508265] io_uring_setup+0x138b/0x2980 [ 2140.509154] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2140.510242] ? wait_for_completion_io+0x270/0x270 [ 2140.511271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2140.512363] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2140.513449] do_syscall_64+0x33/0x40 [ 2140.514250] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2140.515322] RIP: 0033:0x7f55325f0b19 [ 2140.516104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2140.520016] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2140.521623] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2140.523143] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2140.524657] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2140.526171] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2140.527686] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2140.541103] FAULT_INJECTION: forcing a failure. [ 2140.541103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2140.543729] CPU: 0 PID: 10888 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2140.545200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2140.547214] Call Trace: [ 2140.547774] dump_stack+0x107/0x167 [ 2140.548551] should_fail.cold+0x5/0xa [ 2140.549364] __alloc_pages_nodemask+0x182/0x600 [ 2140.550380] ? lock_release+0x680/0x680 [ 2140.551224] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2140.552505] ? lock_downgrade+0x6d0/0x6d0 [ 2140.553398] alloc_pages_current+0x187/0x280 [ 2140.554345] get_zeroed_page+0x14/0xb0 [ 2140.555168] ? kasan_unpoison_shadow+0x33/0x50 [ 2140.556137] mon_alloc_buff+0xed/0x250 [ 2140.556967] mon_bin_ioctl+0x493/0xcc0 [ 2140.557797] ? wait_for_completion_io+0x270/0x270 [ 2140.558834] ? mon_bin_get_event+0x440/0x440 [ 2140.559782] ? selinux_file_ioctl+0xb6/0x270 [ 2140.560721] ? mon_bin_get_event+0x440/0x440 [ 2140.561664] __x64_sys_ioctl+0x19a/0x210 [ 2140.562538] do_syscall_64+0x33/0x40 [ 2140.563334] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2140.564418] RIP: 0033:0x7f6bde1e2b19 [ 2140.565202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2140.569021] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2140.570660] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2140.572204] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2140.573726] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2140.575262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2140.576763] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:51:31 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:51:32 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0xffffffffffffb) 12:51:32 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 26) 12:51:32 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 19) [ 2140.641958] FAULT_INJECTION: forcing a failure. [ 2140.641958] name failslab, interval 1, probability 0, space 0, times 0 [ 2140.644491] CPU: 0 PID: 10897 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2140.645970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2140.647716] Call Trace: [ 2140.648282] dump_stack+0x107/0x167 [ 2140.649065] should_fail.cold+0x5/0xa [ 2140.649875] ? create_object.isra.0+0x3a/0xa30 [ 2140.650852] should_failslab+0x5/0x20 [ 2140.651661] kmem_cache_alloc+0x5b/0x310 [ 2140.652526] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2140.653697] create_object.isra.0+0x3a/0xa30 [ 2140.654636] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2140.655719] kmem_cache_alloc+0x159/0x310 [ 2140.656605] security_file_alloc+0x34/0x170 [ 2140.657508] __alloc_file+0xb7/0x320 [ 2140.658314] alloc_empty_file+0x6d/0x170 [ 2140.659179] alloc_file+0x5e/0x5a0 [ 2140.659927] alloc_file_pseudo+0x16a/0x250 [ 2140.660824] ? alloc_file+0x5a0/0x5a0 [ 2140.661639] anon_inode_getfile+0xc8/0x1f0 [ 2140.662550] io_uring_setup+0x138b/0x2980 [ 2140.663443] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2140.664503] ? wait_for_completion_io+0x270/0x270 [ 2140.665549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2140.666679] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2140.667764] do_syscall_64+0x33/0x40 [ 2140.668556] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2140.669643] RIP: 0033:0x7f55325f0b19 [ 2140.670443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2140.674378] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2140.675990] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2140.677503] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2140.679033] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2140.680555] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2140.682073] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2140.691627] FAULT_INJECTION: forcing a failure. [ 2140.691627] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2140.694184] CPU: 0 PID: 10898 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2140.695673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2140.697434] Call Trace: [ 2140.698001] dump_stack+0x107/0x167 [ 2140.698799] should_fail.cold+0x5/0xa [ 2140.699613] __alloc_pages_nodemask+0x182/0x600 [ 2140.700606] ? lock_release+0x680/0x680 [ 2140.701452] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2140.702739] ? lock_downgrade+0x6d0/0x6d0 [ 2140.703626] alloc_pages_current+0x187/0x280 [ 2140.704556] get_zeroed_page+0x14/0xb0 [ 2140.705380] ? kasan_unpoison_shadow+0x33/0x50 [ 2140.706367] mon_alloc_buff+0xed/0x250 [ 2140.707199] mon_bin_ioctl+0x493/0xcc0 [ 2140.708037] ? wait_for_completion_io+0x270/0x270 [ 2140.709060] ? mon_bin_get_event+0x440/0x440 [ 2140.709994] ? selinux_file_ioctl+0xb6/0x270 [ 2140.710942] ? mon_bin_get_event+0x440/0x440 [ 2140.711882] __x64_sys_ioctl+0x19a/0x210 [ 2140.712745] do_syscall_64+0x33/0x40 [ 2140.713531] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2140.714622] RIP: 0033:0x7f6bde1e2b19 [ 2140.715413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2140.719321] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2140.720939] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2140.722474] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2140.723985] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2140.725508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2140.727038] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2140.778508] loop0: detected capacity change from 0 to 32768 [ 2156.534217] FAULT_INJECTION: forcing a failure. [ 2156.534217] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2156.536750] CPU: 0 PID: 10914 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2156.538185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.539921] Call Trace: [ 2156.540471] dump_stack+0x107/0x167 [ 2156.541229] should_fail.cold+0x5/0xa [ 2156.542029] __alloc_pages_nodemask+0x182/0x600 [ 2156.543036] ? lock_release+0x680/0x680 [ 2156.543859] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2156.545109] ? lock_downgrade+0x6d0/0x6d0 [ 2156.545981] alloc_pages_current+0x187/0x280 [ 2156.546915] get_zeroed_page+0x14/0xb0 [ 2156.547718] ? kasan_unpoison_shadow+0x33/0x50 [ 2156.548669] mon_alloc_buff+0xed/0x250 [ 2156.549532] mon_bin_ioctl+0x493/0xcc0 [ 2156.550356] ? wait_for_completion_io+0x270/0x270 [ 2156.551356] ? mon_bin_get_event+0x440/0x440 [ 2156.552274] ? selinux_file_ioctl+0xb6/0x270 [ 2156.553193] ? mon_bin_get_event+0x440/0x440 [ 2156.554105] __x64_sys_ioctl+0x19a/0x210 [ 2156.554962] do_syscall_64+0x33/0x40 [ 2156.555743] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2156.556811] RIP: 0033:0x7f6bde1e2b19 [ 2156.557593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.561445] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2156.563039] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2156.564526] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2156.566019] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2156.567522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2156.569004] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2156.583531] FAULT_INJECTION: forcing a failure. [ 2156.583531] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.585915] CPU: 0 PID: 10925 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2156.587371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.589109] Call Trace: [ 2156.589659] dump_stack+0x107/0x167 [ 2156.590618] should_fail.cold+0x5/0xa [ 2156.591460] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2156.592548] should_failslab+0x5/0x20 [ 2156.593343] kmem_cache_alloc_trace+0x55/0x320 [ 2156.594308] io_uring_alloc_task_context+0x99/0x6a0 [ 2156.595359] ? io_import_iovec+0x1120/0x1120 [ 2156.596283] ? lock_downgrade+0x6d0/0x6d0 [ 2156.597146] ? do_raw_spin_lock+0x121/0x260 [ 2156.598047] ? rwlock_bug.part.0+0x90/0x90 [ 2156.598940] __io_uring_add_tctx_node+0x2c6/0x520 [ 2156.599951] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2156.601043] ? alloc_fd+0x2e7/0x670 [ 2156.601807] io_uring_setup+0x1fbb/0x2980 [ 2156.602681] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2156.603738] ? wait_for_completion_io+0x270/0x270 [ 2156.604761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.605860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.606934] do_syscall_64+0x33/0x40 [ 2156.607712] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2156.608782] RIP: 0033:0x7f55325f0b19 [ 2156.609555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.613397] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2156.614996] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2156.616488] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2156.617978] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2156.619468] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2156.620955] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:51:47 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f00000000c0), &(0x7f0000000000)=""/11, 0xb}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000002e2f66696c6530001787d0348197f29ddbe44a50c4ab6c61fc0e3e1674ce0c954c19bd85d23c6a748f6e2c5f3a9d78cda06d2d0d5ba0d20c5d9f52ec6050b2513dfb5a9050b9c9700ed97ee04af67c618a55ce069ea644607d85c79845d2b01adbccfa804466bf68dad8d2abdc35fe5bdfc6c9e539a0f75a9db0eb3ee96e64b007e84cc0a98f2426d01e0545524a664a26809aa2ca19a4bd1f27eee5741ecc426957a1cd15dcceead7f4faeaac2ac4c0d5f14a477d33d3149ca9fbd6a7"]) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x4) syz_open_dev$usbmon(&(0x7f0000000080), 0x8d, 0x100) syz_open_dev$usbmon(&(0x7f0000000100), 0xa2, 0x448400) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002f00), 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:51:47 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:51:47 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x0, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) 12:51:47 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x40000000000000) 12:51:47 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 20) 12:51:47 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000040)=""/118, 0x76}) 12:51:47 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 27) 12:51:47 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x20782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) r2 = epoll_create(0x6) fcntl$dupfd(r0, 0x406, r2) 12:51:48 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x100000000000000) 12:51:48 executing program 4: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xffffffc4}) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x400) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0x3, 0x4, 0x6, 0x0, 0x1d, 0x440, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x2, @perf_bp, 0x85, 0x5, 0xffff9258, 0x0, 0x1fffc000, 0x6, 0x4, 0x0, 0xfffffffa, 0x0, 0xffffffffffff5346}, r0, 0x1, r1, 0x9) r2 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r3 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r3, r2) 12:51:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80, 0x482140) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) 12:51:48 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x400000000000000) [ 2156.724601] loop0: detected capacity change from 0 to 32768 12:51:48 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 28) 12:51:48 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 21) [ 2156.788942] FAULT_INJECTION: forcing a failure. [ 2156.788942] name failslab, interval 1, probability 0, space 0, times 0 [ 2156.791415] CPU: 0 PID: 10946 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2156.792868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.794607] Call Trace: [ 2156.795165] dump_stack+0x107/0x167 [ 2156.795935] should_fail.cold+0x5/0xa [ 2156.796733] ? create_object.isra.0+0x3a/0xa30 [ 2156.797679] should_failslab+0x5/0x20 [ 2156.798483] kmem_cache_alloc+0x5b/0x310 [ 2156.799346] create_object.isra.0+0x3a/0xa30 [ 2156.800266] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2156.801321] kmem_cache_alloc_trace+0x151/0x320 [ 2156.802083] FAULT_INJECTION: forcing a failure. [ 2156.802083] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2156.802300] io_uring_alloc_task_context+0x99/0x6a0 [ 2156.802322] ? io_import_iovec+0x1120/0x1120 [ 2156.802362] ? lock_downgrade+0x6d0/0x6d0 [ 2156.807586] ? do_raw_spin_lock+0x121/0x260 [ 2156.808478] ? rwlock_bug.part.0+0x90/0x90 [ 2156.809366] __io_uring_add_tctx_node+0x2c6/0x520 [ 2156.810376] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2156.811474] ? alloc_fd+0x2e7/0x670 [ 2156.812245] io_uring_setup+0x1fbb/0x2980 [ 2156.813114] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2156.814182] ? wait_for_completion_io+0x270/0x270 [ 2156.815219] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2156.816318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2156.817395] do_syscall_64+0x33/0x40 [ 2156.818184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2156.819254] RIP: 0033:0x7f55325f0b19 [ 2156.820029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.823880] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2156.825470] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2156.826978] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2156.828464] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2156.829943] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2156.831482] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2156.833880] CPU: 1 PID: 10948 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2156.835346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2156.837086] Call Trace: [ 2156.837646] dump_stack+0x107/0x167 [ 2156.838418] should_fail.cold+0x5/0xa [ 2156.839218] __alloc_pages_nodemask+0x182/0x600 [ 2156.840194] ? lock_release+0x680/0x680 [ 2156.841025] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2156.842277] ? lock_downgrade+0x6d0/0x6d0 [ 2156.843160] alloc_pages_current+0x187/0x280 [ 2156.844077] get_zeroed_page+0x14/0xb0 [ 2156.844900] ? kasan_unpoison_shadow+0x33/0x50 [ 2156.845867] mon_alloc_buff+0xed/0x250 [ 2156.846702] mon_bin_ioctl+0x493/0xcc0 [ 2156.847517] ? wait_for_completion_io+0x270/0x270 [ 2156.848529] ? mon_bin_get_event+0x440/0x440 [ 2156.849458] ? selinux_file_ioctl+0xb6/0x270 [ 2156.850390] ? mon_bin_get_event+0x440/0x440 [ 2156.851319] __x64_sys_ioctl+0x19a/0x210 [ 2156.852173] do_syscall_64+0x33/0x40 [ 2156.852959] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2156.854040] RIP: 0033:0x7f6bde1e2b19 [ 2156.854823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2156.858673] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2156.860264] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2156.861748] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2156.863251] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2156.864727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2156.866221] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:51:48 executing program 1: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, 0xffffffffffffffff, 0x0) 12:51:48 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0xfbffffffffff0f00) 12:52:04 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setresuid(r2, r2, 0x0) fchown(r1, r2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) 12:52:04 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0xb50}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x2, 0xfe072b0c21112870, @fd_index=0x9, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000040)="37fe05f8e6758dbbdd745771576072f20064a47b85ab21787624645172fb7a2d85b06bd90e9dbd8ffe77045a5092db7172063c411b1cbd0a00b471b4b9b2255b0a0ded8de196852ae4b2bff914bf10d301fd0aed26e7277f48a781fa2e0727318c7aa3826817f94b61eaef4fd4374929fee9b2f5dbe13c3bd1aaf287f20510f8af5306e785a18ef79e3b39a2799498c52ae32a9b0fd630d7876e7bd2ad8de4a50acf1125f2acb7eb6dd4977c03ba967621ee801a5fce81ced84f59cf41ed3716cef9486112c4e6bc3ad3f261531298b8c5ffafb0ae2468cc29b53ea889075c55f6f6c9841d2156a606f10f464e03ef278f87feb8cdb4", 0xf6}, {&(0x7f0000000180)="42123b6649299925384071408d5ab06384f7b62ba8c4eb35a3a8c122764aafa14189f1d9e3abaa6c51caa128580666473eb3b0b04fec327def438d6d", 0x3c}], 0x2, 0x4, 0x0, {0x0, r6}}, 0x7) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:52:04 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x40010, r1, 0x8000000) r3 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r6 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) write$binfmt_elf64(r6, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x3, 0x9, 0x81, 0x4, 0x3, 0x3b6a0b206b331bda, 0x3, 0x348, 0x40, 0x31c, 0x544, 0x8001, 0x38, 0x2, 0x5, 0x1000, 0xdc}, [{0xfbb888ed6be02b0c, 0x8, 0x8, 0x2, 0x5, 0x8, 0x8, 0x3}], "d379f6ea08c5490441f6e854f32d70166d2209eee5b1271356287d934e14570a4970ddf416ac4cc5355bc87cf1da6e3fb698bee13846b1e7b6e32d11920d607fa9eb5dcb80ff51", ['\x00', '\x00']}, 0x2bf) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r8, 0x8000000) syz_io_uring_submit(r2, r5, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x1, 0x1, &(0x7f0000000000)="5af7ebce7f1c758081f64f05b132cefcbd3c1b8f2322b60a0a4d7fe5009eb190946de86970bbb3d48d20", 0x5b, 0x0, 0x0, {0x2}}, 0x3) dup2(r1, r0) 12:52:04 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x8, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x82400) read(r1, &(0x7f0000000040)=""/142, 0x8e) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:52:04 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 29) 12:52:04 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 22) [ 2172.838355] FAULT_INJECTION: forcing a failure. [ 2172.838355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2172.840868] CPU: 0 PID: 10967 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2172.842312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2172.844053] Call Trace: [ 2172.844612] dump_stack+0x107/0x167 [ 2172.845376] should_fail.cold+0x5/0xa [ 2172.846181] __alloc_pages_nodemask+0x182/0x600 [ 2172.847163] ? lock_release+0x680/0x680 [ 2172.848221] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2172.849482] ? lock_downgrade+0x6d0/0x6d0 [ 2172.850367] alloc_pages_current+0x187/0x280 [ 2172.851322] get_zeroed_page+0x14/0xb0 [ 2172.852134] ? kasan_unpoison_shadow+0x33/0x50 [ 2172.853084] mon_alloc_buff+0xed/0x250 [ 2172.853905] mon_bin_ioctl+0x493/0xcc0 [ 2172.854736] ? wait_for_completion_io+0x270/0x270 [ 2172.855760] ? mon_bin_get_event+0x440/0x440 [ 2172.856693] ? selinux_file_ioctl+0xb6/0x270 [ 2172.857629] ? mon_bin_get_event+0x440/0x440 [ 2172.858567] __x64_sys_ioctl+0x19a/0x210 [ 2172.859434] do_syscall_64+0x33/0x40 [ 2172.860223] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2172.861311] RIP: 0033:0x7f6bde1e2b19 [ 2172.862096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2172.865984] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2172.867607] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2172.869109] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2172.870629] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2172.872132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2172.873629] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:52:04 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x0) 12:52:04 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="90f23ee48414c664c5a43f762e4c066fb46c651599634978ad436839c78464320b6c96b3b20424870f3c2c06ff5d7954554895fb52ffeef44cb8428f018a7311e03dc310105175dc9c0211c4c3d97278f61e53c32677695a579612fbb8f5ba448869626a4ccaeaae7114a481e103e8e43576e44b8a1a88966a66b6e6b4868bf5132cbfb5bc28aa11f6dcafe94048bd40f1c5f93a760b22174a742576098c9f3a6cacab94927a4600b7455033a85d92450a398e67a065f49012273455707ce4f6ac3de7ab8003c8cdf8491d17087e25e66d7112c059f9f340c35262df6b049113566fbdd3f51963793385ba78d21a42e3a68ed5c340c7ae8e7c2912decbc2e8175a88728d5aaf4822588b5fc88aee41ed9174cc588c519b0c5869ff2d65e08d1b7821c97c58cb1be4f1c62363215f99f391d5441860295b530603b1976c54e83096e8942a43b55f24c3584a1f136a7f0d5ef95f557d2baecf95628bb94d7f1cf3bb70a37631af2938e91dbae32061fdb3e543e2c6ff3b003cf22fb97f78b59e0f97e9bae1ab06e67f32249b75ee87e1026f9856b9ed12135e6474800b00e9b304ac081713976ac37945d55ca0da28b9f4a6e2fb34cc12e8ab3f97cd3131eaa574858c0edc20098bbcd4fb98e10a3e1b88137d9b55cafe856a7fdfc52b870d13baf1025873d59cf7a73c4977ce2486005a2801c2f3b6ffd7ea4b95d6ea2d78a6b8b762c15ce619d64cf415ad208e6ecc922322251412bdafc6cc3bded6cf5b141f69a06ca222d18162d4caf3b70ba20407830be2a0b4d63fe3ea0aa668c4f6fe84bf98c2849de40db25fea70f0216c1df234e515b68fad8975e787c6c834aeff0fff9ddee36943907373d4d9b90554efd06020853cda7b28d77b515682678493081f7cf695cb23c20f791f36b8dcf209f4572de40de199fb323774b39d006299c24033a9670b63efaf60763843e57262aa2300cc3d8a00c41b1058d01496946d425e094c47feb6c05ac0e419af3519cedaeb69d798f6a8a0f6228be14c6896332eb4d233587d75107b472ec90573454d047feb3cce7ef7b4411c62bf805bc3c16d06d396546dfdff8e309cc97f47c0bdb1f145c961c1dbaae974296b1d9d726478d00bcda517db8ba710ea53e754f54181907b60c69b161145b437aa5fbb9cb55b7740dfd7ba18507369a582788206d9a513955b024c4b738adc72c93bb20a83787ba7736f66d7d0e201475050b7769b9083ccf66b34054fe8dd73023e9a936f67f2299dde07f5601a9e9fb478e1007824de649557be2676c8132ab6a20cc422a0dcec5828c240bebf8b8194c6077f70f7bc9f882693b9328512ec2f86c201661e1ac676feedb439ae38cb3bf0769348528540cf4c82fef3b38979639264d32966c4a54a829fdd28d21abe01d0d44999a3c70b8c216b90d375f0c73acaef274af90d96fed4394170f916780399a814b8684f0208626656a93f26fecdfa69ec34433d0021e96b4d977fe40c0a765cb9fb78f66b6098a49d450a87d515dbf467af3384e8ef356293bd4e8e2b06cfe5bbf6de5d393496d692029b083f8fb0f129be9007d4f1421c2398679f899357a97f9ca79ba1bb862d169e9d1ddf1d20accb950530f06e193db66724b3d12a0de09e9af272d4ca52b447d94b244407796fe08538bda0e9323bcbd9d6b3831bd80e2ab65786f1a2e8d64bb6a646514ac975068f70959a82f26a232da659eba634dab2d2c63fa0025079158bb5ff8f4da275099c68cf7bd59a6f440e6cd2bf313f846ec78194a8b22c1c9a106046cd5b01336d0bd9d6707397845b4033eb280b1f3c52d16efad9d488d4fe5c8052e78d992e155717719c49061927b0692340ad021438c71fac159817920b43ba0ac658720d8fe8b04a29c4dd0db5188c3951db8921426b2f1ec1b76d2c16d4d9b14eab6193a728fdb2f38ea193d6213337d1bed670afdab0d5d135b31dc60c0c900aa731ca0ef76cb26946d361b9beae8771c77115ed4d268190b60a2f4ffc1c5b5d30e6a996f9113352ac856a04bb42f0a6bd897f488698cd18a3367daf55b5487cbecee292a331fef96109bfa62eb7ed97a201401097123c8b06b7f8b90c0b195c2a40c74a19c4f0dd7e0a46da2f2a54b4082fa3ed2e7bcd64d394c1e60d219789623e03a70ea36decd1756cda599be2db946381a365c7795f960651b7e053201aafce20a270ec3470d7c13c0dac954b8dd8032c7668dc5740e8cb050dda39e286d211d63d9f8bc4f79838f5bbdd5d790b972dbba633b0bcd74a306ee02a0954741bcab06b3c78c61c95f1af9d10eb52b4e854764b0f78ffba56f4f83c15483105cc28c3a4f218b0f6bba100b545f1189a8103eac586eed81301eb70a7c446849d4cbcd9c521d10f70c6189ded9d8b48612d16a1a074564a67e882186da0c3828056aeb33ed98d6dbe5bbf591616f53edbd3684d7e393ed2ba808f1f5e434b970ab74ecdd616c703aaa4436e5fdec0dc44690ade613c8c99ba3033522025536e5b2d77102925eb1bb6970e5f9abcc0a4b2617169bafe95950fd4a7c02280a0ed2ca5096a1013fa62fb5200297e5e3a3ec64f8a80f268b08c37c051d7c8c2ac2499304d0cc9de38582ddb5710137aacf914c6567f9dbe33347723b4d2051b242bd50cca9ac78009202f6ecf8bae1415325f93581d82da36529ba569f00c1e62d2df4d1669cd62801448c1701ba8a53888de08e0618bc49e2d490e4dac43704fb8710d8e93d376d1179cf10fa18933fe975f266dfe45f53f92c7ddf32f71c74ed9f4c2c0bdca9d264ad8097c5939a0d8954156c75d8deeae5fa37178866622a700e50c9e7645ebeca7198ee248dd0ccbbc5e7ccd3c1afc9758b9b4d4926a7c391d0c2a13a0d87370de45409a380d6315fa2ce5adbf96c2f204bfec15beb54f053c638043030decfc8ff619944eefd96e378f2ee51a01234f8668b34aba36897896690616d499b7598d0b42072b07f217602cc8d43a3b44ac9d2bc19d3d1d3511365c53cafe8e412b2005ec908f2ca1fd00c0388e6e008ff968b735c0876c023430e12db4fa8e6f0fa6295de1779ca16aefaae37a8dd2aabac1fc14c67df6e287bf5bf0de1e00168996c58103088aa0e95b509ec834c68333a862cc5fefcb928772b32ad7d93abebc5c27b88d903f5d1902c248390ccc429ce0a0cd01b86e81d1dd62691a6b50a59fa51a44712dcb583b4281e9f764fc33c400a905fe890d239168091a56935dec0b071ed151c130f6c49b4b22ccb3152ebed7c7c85808d8d0e59550db98eb98242fb05f7e462bd4aa8ee010cbcdc23d4bbfb70f8538f2923a7078efdefbbb31c926fa2bac21aa99f666bc0073e57811255014bd3e9427515b61738ea4d8fd60276062343a2137fadddac497cdbc85fc23d63bf4adadb210cd8e2aa5caa39e81fbf1f5bab85f3ee5a741fb7f6bada7633efb46677b34aa3a49c60320f7ef436c0a02e89d5324daf7a3dc9c86b26f7bdc344b00b97a540924afcbbe671a3990b5d0a4621732580e04e1c4e7050b4759b37110570191a899afa12ff950d8b2066f4d57e5a210e9aa5ea70ab0e542cba52feed3e9b468f1b49d1b10ac4f0f7ccadace4b61f1b8a688bc0bbbf08e76199b889c7ed3e51100c3887fd0b85e0bdf97513b7997e1432192a9b16626ec183926da4783d222d804ad4d7cab74edae4113ae2af3d945f1ce16ff5df7cff5bc1a16b8c821dfaeff3e8c26d31472e71314bdec810496545877a18a66558e583b636fbf532c1f4f49f8d787ff1a3d44dbd1c971f9b3cd5489fb9c8c7e051e588ae5a5c1d1825aa8057296c85e3eaa019640475ebccb07896ea63c9d52aaf3ccf4322b8818a72ea93a91411009d938ef50b0febd075451ed490981aa22af8cf7f6893a1fae385b98d7b9c5103811a614ba05d6c8c2183ab4e209453a1991d9dcca6684b0290f53f9698edf8ce66765a0c360cbbcb885996ab7717b558776604b1844434e0d76ae2e51a7721b447e6e1b654f545944f8a68b72a24020a18292009717acd9ed1c1964e2fb8f147a8ec890078389cc7aed9d179306d00588bf2c5de4133e47722a9cde447adb3991c600e94b507702c4d03fb100c06e83ea6e5f94b3c729ecaa59cb5ead61507270fca669f126fc93ee038c9e9674cd8216df2b09129e0f1531b0c2538c7c8dd7fdf7f4fc5446166ee7cbad06caaf0c8c2e1b3e1ee60f516cafd189451d96f797ffc53897a5f19352e87bdb68cb728b1feacd7106acd6ad22944249fe9afc194e384c54569b940b3511a4f313f7159f6c52349112c2616914c4097fb5e98d448f001db1d1cc0ed28eb311aca71d4385826982ed170f3f3d0007b93e13bfc1952a2146de7b85a8f913f2708de08660ac53e02b837a63bf02c5699cf938340c52e1509bd26bb39e86fa30d3be2a4e8d5a371e2b730b5bacb3789f63a1050848a4eb16350e3cdaafed0d92d31c5585cd37e7f581547702e7d8148097b651b2c449ed53a2cc6a744b186565413a0e803f0a01d896e9bea217014416c12664a343c2492d8acdda4a254c3a090af6b422a27cebcfccecb1166affdf8fc77aad4457d5dfa1a1025232a4fbd3714525e1bdbe205eed8d1d73fb14b0e67f08ca2461a2fa8a3a28114cd87547a6d56197d2fa3788985457a5df3b4055dcb76b4cf9868ddefdabfc35275309bf26e0cb92ee5c252a9639f3eaa604f796eb36e1bbe7385f538e5ca2713ec80efc455458a7881d406bb8d9ad3dd405c0c8a84c4d08649a4b71e56587403d803988c5dda350dc417a466c732a779dd1374eb00984cc27b82e1a409e84cb376c27686cfd39cd5976849d2b62778127811dfdfb8340016efdf7e87c65639dbac756401d0d272329f4f2e5eb6fe6a36482202406817fa61d0a1053858fa127f1422be47b31b4d9b96b73484b0959e8b1ed896cbf64a6e93a2ffddc0db1d0b638018e6cc3afcf787a6eb3dac04d0035b6195c90a52c3da4d3420d31915b94f60f9af7a79fea0ba661992e24106a653124eae88b795798b4234f880f868f4953fa2651ae3da8657117a8921a0d19ea1a1c37a4766ff76911af8454bc295b718b9097974a7f66114a8759c47f3e5ccda81d14753090889d574184378fa4042e03d86810f6d94c3f61007a39b8c319f799039ee94e4cce5d59396a850a478925fc44aba4c602c2b62bea6b3db183c38b9cdb76a92770263b4c8d1a0caebe7141f306d07b30ef6b112088cea94bc9a8e9de007aca1caab9075f573546d4358642515602081b55d940a9f4aa654772b003ad839df6a384ded2bae2020f5f5f801796c260db96ff9381fb6f0767e5d18f0647b91fdaa3ed5a66212b3fb7a12e621a6baa0132c2f6e7674c25124c0f0a28455298269b3cbe61106f49a45b78519b37407b4a372294834d4cd6c6cb73de537cfb6a6525303d042212b66e7e71bbae1b3c4dc03278e8b51d4ace6ea5b3aab679e586a4487ec9873136ab29544fb9666d1a81935c1c05f21f7051790dcfe3fbaa0e3f19beecad449939e78e593763bf4e1fec0c5e0f2e18604bb55e941b433b74cb003c428ffde37d9e644abfcc0d2535ca64e973ef7cc9cdc369cd85c4886baf15f8c798237d3d7475bad4408eb150e9275e3a028ff94e0ae4a0d27cb2475ffedf238e51b825daa6686122c4a5e5f77b3b19ab0663a0bdac2c31669f3bc1d6023f17e05ed61a3f95eff867f0e34b352cc10e105ff8b0147d8f151d24a21114067fedcb263944758d84573566d19fab4f3695c40b176d733b", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) [ 2172.888556] FAULT_INJECTION: forcing a failure. [ 2172.888556] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.891063] CPU: 0 PID: 10968 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2172.892533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2172.894281] Call Trace: [ 2172.894863] dump_stack+0x107/0x167 [ 2172.895633] should_fail.cold+0x5/0xa [ 2172.896438] ? create_object.isra.0+0x3a/0xa30 [ 2172.897399] should_failslab+0x5/0x20 [ 2172.898205] kmem_cache_alloc+0x5b/0x310 [ 2172.899073] create_object.isra.0+0x3a/0xa30 [ 2172.900006] kmemleak_alloc_percpu+0xa0/0x100 [ 2172.900947] pcpu_alloc+0x4e2/0x1240 [ 2172.901749] __percpu_counter_init+0x10d/0x2d0 [ 2172.902719] io_uring_alloc_task_context+0xcc/0x6a0 [ 2172.903766] ? io_import_iovec+0x1120/0x1120 [ 2172.904695] ? lock_downgrade+0x6d0/0x6d0 [ 2172.905568] ? do_raw_spin_lock+0x121/0x260 [ 2172.906484] ? rwlock_bug.part.0+0x90/0x90 [ 2172.907379] __io_uring_add_tctx_node+0x2c6/0x520 [ 2172.908400] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2172.909499] ? alloc_fd+0x2e7/0x670 [ 2172.910279] io_uring_setup+0x1fbb/0x2980 [ 2172.911168] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2172.912242] ? wait_for_completion_io+0x270/0x270 [ 2172.913275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2172.914384] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2172.915485] do_syscall_64+0x33/0x40 [ 2172.916270] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2172.917359] RIP: 0033:0x7f55325f0b19 [ 2172.918146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2172.922052] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2172.923672] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2172.925165] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2172.926683] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2172.928172] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2172.929678] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2173.019053] loop0: detected capacity change from 0 to 32768 12:52:20 executing program 2: r0 = syz_io_uring_setup(0x8782e, &(0x7f0000000580), &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x2f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r1, 0x40a) r2 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000000)={0x0, 0x0, 0x2}) 12:52:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x200, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) 12:52:20 executing program 5: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xffffffc4}) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x400) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0x3, 0x4, 0x6, 0x0, 0x1d, 0x440, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x2, @perf_bp, 0x85, 0x5, 0xffff9258, 0x0, 0x1fffc000, 0x6, 0x4, 0x0, 0xfffffffa, 0x0, 0xffffffffffff5346}, r0, 0x1, r1, 0x9) r2 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r3 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r3, r2) 12:52:20 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r4 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r5, 0x4) sendfile(r5, r6, 0x0, 0x100000001) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f00000001c0)=r6, 0x1) dup2(r1, r0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x3) syz_io_uring_setup(0x4456, &(0x7f0000000000)={0x0, 0x5220, 0x10, 0x1, 0x335}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 12:52:20 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:52:20 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 23) 12:52:20 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 30) 12:52:20 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) [ 2189.184065] FAULT_INJECTION: forcing a failure. [ 2189.184065] name failslab, interval 1, probability 0, space 0, times 0 [ 2189.186941] CPU: 1 PID: 11005 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2189.188686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2189.190769] Call Trace: [ 2189.191430] dump_stack+0x107/0x167 [ 2189.192335] should_fail.cold+0x5/0xa [ 2189.193021] FAULT_INJECTION: forcing a failure. [ 2189.193021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2189.193287] ? create_object.isra.0+0x3a/0xa30 [ 2189.193312] should_failslab+0x5/0x20 [ 2189.197613] kmem_cache_alloc+0x5b/0x310 [ 2189.198640] create_object.isra.0+0x3a/0xa30 [ 2189.199751] kmemleak_alloc_percpu+0xa0/0x100 [ 2189.200907] pcpu_alloc+0x4e2/0x1240 [ 2189.201868] __percpu_counter_init+0x10d/0x2d0 [ 2189.203021] io_uring_alloc_task_context+0xcc/0x6a0 [ 2189.204261] ? io_import_iovec+0x1120/0x1120 [ 2189.205358] ? lock_downgrade+0x6d0/0x6d0 [ 2189.206397] ? do_raw_spin_lock+0x121/0x260 [ 2189.207485] ? rwlock_bug.part.0+0x90/0x90 [ 2189.208579] __io_uring_add_tctx_node+0x2c6/0x520 [ 2189.209813] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2189.211140] ? alloc_fd+0x2e7/0x670 [ 2189.211882] io_uring_setup+0x1fbb/0x2980 [ 2189.212742] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2189.213795] ? wait_for_completion_io+0x270/0x270 [ 2189.214835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2189.215915] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2189.216971] do_syscall_64+0x33/0x40 [ 2189.217741] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2189.218808] RIP: 0033:0x7f55325f0b19 [ 2189.219577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2189.223352] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2189.224914] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2189.226377] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2189.227846] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2189.229312] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2189.230784] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2189.232273] CPU: 0 PID: 11008 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2189.233574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2189.235097] Call Trace: [ 2189.235590] dump_stack+0x107/0x167 [ 2189.236265] should_fail.cold+0x5/0xa [ 2189.236956] __alloc_pages_nodemask+0x182/0x600 [ 2189.237808] ? lock_release+0x680/0x680 [ 2189.238540] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2189.239638] ? lock_downgrade+0x6d0/0x6d0 [ 2189.240398] alloc_pages_current+0x187/0x280 [ 2189.241189] get_zeroed_page+0x14/0xb0 [ 2189.241888] ? kasan_unpoison_shadow+0x33/0x50 [ 2189.242720] mon_alloc_buff+0xed/0x250 [ 2189.243436] mon_bin_ioctl+0x493/0xcc0 [ 2189.244139] ? wait_for_completion_io+0x270/0x270 [ 2189.245006] ? mon_bin_get_event+0x440/0x440 [ 2189.245826] ? selinux_file_ioctl+0xb6/0x270 [ 2189.246628] ? mon_bin_get_event+0x440/0x440 [ 2189.247440] __x64_sys_ioctl+0x19a/0x210 [ 2189.248171] do_syscall_64+0x33/0x40 [ 2189.248848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2189.249771] RIP: 0033:0x7f6bde1e2b19 [ 2189.250440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2189.253758] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2189.255158] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2189.256439] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2189.257730] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2189.259017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2189.260271] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:52:20 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/242, 0xf2}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$FITHAW(r1, 0xc0045878) 12:52:20 executing program 5: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xffffffc4}) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x400) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0x3, 0x4, 0x6, 0x0, 0x1d, 0x440, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x2, @perf_bp, 0x85, 0x5, 0xffff9258, 0x0, 0x1fffc000, 0x6, 0x4, 0x0, 0xfffffffa, 0x0, 0xffffffffffff5346}, r0, 0x1, r1, 0x9) r2 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r3 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r3, r2) 12:52:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='efs\x00', 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r1, 0x6ea32000) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000380)={{'\x00', 0x1}, {0x1}, 0x1, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)="4acace03bf8768e93f0dafebb3eb68364695ad11748ad09f122dd80d40764ddc5e9937393c02297cec5f65ef1afb4ca486a924b600223aa5036233ec725ee38bc99eabd0ba3fbae86484e79ac9de09a50c3d51c3e641e0bc155bb2183cb3e16263947e0920764b1308", 0x69, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x227}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x400842) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r2, 0x4) sendfile(r2, r3, 0x0, 0x100000001) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r0, r4, &(0x7f0000000140)=0x8000, 0xffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000400)=ANY=[@ANYBLOB="01000608e200000018000000", @ANYRES32, @ANYBLOB="01000000000000002e2f66696c653000"]) [ 2189.326460] loop0: detected capacity change from 0 to 32768 12:52:20 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0xfe1, 0x40002) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x81, 0x82580) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000040)) dup2(r1, r0) 12:52:20 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 24) 12:52:20 executing program 5: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xffffffc4}) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x400) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0x3, 0x4, 0x6, 0x0, 0x1d, 0x440, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x2, @perf_bp, 0x85, 0x5, 0xffff9258, 0x0, 0x1fffc000, 0x6, 0x4, 0x0, 0xfffffffa, 0x0, 0xffffffffffff5346}, r0, 0x1, r1, 0x9) r2 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r3 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r3, r2) [ 2189.494442] FAULT_INJECTION: forcing a failure. [ 2189.494442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2189.499704] CPU: 1 PID: 11034 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2189.501503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2189.503652] Call Trace: [ 2189.504345] dump_stack+0x107/0x167 [ 2189.505294] should_fail.cold+0x5/0xa [ 2189.506302] __alloc_pages_nodemask+0x182/0x600 [ 2189.507531] ? lock_release+0x680/0x680 [ 2189.508574] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2189.510156] ? lock_downgrade+0x6d0/0x6d0 [ 2189.511278] alloc_pages_current+0x187/0x280 [ 2189.512426] get_zeroed_page+0x14/0xb0 [ 2189.513434] ? kasan_unpoison_shadow+0x33/0x50 [ 2189.514623] mon_alloc_buff+0xed/0x250 [ 2189.515637] mon_bin_ioctl+0x493/0xcc0 [ 2189.516654] ? wait_for_completion_io+0x270/0x270 [ 2189.517899] ? mon_bin_get_event+0x440/0x440 [ 2189.519065] ? selinux_file_ioctl+0xb6/0x270 [ 2189.520206] ? mon_bin_get_event+0x440/0x440 [ 2189.521339] __x64_sys_ioctl+0x19a/0x210 [ 2189.522388] do_syscall_64+0x33/0x40 [ 2189.523373] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2189.524703] RIP: 0033:0x7f6bde1e2b19 [ 2189.525665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2189.530449] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2189.532399] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2189.534259] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2189.536121] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2189.537941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2189.539774] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:52:20 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x408882) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) dup2(r1, r0) read$usbmon(r1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) 12:52:20 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 31) [ 2189.594407] FAULT_INJECTION: forcing a failure. [ 2189.594407] name failslab, interval 1, probability 0, space 0, times 0 [ 2189.596564] CPU: 0 PID: 11042 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2189.597537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2189.598705] Call Trace: [ 2189.599086] dump_stack+0x107/0x167 [ 2189.599595] should_fail.cold+0x5/0xa [ 2189.600132] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2189.600858] should_failslab+0x5/0x20 [ 2189.601400] kmem_cache_alloc_trace+0x55/0x320 [ 2189.602047] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2189.602774] ? io_import_iovec+0x1120/0x1120 [ 2189.603410] ? lock_downgrade+0x6d0/0x6d0 [ 2189.603984] ? do_raw_spin_lock+0x121/0x260 [ 2189.604589] ? rwlock_bug.part.0+0x90/0x90 [ 2189.605185] __io_uring_add_tctx_node+0x2c6/0x520 [ 2189.605868] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2189.606609] ? alloc_fd+0x2e7/0x670 [ 2189.607125] io_uring_setup+0x1fbb/0x2980 [ 2189.607720] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2189.608431] ? wait_for_completion_io+0x270/0x270 [ 2189.609104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2189.609836] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2189.610561] do_syscall_64+0x33/0x40 [ 2189.611082] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2189.611801] RIP: 0033:0x7f55325f0b19 [ 2189.612319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2189.614886] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2189.615952] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2189.616930] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2189.617924] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2189.618928] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2189.619928] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2190.056821] FAULT_INJECTION: forcing a failure. 12:52:21 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x40800) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1ff) 12:52:21 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x8000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) 12:52:21 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 25) 12:52:21 executing program 5: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) 12:52:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x40010, r1, 0xd582b000) 12:52:21 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 32) [ 2190.056821] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.058941] CPU: 0 PID: 11052 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2190.060063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.061415] Call Trace: [ 2190.061844] dump_stack+0x107/0x167 [ 2190.062425] should_fail.cold+0x5/0xa [ 2190.063040] ? create_object.isra.0+0x3a/0xa30 [ 2190.063765] should_failslab+0x5/0x20 [ 2190.064368] kmem_cache_alloc+0x5b/0x310 [ 2190.065027] create_object.isra.0+0x3a/0xa30 [ 2190.065734] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2190.066563] kmem_cache_alloc_trace+0x151/0x320 [ 2190.067311] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2190.068119] ? io_import_iovec+0x1120/0x1120 [ 2190.068814] ? lock_downgrade+0x6d0/0x6d0 [ 2190.069479] ? do_raw_spin_lock+0x121/0x260 [ 2190.070173] ? rwlock_bug.part.0+0x90/0x90 [ 2190.070869] __io_uring_add_tctx_node+0x2c6/0x520 [ 2190.071642] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2190.071801] FAULT_INJECTION: forcing a failure. [ 2190.071801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2190.072477] ? alloc_fd+0x2e7/0x670 [ 2190.072541] io_uring_setup+0x1fbb/0x2980 [ 2190.076710] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2190.077506] ? wait_for_completion_io+0x270/0x270 [ 2190.078296] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.079156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.079987] do_syscall_64+0x33/0x40 [ 2190.080590] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.081406] RIP: 0033:0x7f55325f0b19 [ 2190.081997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.084983] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2190.086210] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2190.087277] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2190.088280] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2190.089268] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2190.090275] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2190.091323] CPU: 1 PID: 11056 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2190.093092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.094987] Call Trace: [ 2190.095551] dump_stack+0x107/0x167 [ 2190.096307] should_fail.cold+0x5/0xa [ 2190.097098] __alloc_pages_nodemask+0x182/0x600 [ 2190.098054] ? lock_release+0x680/0x680 [ 2190.098890] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2190.100125] ? lock_downgrade+0x6d0/0x6d0 [ 2190.100994] alloc_pages_current+0x187/0x280 [ 2190.101899] get_zeroed_page+0x14/0xb0 [ 2190.102714] ? kasan_unpoison_shadow+0x33/0x50 [ 2190.103667] mon_alloc_buff+0xed/0x250 [ 2190.104481] mon_bin_ioctl+0x493/0xcc0 [ 2190.105290] ? wait_for_completion_io+0x270/0x270 [ 2190.106302] ? mon_bin_get_event+0x440/0x440 [ 2190.107239] ? selinux_file_ioctl+0xb6/0x270 [ 2190.108156] ? mon_bin_get_event+0x440/0x440 [ 2190.109069] __x64_sys_ioctl+0x19a/0x210 [ 2190.109905] do_syscall_64+0x33/0x40 [ 2190.110684] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.111738] RIP: 0033:0x7f6bde1e2b19 [ 2190.112511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.116264] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2190.117834] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2190.119307] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2190.120760] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2190.122218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2190.123698] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:52:21 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:52:21 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 33) [ 2190.196955] FAULT_INJECTION: forcing a failure. [ 2190.196955] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.199643] CPU: 1 PID: 11069 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2190.201442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2190.203596] Call Trace: [ 2190.204300] dump_stack+0x107/0x167 [ 2190.205255] should_fail.cold+0x5/0xa [ 2190.206241] ? io_wq_create+0xeb/0xc00 [ 2190.207269] should_failslab+0x5/0x20 [ 2190.208255] __kmalloc+0x72/0x390 [ 2190.209171] io_wq_create+0xeb/0xc00 [ 2190.210144] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2190.211464] ? io_import_iovec+0x1120/0x1120 [ 2190.212409] ? io_apoll_task_func+0x2d0/0x2d0 [ 2190.213573] ? __io_req_find_next+0x300/0x300 [ 2190.214503] ? do_raw_spin_lock+0x121/0x260 [ 2190.215632] ? rwlock_bug.part.0+0x90/0x90 [ 2190.216732] __io_uring_add_tctx_node+0x2c6/0x520 [ 2190.217744] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2190.219116] ? alloc_fd+0x2e7/0x670 [ 2190.219888] io_uring_setup+0x1fbb/0x2980 [ 2190.220959] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2190.222009] ? wait_for_completion_io+0x270/0x270 [ 2190.223284] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2190.224654] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2190.225757] do_syscall_64+0x33/0x40 [ 2190.226737] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2190.228055] RIP: 0033:0x7f55325f0b19 [ 2190.229017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2190.233776] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2190.235750] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2190.237583] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2190.239391] loop0: detected capacity change from 0 to 32768 [ 2190.239417] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2190.239437] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2190.243936] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:52:35 executing program 2: r0 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:52:35 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="90f23ee48414c664c5a43f762e4c066fb46c651599634978ad436839c78464320b6c96b3b20424870f3c2c06ff5d7954554895fb52ffeef44cb8428f018a7311e03dc310105175dc9c0211c4c3d97278f61e53c32677695a579612fbb8f5ba448869626a4ccaeaae7114a481e103e8e43576e44b8a1a88966a66b6e6b4868bf5132cbfb5bc28aa11f6dcafe94048bd40f1c5f93a760b22174a742576098c9f3a6cacab94927a4600b7455033a85d92450a398e67a065f49012273455707ce4f6ac3de7ab8003c8cdf8491d17087e25e66d7112c059f9f340c35262df6b049113566fbdd3f51963793385ba78d21a42e3a68ed5c340c7ae8e7c2912decbc2e8175a88728d5aaf4822588b5fc88aee41ed9174cc588c519b0c5869ff2d65e08d1b7821c97c58cb1be4f1c62363215f99f391d5441860295b530603b1976c54e83096e8942a43b55f24c3584a1f136a7f0d5ef95f557d2baecf95628bb94d7f1cf3bb70a37631af2938e91dbae32061fdb3e543e2c6ff3b003cf22fb97f78b59e0f97e9bae1ab06e67f32249b75ee87e1026f9856b9ed12135e6474800b00e9b304ac081713976ac37945d55ca0da28b9f4a6e2fb34cc12e8ab3f97cd3131eaa574858c0edc20098bbcd4fb98e10a3e1b88137d9b55cafe856a7fdfc52b870d13baf1025873d59cf7a73c4977ce2486005a2801c2f3b6ffd7ea4b95d6ea2d78a6b8b762c15ce619d64cf415ad208e6ecc922322251412bdafc6cc3bded6cf5b141f69a06ca222d18162d4caf3b70ba20407830be2a0b4d63fe3ea0aa668c4f6fe84bf98c2849de40db25fea70f0216c1df234e515b68fad8975e787c6c834aeff0fff9ddee36943907373d4d9b90554efd06020853cda7b28d77b515682678493081f7cf695cb23c20f791f36b8dcf209f4572de40de199fb323774b39d006299c24033a9670b63efaf60763843e57262aa2300cc3d8a00c41b1058d01496946d425e094c47feb6c05ac0e419af3519cedaeb69d798f6a8a0f6228be14c6896332eb4d233587d75107b472ec90573454d047feb3cce7ef7b4411c62bf805bc3c16d06d396546dfdff8e309cc97f47c0bdb1f145c961c1dbaae974296b1d9d726478d00bcda517db8ba710ea53e754f54181907b60c69b161145b437aa5fbb9cb55b7740dfd7ba18507369a582788206d9a513955b024c4b738adc72c93bb20a83787ba7736f66d7d0e201475050b7769b9083ccf66b34054fe8dd73023e9a936f67f2299dde07f5601a9e9fb478e1007824de649557be2676c8132ab6a20cc422a0dcec5828c240bebf8b8194c6077f70f7bc9f882693b9328512ec2f86c201661e1ac676feedb439ae38cb3bf0769348528540cf4c82fef3b38979639264d32966c4a54a829fdd28d21abe01d0d44999a3c70b8c216b90d375f0c73acaef274af90d96fed4394170f916780399a814b8684f0208626656a93f26fecdfa69ec34433d0021e96b4d977fe40c0a765cb9fb78f66b6098a49d450a87d515dbf467af3384e8ef356293bd4e8e2b06cfe5bbf6de5d393496d692029b083f8fb0f129be9007d4f1421c2398679f899357a97f9ca79ba1bb862d169e9d1ddf1d20accb950530f06e193db66724b3d12a0de09e9af272d4ca52b447d94b244407796fe08538bda0e9323bcbd9d6b3831bd80e2ab65786f1a2e8d64bb6a646514ac975068f70959a82f26a232da659eba634dab2d2c63fa0025079158bb5ff8f4da275099c68cf7bd59a6f440e6cd2bf313f846ec78194a8b22c1c9a106046cd5b01336d0bd9d6707397845b4033eb280b1f3c52d16efad9d488d4fe5c8052e78d992e155717719c49061927b0692340ad021438c71fac159817920b43ba0ac658720d8fe8b04a29c4dd0db5188c3951db8921426b2f1ec1b76d2c16d4d9b14eab6193a728fdb2f38ea193d6213337d1bed670afdab0d5d135b31dc60c0c900aa731ca0ef76cb26946d361b9beae8771c77115ed4d268190b60a2f4ffc1c5b5d30e6a996f9113352ac856a04bb42f0a6bd897f488698cd18a3367daf55b5487cbecee292a331fef96109bfa62eb7ed97a201401097123c8b06b7f8b90c0b195c2a40c74a19c4f0dd7e0a46da2f2a54b4082fa3ed2e7bcd64d394c1e60d219789623e03a70ea36decd1756cda599be2db946381a365c7795f960651b7e053201aafce20a270ec3470d7c13c0dac954b8dd8032c7668dc5740e8cb050dda39e286d211d63d9f8bc4f79838f5bbdd5d790b972dbba633b0bcd74a306ee02a0954741bcab06b3c78c61c95f1af9d10eb52b4e854764b0f78ffba56f4f83c15483105cc28c3a4f218b0f6bba100b545f1189a8103eac586eed81301eb70a7c446849d4cbcd9c521d10f70c6189ded9d8b48612d16a1a074564a67e882186da0c3828056aeb33ed98d6dbe5bbf591616f53edbd3684d7e393ed2ba808f1f5e434b970ab74ecdd616c703aaa4436e5fdec0dc44690ade613c8c99ba3033522025536e5b2d77102925eb1bb6970e5f9abcc0a4b2617169bafe95950fd4a7c02280a0ed2ca5096a1013fa62fb5200297e5e3a3ec64f8a80f268b08c37c051d7c8c2ac2499304d0cc9de38582ddb5710137aacf914c6567f9dbe33347723b4d2051b242bd50cca9ac78009202f6ecf8bae1415325f93581d82da36529ba569f00c1e62d2df4d1669cd62801448c1701ba8a53888de08e0618bc49e2d490e4dac43704fb8710d8e93d376d1179cf10fa18933fe975f266dfe45f53f92c7ddf32f71c74ed9f4c2c0bdca9d264ad8097c5939a0d8954156c75d8deeae5fa37178866622a700e50c9e7645ebeca7198ee248dd0ccbbc5e7ccd3c1afc9758b9b4d4926a7c391d0c2a13a0d87370de45409a380d6315fa2ce5adbf96c2f204bfec15beb54f053c638043030decfc8ff619944eefd96e378f2ee51a01234f8668b34aba36897896690616d499b7598d0b42072b07f217602cc8d43a3b44ac9d2bc19d3d1d3511365c53cafe8e412b2005ec908f2ca1fd00c0388e6e008ff968b735c0876c023430e12db4fa8e6f0fa6295de1779ca16aefaae37a8dd2aabac1fc14c67df6e287bf5bf0de1e00168996c58103088aa0e95b509ec834c68333a862cc5fefcb928772b32ad7d93abebc5c27b88d903f5d1902c248390ccc429ce0a0cd01b86e81d1dd62691a6b50a59fa51a44712dcb583b4281e9f764fc33c400a905fe890d239168091a56935dec0b071ed151c130f6c49b4b22ccb3152ebed7c7c85808d8d0e59550db98eb98242fb05f7e462bd4aa8ee010cbcdc23d4bbfb70f8538f2923a7078efdefbbb31c926fa2bac21aa99f666bc0073e57811255014bd3e9427515b61738ea4d8fd60276062343a2137fadddac497cdbc85fc23d63bf4adadb210cd8e2aa5caa39e81fbf1f5bab85f3ee5a741fb7f6bada7633efb46677b34aa3a49c60320f7ef436c0a02e89d5324daf7a3dc9c86b26f7bdc344b00b97a540924afcbbe671a3990b5d0a4621732580e04e1c4e7050b4759b37110570191a899afa12ff950d8b2066f4d57e5a210e9aa5ea70ab0e542cba52feed3e9b468f1b49d1b10ac4f0f7ccadace4b61f1b8a688bc0bbbf08e76199b889c7ed3e51100c3887fd0b85e0bdf97513b7997e1432192a9b16626ec183926da4783d222d804ad4d7cab74edae4113ae2af3d945f1ce16ff5df7cff5bc1a16b8c821dfaeff3e8c26d31472e71314bdec810496545877a18a66558e583b636fbf532c1f4f49f8d787ff1a3d44dbd1c971f9b3cd5489fb9c8c7e051e588ae5a5c1d1825aa8057296c85e3eaa019640475ebccb07896ea63c9d52aaf3ccf4322b8818a72ea93a91411009d938ef50b0febd075451ed490981aa22af8cf7f6893a1fae385b98d7b9c5103811a614ba05d6c8c2183ab4e209453a1991d9dcca6684b0290f53f9698edf8ce66765a0c360cbbcb885996ab7717b558776604b1844434e0d76ae2e51a7721b447e6e1b654f545944f8a68b72a24020a18292009717acd9ed1c1964e2fb8f147a8ec890078389cc7aed9d179306d00588bf2c5de4133e47722a9cde447adb3991c600e94b507702c4d03fb100c06e83ea6e5f94b3c729ecaa59cb5ead61507270fca669f126fc93ee038c9e9674cd8216df2b09129e0f1531b0c2538c7c8dd7fdf7f4fc5446166ee7cbad06caaf0c8c2e1b3e1ee60f516cafd189451d96f797ffc53897a5f19352e87bdb68cb728b1feacd7106acd6ad22944249fe9afc194e384c54569b940b3511a4f313f7159f6c52349112c2616914c4097fb5e98d448f001db1d1cc0ed28eb311aca71d4385826982ed170f3f3d0007b93e13bfc1952a2146de7b85a8f913f2708de08660ac53e02b837a63bf02c5699cf938340c52e1509bd26bb39e86fa30d3be2a4e8d5a371e2b730b5bacb3789f63a1050848a4eb16350e3cdaafed0d92d31c5585cd37e7f581547702e7d8148097b651b2c449ed53a2cc6a744b186565413a0e803f0a01d896e9bea217014416c12664a343c2492d8acdda4a254c3a090af6b422a27cebcfccecb1166affdf8fc77aad4457d5dfa1a1025232a4fbd3714525e1bdbe205eed8d1d73fb14b0e67f08ca2461a2fa8a3a28114cd87547a6d56197d2fa3788985457a5df3b4055dcb76b4cf9868ddefdabfc35275309bf26e0cb92ee5c252a9639f3eaa604f796eb36e1bbe7385f538e5ca2713ec80efc455458a7881d406bb8d9ad3dd405c0c8a84c4d08649a4b71e56587403d803988c5dda350dc417a466c732a779dd1374eb00984cc27b82e1a409e84cb376c27686cfd39cd5976849d2b62778127811dfdfb8340016efdf7e87c65639dbac756401d0d272329f4f2e5eb6fe6a36482202406817fa61d0a1053858fa127f1422be47b31b4d9b96b73484b0959e8b1ed896cbf64a6e93a2ffddc0db1d0b638018e6cc3afcf787a6eb3dac04d0035b6195c90a52c3da4d3420d31915b94f60f9af7a79fea0ba661992e24106a653124eae88b795798b4234f880f868f4953fa2651ae3da8657117a8921a0d19ea1a1c37a4766ff76911af8454bc295b718b9097974a7f66114a8759c47f3e5ccda81d14753090889d574184378fa4042e03d86810f6d94c3f61007a39b8c319f799039ee94e4cce5d59396a850a478925fc44aba4c602c2b62bea6b3db183c38b9cdb76a92770263b4c8d1a0caebe7141f306d07b30ef6b112088cea94bc9a8e9de007aca1caab9075f573546d4358642515602081b55d940a9f4aa654772b003ad839df6a384ded2bae2020f5f5f801796c260db96ff9381fb6f0767e5d18f0647b91fdaa3ed5a66212b3fb7a12e621a6baa0132c2f6e7674c25124c0f0a28455298269b3cbe61106f49a45b78519b37407b4a372294834d4cd6c6cb73de537cfb6a6525303d042212b66e7e71bbae1b3c4dc03278e8b51d4ace6ea5b3aab679e586a4487ec9873136ab29544fb9666d1a81935c1c05f21f7051790dcfe3fbaa0e3f19beecad449939e78e593763bf4e1fec0c5e0f2e18604bb55e941b433b74cb003c428ffde37d9e644abfcc0d2535ca64e973ef7cc9cdc369cd85c4886baf15f8c798237d3d7475bad4408eb150e9275e3a028ff94e0ae4a0d27cb2475ffedf238e51b825daa6686122c4a5e5f77b3b19ab0663a0bdac2c31669f3bc1d6023f17e05ed61a3f95eff867f0e34b352cc10e105ff8b0147d8f151d24a21114067fedcb263944758d84573566d19fab4f3695c40b176d733b", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) [ 2204.467710] FAULT_INJECTION: forcing a failure. [ 2204.467710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2204.471598] CPU: 1 PID: 11083 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2204.473589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2204.475895] Call Trace: [ 2204.476583] dump_stack+0x107/0x167 [ 2204.477535] should_fail.cold+0x5/0xa [ 2204.478516] __alloc_pages_nodemask+0x182/0x600 [ 2204.479736] ? lock_release+0x680/0x680 [ 2204.480759] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2204.482310] ? lock_downgrade+0x6d0/0x6d0 [ 2204.483398] alloc_pages_current+0x187/0x280 [ 2204.484527] get_zeroed_page+0x14/0xb0 [ 2204.485525] ? kasan_unpoison_shadow+0x33/0x50 [ 2204.486707] mon_alloc_buff+0xed/0x250 [ 2204.487710] mon_bin_ioctl+0x493/0xcc0 [ 2204.488710] ? wait_for_completion_io+0x270/0x270 [ 2204.489952] ? mon_bin_get_event+0x440/0x440 [ 2204.491098] ? selinux_file_ioctl+0xb6/0x270 [ 2204.492228] ? mon_bin_get_event+0x440/0x440 [ 2204.493357] __x64_sys_ioctl+0x19a/0x210 [ 2204.494397] do_syscall_64+0x33/0x40 [ 2204.495361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2204.496672] RIP: 0033:0x7f6bde1e2b19 [ 2204.497624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2204.501816] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2204.503467] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2204.505024] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2204.506565] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2204.508119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2204.509659] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:52:35 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x240002, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x2}, 0x6) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x800, 0x6, 0x8}) r2 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r2, 0x0) 12:52:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 12:52:35 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0x100, 0xc3f}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x7, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040080}, 0x10004004) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x80, 0x9, 0xb, 0x0, 0x7fffffff, 0xc4000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x6}, 0x6000, 0x4, 0x8, 0x2, 0x742, 0x9, 0x9, 0x0, 0x200, 0x0, 0x800}, 0xffffffffffffffff, 0xe, r2, 0x9) 12:52:35 executing program 5: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) 12:52:35 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 26) 12:52:35 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 34) 12:52:35 executing program 5: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) 12:52:35 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0xc8, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x406c0) read$usbmon(r1, &(0x7f0000001040)=""/4103, 0x1007) [ 2204.531880] FAULT_INJECTION: forcing a failure. [ 2204.531880] name failslab, interval 1, probability 0, space 0, times 0 [ 2204.534517] CPU: 0 PID: 11094 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2204.536043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2204.537849] Call Trace: [ 2204.538427] dump_stack+0x107/0x167 [ 2204.539228] should_fail.cold+0x5/0xa [ 2204.540051] ? create_object.isra.0+0x3a/0xa30 [ 2204.541042] should_failslab+0x5/0x20 [ 2204.541870] kmem_cache_alloc+0x5b/0x310 [ 2204.542767] create_object.isra.0+0x3a/0xa30 [ 2204.543732] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2204.544838] __kmalloc+0x16e/0x390 [ 2204.545616] io_wq_create+0xeb/0xc00 [ 2204.546435] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2204.547549] ? io_import_iovec+0x1120/0x1120 [ 2204.548500] ? io_apoll_task_func+0x2d0/0x2d0 [ 2204.549466] ? __io_req_find_next+0x300/0x300 [ 2204.550436] ? do_raw_spin_lock+0x121/0x260 [ 2204.551379] ? rwlock_bug.part.0+0x90/0x90 [ 2204.552306] __io_uring_add_tctx_node+0x2c6/0x520 [ 2204.553352] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2204.554488] ? alloc_fd+0x2e7/0x670 [ 2204.555297] io_uring_setup+0x1fbb/0x2980 [ 2204.556206] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2204.557307] ? wait_for_completion_io+0x270/0x270 [ 2204.558370] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2204.559516] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2204.560640] do_syscall_64+0x33/0x40 [ 2204.561446] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2204.562557] RIP: 0033:0x7f55325f0b19 [ 2204.563370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2204.567377] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2204.569031] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2204.570580] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2204.572150] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2204.573702] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2204.575261] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:52:35 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782c, &(0x7f0000000580)={0x0, 0x0, 0x20}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) 12:52:36 executing program 6: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r0 = syz_io_uring_setup(0x7030, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x125}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x80012, r0, 0x0) [ 2204.626948] loop0: detected capacity change from 0 to 32768 12:52:36 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x302, 0x0) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000000)={0x0, 0xdd6e, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r3 = dup2(r2, r0) syz_io_uring_setup(0x6f03, &(0x7f00000000c0)={0x0, 0x6fb9, 0x1, 0x1, 0x2df, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x1010, r3, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r3, 0x0, &(0x7f00000002c0)="e67214f12c91f26e1aa8b1f03465dafdc4a0ff09df76e9aac390eab01a4b488c3703e69fdb6287d2bf1253cc0829909e8d6eb1215150dc9050177db9b74e65e491938c27f6d8a6ba3140ab68d05fdc60fa64ef3d6af89e0e719974de45661071241879ab20527ae8c2b5723781972d3e5f34009e2e5c08c0bf2efae6e93fec7c4bb16ff9c541b9b666627964cdcad26a1fc55a3fd35091c7d897bd476e4f0aa577d06df346ec36ef8d1f91c0103abf", 0xaf, 0x1, 0x1}, 0xce4) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x5c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x20}]}, 0x18) 12:52:36 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 35) 12:52:36 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 27) 12:52:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e0266696c653000"]) r2 = syz_io_uring_setup(0x7831, &(0x7f0000000580)={0x0, 0xbcd6, 0x0, 0x0, 0x2d9, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000280)) syz_open_dev$usbmon(&(0x7f0000000080), 0x1f2, 0x80042) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) fstat(r2, &(0x7f0000000000)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x80) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) [ 2204.761223] FAULT_INJECTION: forcing a failure. [ 2204.761223] name failslab, interval 1, probability 0, space 0, times 0 [ 2204.764314] CPU: 1 PID: 11114 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2204.765810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2204.767615] Call Trace: [ 2204.768185] dump_stack+0x107/0x167 [ 2204.768975] should_fail.cold+0x5/0xa [ 2204.769806] ? io_wq_create+0x6ef/0xc00 [ 2204.770682] should_failslab+0x5/0x20 [ 2204.771508] kmem_cache_alloc_node_trace+0x59/0x340 [ 2204.772598] io_wq_create+0x6ef/0xc00 [ 2204.773434] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2204.774533] ? io_import_iovec+0x1120/0x1120 [ 2204.775495] ? io_apoll_task_func+0x2d0/0x2d0 [ 2204.775998] FAULT_INJECTION: forcing a failure. [ 2204.775998] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2204.776462] ? __io_req_find_next+0x300/0x300 [ 2204.776479] ? do_raw_spin_lock+0x121/0x260 [ 2204.776502] ? rwlock_bug.part.0+0x90/0x90 [ 2204.781836] __io_uring_add_tctx_node+0x2c6/0x520 [ 2204.782889] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2204.784018] ? alloc_fd+0x2e7/0x670 [ 2204.784809] io_uring_setup+0x1fbb/0x2980 [ 2204.785710] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2204.786811] ? wait_for_completion_io+0x270/0x270 [ 2204.787872] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2204.789003] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2204.790111] do_syscall_64+0x33/0x40 [ 2204.790924] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2204.792032] RIP: 0033:0x7f55325f0b19 [ 2204.792833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2204.796819] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2204.798460] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2204.800013] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2204.801551] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2204.803367] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2204.804911] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2204.806481] CPU: 0 PID: 11118 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2204.808010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2204.809808] Call Trace: [ 2204.810386] dump_stack+0x107/0x167 [ 2204.811182] should_fail.cold+0x5/0xa [ 2204.812012] __alloc_pages_nodemask+0x182/0x600 [ 2204.813022] ? lock_release+0x680/0x680 [ 2204.813883] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2204.815196] ? lock_downgrade+0x6d0/0x6d0 [ 2204.816102] alloc_pages_current+0x187/0x280 [ 2204.817053] get_zeroed_page+0x14/0xb0 [ 2204.817894] ? kasan_unpoison_shadow+0x33/0x50 [ 2204.818887] mon_alloc_buff+0xed/0x250 [ 2204.819734] mon_bin_ioctl+0x493/0xcc0 [ 2204.820576] ? wait_for_completion_io+0x270/0x270 [ 2204.821620] ? mon_bin_get_event+0x440/0x440 [ 2204.822576] ? selinux_file_ioctl+0xb6/0x270 [ 2204.823538] ? mon_bin_get_event+0x440/0x440 [ 2204.824489] __x64_sys_ioctl+0x19a/0x210 [ 2204.825370] do_syscall_64+0x33/0x40 [ 2204.826352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2204.827523] RIP: 0033:0x7f6bde1e2b19 [ 2204.828325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2204.832302] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2204.833954] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2204.835500] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2204.837046] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2204.838587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2204.840139] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:52:49 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:52:49 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000000)={0x0, 0x0, 0x3}) [ 2218.338652] FAULT_INJECTION: forcing a failure. [ 2218.338652] name failslab, interval 1, probability 0, space 0, times 0 [ 2218.340005] CPU: 1 PID: 11131 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2218.340823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2218.341721] Call Trace: [ 2218.342032] dump_stack+0x107/0x167 [ 2218.342450] should_fail.cold+0x5/0xa [ 2218.342923] ? create_object.isra.0+0x3a/0xa30 [ 2218.343444] should_failslab+0x5/0x20 [ 2218.343862] kmem_cache_alloc+0x5b/0x310 [ 2218.344335] ? io_wq_create+0x114/0xc00 [ 2218.344770] create_object.isra.0+0x3a/0xa30 [ 2218.345272] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2218.345857] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2218.346411] io_wq_create+0x6ef/0xc00 [ 2218.346879] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2218.347461] ? io_import_iovec+0x1120/0x1120 [ 2218.347969] ? io_apoll_task_func+0x2d0/0x2d0 [ 2218.348489] ? __io_req_find_next+0x300/0x300 [ 2218.348999] ? do_raw_spin_lock+0x121/0x260 [ 2218.349495] ? rwlock_bug.part.0+0x90/0x90 [ 2218.349990] __io_uring_add_tctx_node+0x2c6/0x520 [ 2218.350523] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2218.351145] ? alloc_fd+0x2e7/0x670 [ 2218.351578] io_uring_setup+0x1fbb/0x2980 [ 2218.352060] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2218.352611] ? wait_for_completion_io+0x270/0x270 [ 2218.353184] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2218.353789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2218.354381] do_syscall_64+0x33/0x40 [ 2218.354833] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2218.355427] RIP: 0033:0x7f55325f0b19 [ 2218.355854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2218.357980] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2218.358828] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2218.359648] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2218.360420] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2218.361245] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2218.362066] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:52:49 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 28) 12:52:49 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0xc8, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x406c0) read$usbmon(r1, &(0x7f0000001040)=""/4103, 0x1007) 12:52:49 executing program 6: ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0xfffffffffffffffe, 0x16040) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x3) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, r0, 0x4000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000080), 0x7f) 12:52:49 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 36) 12:52:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x4000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x3000) 12:52:49 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_io_uring_setup(0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffd, 0x3af, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) openat(r3, &(0x7f0000001880)='./file0\x00', 0x515100, 0x132) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r4, 0x5, 0x8}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000880)={r4, "ce6e765f732580663ee20319cf5555dd"}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000300)={{r3}, {@val={r4}, @actul_num={@void, 0xfffffffffffffff9, 0x50}}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000600)={r4, 0x10000, 0x7, 0x1}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x462002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) dup2(r1, r0) [ 2218.391435] FAULT_INJECTION: forcing a failure. [ 2218.391435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2218.394514] CPU: 0 PID: 11144 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2218.396304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2218.398441] Call Trace: [ 2218.399130] dump_stack+0x107/0x167 [ 2218.399900] should_fail.cold+0x5/0xa [ 2218.400715] __alloc_pages_nodemask+0x182/0x600 [ 2218.401704] ? lock_release+0x680/0x680 12:52:49 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) r3 = dup2(r1, r0) syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r3, &(0x7f0000000000)={0x40, 0x20, 0xb}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345}, 0x20) 12:52:49 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0xc8, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x406c0) read$usbmon(r1, &(0x7f0000001040)=""/4103, 0x1007) [ 2218.402548] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2218.403973] ? lock_downgrade+0x6d0/0x6d0 [ 2218.404864] alloc_pages_current+0x187/0x280 [ 2218.405786] get_zeroed_page+0x14/0xb0 [ 2218.406604] ? kasan_unpoison_shadow+0x33/0x50 [ 2218.407582] mon_alloc_buff+0xed/0x250 [ 2218.408401] mon_bin_ioctl+0x493/0xcc0 [ 2218.409218] ? wait_for_completion_io+0x270/0x270 [ 2218.410227] ? mon_bin_get_event+0x440/0x440 [ 2218.411168] ? selinux_file_ioctl+0xb6/0x270 [ 2218.412095] ? mon_bin_get_event+0x440/0x440 [ 2218.413032] __x64_sys_ioctl+0x19a/0x210 [ 2218.413890] do_syscall_64+0x33/0x40 [ 2218.414680] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2218.415761] RIP: 0033:0x7f6bde1e2b19 [ 2218.416537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2218.420392] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2218.421983] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2218.423480] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2218.424974] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2218.426474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2218.427986] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:52:49 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 37) 12:52:49 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0xc8, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x406c0) read$usbmon(r1, &(0x7f0000001040)=""/4103, 0x1007) 12:52:49 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000000), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000280)) r3 = dup2(r1, r0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r4, 0x4) syz_io_uring_setup(0x27ad, &(0x7f0000000100)={0x0, 0x163b, 0x4, 0x2, 0x397, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456}, 0x8) sendfile(r4, r5, 0x0, 0x100000001) read$usbmon(r5, &(0x7f0000000080)=""/67, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0x8000, 0x7ab80998, 0x3, 0x84, 0x7af}) 12:52:49 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x5) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) [ 2218.507391] FAULT_INJECTION: forcing a failure. [ 2218.507391] name failslab, interval 1, probability 0, space 0, times 0 [ 2218.509887] CPU: 0 PID: 11161 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2218.511371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2218.513117] Call Trace: [ 2218.513678] dump_stack+0x107/0x167 [ 2218.514451] should_fail.cold+0x5/0xa [ 2218.515262] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2218.516308] should_failslab+0x5/0x20 [ 2218.517105] kmem_cache_alloc_trace+0x55/0x320 [ 2218.518065] __io_uring_add_tctx_node+0x15c/0x520 [ 2218.519083] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2218.520178] ? alloc_fd+0x2e7/0x670 [ 2218.520954] io_uring_setup+0x1fbb/0x2980 [ 2218.521830] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2218.522900] ? wait_for_completion_io+0x270/0x270 [ 2218.523935] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2218.525041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2218.526132] do_syscall_64+0x33/0x40 [ 2218.526953] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2218.528030] RIP: 0033:0x7f55325f0b19 [ 2218.528817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2218.532733] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2218.534342] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2218.535857] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2218.537359] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2218.538879] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2218.540381] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2218.553635] loop0: detected capacity change from 0 to 32768 12:52:49 executing program 6: fchmod(0xffffffffffffffff, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:52:49 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0x100, 0xc3f}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x7, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040080}, 0x10004004) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x80, 0x9, 0xb, 0x0, 0x7fffffff, 0xc4000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x6}, 0x6000, 0x4, 0x8, 0x2, 0x742, 0x9, 0x9, 0x0, 0x200, 0x0, 0x800}, 0xffffffffffffffff, 0xe, r2, 0x9) 12:53:06 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x200, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r0, 0xd0204000) 12:53:06 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:53:06 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 29) [ 2235.156999] FAULT_INJECTION: forcing a failure. [ 2235.156999] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2235.159861] CPU: 0 PID: 11182 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2235.161506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.163372] Call Trace: [ 2235.164001] dump_stack+0x107/0x167 [ 2235.164868] should_fail.cold+0x5/0xa [ 2235.165781] __alloc_pages_nodemask+0x182/0x600 [ 2235.166893] ? lock_release+0x680/0x680 [ 2235.167833] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2235.169252] ? lock_downgrade+0x6d0/0x6d0 [ 2235.170239] alloc_pages_current+0x187/0x280 [ 2235.171228] get_zeroed_page+0x14/0xb0 [ 2235.172038] ? kasan_unpoison_shadow+0x33/0x50 12:53:06 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 38) 12:53:06 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0x100, 0xc3f}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x7, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040080}, 0x10004004) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x80, 0x9, 0xb, 0x0, 0x7fffffff, 0xc4000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x6}, 0x6000, 0x4, 0x8, 0x2, 0x742, 0x9, 0x9, 0x0, 0x200, 0x0, 0x800}, 0xffffffffffffffff, 0xe, r2, 0x9) 12:53:06 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x4, 0x80000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:53:06 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r5 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x10000) syz_io_uring_submit(r3, r7, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x800, 0x800, 0x1, {0x0, r9}}, 0x0) [ 2235.173000] mon_alloc_buff+0xed/0x250 [ 2235.174021] mon_bin_ioctl+0x493/0xcc0 [ 2235.174848] ? wait_for_completion_io+0x270/0x270 [ 2235.175857] ? mon_bin_get_event+0x440/0x440 [ 2235.176791] ? selinux_file_ioctl+0xb6/0x270 [ 2235.177724] ? mon_bin_get_event+0x440/0x440 [ 2235.178654] __x64_sys_ioctl+0x19a/0x210 [ 2235.179518] do_syscall_64+0x33/0x40 [ 2235.180302] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2235.181087] FAULT_INJECTION: forcing a failure. [ 2235.181087] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.181377] RIP: 0033:0x7f6bde1e2b19 [ 2235.181396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.181414] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2235.189625] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2235.191134] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2235.192657] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2235.194168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2235.195685] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2235.197234] CPU: 1 PID: 11184 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2235.198444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.199873] Call Trace: [ 2235.200332] dump_stack+0x107/0x167 [ 2235.200962] should_fail.cold+0x5/0xa [ 2235.201614] ? create_object.isra.0+0x3a/0xa30 [ 2235.202391] should_failslab+0x5/0x20 [ 2235.203053] kmem_cache_alloc+0x5b/0x310 [ 2235.203752] create_object.isra.0+0x3a/0xa30 [ 2235.204507] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2235.205359] kmem_cache_alloc_trace+0x151/0x320 [ 2235.206165] __io_uring_add_tctx_node+0x15c/0x520 [ 2235.206984] ? io_uring_alloc_task_context+0x6a0/0x6a0 12:53:06 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x18000, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYBLOB="2c776654dd646e6f3d", @ANYRESHEX, @ANYBLOB=',cache=mmap,dfltgid=', @ANYRESHEX=r1, @ANYBLOB=',cache=none,appraise_type=imasig,seclabel,func=BPRM_CHECK,mask=^MAY_APPEND,fscontext=staff_u,obj_user=security.ima\x00,\x00']) fchown(r0, 0xffffffffffffffff, r1) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000100)={0x5, 0x5d}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) [ 2235.207872] ? alloc_fd+0x2e7/0x670 [ 2235.208675] io_uring_setup+0x1fbb/0x2980 [ 2235.209389] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2235.210237] ? wait_for_completion_io+0x270/0x270 [ 2235.211077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2235.211962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.212832] do_syscall_64+0x33/0x40 [ 2235.213459] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2235.214324] RIP: 0033:0x7f55325f0b19 [ 2235.214966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.218074] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2235.219374] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2235.220584] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2235.221796] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2235.223001] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2235.224190] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:53:06 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 30) 12:53:06 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 39) [ 2235.305459] FAULT_INJECTION: forcing a failure. [ 2235.305459] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2235.307467] CPU: 1 PID: 11201 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2235.308560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.309860] Call Trace: [ 2235.310275] dump_stack+0x107/0x167 [ 2235.310858] should_fail.cold+0x5/0xa [ 2235.311458] __alloc_pages_nodemask+0x182/0x600 [ 2235.312186] ? lock_release+0x680/0x680 [ 2235.312807] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2235.313767] ? lock_downgrade+0x6d0/0x6d0 [ 2235.314414] alloc_pages_current+0x187/0x280 [ 2235.315113] get_zeroed_page+0x14/0xb0 [ 2235.315718] ? kasan_unpoison_shadow+0x33/0x50 [ 2235.316433] mon_alloc_buff+0xed/0x250 [ 2235.317061] mon_bin_ioctl+0x493/0xcc0 [ 2235.317669] ? wait_for_completion_io+0x270/0x270 [ 2235.318417] ? mon_bin_get_event+0x440/0x440 [ 2235.319133] ? selinux_file_ioctl+0xb6/0x270 [ 2235.319818] ? mon_bin_get_event+0x440/0x440 [ 2235.320505] __x64_sys_ioctl+0x19a/0x210 [ 2235.321144] do_syscall_64+0x33/0x40 [ 2235.321727] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2235.322531] RIP: 0033:0x7f6bde1e2b19 [ 2235.323124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.325974] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2235.327168] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2235.328276] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2235.329393] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2235.330488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2235.331597] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2235.349398] FAULT_INJECTION: forcing a failure. [ 2235.349398] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.352312] CPU: 0 PID: 11204 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2235.353801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.355584] Call Trace: [ 2235.356153] dump_stack+0x107/0x167 [ 2235.356942] should_fail.cold+0x5/0xa [ 2235.357747] ? xas_alloc+0x336/0x440 [ 2235.358546] should_failslab+0x5/0x20 [ 2235.359389] kmem_cache_alloc+0x5b/0x310 [ 2235.360272] ? stack_trace_consume_entry+0x160/0x160 [ 2235.361369] xas_alloc+0x336/0x440 [ 2235.362123] xas_create+0x34a/0x10d0 [ 2235.362922] ? kernel_text_address+0xf2/0x120 [ 2235.363871] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2235.364972] xas_store+0x8c/0x1c40 [ 2235.365735] __xa_store+0x164/0x2d0 [ 2235.366497] ? xa_delete_node+0x280/0x280 [ 2235.367388] ? trace_hardirqs_on+0x5b/0x180 [ 2235.368302] xa_store+0x31/0x50 [ 2235.368999] __io_uring_add_tctx_node+0x1cf/0x520 [ 2235.370004] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2235.371136] ? alloc_fd+0x2e7/0x670 [ 2235.371915] io_uring_setup+0x1fbb/0x2980 [ 2235.372793] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2235.373848] ? wait_for_completion_io+0x270/0x270 [ 2235.374884] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2235.375977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2235.377062] do_syscall_64+0x33/0x40 [ 2235.377840] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2235.378985] RIP: 0033:0x7f55325f0b19 [ 2235.379779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.383656] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2235.385246] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2235.386749] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2235.388263] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2235.389878] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2235.391509] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2235.402430] loop0: detected capacity change from 0 to 32768 12:53:22 executing program 6: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r1) r2 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="3c47594e7ecbc77eb54e12d427", 0xd, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) r3 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r3, 0x0) 12:53:22 executing program 2: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r0, 0x4) sendfile(r0, r1, 0x0, 0x100000001) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x4c57}) 12:53:22 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:53:22 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 31) 12:53:22 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 40) 12:53:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r0, 0x4) sendfile(r0, r1, 0x0, 0x100000001) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB="2dcadbce1e98ace8da0b4dfec1f216461337bcd377ae8319be7d33bca991d63193f29389b54d5901d97776f5aea393a769f386f38fdcf7b5cae7ca2d1efcf542964995b5ec193128d1578333cb4d78d81441041bc4cbc14e5e8a001ccada686954329b7ec11f6967b95ff93274f1fdec7205b0f379bca9e23c137f904794ddacb808b5844bf86a036702a1e873350d52d3a4842261ac74bd910ebc5737a0a395d0f1c34f6a71aedc6a2fb40409d04523d5a010cda5000000"], 0x100}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0xa4, r2, 0xbbed43ce7078fba6, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa6}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x39}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8bfb}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x90}, 0x1) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000740), 0x2}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r3, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x400) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x5c, 0xfd, 0x3, 0x40, 0x0, 0x65ad, 0x83040, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x8000, 0x4, 0x10000, 0x1, 0x4, 0x7, 0x400, 0x0, 0x10001, 0x0, 0x2ab}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e22, 0xffff, @rand_addr=' \x01\x00', 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000002c0)="66c16608c679a3e5b66da632a780e54f60d4ce82af447526b24830fa4f211ead547c646d4507570dd4026eb91b3a3d1cb146bce564af8c0055e678498de907f38f70c1fc8c1f9b9af9f57108a24522a269e3e2", 0x53}, {&(0x7f0000000340)="cb60daec9057b4c1a7f1cdf3ade9aaa64c846ebf2302acf7726df02e507a13bd8b86bcf893e05dbc8ee05735b1096871419bb95025e2ea8484ed7390a9b0a4d99be80691d516d565172b5b17386ef58d0de7bb3bcb4eb4c8a62a91929116e80e2c4c0b24d6679da1d2b3e993622b5876fa25176f523b494bca19949381a1cc3bc39ee32803c8000708c9bc7c2cac09ec5659eb1501ad6ae926097e6ea27c064f5026bc2d2a80378f1c86eded737f6dbb4c19923292d7374c0111a576503469ba2144b05758c636f5abccc5852c6a16c7", 0xd0}], 0x2}, 0xc000) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(r5, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x400) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x9, 0x9, 0x8, 0x0, 0x8, 0x8001, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xbed8, 0x2, @perf_config_ext={0x9, 0xd294}, 0x4000, 0x1, 0x603, 0x7, 0x1, 0x84, 0x7, 0x0, 0x4092, 0x0, 0x400}, 0xffffffffffffffff, 0xa, r5, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x810, r6, 0x79dec000) r7 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r7, r4) 12:53:22 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0x100, 0xc3f}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x7, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040080}, 0x10004004) r2 = dup2(r1, r0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x80, 0x9, 0xb, 0x0, 0x7fffffff, 0xc4000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x6}, 0x6000, 0x4, 0x8, 0x2, 0x742, 0x9, 0x9, 0x0, 0x200, 0x0, 0x800}, 0xffffffffffffffff, 0xe, r2, 0x9) [ 2251.079894] FAULT_INJECTION: forcing a failure. [ 2251.079894] name failslab, interval 1, probability 0, space 0, times 0 [ 2251.081254] CPU: 0 PID: 11229 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2251.082064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2251.083049] Call Trace: [ 2251.083363] dump_stack+0x107/0x167 [ 2251.083789] should_fail.cold+0x5/0xa [ 2251.084234] ? xas_alloc+0x336/0x440 [ 2251.084670] should_failslab+0x5/0x20 [ 2251.085113] kmem_cache_alloc+0x5b/0x310 [ 2251.085592] ? stack_trace_consume_entry+0x160/0x160 [ 2251.086187] xas_alloc+0x336/0x440 [ 2251.086603] xas_create+0x34a/0x10d0 [ 2251.087054] ? kernel_text_address+0xf2/0x120 [ 2251.087578] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2251.088190] xas_store+0x8c/0x1c40 [ 2251.088723] __xa_store+0x164/0x2d0 [ 2251.089246] ? xa_delete_node+0x280/0x280 [ 2251.089734] ? trace_hardirqs_on+0x5b/0x180 [ 2251.090245] xa_store+0x31/0x50 [ 2251.090634] __io_uring_add_tctx_node+0x1cf/0x520 [ 2251.091207] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2251.091823] ? alloc_fd+0x2e7/0x670 [ 2251.092254] io_uring_setup+0x1fbb/0x2980 [ 2251.092745] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2251.093338] ? wait_for_completion_io+0x270/0x270 [ 2251.093911] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2251.094529] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2251.095156] do_syscall_64+0x33/0x40 [ 2251.095592] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2251.096186] RIP: 0033:0x7f55325f0b19 [ 2251.096617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2251.098770] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2251.099666] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2251.100494] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2251.101327] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2251.102158] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2251.102998] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2251.105271] FAULT_INJECTION: forcing a failure. [ 2251.105271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2251.108435] CPU: 1 PID: 11222 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2251.110236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2251.112045] Call Trace: [ 2251.112622] dump_stack+0x107/0x167 12:53:22 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x1f, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) [ 2251.113411] should_fail.cold+0x5/0xa [ 2251.114382] __alloc_pages_nodemask+0x182/0x600 [ 2251.115375] ? lock_release+0x680/0x680 [ 2251.116223] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2251.117487] ? lock_downgrade+0x6d0/0x6d0 [ 2251.118359] alloc_pages_current+0x187/0x280 [ 2251.119289] get_zeroed_page+0x14/0xb0 [ 2251.120098] ? kasan_unpoison_shadow+0x33/0x50 [ 2251.121052] mon_alloc_buff+0xed/0x250 [ 2251.121877] mon_bin_ioctl+0x493/0xcc0 [ 2251.122690] ? wait_for_completion_io+0x270/0x270 [ 2251.123709] ? mon_bin_get_event+0x440/0x440 [ 2251.124639] ? selinux_file_ioctl+0xb6/0x270 [ 2251.125570] ? mon_bin_get_event+0x440/0x440 [ 2251.126492] __x64_sys_ioctl+0x19a/0x210 [ 2251.127358] do_syscall_64+0x33/0x40 [ 2251.128139] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2251.129209] RIP: 0033:0x7f6bde1e2b19 [ 2251.129994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2251.133837] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2251.135449] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2251.136948] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2251.138633] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2251.140404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2251.141917] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:53:22 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 41) 12:53:22 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x15, 0x400000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x10001) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) [ 2251.207878] FAULT_INJECTION: forcing a failure. [ 2251.207878] name failslab, interval 1, probability 0, space 0, times 0 [ 2251.210297] CPU: 1 PID: 11243 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2251.211774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2251.213535] Call Trace: [ 2251.214104] dump_stack+0x107/0x167 [ 2251.214874] should_fail.cold+0x5/0xa [ 2251.215688] ? xas_alloc+0x336/0x440 [ 2251.216473] should_failslab+0x5/0x20 [ 2251.217278] kmem_cache_alloc+0x5b/0x310 [ 2251.218142] xas_alloc+0x336/0x440 [ 2251.218889] xas_create+0x34a/0x10d0 [ 2251.219688] ? kernel_text_address+0xf2/0x120 12:53:22 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) [ 2251.220641] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2251.221954] xas_store+0x8c/0x1c40 [ 2251.222737] __xa_store+0x164/0x2d0 [ 2251.223536] ? xa_delete_node+0x280/0x280 [ 2251.224435] ? trace_hardirqs_on+0x5b/0x180 [ 2251.225373] xa_store+0x31/0x50 [ 2251.226086] __io_uring_add_tctx_node+0x1cf/0x520 [ 2251.227138] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2251.228267] ? alloc_fd+0x2e7/0x670 [ 2251.229062] io_uring_setup+0x1fbb/0x2980 [ 2251.229963] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2251.231067] ? wait_for_completion_io+0x270/0x270 [ 2251.232129] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2251.233262] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2251.234378] do_syscall_64+0x33/0x40 [ 2251.235189] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2251.236293] RIP: 0033:0x7f55325f0b19 [ 2251.237100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 12:53:22 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 32) [ 2251.241078] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2251.242891] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2251.244442] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2251.245977] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2251.247523] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2251.249061] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2251.257532] loop0: detected capacity change from 0 to 32768 12:53:22 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/255, 0xff}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x3ff) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) [ 2251.315152] FAULT_INJECTION: forcing a failure. [ 2251.315152] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2251.316645] CPU: 0 PID: 11251 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2251.317456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2251.318453] Call Trace: [ 2251.318768] dump_stack+0x107/0x167 [ 2251.319207] should_fail.cold+0x5/0xa [ 2251.319651] __alloc_pages_nodemask+0x182/0x600 [ 2251.320204] ? lock_release+0x680/0x680 [ 2251.320668] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2251.321368] ? lock_downgrade+0x6d0/0x6d0 [ 2251.321854] alloc_pages_current+0x187/0x280 [ 2251.322370] get_zeroed_page+0x14/0xb0 [ 2251.322818] ? kasan_unpoison_shadow+0x33/0x50 [ 2251.323359] mon_alloc_buff+0xed/0x250 [ 2251.323812] mon_bin_ioctl+0x493/0xcc0 [ 2251.324267] ? wait_for_completion_io+0x270/0x270 [ 2251.324830] ? mon_bin_get_event+0x440/0x440 [ 2251.325346] ? selinux_file_ioctl+0xb6/0x270 [ 2251.325858] ? mon_bin_get_event+0x440/0x440 [ 2251.326370] __x64_sys_ioctl+0x19a/0x210 [ 2251.326845] do_syscall_64+0x33/0x40 [ 2251.327296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2251.327890] RIP: 0033:0x7f6bde1e2b19 [ 2251.328334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2251.330476] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2251.331379] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2251.332204] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2251.333031] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2251.333856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2251.334685] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:53:35 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r2 = dup2(r1, r0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000000), 0x2, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) dup2(r3, r4) 12:53:35 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000180)={0x0, 0x697, @start={0x0, 0x0, "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", "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"}, [0x2, 0x7, 0x3, 0x8001, 0xfffffffffffffffa, 0x8, 0x10, 0xff, 0x400, 0xc9b, 0xfffffffffffffc00, 0x3, 0x1, 0x3f, 0x80, 0x8000, 0x6, 0x101, 0xffffffff00000000, 0x2, 0x401, 0x100000000, 0x9, 0xe0000000, 0x8, 0xfffffffffffffff8, 0x1000, 0x1, 0x8, 0x81, 0x7, 0xff, 0x8, 0x30, 0xe16b, 0x4, 0x7, 0x3a, 0x1, 0x3, 0x2, 0x2, 0x7fffffff, 0x9, 0xc, 0x8, 0x4, 0x100000001, 0x401, 0xb30, 0x9, 0x0, 0x6, 0xff, 0x1, 0x9, 0x5, 0xb2a, 0x0, 0x0, 0x0, 0x2, 0x3, 0x6]}) 12:53:35 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x40010, r1, 0xd582b000) 12:53:35 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 33) 12:53:35 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) clone3(&(0x7f0000000180)={0xa881000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x29}, &(0x7f00000000c0)=""/40, 0x28, &(0x7f0000000100)=""/3, &(0x7f0000000140)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x6}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$mouse(&(0x7f00000002c0), 0x9, 0x503100) poll(&(0x7f0000000300)=[{r1, 0x2000}, {r0, 0x8000}, {r2, 0x8218}, {r3, 0x9226}, {r0, 0x1000}], 0x5, 0x8) 12:53:35 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 42) 12:53:35 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6, 0x800) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x120, 0x0, 0x40f, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40800}, 0x9) r1 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f0000000000), &(0x7f0000000180)=""/230, 0xe6}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r1, 0x0) 12:53:35 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r1 = msgget(0x0, 0x172) msgsnd(r1, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) [ 2264.612100] FAULT_INJECTION: forcing a failure. [ 2264.612100] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2264.615291] CPU: 1 PID: 11273 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2264.616571] FAULT_INJECTION: forcing a failure. [ 2264.616571] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.617043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2264.617056] Call Trace: [ 2264.622110] dump_stack+0x107/0x167 [ 2264.623049] should_fail.cold+0x5/0xa [ 2264.624018] __alloc_pages_nodemask+0x182/0x600 [ 2264.625193] ? lock_release+0x680/0x680 [ 2264.626197] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2264.627734] ? lock_downgrade+0x6d0/0x6d0 [ 2264.628784] alloc_pages_current+0x187/0x280 [ 2264.629893] get_zeroed_page+0x14/0xb0 [ 2264.630874] ? kasan_unpoison_shadow+0x33/0x50 [ 2264.632032] mon_alloc_buff+0xed/0x250 [ 2264.633017] mon_bin_ioctl+0x493/0xcc0 [ 2264.634001] ? wait_for_completion_io+0x270/0x270 [ 2264.635232] ? mon_bin_get_event+0x440/0x440 [ 2264.636352] ? selinux_file_ioctl+0xb6/0x270 [ 2264.637462] ? mon_bin_get_event+0x440/0x440 [ 2264.638571] __x64_sys_ioctl+0x19a/0x210 [ 2264.639557] do_syscall_64+0x33/0x40 [ 2264.640334] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2264.641404] RIP: 0033:0x7f6bde1e2b19 [ 2264.642178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2264.646071] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2264.647677] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2264.649161] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2264.650669] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2264.652181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2264.653686] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2264.655230] CPU: 0 PID: 11275 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2264.656684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2264.658412] Call Trace: [ 2264.658972] dump_stack+0x107/0x167 [ 2264.659749] should_fail.cold+0x5/0xa [ 2264.660562] ? create_object.isra.0+0x3a/0xa30 [ 2264.661517] should_failslab+0x5/0x20 [ 2264.662307] kmem_cache_alloc+0x5b/0x310 [ 2264.663175] ? mark_held_locks+0x9e/0xe0 [ 2264.664019] create_object.isra.0+0x3a/0xa30 [ 2264.664938] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2264.666006] kmem_cache_alloc+0x159/0x310 [ 2264.666879] xas_alloc+0x336/0x440 [ 2264.667635] xas_create+0x34a/0x10d0 [ 2264.668419] ? kernel_text_address+0xf2/0x120 [ 2264.669358] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2264.670455] xas_store+0x8c/0x1c40 [ 2264.671217] __xa_store+0x164/0x2d0 [ 2264.671970] ? xa_delete_node+0x280/0x280 [ 2264.672852] ? trace_hardirqs_on+0x5b/0x180 [ 2264.673772] xa_store+0x31/0x50 [ 2264.674465] __io_uring_add_tctx_node+0x1cf/0x520 [ 2264.675487] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2264.676597] ? alloc_fd+0x2e7/0x670 [ 2264.677370] io_uring_setup+0x1fbb/0x2980 [ 2264.678259] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2264.679321] ? wait_for_completion_io+0x270/0x270 [ 2264.680346] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2264.681444] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2264.682527] do_syscall_64+0x33/0x40 [ 2264.683324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2264.684400] RIP: 0033:0x7f55325f0b19 [ 2264.685178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2264.689054] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2264.690648] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2264.692145] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2264.693642] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2264.695135] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2264.696631] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:53:36 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 34) 12:53:36 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000000)={0x0, 0x0, 0x1}) 12:53:36 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 43) 12:53:36 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x0) (fail_nth: 1) [ 2264.803674] FAULT_INJECTION: forcing a failure. [ 2264.803674] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2264.806258] CPU: 0 PID: 11290 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2264.807750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2264.809509] Call Trace: [ 2264.810071] dump_stack+0x107/0x167 [ 2264.810845] should_fail.cold+0x5/0xa [ 2264.811656] __alloc_pages_nodemask+0x182/0x600 [ 2264.812639] ? lock_release+0x680/0x680 [ 2264.813477] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2264.814740] ? lock_downgrade+0x6d0/0x6d0 [ 2264.815625] alloc_pages_current+0x187/0x280 [ 2264.816560] get_zeroed_page+0x14/0xb0 [ 2264.817372] ? kasan_unpoison_shadow+0x33/0x50 [ 2264.818331] mon_alloc_buff+0xed/0x250 [ 2264.819167] mon_bin_ioctl+0x493/0xcc0 [ 2264.819693] loop0: detected capacity change from 0 to 32768 [ 2264.819985] ? wait_for_completion_io+0x270/0x270 [ 2264.822176] ? mon_bin_get_event+0x440/0x440 [ 2264.823117] ? selinux_file_ioctl+0xb6/0x270 [ 2264.824175] ? mon_bin_get_event+0x440/0x440 [ 2264.825170] __x64_sys_ioctl+0x19a/0x210 [ 2264.826026] do_syscall_64+0x33/0x40 [ 2264.826808] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2264.827905] RIP: 0033:0x7f6bde1e2b19 [ 2264.828688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2264.832563] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2264.834169] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2264.835676] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2264.837172] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2264.838674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2264.840171] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2264.870366] FAULT_INJECTION: forcing a failure. [ 2264.870366] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.872905] CPU: 1 PID: 11297 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2264.874362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2264.876103] Call Trace: [ 2264.876736] dump_stack+0x107/0x167 [ 2264.877687] should_fail.cold+0x5/0xa [ 2264.878668] ? xas_alloc+0x336/0x440 [ 2264.879728] should_failslab+0x5/0x20 [ 2264.880762] kmem_cache_alloc+0x5b/0x310 [ 2264.881865] xas_alloc+0x336/0x440 [ 2264.882841] xas_create+0x34a/0x10d0 [ 2264.883866] ? kernel_text_address+0xf2/0x120 [ 2264.884840] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2264.885965] xas_store+0x8c/0x1c40 [ 2264.886757] __xa_store+0x164/0x2d0 [ 2264.887545] ? xa_delete_node+0x280/0x280 [ 2264.888441] ? trace_hardirqs_on+0x5b/0x180 [ 2264.889372] xa_store+0x31/0x50 [ 2264.890226] __io_uring_add_tctx_node+0x1cf/0x520 [ 2264.891299] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2264.892430] ? alloc_fd+0x2e7/0x670 [ 2264.893230] io_uring_setup+0x1fbb/0x2980 [ 2264.894158] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2264.895276] ? wait_for_completion_io+0x270/0x270 [ 2264.896352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2264.897488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2264.898582] do_syscall_64+0x33/0x40 [ 2264.899410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2264.900519] RIP: 0033:0x7f55325f0b19 [ 2264.901309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2264.905208] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2264.906866] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2264.908683] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2264.910388] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2264.912049] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2264.913919] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:53:36 executing program 4: r0 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) dup2(r0, 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0x404600) r3 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r5, r1, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14, 0x0, {0x0, r4}}, 0xfffff800) fadvise64(r2, 0x7, 0x2, 0x3) 12:53:36 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0xc094, 0x597000) r1 = epoll_create1(0x80000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000240)) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r3, 0x4) sendfile(r3, r4, 0x0, 0x100000001) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x200) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x100010, r1, 0x7f255000) 12:53:36 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 35) 12:53:36 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x0) 12:53:36 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 44) [ 2265.062927] FAULT_INJECTION: forcing a failure. [ 2265.062927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2265.065839] CPU: 0 PID: 11308 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2265.067427] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.069316] Call Trace: [ 2265.069919] dump_stack+0x107/0x167 [ 2265.070752] should_fail.cold+0x5/0xa [ 2265.071638] __alloc_pages_nodemask+0x182/0x600 [ 2265.072698] ? lock_release+0x680/0x680 [ 2265.073599] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2265.074968] ? lock_downgrade+0x6d0/0x6d0 [ 2265.075500] FAULT_INJECTION: forcing a failure. [ 2265.075500] name failslab, interval 1, probability 0, space 0, times 0 [ 2265.075924] alloc_pages_current+0x187/0x280 [ 2265.079242] get_zeroed_page+0x14/0xb0 [ 2265.080127] ? kasan_unpoison_shadow+0x33/0x50 [ 2265.081165] mon_alloc_buff+0xed/0x250 [ 2265.082060] mon_bin_ioctl+0x493/0xcc0 [ 2265.082944] ? wait_for_completion_io+0x270/0x270 [ 2265.084051] ? mon_bin_get_event+0x440/0x440 [ 2265.085064] ? selinux_file_ioctl+0xb6/0x270 [ 2265.086072] ? mon_bin_get_event+0x440/0x440 [ 2265.087088] __x64_sys_ioctl+0x19a/0x210 [ 2265.088019] do_syscall_64+0x33/0x40 [ 2265.088870] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.090042] RIP: 0033:0x7f6bde1e2b19 [ 2265.090901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.095129] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2265.096863] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2265.098485] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2265.100119] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.101745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2265.103379] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2265.105040] CPU: 1 PID: 11310 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2265.106523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.108295] Call Trace: [ 2265.108864] dump_stack+0x107/0x167 [ 2265.109637] should_fail.cold+0x5/0xa [ 2265.110451] ? create_object.isra.0+0x3a/0xa30 [ 2265.111435] should_failslab+0x5/0x20 [ 2265.112245] kmem_cache_alloc+0x5b/0x310 [ 2265.113105] ? mark_held_locks+0x9e/0xe0 [ 2265.113969] create_object.isra.0+0x3a/0xa30 [ 2265.114900] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2265.115993] kmem_cache_alloc+0x159/0x310 [ 2265.116880] xas_alloc+0x336/0x440 [ 2265.117638] xas_create+0x34a/0x10d0 [ 2265.118435] ? kernel_text_address+0xf2/0x120 [ 2265.119406] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2265.120523] xas_store+0x8c/0x1c40 [ 2265.121297] __xa_store+0x164/0x2d0 [ 2265.122069] ? xa_delete_node+0x280/0x280 [ 2265.122958] ? trace_hardirqs_on+0x5b/0x180 [ 2265.123905] xa_store+0x31/0x50 [ 2265.124617] __io_uring_add_tctx_node+0x1cf/0x520 [ 2265.125641] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2265.126750] ? alloc_fd+0x2e7/0x670 [ 2265.127543] io_uring_setup+0x1fbb/0x2980 [ 2265.128430] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2265.129509] ? wait_for_completion_io+0x270/0x270 [ 2265.130556] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2265.131681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.132774] do_syscall_64+0x33/0x40 [ 2265.133565] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.134655] RIP: 0033:0x7f55325f0b19 [ 2265.135449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.139350] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2265.140963] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2265.142472] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2265.143991] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2265.145504] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2265.147022] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:53:36 executing program 4: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) 12:53:36 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 36) 12:53:36 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x8000000000000, 0x337800) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x0, 0x8, 0x20}) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/18, 0x12}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:53:36 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 45) 12:53:36 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/70, 0x46}) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) [ 2265.273180] FAULT_INJECTION: forcing a failure. [ 2265.273180] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2265.276007] CPU: 0 PID: 11323 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2265.277611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.279533] Call Trace: [ 2265.280147] dump_stack+0x107/0x167 [ 2265.280997] should_fail.cold+0x5/0xa [ 2265.281884] __alloc_pages_nodemask+0x182/0x600 [ 2265.282961] ? lock_release+0x680/0x680 [ 2265.283899] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2265.285298] ? lock_downgrade+0x6d0/0x6d0 [ 2265.286265] alloc_pages_current+0x187/0x280 [ 2265.287288] get_zeroed_page+0x14/0xb0 [ 2265.288184] ? kasan_unpoison_shadow+0x33/0x50 [ 2265.289241] mon_alloc_buff+0xed/0x250 [ 2265.290149] mon_bin_ioctl+0x493/0xcc0 [ 2265.291057] ? wait_for_completion_io+0x270/0x270 [ 2265.291762] FAULT_INJECTION: forcing a failure. [ 2265.291762] name failslab, interval 1, probability 0, space 0, times 0 [ 2265.292179] ? mon_bin_get_event+0x440/0x440 [ 2265.295599] ? selinux_file_ioctl+0xb6/0x270 [ 2265.296630] ? mon_bin_get_event+0x440/0x440 [ 2265.297661] __x64_sys_ioctl+0x19a/0x210 [ 2265.298606] do_syscall_64+0x33/0x40 [ 2265.299475] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.300658] RIP: 0033:0x7f6bde1e2b19 [ 2265.301514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.305797] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2265.307566] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2265.309215] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2265.310867] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.312526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2265.314168] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2265.315850] CPU: 1 PID: 11325 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2265.317369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.319196] Call Trace: [ 2265.319779] dump_stack+0x107/0x167 [ 2265.320572] should_fail.cold+0x5/0xa [ 2265.321406] ? xas_alloc+0x336/0x440 [ 2265.322212] should_failslab+0x5/0x20 [ 2265.323045] kmem_cache_alloc+0x5b/0x310 [ 2265.323940] xas_alloc+0x336/0x440 [ 2265.324713] xas_create+0x34a/0x10d0 [ 2265.325529] ? kernel_text_address+0xf2/0x120 [ 2265.326502] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2265.327646] xas_store+0x8c/0x1c40 [ 2265.328432] __xa_store+0x164/0x2d0 [ 2265.329221] ? xa_delete_node+0x280/0x280 [ 2265.330132] ? trace_hardirqs_on+0x5b/0x180 [ 2265.331090] xa_store+0x31/0x50 [ 2265.331812] __io_uring_add_tctx_node+0x1cf/0x520 [ 2265.332864] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2265.334001] ? alloc_fd+0x2e7/0x670 [ 2265.334804] io_uring_setup+0x1fbb/0x2980 [ 2265.335718] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2265.336821] ? wait_for_completion_io+0x270/0x270 [ 2265.337887] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2265.339031] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.340160] do_syscall_64+0x33/0x40 [ 2265.340969] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.342079] RIP: 0033:0x7f55325f0b19 [ 2265.342890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.346907] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2265.348557] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2265.350112] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2265.351667] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2265.353209] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2265.354749] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:53:36 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) read$usbmon(r0, &(0x7f0000000000)=""/92, 0x5c) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) 12:53:36 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) dup2(r1, r2) 12:53:36 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 37) [ 2265.493836] FAULT_INJECTION: forcing a failure. [ 2265.493836] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2265.496369] CPU: 1 PID: 11332 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2265.497817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.499569] Call Trace: [ 2265.500131] dump_stack+0x107/0x167 [ 2265.500903] should_fail.cold+0x5/0xa [ 2265.501714] __alloc_pages_nodemask+0x182/0x600 [ 2265.502699] ? lock_release+0x680/0x680 [ 2265.503548] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2265.504834] ? lock_downgrade+0x6d0/0x6d0 [ 2265.505718] alloc_pages_current+0x187/0x280 [ 2265.506654] get_zeroed_page+0x14/0xb0 [ 2265.507600] ? kasan_unpoison_shadow+0x33/0x50 [ 2265.508562] mon_alloc_buff+0xed/0x250 [ 2265.509379] mon_bin_ioctl+0x493/0xcc0 [ 2265.510205] ? wait_for_completion_io+0x270/0x270 [ 2265.511231] ? mon_bin_get_event+0x440/0x440 [ 2265.512162] ? selinux_file_ioctl+0xb6/0x270 [ 2265.513093] ? mon_bin_get_event+0x440/0x440 [ 2265.514026] __x64_sys_ioctl+0x19a/0x210 [ 2265.514877] do_syscall_64+0x33/0x40 [ 2265.515673] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.516745] RIP: 0033:0x7f6bde1e2b19 [ 2265.517533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.521397] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2265.523022] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2265.524518] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2265.526013] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.527574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2265.529301] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:53:50 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 46) 12:53:50 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) 12:53:50 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r1 = msgget(0x0, 0x172) msgsnd(r1, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="90f23ee48414c664c5a43f762e4c066fb46c651599634978ad436839c78464320b6c96b3b20424870f3c2c06ff5d7954554895fb52ffeef44cb8428f018a7311e03dc310105175dc9c0211c4c3d97278f61e53c32677695a579612fbb8f5ba448869626a4ccaeaae7114a481e103e8e43576e44b8a1a88966a66b6e6b4868bf5132cbfb5bc28aa11f6dcafe94048bd40f1c5f93a760b22174a742576098c9f3a6cacab94927a4600b7455033a85d92450a398e67a065f49012273455707ce4f6ac3de7ab8003c8cdf8491d17087e25e66d7112c059f9f340c35262df6b049113566fbdd3f51963793385ba78d21a42e3a68ed5c340c7ae8e7c2912decbc2e8175a88728d5aaf4822588b5fc88aee41ed9174cc588c519b0c5869ff2d65e08d1b7821c97c58cb1be4f1c62363215f99f391d5441860295b530603b1976c54e83096e8942a43b55f24c3584a1f136a7f0d5ef95f557d2baecf95628bb94d7f1cf3bb70a37631af2938e91dbae32061fdb3e543e2c6ff3b003cf22fb97f78b59e0f97e9bae1ab06e67f32249b75ee87e1026f9856b9ed12135e6474800b00e9b304ac081713976ac37945d55ca0da28b9f4a6e2fb34cc12e8ab3f97cd3131eaa574858c0edc20098bbcd4fb98e10a3e1b88137d9b55cafe856a7fdfc52b870d13baf1025873d59cf7a73c4977ce2486005a2801c2f3b6ffd7ea4b95d6ea2d78a6b8b762c15ce619d64cf415ad208e6ecc922322251412bdafc6cc3bded6cf5b141f69a06ca222d18162d4caf3b70ba20407830be2a0b4d63fe3ea0aa668c4f6fe84bf98c2849de40db25fea70f0216c1df234e515b68fad8975e787c6c834aeff0fff9ddee36943907373d4d9b90554efd06020853cda7b28d77b515682678493081f7cf695cb23c20f791f36b8dcf209f4572de40de199fb323774b39d006299c24033a9670b63efaf60763843e57262aa2300cc3d8a00c41b1058d01496946d425e094c47feb6c05ac0e419af3519cedaeb69d798f6a8a0f6228be14c6896332eb4d233587d75107b472ec90573454d047feb3cce7ef7b4411c62bf805bc3c16d06d396546dfdff8e309cc97f47c0bdb1f145c961c1dbaae974296b1d9d726478d00bcda517db8ba710ea53e754f54181907b60c69b161145b437aa5fbb9cb55b7740dfd7ba18507369a582788206d9a513955b024c4b738adc72c93bb20a83787ba7736f66d7d0e201475050b7769b9083ccf66b34054fe8dd73023e9a936f67f2299dde07f5601a9e9fb478e1007824de649557be2676c8132ab6a20cc422a0dcec5828c240bebf8b8194c6077f70f7bc9f882693b9328512ec2f86c201661e1ac676feedb439ae38cb3bf0769348528540cf4c82fef3b38979639264d32966c4a54a829fdd28d21abe01d0d44999a3c70b8c216b90d375f0c73acaef274af90d96fed4394170f916780399a814b8684f0208626656a93f26fecdfa69ec34433d0021e96b4d977fe40c0a765cb9fb78f66b6098a49d450a87d515dbf467af3384e8ef356293bd4e8e2b06cfe5bbf6de5d393496d692029b083f8fb0f129be9007d4f1421c2398679f899357a97f9ca79ba1bb862d169e9d1ddf1d20accb950530f06e193db66724b3d12a0de09e9af272d4ca52b447d94b244407796fe08538bda0e9323bcbd9d6b3831bd80e2ab65786f1a2e8d64bb6a646514ac975068f70959a82f26a232da659eba634dab2d2c63fa0025079158bb5ff8f4da275099c68cf7bd59a6f440e6cd2bf313f846ec78194a8b22c1c9a106046cd5b01336d0bd9d6707397845b4033eb280b1f3c52d16efad9d488d4fe5c8052e78d992e155717719c49061927b0692340ad021438c71fac159817920b43ba0ac658720d8fe8b04a29c4dd0db5188c3951db8921426b2f1ec1b76d2c16d4d9b14eab6193a728fdb2f38ea193d6213337d1bed670afdab0d5d135b31dc60c0c900aa731ca0ef76cb26946d361b9beae8771c77115ed4d268190b60a2f4ffc1c5b5d30e6a996f9113352ac856a04bb42f0a6bd897f488698cd18a3367daf55b5487cbecee292a331fef96109bfa62eb7ed97a201401097123c8b06b7f8b90c0b195c2a40c74a19c4f0dd7e0a46da2f2a54b4082fa3ed2e7bcd64d394c1e60d219789623e03a70ea36decd1756cda599be2db946381a365c7795f960651b7e053201aafce20a270ec3470d7c13c0dac954b8dd8032c7668dc5740e8cb050dda39e286d211d63d9f8bc4f79838f5bbdd5d790b972dbba633b0bcd74a306ee02a0954741bcab06b3c78c61c95f1af9d10eb52b4e854764b0f78ffba56f4f83c15483105cc28c3a4f218b0f6bba100b545f1189a8103eac586eed81301eb70a7c446849d4cbcd9c521d10f70c6189ded9d8b48612d16a1a074564a67e882186da0c3828056aeb33ed98d6dbe5bbf591616f53edbd3684d7e393ed2ba808f1f5e434b970ab74ecdd616c703aaa4436e5fdec0dc44690ade613c8c99ba3033522025536e5b2d77102925eb1bb6970e5f9abcc0a4b2617169bafe95950fd4a7c02280a0ed2ca5096a1013fa62fb5200297e5e3a3ec64f8a80f268b08c37c051d7c8c2ac2499304d0cc9de38582ddb5710137aacf914c6567f9dbe33347723b4d2051b242bd50cca9ac78009202f6ecf8bae1415325f93581d82da36529ba569f00c1e62d2df4d1669cd62801448c1701ba8a53888de08e0618bc49e2d490e4dac43704fb8710d8e93d376d1179cf10fa18933fe975f266dfe45f53f92c7ddf32f71c74ed9f4c2c0bdca9d264ad8097c5939a0d8954156c75d8deeae5fa37178866622a700e50c9e7645ebeca7198ee248dd0ccbbc5e7ccd3c1afc9758b9b4d4926a7c391d0c2a13a0d87370de45409a380d6315fa2ce5adbf96c2f204bfec15beb54f053c638043030decfc8ff619944eefd96e378f2ee51a01234f8668b34aba36897896690616d499b7598d0b42072b07f217602cc8d43a3b44ac9d2bc19d3d1d3511365c53cafe8e412b2005ec908f2ca1fd00c0388e6e008ff968b735c0876c023430e12db4fa8e6f0fa6295de1779ca16aefaae37a8dd2aabac1fc14c67df6e287bf5bf0de1e00168996c58103088aa0e95b509ec834c68333a862cc5fefcb928772b32ad7d93abebc5c27b88d903f5d1902c248390ccc429ce0a0cd01b86e81d1dd62691a6b50a59fa51a44712dcb583b4281e9f764fc33c400a905fe890d239168091a56935dec0b071ed151c130f6c49b4b22ccb3152ebed7c7c85808d8d0e59550db98eb98242fb05f7e462bd4aa8ee010cbcdc23d4bbfb70f8538f2923a7078efdefbbb31c926fa2bac21aa99f666bc0073e57811255014bd3e9427515b61738ea4d8fd60276062343a2137fadddac497cdbc85fc23d63bf4adadb210cd8e2aa5caa39e81fbf1f5bab85f3ee5a741fb7f6bada7633efb46677b34aa3a49c60320f7ef436c0a02e89d5324daf7a3dc9c86b26f7bdc344b00b97a540924afcbbe671a3990b5d0a4621732580e04e1c4e7050b4759b37110570191a899afa12ff950d8b2066f4d57e5a210e9aa5ea70ab0e542cba52feed3e9b468f1b49d1b10ac4f0f7ccadace4b61f1b8a688bc0bbbf08e76199b889c7ed3e51100c3887fd0b85e0bdf97513b7997e1432192a9b16626ec183926da4783d222d804ad4d7cab74edae4113ae2af3d945f1ce16ff5df7cff5bc1a16b8c821dfaeff3e8c26d31472e71314bdec810496545877a18a66558e583b636fbf532c1f4f49f8d787ff1a3d44dbd1c971f9b3cd5489fb9c8c7e051e588ae5a5c1d1825aa8057296c85e3eaa019640475ebccb07896ea63c9d52aaf3ccf4322b8818a72ea93a91411009d938ef50b0febd075451ed490981aa22af8cf7f6893a1fae385b98d7b9c5103811a614ba05d6c8c2183ab4e209453a1991d9dcca6684b0290f53f9698edf8ce66765a0c360cbbcb885996ab7717b558776604b1844434e0d76ae2e51a7721b447e6e1b654f545944f8a68b72a24020a18292009717acd9ed1c1964e2fb8f147a8ec890078389cc7aed9d179306d00588bf2c5de4133e47722a9cde447adb3991c600e94b507702c4d03fb100c06e83ea6e5f94b3c729ecaa59cb5ead61507270fca669f126fc93ee038c9e9674cd8216df2b09129e0f1531b0c2538c7c8dd7fdf7f4fc5446166ee7cbad06caaf0c8c2e1b3e1ee60f516cafd189451d96f797ffc53897a5f19352e87bdb68cb728b1feacd7106acd6ad22944249fe9afc194e384c54569b940b3511a4f313f7159f6c52349112c2616914c4097fb5e98d448f001db1d1cc0ed28eb311aca71d4385826982ed170f3f3d0007b93e13bfc1952a2146de7b85a8f913f2708de08660ac53e02b837a63bf02c5699cf938340c52e1509bd26bb39e86fa30d3be2a4e8d5a371e2b730b5bacb3789f63a1050848a4eb16350e3cdaafed0d92d31c5585cd37e7f581547702e7d8148097b651b2c449ed53a2cc6a744b186565413a0e803f0a01d896e9bea217014416c12664a343c2492d8acdda4a254c3a090af6b422a27cebcfccecb1166affdf8fc77aad4457d5dfa1a1025232a4fbd3714525e1bdbe205eed8d1d73fb14b0e67f08ca2461a2fa8a3a28114cd87547a6d56197d2fa3788985457a5df3b4055dcb76b4cf9868ddefdabfc35275309bf26e0cb92ee5c252a9639f3eaa604f796eb36e1bbe7385f538e5ca2713ec80efc455458a7881d406bb8d9ad3dd405c0c8a84c4d08649a4b71e56587403d803988c5dda350dc417a466c732a779dd1374eb00984cc27b82e1a409e84cb376c27686cfd39cd5976849d2b62778127811dfdfb8340016efdf7e87c65639dbac756401d0d272329f4f2e5eb6fe6a36482202406817fa61d0a1053858fa127f1422be47b31b4d9b96b73484b0959e8b1ed896cbf64a6e93a2ffddc0db1d0b638018e6cc3afcf787a6eb3dac04d0035b6195c90a52c3da4d3420d31915b94f60f9af7a79fea0ba661992e24106a653124eae88b795798b4234f880f868f4953fa2651ae3da8657117a8921a0d19ea1a1c37a4766ff76911af8454bc295b718b9097974a7f66114a8759c47f3e5ccda81d14753090889d574184378fa4042e03d86810f6d94c3f61007a39b8c319f799039ee94e4cce5d59396a850a478925fc44aba4c602c2b62bea6b3db183c38b9cdb76a92770263b4c8d1a0caebe7141f306d07b30ef6b112088cea94bc9a8e9de007aca1caab9075f573546d4358642515602081b55d940a9f4aa654772b003ad839df6a384ded2bae2020f5f5f801796c260db96ff9381fb6f0767e5d18f0647b91fdaa3ed5a66212b3fb7a12e621a6baa0132c2f6e7674c25124c0f0a28455298269b3cbe61106f49a45b78519b37407b4a372294834d4cd6c6cb73de537cfb6a6525303d042212b66e7e71bbae1b3c4dc03278e8b51d4ace6ea5b3aab679e586a4487ec9873136ab29544fb9666d1a81935c1c05f21f7051790dcfe3fbaa0e3f19beecad449939e78e593763bf4e1fec0c5e0f2e18604bb55e941b433b74cb003c428ffde37d9e644abfcc0d2535ca64e973ef7cc9cdc369cd85c4886baf15f8c798237d3d7475bad4408eb150e9275e3a028ff94e0ae4a0d27cb2475ffedf238e51b825daa6686122c4a5e5f77b3b19ab0663a0bdac2c31669f3bc1d6023f17e05ed61a3f95eff867f0e34b352cc10e105ff8b0147d8f151d24a21114067fedcb263944758d84573566d19fab4f3695c40b176d733b", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:53:50 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 38) 12:53:50 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:53:50 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x2000, 0x0) 12:53:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) socket$unix(0x1, 0x1, 0x0) accept(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) poll(&(0x7f00000000c0), 0x0, 0x9) 12:53:50 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x5c9380, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) r3 = openat(r2, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r3, 0x4) sendfile(r3, r4, 0x0, 0x100000001) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x351) r5 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r5, r0) [ 2278.920436] FAULT_INJECTION: forcing a failure. [ 2278.920436] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2278.923074] CPU: 1 PID: 11359 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2278.924555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.926296] Call Trace: [ 2278.926853] dump_stack+0x107/0x167 [ 2278.927632] should_fail.cold+0x5/0xa [ 2278.928443] __alloc_pages_nodemask+0x182/0x600 [ 2278.929428] ? lock_release+0x680/0x680 [ 2278.930271] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2278.931552] ? lock_downgrade+0x6d0/0x6d0 [ 2278.932447] alloc_pages_current+0x187/0x280 [ 2278.933383] get_zeroed_page+0x14/0xb0 12:53:50 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) dup2(r0, r0) fstat(r0, &(0x7f0000000080)) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) [ 2278.934204] ? kasan_unpoison_shadow+0x33/0x50 [ 2278.935354] mon_alloc_buff+0xed/0x250 [ 2278.936194] mon_bin_ioctl+0x493/0xcc0 [ 2278.937042] ? wait_for_completion_io+0x270/0x270 [ 2278.938089] ? mon_bin_get_event+0x440/0x440 [ 2278.939053] ? selinux_file_ioctl+0xb6/0x270 [ 2278.940024] ? mon_bin_get_event+0x440/0x440 [ 2278.940978] __x64_sys_ioctl+0x19a/0x210 [ 2278.941864] do_syscall_64+0x33/0x40 [ 2278.942671] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2278.943813] RIP: 0033:0x7f6bde1e2b19 [ 2278.944624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.948623] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2278.950279] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2278.951830] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2278.953376] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2278.954926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2278.956480] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2278.959775] FAULT_INJECTION: forcing a failure. [ 2278.959775] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.961272] CPU: 0 PID: 11367 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2278.962091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.963082] Call Trace: [ 2278.963409] dump_stack+0x107/0x167 [ 2278.963838] should_fail.cold+0x5/0xa [ 2278.964291] ? ___slab_alloc+0x155/0x700 [ 2278.964769] ? create_object.isra.0+0x3a/0xa30 [ 2278.965316] should_failslab+0x5/0x20 [ 2278.965763] kmem_cache_alloc+0x5b/0x310 [ 2278.966248] create_object.isra.0+0x3a/0xa30 [ 2278.966762] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2278.967373] kmem_cache_alloc+0x159/0x310 [ 2278.967866] xas_alloc+0x336/0x440 [ 2278.968291] xas_create+0x34a/0x10d0 [ 2278.968738] ? kernel_text_address+0xf2/0x120 [ 2278.969274] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2278.969890] xas_store+0x8c/0x1c40 [ 2278.970322] __xa_store+0x164/0x2d0 [ 2278.970750] ? xa_delete_node+0x280/0x280 [ 2278.971250] ? trace_hardirqs_on+0x5b/0x180 [ 2278.971766] xa_store+0x31/0x50 [ 2278.972156] __io_uring_add_tctx_node+0x1cf/0x520 [ 2278.972729] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2278.973343] ? alloc_fd+0x2e7/0x670 [ 2278.973779] io_uring_setup+0x1fbb/0x2980 [ 2278.974273] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2278.974871] ? wait_for_completion_io+0x270/0x270 [ 2278.975461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2278.976082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2278.976701] do_syscall_64+0x33/0x40 [ 2278.977139] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2278.977747] RIP: 0033:0x7f55325f0b19 [ 2278.978183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.980404] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2278.981306] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2278.982157] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2278.982996] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2278.983824] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2278.984640] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:53:50 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) read$usbmon(r0, &(0x7f0000000000)=""/117, 0x75) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:53:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x156a, 0x214080) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) 12:53:50 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000100)={&(0x7f0000000040), &(0x7f0000000080)=""/122, 0x7a}) dup2(r1, r0) syz_open_dev$usbmon(&(0x7f0000000000), 0x50, 0x234000) 12:53:50 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 39) 12:53:50 executing program 4: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r2, r1) [ 2279.095973] loop0: detected capacity change from 0 to 32768 [ 2279.102607] FAULT_INJECTION: forcing a failure. [ 2279.102607] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2279.105206] CPU: 1 PID: 11386 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2279.106665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2279.108486] Call Trace: [ 2279.109062] dump_stack+0x107/0x167 [ 2279.109854] should_fail.cold+0x5/0xa [ 2279.110686] __alloc_pages_nodemask+0x182/0x600 [ 2279.111704] ? lock_release+0x680/0x680 [ 2279.112565] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2279.113867] ? lock_downgrade+0x6d0/0x6d0 [ 2279.114773] alloc_pages_current+0x187/0x280 [ 2279.115741] get_zeroed_page+0x14/0xb0 [ 2279.116580] ? kasan_unpoison_shadow+0x33/0x50 [ 2279.117566] mon_alloc_buff+0xed/0x250 [ 2279.118414] mon_bin_ioctl+0x493/0xcc0 [ 2279.119268] ? wait_for_completion_io+0x270/0x270 [ 2279.120314] ? mon_bin_get_event+0x440/0x440 [ 2279.121272] ? selinux_file_ioctl+0xb6/0x270 [ 2279.122228] ? mon_bin_get_event+0x440/0x440 [ 2279.123192] __x64_sys_ioctl+0x19a/0x210 [ 2279.124076] do_syscall_64+0x33/0x40 [ 2279.124884] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2279.125998] RIP: 0033:0x7f6bde1e2b19 [ 2279.126830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2279.130828] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2279.132488] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2279.134030] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2279.135587] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2279.137139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2279.138684] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:54:07 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 47) 12:54:07 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:54:07 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x80000, 0x0) 12:54:07 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xb, r1, &(0x7f0000000000)='id_legacy\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)={0x1, 0x0, @c}, 0x29, r2) add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, r2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r3, 0x0) 12:54:07 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) read$usbmon(r0, &(0x7f0000000040)=""/118, 0x76) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r2 = dup2(r1, r0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={0x0, 0x3, r2, 0x80000001}) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x56d12) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x94, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "6a9213877f5d56da0a147c10067e81e4"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "c0bccee0d9c2588feaa3a9749edc4aa5"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "da185b61160be7a08272dda0839e2cb7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "1a3e44f0e9403288e49a43d235ce5130"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r4 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x12, r4, 0x8000000) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x3) 12:54:07 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 40) 12:54:07 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r1 = msgget(0x0, 0x172) msgsnd(r1, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="90f23ee48414c664c5a43f762e4c066fb46c651599634978ad436839c78464320b6c96b3b20424870f3c2c06ff5d7954554895fb52ffeef44cb8428f018a7311e03dc310105175dc9c0211c4c3d97278f61e53c32677695a579612fbb8f5ba448869626a4ccaeaae7114a481e103e8e43576e44b8a1a88966a66b6e6b4868bf5132cbfb5bc28aa11f6dcafe94048bd40f1c5f93a760b22174a742576098c9f3a6cacab94927a4600b7455033a85d92450a398e67a065f49012273455707ce4f6ac3de7ab8003c8cdf8491d17087e25e66d7112c059f9f340c35262df6b049113566fbdd3f51963793385ba78d21a42e3a68ed5c340c7ae8e7c2912decbc2e8175a88728d5aaf4822588b5fc88aee41ed9174cc588c519b0c5869ff2d65e08d1b7821c97c58cb1be4f1c62363215f99f391d5441860295b530603b1976c54e83096e8942a43b55f24c3584a1f136a7f0d5ef95f557d2baecf95628bb94d7f1cf3bb70a37631af2938e91dbae32061fdb3e543e2c6ff3b003cf22fb97f78b59e0f97e9bae1ab06e67f32249b75ee87e1026f9856b9ed12135e6474800b00e9b304ac081713976ac37945d55ca0da28b9f4a6e2fb34cc12e8ab3f97cd3131eaa574858c0edc20098bbcd4fb98e10a3e1b88137d9b55cafe856a7fdfc52b870d13baf1025873d59cf7a73c4977ce2486005a2801c2f3b6ffd7ea4b95d6ea2d78a6b8b762c15ce619d64cf415ad208e6ecc922322251412bdafc6cc3bded6cf5b141f69a06ca222d18162d4caf3b70ba20407830be2a0b4d63fe3ea0aa668c4f6fe84bf98c2849de40db25fea70f0216c1df234e515b68fad8975e787c6c834aeff0fff9ddee36943907373d4d9b90554efd06020853cda7b28d77b515682678493081f7cf695cb23c20f791f36b8dcf209f4572de40de199fb323774b39d006299c24033a9670b63efaf60763843e57262aa2300cc3d8a00c41b1058d01496946d425e094c47feb6c05ac0e419af3519cedaeb69d798f6a8a0f6228be14c6896332eb4d233587d75107b472ec90573454d047feb3cce7ef7b4411c62bf805bc3c16d06d396546dfdff8e309cc97f47c0bdb1f145c961c1dbaae974296b1d9d726478d00bcda517db8ba710ea53e754f54181907b60c69b161145b437aa5fbb9cb55b7740dfd7ba18507369a582788206d9a513955b024c4b738adc72c93bb20a83787ba7736f66d7d0e201475050b7769b9083ccf66b34054fe8dd73023e9a936f67f2299dde07f5601a9e9fb478e1007824de649557be2676c8132ab6a20cc422a0dcec5828c240bebf8b8194c6077f70f7bc9f882693b9328512ec2f86c201661e1ac676feedb439ae38cb3bf0769348528540cf4c82fef3b38979639264d32966c4a54a829fdd28d21abe01d0d44999a3c70b8c216b90d375f0c73acaef274af90d96fed4394170f916780399a814b8684f0208626656a93f26fecdfa69ec34433d0021e96b4d977fe40c0a765cb9fb78f66b6098a49d450a87d515dbf467af3384e8ef356293bd4e8e2b06cfe5bbf6de5d393496d692029b083f8fb0f129be9007d4f1421c2398679f899357a97f9ca79ba1bb862d169e9d1ddf1d20accb950530f06e193db66724b3d12a0de09e9af272d4ca52b447d94b244407796fe08538bda0e9323bcbd9d6b3831bd80e2ab65786f1a2e8d64bb6a646514ac975068f70959a82f26a232da659eba634dab2d2c63fa0025079158bb5ff8f4da275099c68cf7bd59a6f440e6cd2bf313f846ec78194a8b22c1c9a106046cd5b01336d0bd9d6707397845b4033eb280b1f3c52d16efad9d488d4fe5c8052e78d992e155717719c49061927b0692340ad021438c71fac159817920b43ba0ac658720d8fe8b04a29c4dd0db5188c3951db8921426b2f1ec1b76d2c16d4d9b14eab6193a728fdb2f38ea193d6213337d1bed670afdab0d5d135b31dc60c0c900aa731ca0ef76cb26946d361b9beae8771c77115ed4d268190b60a2f4ffc1c5b5d30e6a996f9113352ac856a04bb42f0a6bd897f488698cd18a3367daf55b5487cbecee292a331fef96109bfa62eb7ed97a201401097123c8b06b7f8b90c0b195c2a40c74a19c4f0dd7e0a46da2f2a54b4082fa3ed2e7bcd64d394c1e60d219789623e03a70ea36decd1756cda599be2db946381a365c7795f960651b7e053201aafce20a270ec3470d7c13c0dac954b8dd8032c7668dc5740e8cb050dda39e286d211d63d9f8bc4f79838f5bbdd5d790b972dbba633b0bcd74a306ee02a0954741bcab06b3c78c61c95f1af9d10eb52b4e854764b0f78ffba56f4f83c15483105cc28c3a4f218b0f6bba100b545f1189a8103eac586eed81301eb70a7c446849d4cbcd9c521d10f70c6189ded9d8b48612d16a1a074564a67e882186da0c3828056aeb33ed98d6dbe5bbf591616f53edbd3684d7e393ed2ba808f1f5e434b970ab74ecdd616c703aaa4436e5fdec0dc44690ade613c8c99ba3033522025536e5b2d77102925eb1bb6970e5f9abcc0a4b2617169bafe95950fd4a7c02280a0ed2ca5096a1013fa62fb5200297e5e3a3ec64f8a80f268b08c37c051d7c8c2ac2499304d0cc9de38582ddb5710137aacf914c6567f9dbe33347723b4d2051b242bd50cca9ac78009202f6ecf8bae1415325f93581d82da36529ba569f00c1e62d2df4d1669cd62801448c1701ba8a53888de08e0618bc49e2d490e4dac43704fb8710d8e93d376d1179cf10fa18933fe975f266dfe45f53f92c7ddf32f71c74ed9f4c2c0bdca9d264ad8097c5939a0d8954156c75d8deeae5fa37178866622a700e50c9e7645ebeca7198ee248dd0ccbbc5e7ccd3c1afc9758b9b4d4926a7c391d0c2a13a0d87370de45409a380d6315fa2ce5adbf96c2f204bfec15beb54f053c638043030decfc8ff619944eefd96e378f2ee51a01234f8668b34aba36897896690616d499b7598d0b42072b07f217602cc8d43a3b44ac9d2bc19d3d1d3511365c53cafe8e412b2005ec908f2ca1fd00c0388e6e008ff968b735c0876c023430e12db4fa8e6f0fa6295de1779ca16aefaae37a8dd2aabac1fc14c67df6e287bf5bf0de1e00168996c58103088aa0e95b509ec834c68333a862cc5fefcb928772b32ad7d93abebc5c27b88d903f5d1902c248390ccc429ce0a0cd01b86e81d1dd62691a6b50a59fa51a44712dcb583b4281e9f764fc33c400a905fe890d239168091a56935dec0b071ed151c130f6c49b4b22ccb3152ebed7c7c85808d8d0e59550db98eb98242fb05f7e462bd4aa8ee010cbcdc23d4bbfb70f8538f2923a7078efdefbbb31c926fa2bac21aa99f666bc0073e57811255014bd3e9427515b61738ea4d8fd60276062343a2137fadddac497cdbc85fc23d63bf4adadb210cd8e2aa5caa39e81fbf1f5bab85f3ee5a741fb7f6bada7633efb46677b34aa3a49c60320f7ef436c0a02e89d5324daf7a3dc9c86b26f7bdc344b00b97a540924afcbbe671a3990b5d0a4621732580e04e1c4e7050b4759b37110570191a899afa12ff950d8b2066f4d57e5a210e9aa5ea70ab0e542cba52feed3e9b468f1b49d1b10ac4f0f7ccadace4b61f1b8a688bc0bbbf08e76199b889c7ed3e51100c3887fd0b85e0bdf97513b7997e1432192a9b16626ec183926da4783d222d804ad4d7cab74edae4113ae2af3d945f1ce16ff5df7cff5bc1a16b8c821dfaeff3e8c26d31472e71314bdec810496545877a18a66558e583b636fbf532c1f4f49f8d787ff1a3d44dbd1c971f9b3cd5489fb9c8c7e051e588ae5a5c1d1825aa8057296c85e3eaa019640475ebccb07896ea63c9d52aaf3ccf4322b8818a72ea93a91411009d938ef50b0febd075451ed490981aa22af8cf7f6893a1fae385b98d7b9c5103811a614ba05d6c8c2183ab4e209453a1991d9dcca6684b0290f53f9698edf8ce66765a0c360cbbcb885996ab7717b558776604b1844434e0d76ae2e51a7721b447e6e1b654f545944f8a68b72a24020a18292009717acd9ed1c1964e2fb8f147a8ec890078389cc7aed9d179306d00588bf2c5de4133e47722a9cde447adb3991c600e94b507702c4d03fb100c06e83ea6e5f94b3c729ecaa59cb5ead61507270fca669f126fc93ee038c9e9674cd8216df2b09129e0f1531b0c2538c7c8dd7fdf7f4fc5446166ee7cbad06caaf0c8c2e1b3e1ee60f516cafd189451d96f797ffc53897a5f19352e87bdb68cb728b1feacd7106acd6ad22944249fe9afc194e384c54569b940b3511a4f313f7159f6c52349112c2616914c4097fb5e98d448f001db1d1cc0ed28eb311aca71d4385826982ed170f3f3d0007b93e13bfc1952a2146de7b85a8f913f2708de08660ac53e02b837a63bf02c5699cf938340c52e1509bd26bb39e86fa30d3be2a4e8d5a371e2b730b5bacb3789f63a1050848a4eb16350e3cdaafed0d92d31c5585cd37e7f581547702e7d8148097b651b2c449ed53a2cc6a744b186565413a0e803f0a01d896e9bea217014416c12664a343c2492d8acdda4a254c3a090af6b422a27cebcfccecb1166affdf8fc77aad4457d5dfa1a1025232a4fbd3714525e1bdbe205eed8d1d73fb14b0e67f08ca2461a2fa8a3a28114cd87547a6d56197d2fa3788985457a5df3b4055dcb76b4cf9868ddefdabfc35275309bf26e0cb92ee5c252a9639f3eaa604f796eb36e1bbe7385f538e5ca2713ec80efc455458a7881d406bb8d9ad3dd405c0c8a84c4d08649a4b71e56587403d803988c5dda350dc417a466c732a779dd1374eb00984cc27b82e1a409e84cb376c27686cfd39cd5976849d2b62778127811dfdfb8340016efdf7e87c65639dbac756401d0d272329f4f2e5eb6fe6a36482202406817fa61d0a1053858fa127f1422be47b31b4d9b96b73484b0959e8b1ed896cbf64a6e93a2ffddc0db1d0b638018e6cc3afcf787a6eb3dac04d0035b6195c90a52c3da4d3420d31915b94f60f9af7a79fea0ba661992e24106a653124eae88b795798b4234f880f868f4953fa2651ae3da8657117a8921a0d19ea1a1c37a4766ff76911af8454bc295b718b9097974a7f66114a8759c47f3e5ccda81d14753090889d574184378fa4042e03d86810f6d94c3f61007a39b8c319f799039ee94e4cce5d59396a850a478925fc44aba4c602c2b62bea6b3db183c38b9cdb76a92770263b4c8d1a0caebe7141f306d07b30ef6b112088cea94bc9a8e9de007aca1caab9075f573546d4358642515602081b55d940a9f4aa654772b003ad839df6a384ded2bae2020f5f5f801796c260db96ff9381fb6f0767e5d18f0647b91fdaa3ed5a66212b3fb7a12e621a6baa0132c2f6e7674c25124c0f0a28455298269b3cbe61106f49a45b78519b37407b4a372294834d4cd6c6cb73de537cfb6a6525303d042212b66e7e71bbae1b3c4dc03278e8b51d4ace6ea5b3aab679e586a4487ec9873136ab29544fb9666d1a81935c1c05f21f7051790dcfe3fbaa0e3f19beecad449939e78e593763bf4e1fec0c5e0f2e18604bb55e941b433b74cb003c428ffde37d9e644abfcc0d2535ca64e973ef7cc9cdc369cd85c4886baf15f8c798237d3d7475bad4408eb150e9275e3a028ff94e0ae4a0d27cb2475ffedf238e51b825daa6686122c4a5e5f77b3b19ab0663a0bdac2c31669f3bc1d6023f17e05ed61a3f95eff867f0e34b352cc10e105ff8b0147d8f151d24a21114067fedcb263944758d84573566d19fab4f3695c40b176d733b", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:54:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) getsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000180)=""/142, &(0x7f0000000100)=0x8e) r1 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) [ 2296.013631] FAULT_INJECTION: forcing a failure. [ 2296.013631] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2296.016202] CPU: 1 PID: 11403 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2296.017617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2296.019315] Call Trace: [ 2296.019851] dump_stack+0x107/0x167 [ 2296.020591] should_fail.cold+0x5/0xa [ 2296.021366] __alloc_pages_nodemask+0x182/0x600 [ 2296.022308] ? lock_release+0x680/0x680 [ 2296.023118] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2296.024358] ? lock_downgrade+0x6d0/0x6d0 [ 2296.025211] alloc_pages_current+0x187/0x280 [ 2296.026095] get_zeroed_page+0x14/0xb0 [ 2296.026891] ? kasan_unpoison_shadow+0x33/0x50 [ 2296.027831] mon_alloc_buff+0xed/0x250 [ 2296.028646] mon_bin_ioctl+0x493/0xcc0 [ 2296.029436] ? mon_bin_get_event+0x440/0x440 [ 2296.030326] ? selinux_file_ioctl+0xb6/0x270 [ 2296.031242] ? mon_bin_get_event+0x440/0x440 [ 2296.032138] __x64_sys_ioctl+0x19a/0x210 [ 2296.032965] do_syscall_64+0x33/0x40 [ 2296.033728] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2296.034771] RIP: 0033:0x7f6bde1e2b19 [ 2296.035533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2296.038751] FAULT_INJECTION: forcing a failure. [ 2296.038751] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.039263] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2296.039284] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2296.039295] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2296.039305] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2296.039326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2296.049250] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2296.050732] CPU: 0 PID: 11410 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2296.052228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2296.054010] Call Trace: [ 2296.054579] dump_stack+0x107/0x167 [ 2296.055674] should_fail.cold+0x5/0xa [ 2296.056498] ? xas_alloc+0x336/0x440 [ 2296.057294] should_failslab+0x5/0x20 [ 2296.058105] kmem_cache_alloc+0x5b/0x310 [ 2296.058973] xas_alloc+0x336/0x440 [ 2296.059746] xas_create+0x34a/0x10d0 [ 2296.060536] ? kernel_text_address+0xf2/0x120 [ 2296.061495] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2296.062617] xas_store+0x8c/0x1c40 [ 2296.063404] __xa_store+0x164/0x2d0 [ 2296.064174] ? xa_delete_node+0x280/0x280 [ 2296.065067] ? trace_hardirqs_on+0x5b/0x180 [ 2296.065996] xa_store+0x31/0x50 [ 2296.066703] __io_uring_add_tctx_node+0x1cf/0x520 [ 2296.067739] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2296.068859] ? alloc_fd+0x2e7/0x670 [ 2296.069634] io_uring_setup+0x1fbb/0x2980 [ 2296.070516] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2296.071598] ? wait_for_completion_io+0x270/0x270 12:54:07 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 41) [ 2296.072637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2296.073895] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2296.074986] do_syscall_64+0x33/0x40 [ 2296.075791] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2296.076879] RIP: 0033:0x7f55325f0b19 [ 2296.077675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2296.081538] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2296.083147] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2296.084671] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2296.086175] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2296.087666] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2296.089163] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2296.134322] FAULT_INJECTION: forcing a failure. [ 2296.134322] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2296.136916] CPU: 0 PID: 11421 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2296.138374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2296.140137] Call Trace: [ 2296.140701] dump_stack+0x107/0x167 [ 2296.141483] should_fail.cold+0x5/0xa [ 2296.142304] __alloc_pages_nodemask+0x182/0x600 [ 2296.143299] ? lock_release+0x680/0x680 [ 2296.144140] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2296.145403] ? lock_downgrade+0x6d0/0x6d0 [ 2296.146296] alloc_pages_current+0x187/0x280 [ 2296.147238] get_zeroed_page+0x14/0xb0 [ 2296.148071] ? kasan_unpoison_shadow+0x33/0x50 [ 2296.149040] mon_alloc_buff+0xed/0x250 [ 2296.149873] mon_bin_ioctl+0x493/0xcc0 [ 2296.150689] ? wait_for_completion_io+0x270/0x270 [ 2296.151727] ? mon_bin_get_event+0x440/0x440 [ 2296.152677] ? selinux_file_ioctl+0xb6/0x270 [ 2296.153610] ? mon_bin_get_event+0x440/0x440 [ 2296.154551] __x64_sys_ioctl+0x19a/0x210 [ 2296.155429] do_syscall_64+0x33/0x40 [ 2296.156214] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2296.157303] RIP: 0033:0x7f6bde1e2b19 12:54:07 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0xfffffffffffffffd, 0x208000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x262a02) [ 2296.158095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2296.162255] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2296.163871] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2296.165395] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2296.166904] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2296.168430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2296.169948] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:54:07 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x20, {{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}, {{0xa, 0x4e20, 0x9, @local, 0x3}}}, 0x108) r1 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r1, 0x0) 12:54:07 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 48) [ 2296.223780] FAULT_INJECTION: forcing a failure. [ 2296.223780] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.226388] CPU: 0 PID: 11431 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2296.227879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2296.229663] Call Trace: [ 2296.230236] dump_stack+0x107/0x167 [ 2296.231002] should_fail.cold+0x5/0xa [ 2296.231821] ? create_object.isra.0+0x3a/0xa30 [ 2296.232797] should_failslab+0x5/0x20 [ 2296.233603] kmem_cache_alloc+0x5b/0x310 [ 2296.234468] ? mark_held_locks+0x9e/0xe0 [ 2296.235348] create_object.isra.0+0x3a/0xa30 [ 2296.236287] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2296.237366] kmem_cache_alloc+0x159/0x310 [ 2296.238251] xas_alloc+0x336/0x440 [ 2296.239004] xas_create+0x34a/0x10d0 [ 2296.239816] ? kernel_text_address+0xf2/0x120 [ 2296.240774] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2296.241903] xas_store+0x8c/0x1c40 [ 2296.242677] __xa_store+0x164/0x2d0 [ 2296.243471] ? xa_delete_node+0x280/0x280 12:54:07 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x50902) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x4010, r0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x100, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7ff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20}, 0x1c) [ 2296.244361] ? trace_hardirqs_on+0x5b/0x180 [ 2296.245485] xa_store+0x31/0x50 [ 2296.246190] __io_uring_add_tctx_node+0x1cf/0x520 [ 2296.247239] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2296.248358] ? alloc_fd+0x2e7/0x670 [ 2296.249146] io_uring_setup+0x1fbb/0x2980 [ 2296.250032] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2296.251107] ? wait_for_completion_io+0x270/0x270 [ 2296.252161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2296.253270] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2296.254370] do_syscall_64+0x33/0x40 [ 2296.255159] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2296.256259] RIP: 0033:0x7f55325f0b19 [ 2296.257051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2296.260943] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2296.262555] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2296.264066] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2296.265580] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2296.267090] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2296.268608] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2296.269433] loop0: detected capacity change from 0 to 32768 12:54:07 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x80002008}) r1 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r1, 0x0) 12:54:07 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 42) 12:54:07 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x10) read$usbmon(r0, &(0x7f0000000140)=""/202, 0xca) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r2, 0x4) sendfile(r2, r3, 0x0, 0x100000001) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) fstat(r1, &(0x7f0000000040)) r4 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r5 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58af, 0x0, 0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8f7183ca2f5052db) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f00000000c0)={0x6, {0x20, 0x5, 0x20, 0x4, 0x5}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000240)) [ 2296.358400] FAULT_INJECTION: forcing a failure. [ 2296.358400] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2296.361019] CPU: 1 PID: 11442 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2296.362448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2296.364157] Call Trace: [ 2296.364714] dump_stack+0x107/0x167 [ 2296.365466] should_fail.cold+0x5/0xa [ 2296.366250] __alloc_pages_nodemask+0x182/0x600 [ 2296.367201] ? lock_release+0x680/0x680 [ 2296.368030] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2296.369269] ? lock_downgrade+0x6d0/0x6d0 [ 2296.370120] alloc_pages_current+0x187/0x280 [ 2296.371011] get_zeroed_page+0x14/0xb0 [ 2296.371822] ? kasan_unpoison_shadow+0x33/0x50 [ 2296.373000] mon_alloc_buff+0xed/0x250 [ 2296.373902] mon_bin_ioctl+0x493/0xcc0 [ 2296.374719] ? wait_for_completion_io+0x270/0x270 [ 2296.375931] ? mon_bin_get_event+0x440/0x440 [ 2296.376906] ? selinux_file_ioctl+0xb6/0x270 [ 2296.377831] ? mon_bin_get_event+0x440/0x440 [ 2296.378740] __x64_sys_ioctl+0x19a/0x210 [ 2296.379569] do_syscall_64+0x33/0x40 [ 2296.380333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2296.381392] RIP: 0033:0x7f6bde1e2b19 [ 2296.382154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2296.385937] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2296.387906] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2296.389447] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2296.390994] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2296.392474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2296.394064] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:54:07 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 49) [ 2296.462891] FAULT_INJECTION: forcing a failure. [ 2296.462891] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.465455] CPU: 0 PID: 11447 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2296.466938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2296.468723] Call Trace: [ 2296.469296] dump_stack+0x107/0x167 [ 2296.470067] should_fail.cold+0x5/0xa [ 2296.470878] ? xas_alloc+0x336/0x440 [ 2296.471688] should_failslab+0x5/0x20 [ 2296.472497] kmem_cache_alloc+0x5b/0x310 [ 2296.473368] xas_alloc+0x336/0x440 [ 2296.474126] xas_create+0x34a/0x10d0 12:54:07 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x0, @fd_index, 0x2, 0x800, 0x3f, 0x2, 0x1, {0x3}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x2, 0x0, {0x0, r5}}, 0xffff) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x2, 0x8, 0x1}) r7 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x800}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) io_uring_enter(r7, 0x58af, 0x0, 0x2, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x2000000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="06000000ae6895a0646e6f3d", @ANYRESHEX, @ANYBLOB=',mmap,uname=\')+,access=user,access=user,dont_measure,\x00']) ioctl$sock_SIOCGIFINDEX(r8, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0xb0c40, 0x160, 0x1b}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x50, 0xffffffffffffffff, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r9, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4004, @fd, 0xffffffff00000000, 0x80000001, 0x4, 0x0, 0x0, {0x2, r10}}, 0x764) [ 2296.474916] ? kernel_text_address+0xf2/0x120 [ 2296.476078] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2296.477200] xas_store+0x8c/0x1c40 [ 2296.477966] __xa_store+0x164/0x2d0 [ 2296.478738] ? xa_delete_node+0x280/0x280 [ 2296.479632] ? trace_hardirqs_on+0x5b/0x180 [ 2296.480547] xa_store+0x31/0x50 [ 2296.481235] __io_uring_add_tctx_node+0x1cf/0x520 [ 2296.482261] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2296.483368] ? alloc_fd+0x2e7/0x670 [ 2296.484160] io_uring_setup+0x1fbb/0x2980 [ 2296.485041] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2296.486115] ? wait_for_completion_io+0x270/0x270 [ 2296.487147] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2296.488264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2296.489356] do_syscall_64+0x33/0x40 [ 2296.490149] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2296.491236] RIP: 0033:0x7f55325f0b19 [ 2296.492021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2296.495926] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2296.497550] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2296.499060] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2296.500599] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2296.502125] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2296.503664] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:54:22 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x20001d50, 0x0) 12:54:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/keys\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000000)={{r0}, "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"}) [ 2311.360741] FAULT_INJECTION: forcing a failure. [ 2311.360741] name failslab, interval 1, probability 0, space 0, times 0 [ 2311.363241] CPU: 1 PID: 11471 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2311.364712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2311.366463] Call Trace: [ 2311.367027] dump_stack+0x107/0x167 [ 2311.367814] should_fail.cold+0x5/0xa [ 2311.368620] ? create_object.isra.0+0x3a/0xa30 [ 2311.369589] should_failslab+0x5/0x20 [ 2311.370402] kmem_cache_alloc+0x5b/0x310 [ 2311.371271] ? mark_held_locks+0x9e/0xe0 [ 2311.372365] create_object.isra.0+0x3a/0xa30 [ 2311.373296] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2311.374366] kmem_cache_alloc+0x159/0x310 [ 2311.375244] xas_alloc+0x336/0x440 [ 2311.376016] xas_create+0x34a/0x10d0 [ 2311.376809] ? kernel_text_address+0xf2/0x120 [ 2311.377367] FAULT_INJECTION: forcing a failure. [ 2311.377367] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2311.377762] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2311.381311] xas_store+0x8c/0x1c40 [ 2311.382082] __xa_store+0x164/0x2d0 [ 2311.382855] ? xa_delete_node+0x280/0x280 [ 2311.383761] ? trace_hardirqs_on+0x5b/0x180 [ 2311.384693] xa_store+0x31/0x50 [ 2311.385393] __io_uring_add_tctx_node+0x1cf/0x520 [ 2311.386411] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2311.387527] ? alloc_fd+0x2e7/0x670 [ 2311.388312] io_uring_setup+0x1fbb/0x2980 [ 2311.389194] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2311.390261] ? wait_for_completion_io+0x270/0x270 [ 2311.391308] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2311.392440] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2311.393530] do_syscall_64+0x33/0x40 [ 2311.394319] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2311.395409] RIP: 0033:0x7f55325f0b19 [ 2311.396195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2311.400086] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2311.401694] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2311.403201] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2311.404730] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2311.406236] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2311.407751] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2311.409283] CPU: 0 PID: 11476 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2311.410760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2311.412518] Call Trace: [ 2311.413073] dump_stack+0x107/0x167 [ 2311.413840] should_fail.cold+0x5/0xa [ 2311.414648] __alloc_pages_nodemask+0x182/0x600 [ 2311.415642] ? lock_release+0x680/0x680 [ 2311.416483] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2311.417750] ? lock_downgrade+0x6d0/0x6d0 [ 2311.418629] alloc_pages_current+0x187/0x280 [ 2311.419573] get_zeroed_page+0x14/0xb0 [ 2311.420392] ? kasan_unpoison_shadow+0x33/0x50 [ 2311.421353] mon_alloc_buff+0xed/0x250 [ 2311.422179] mon_bin_ioctl+0x493/0xcc0 [ 2311.422997] ? wait_for_completion_io+0x270/0x270 [ 2311.424016] ? mon_bin_get_event+0x440/0x440 [ 2311.424945] ? selinux_file_ioctl+0xb6/0x270 [ 2311.425877] ? mon_bin_get_event+0x440/0x440 [ 2311.426801] __x64_sys_ioctl+0x19a/0x210 [ 2311.427659] do_syscall_64+0x33/0x40 [ 2311.428441] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2311.429521] RIP: 0033:0x7f6bde1e2b19 12:54:22 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 50) 12:54:22 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 43) 12:54:22 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000008, 0x4010, r0, 0x0) ioctl$FITHAW(r0, 0xc0045878) 12:54:22 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x100, 0x88040) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=""/154, 0x9a}) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r2, r0) 12:54:22 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x9204, 0x0) r1 = msgget(0x0, 0x172) msgsnd(r1, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:54:22 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_complete(0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) [ 2311.430300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2311.434367] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2311.435999] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2311.437522] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2311.439047] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.440569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2311.442090] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:54:22 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 51) 12:54:22 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x80, 0x0) syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0xc00) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8010, r1, 0x0) r2 = dup3(r0, r1, 0x80000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pread64(r4, &(0x7f0000000040)=""/60, 0x3c, 0x7f00000000000) [ 2311.502801] FAULT_INJECTION: forcing a failure. [ 2311.502801] name failslab, interval 1, probability 0, space 0, times 0 [ 2311.505297] CPU: 1 PID: 11488 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2311.506771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2311.508540] Call Trace: [ 2311.509102] dump_stack+0x107/0x167 [ 2311.509873] should_fail.cold+0x5/0xa [ 2311.510676] ? xas_alloc+0x336/0x440 [ 2311.511477] should_failslab+0x5/0x20 [ 2311.512290] kmem_cache_alloc+0x5b/0x310 [ 2311.513153] xas_alloc+0x336/0x440 [ 2311.513913] xas_create+0x34a/0x10d0 [ 2311.514710] ? kernel_text_address+0xf2/0x120 [ 2311.515673] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2311.516786] xas_store+0x8c/0x1c40 [ 2311.517553] __xa_store+0x164/0x2d0 [ 2311.518328] ? xa_delete_node+0x280/0x280 [ 2311.519222] ? trace_hardirqs_on+0x5b/0x180 [ 2311.520156] xa_store+0x31/0x50 [ 2311.520859] __io_uring_add_tctx_node+0x1cf/0x520 [ 2311.521878] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2311.522984] ? alloc_fd+0x2e7/0x670 [ 2311.523781] io_uring_setup+0x1fbb/0x2980 [ 2311.524664] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2311.525742] ? wait_for_completion_io+0x270/0x270 [ 2311.526786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2311.527903] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2311.528996] do_syscall_64+0x33/0x40 [ 2311.529782] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2311.530866] RIP: 0033:0x7f55325f0b19 [ 2311.531665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2311.535579] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2311.537194] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2311.538704] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2311.540224] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2311.541734] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2311.543245] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:54:22 executing program 4: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r0 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xd9}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x0, 0x1, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) dup2(r0, r2) 12:54:22 executing program 1: prctl$PR_SET_TSC(0x1a, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x20010, r0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0xa) [ 2311.605562] loop0: detected capacity change from 0 to 32768 12:54:23 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r2 = dup2(r1, r0) r3 = io_uring_setup(0x5425, &(0x7f0000000000)={0x0, 0x1d53, 0x4, 0x1, 0x2d3, 0x0, r2}) fcntl$setlease(r3, 0x400, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r4, 0x4) sendfile(r4, r5, 0x0, 0x100000001) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f00000000c0)=""/155, 0x9b}) 12:54:23 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 52) 12:54:23 executing program 1: socketpair(0xf, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'xfrm0\x00', {0x2, 0x0, @empty}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r2, 0x4) sendfile(r2, r3, 0x0, 0x100000001) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000001c0)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/174, 0xae}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r1, 0x0) [ 2311.656018] FAULT_INJECTION: forcing a failure. [ 2311.656018] name failslab, interval 1, probability 0, space 0, times 0 [ 2311.658556] CPU: 1 PID: 11503 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2311.660044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2311.661802] Call Trace: [ 2311.662374] dump_stack+0x107/0x167 [ 2311.663149] should_fail.cold+0x5/0xa [ 2311.663985] ? create_object.isra.0+0x3a/0xa30 [ 2311.664968] should_failslab+0x5/0x20 [ 2311.665788] kmem_cache_alloc+0x5b/0x310 [ 2311.666667] ? mark_held_locks+0x9e/0xe0 [ 2311.667555] create_object.isra.0+0x3a/0xa30 [ 2311.668500] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2311.669599] kmem_cache_alloc+0x159/0x310 [ 2311.670497] xas_alloc+0x336/0x440 [ 2311.671267] xas_create+0x34a/0x10d0 [ 2311.672075] ? kernel_text_address+0xf2/0x120 [ 2311.673040] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2311.674175] xas_store+0x8c/0x1c40 [ 2311.674954] __xa_store+0x164/0x2d0 [ 2311.675748] ? xa_delete_node+0x280/0x280 [ 2311.676650] ? trace_hardirqs_on+0x5b/0x180 [ 2311.677587] xa_store+0x31/0x50 [ 2311.678298] __io_uring_add_tctx_node+0x1cf/0x520 [ 2311.679343] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2311.680464] ? alloc_fd+0x2e7/0x670 [ 2311.681257] io_uring_setup+0x1fbb/0x2980 [ 2311.682164] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2311.683250] ? wait_for_completion_io+0x270/0x270 [ 2311.684360] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2311.685484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2311.686591] do_syscall_64+0x33/0x40 [ 2311.687399] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2311.688509] RIP: 0033:0x7f55325f0b19 [ 2311.689310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2311.693332] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2311.694968] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2311.696514] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2311.698051] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2311.699594] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2311.700908] FAULT_INJECTION: forcing a failure. [ 2311.700908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2311.701120] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2311.705256] CPU: 0 PID: 11507 Comm: syz-executor.7 Not tainted 5.10.246 #1 12:54:23 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 44) [ 2311.706739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2311.708645] Call Trace: [ 2311.709217] dump_stack+0x107/0x167 [ 2311.709996] should_fail.cold+0x5/0xa [ 2311.710813] __alloc_pages_nodemask+0x182/0x600 [ 2311.711817] ? lock_release+0x680/0x680 [ 2311.712674] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2311.713961] ? lock_downgrade+0x6d0/0x6d0 [ 2311.714857] alloc_pages_current+0x187/0x280 [ 2311.715827] get_zeroed_page+0x14/0xb0 [ 2311.716654] ? kasan_unpoison_shadow+0x33/0x50 [ 2311.717627] mon_alloc_buff+0xed/0x250 [ 2311.718465] mon_bin_ioctl+0x493/0xcc0 [ 2311.719296] ? wait_for_completion_io+0x270/0x270 [ 2311.720333] ? mon_bin_get_event+0x440/0x440 [ 2311.721278] ? selinux_file_ioctl+0xb6/0x270 [ 2311.722239] ? mon_bin_get_event+0x440/0x440 [ 2311.723178] __x64_sys_ioctl+0x19a/0x210 [ 2311.724059] do_syscall_64+0x33/0x40 [ 2311.724857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2311.725953] RIP: 0033:0x7f6bde1e2b19 [ 2311.726747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2311.730661] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2311.732290] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2311.733807] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2311.735334] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.736854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2311.738380] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:54:35 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x9204, 0x0) r1 = msgget(0x0, 0x172) msgsnd(r1, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="90f23ee48414c664c5a43f762e4c066fb46c651599634978ad436839c78464320b6c96b3b20424870f3c2c06ff5d7954554895fb52ffeef44cb8428f018a7311e03dc310105175dc9c0211c4c3d97278f61e53c32677695a579612fbb8f5ba448869626a4ccaeaae7114a481e103e8e43576e44b8a1a88966a66b6e6b4868bf5132cbfb5bc28aa11f6dcafe94048bd40f1c5f93a760b22174a742576098c9f3a6cacab94927a4600b7455033a85d92450a398e67a065f49012273455707ce4f6ac3de7ab8003c8cdf8491d17087e25e66d7112c059f9f340c35262df6b049113566fbdd3f51963793385ba78d21a42e3a68ed5c340c7ae8e7c2912decbc2e8175a88728d5aaf4822588b5fc88aee41ed9174cc588c519b0c5869ff2d65e08d1b7821c97c58cb1be4f1c62363215f99f391d5441860295b530603b1976c54e83096e8942a43b55f24c3584a1f136a7f0d5ef95f557d2baecf95628bb94d7f1cf3bb70a37631af2938e91dbae32061fdb3e543e2c6ff3b003cf22fb97f78b59e0f97e9bae1ab06e67f32249b75ee87e1026f9856b9ed12135e6474800b00e9b304ac081713976ac37945d55ca0da28b9f4a6e2fb34cc12e8ab3f97cd3131eaa574858c0edc20098bbcd4fb98e10a3e1b88137d9b55cafe856a7fdfc52b870d13baf1025873d59cf7a73c4977ce2486005a2801c2f3b6ffd7ea4b95d6ea2d78a6b8b762c15ce619d64cf415ad208e6ecc922322251412bdafc6cc3bded6cf5b141f69a06ca222d18162d4caf3b70ba20407830be2a0b4d63fe3ea0aa668c4f6fe84bf98c2849de40db25fea70f0216c1df234e515b68fad8975e787c6c834aeff0fff9ddee36943907373d4d9b90554efd06020853cda7b28d77b515682678493081f7cf695cb23c20f791f36b8dcf209f4572de40de199fb323774b39d006299c24033a9670b63efaf60763843e57262aa2300cc3d8a00c41b1058d01496946d425e094c47feb6c05ac0e419af3519cedaeb69d798f6a8a0f6228be14c6896332eb4d233587d75107b472ec90573454d047feb3cce7ef7b4411c62bf805bc3c16d06d396546dfdff8e309cc97f47c0bdb1f145c961c1dbaae974296b1d9d726478d00bcda517db8ba710ea53e754f54181907b60c69b161145b437aa5fbb9cb55b7740dfd7ba18507369a582788206d9a513955b024c4b738adc72c93bb20a83787ba7736f66d7d0e201475050b7769b9083ccf66b34054fe8dd73023e9a936f67f2299dde07f5601a9e9fb478e1007824de649557be2676c8132ab6a20cc422a0dcec5828c240bebf8b8194c6077f70f7bc9f882693b9328512ec2f86c201661e1ac676feedb439ae38cb3bf0769348528540cf4c82fef3b38979639264d32966c4a54a829fdd28d21abe01d0d44999a3c70b8c216b90d375f0c73acaef274af90d96fed4394170f916780399a814b8684f0208626656a93f26fecdfa69ec34433d0021e96b4d977fe40c0a765cb9fb78f66b6098a49d450a87d515dbf467af3384e8ef356293bd4e8e2b06cfe5bbf6de5d393496d692029b083f8fb0f129be9007d4f1421c2398679f899357a97f9ca79ba1bb862d169e9d1ddf1d20accb950530f06e193db66724b3d12a0de09e9af272d4ca52b447d94b244407796fe08538bda0e9323bcbd9d6b3831bd80e2ab65786f1a2e8d64bb6a646514ac975068f70959a82f26a232da659eba634dab2d2c63fa0025079158bb5ff8f4da275099c68cf7bd59a6f440e6cd2bf313f846ec78194a8b22c1c9a106046cd5b01336d0bd9d6707397845b4033eb280b1f3c52d16efad9d488d4fe5c8052e78d992e155717719c49061927b0692340ad021438c71fac159817920b43ba0ac658720d8fe8b04a29c4dd0db5188c3951db8921426b2f1ec1b76d2c16d4d9b14eab6193a728fdb2f38ea193d6213337d1bed670afdab0d5d135b31dc60c0c900aa731ca0ef76cb26946d361b9beae8771c77115ed4d268190b60a2f4ffc1c5b5d30e6a996f9113352ac856a04bb42f0a6bd897f488698cd18a3367daf55b5487cbecee292a331fef96109bfa62eb7ed97a201401097123c8b06b7f8b90c0b195c2a40c74a19c4f0dd7e0a46da2f2a54b4082fa3ed2e7bcd64d394c1e60d219789623e03a70ea36decd1756cda599be2db946381a365c7795f960651b7e053201aafce20a270ec3470d7c13c0dac954b8dd8032c7668dc5740e8cb050dda39e286d211d63d9f8bc4f79838f5bbdd5d790b972dbba633b0bcd74a306ee02a0954741bcab06b3c78c61c95f1af9d10eb52b4e854764b0f78ffba56f4f83c15483105cc28c3a4f218b0f6bba100b545f1189a8103eac586eed81301eb70a7c446849d4cbcd9c521d10f70c6189ded9d8b48612d16a1a074564a67e882186da0c3828056aeb33ed98d6dbe5bbf591616f53edbd3684d7e393ed2ba808f1f5e434b970ab74ecdd616c703aaa4436e5fdec0dc44690ade613c8c99ba3033522025536e5b2d77102925eb1bb6970e5f9abcc0a4b2617169bafe95950fd4a7c02280a0ed2ca5096a1013fa62fb5200297e5e3a3ec64f8a80f268b08c37c051d7c8c2ac2499304d0cc9de38582ddb5710137aacf914c6567f9dbe33347723b4d2051b242bd50cca9ac78009202f6ecf8bae1415325f93581d82da36529ba569f00c1e62d2df4d1669cd62801448c1701ba8a53888de08e0618bc49e2d490e4dac43704fb8710d8e93d376d1179cf10fa18933fe975f266dfe45f53f92c7ddf32f71c74ed9f4c2c0bdca9d264ad8097c5939a0d8954156c75d8deeae5fa37178866622a700e50c9e7645ebeca7198ee248dd0ccbbc5e7ccd3c1afc9758b9b4d4926a7c391d0c2a13a0d87370de45409a380d6315fa2ce5adbf96c2f204bfec15beb54f053c638043030decfc8ff619944eefd96e378f2ee51a01234f8668b34aba36897896690616d499b7598d0b42072b07f217602cc8d43a3b44ac9d2bc19d3d1d3511365c53cafe8e412b2005ec908f2ca1fd00c0388e6e008ff968b735c0876c023430e12db4fa8e6f0fa6295de1779ca16aefaae37a8dd2aabac1fc14c67df6e287bf5bf0de1e00168996c58103088aa0e95b509ec834c68333a862cc5fefcb928772b32ad7d93abebc5c27b88d903f5d1902c248390ccc429ce0a0cd01b86e81d1dd62691a6b50a59fa51a44712dcb583b4281e9f764fc33c400a905fe890d239168091a56935dec0b071ed151c130f6c49b4b22ccb3152ebed7c7c85808d8d0e59550db98eb98242fb05f7e462bd4aa8ee010cbcdc23d4bbfb70f8538f2923a7078efdefbbb31c926fa2bac21aa99f666bc0073e57811255014bd3e9427515b61738ea4d8fd60276062343a2137fadddac497cdbc85fc23d63bf4adadb210cd8e2aa5caa39e81fbf1f5bab85f3ee5a741fb7f6bada7633efb46677b34aa3a49c60320f7ef436c0a02e89d5324daf7a3dc9c86b26f7bdc344b00b97a540924afcbbe671a3990b5d0a4621732580e04e1c4e7050b4759b37110570191a899afa12ff950d8b2066f4d57e5a210e9aa5ea70ab0e542cba52feed3e9b468f1b49d1b10ac4f0f7ccadace4b61f1b8a688bc0bbbf08e76199b889c7ed3e51100c3887fd0b85e0bdf97513b7997e1432192a9b16626ec183926da4783d222d804ad4d7cab74edae4113ae2af3d945f1ce16ff5df7cff5bc1a16b8c821dfaeff3e8c26d31472e71314bdec810496545877a18a66558e583b636fbf532c1f4f49f8d787ff1a3d44dbd1c971f9b3cd5489fb9c8c7e051e588ae5a5c1d1825aa8057296c85e3eaa019640475ebccb07896ea63c9d52aaf3ccf4322b8818a72ea93a91411009d938ef50b0febd075451ed490981aa22af8cf7f6893a1fae385b98d7b9c5103811a614ba05d6c8c2183ab4e209453a1991d9dcca6684b0290f53f9698edf8ce66765a0c360cbbcb885996ab7717b558776604b1844434e0d76ae2e51a7721b447e6e1b654f545944f8a68b72a24020a18292009717acd9ed1c1964e2fb8f147a8ec890078389cc7aed9d179306d00588bf2c5de4133e47722a9cde447adb3991c600e94b507702c4d03fb100c06e83ea6e5f94b3c729ecaa59cb5ead61507270fca669f126fc93ee038c9e9674cd8216df2b09129e0f1531b0c2538c7c8dd7fdf7f4fc5446166ee7cbad06caaf0c8c2e1b3e1ee60f516cafd189451d96f797ffc53897a5f19352e87bdb68cb728b1feacd7106acd6ad22944249fe9afc194e384c54569b940b3511a4f313f7159f6c52349112c2616914c4097fb5e98d448f001db1d1cc0ed28eb311aca71d4385826982ed170f3f3d0007b93e13bfc1952a2146de7b85a8f913f2708de08660ac53e02b837a63bf02c5699cf938340c52e1509bd26bb39e86fa30d3be2a4e8d5a371e2b730b5bacb3789f63a1050848a4eb16350e3cdaafed0d92d31c5585cd37e7f581547702e7d8148097b651b2c449ed53a2cc6a744b186565413a0e803f0a01d896e9bea217014416c12664a343c2492d8acdda4a254c3a090af6b422a27cebcfccecb1166affdf8fc77aad4457d5dfa1a1025232a4fbd3714525e1bdbe205eed8d1d73fb14b0e67f08ca2461a2fa8a3a28114cd87547a6d56197d2fa3788985457a5df3b4055dcb76b4cf9868ddefdabfc35275309bf26e0cb92ee5c252a9639f3eaa604f796eb36e1bbe7385f538e5ca2713ec80efc455458a7881d406bb8d9ad3dd405c0c8a84c4d08649a4b71e56587403d803988c5dda350dc417a466c732a779dd1374eb00984cc27b82e1a409e84cb376c27686cfd39cd5976849d2b62778127811dfdfb8340016efdf7e87c65639dbac756401d0d272329f4f2e5eb6fe6a36482202406817fa61d0a1053858fa127f1422be47b31b4d9b96b73484b0959e8b1ed896cbf64a6e93a2ffddc0db1d0b638018e6cc3afcf787a6eb3dac04d0035b6195c90a52c3da4d3420d31915b94f60f9af7a79fea0ba661992e24106a653124eae88b795798b4234f880f868f4953fa2651ae3da8657117a8921a0d19ea1a1c37a4766ff76911af8454bc295b718b9097974a7f66114a8759c47f3e5ccda81d14753090889d574184378fa4042e03d86810f6d94c3f61007a39b8c319f799039ee94e4cce5d59396a850a478925fc44aba4c602c2b62bea6b3db183c38b9cdb76a92770263b4c8d1a0caebe7141f306d07b30ef6b112088cea94bc9a8e9de007aca1caab9075f573546d4358642515602081b55d940a9f4aa654772b003ad839df6a384ded2bae2020f5f5f801796c260db96ff9381fb6f0767e5d18f0647b91fdaa3ed5a66212b3fb7a12e621a6baa0132c2f6e7674c25124c0f0a28455298269b3cbe61106f49a45b78519b37407b4a372294834d4cd6c6cb73de537cfb6a6525303d042212b66e7e71bbae1b3c4dc03278e8b51d4ace6ea5b3aab679e586a4487ec9873136ab29544fb9666d1a81935c1c05f21f7051790dcfe3fbaa0e3f19beecad449939e78e593763bf4e1fec0c5e0f2e18604bb55e941b433b74cb003c428ffde37d9e644abfcc0d2535ca64e973ef7cc9cdc369cd85c4886baf15f8c798237d3d7475bad4408eb150e9275e3a028ff94e0ae4a0d27cb2475ffedf238e51b825daa6686122c4a5e5f77b3b19ab0663a0bdac2c31669f3bc1d6023f17e05ed61a3f95eff867f0e34b352cc10e105ff8b0147d8f151d24a21114067fedcb263944758d84573566d19fab4f3695c40b176d733b", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:54:35 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x254}}, './file0\x00'}) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r2, r0) 12:54:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) fork() r2 = syz_open_dev$usbmon(&(0x7f0000002440), 0x3, 0x511181) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x40010, r2, 0x30402000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000001080), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000007, 0xffffffffffffffff) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000080)={&(0x7f0000000040), &(0x7f00000010c0)=""/4120, 0x1018}) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) 12:54:35 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 53) 12:54:35 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 45) 12:54:35 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x2e, 0x100) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x44800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x13, r1, 0x0) dup3(0xffffffffffffffff, r1, 0x0) 12:54:35 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x2) 12:54:35 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000000)={0x0, 0x5}) [ 2324.587917] FAULT_INJECTION: forcing a failure. [ 2324.587917] name failslab, interval 1, probability 0, space 0, times 0 [ 2324.590498] CPU: 0 PID: 11531 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2324.591969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.593708] Call Trace: [ 2324.594267] dump_stack+0x107/0x167 [ 2324.595035] should_fail.cold+0x5/0xa [ 2324.595844] ? xas_alloc+0x336/0x440 [ 2324.596631] should_failslab+0x5/0x20 [ 2324.597436] kmem_cache_alloc+0x5b/0x310 [ 2324.598292] xas_alloc+0x336/0x440 [ 2324.599038] xas_create+0x34a/0x10d0 [ 2324.600043] ? kernel_text_address+0xf2/0x120 [ 2324.601264] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2324.601311] FAULT_INJECTION: forcing a failure. [ 2324.601311] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2324.602587] xas_store+0x8c/0x1c40 [ 2324.602623] __xa_store+0x164/0x2d0 [ 2324.605863] ? xa_delete_node+0x280/0x280 [ 2324.606793] ? trace_hardirqs_on+0x5b/0x180 [ 2324.607712] xa_store+0x31/0x50 [ 2324.608406] __io_uring_add_tctx_node+0x1cf/0x520 [ 2324.609418] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2324.610515] ? alloc_fd+0x2e7/0x670 [ 2324.611289] io_uring_setup+0x1fbb/0x2980 [ 2324.612182] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2324.613240] ? wait_for_completion_io+0x270/0x270 [ 2324.614278] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2324.615385] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2324.616476] do_syscall_64+0x33/0x40 [ 2324.617269] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2324.618343] RIP: 0033:0x7f55325f0b19 [ 2324.619123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2324.623049] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2324.624719] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2324.626276] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2324.627838] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2324.629411] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2324.630941] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2324.632527] CPU: 1 PID: 11535 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2324.633603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.634795] Call Trace: [ 2324.635182] dump_stack+0x107/0x167 [ 2324.635718] should_fail.cold+0x5/0xa [ 2324.636268] __alloc_pages_nodemask+0x182/0x600 [ 2324.636939] ? lock_release+0x680/0x680 [ 2324.637508] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2324.638374] ? lock_downgrade+0x6d0/0x6d0 [ 2324.638975] alloc_pages_current+0x187/0x280 [ 2324.639613] get_zeroed_page+0x14/0xb0 [ 2324.640184] ? kasan_unpoison_shadow+0x33/0x50 [ 2324.640842] mon_alloc_buff+0xed/0x250 [ 2324.641403] mon_bin_ioctl+0x493/0xcc0 [ 2324.641961] ? wait_for_completion_io+0x270/0x270 [ 2324.642657] ? mon_bin_get_event+0x440/0x440 [ 2324.643294] ? selinux_file_ioctl+0xb6/0x270 [ 2324.643936] ? mon_bin_get_event+0x440/0x440 [ 2324.644575] __x64_sys_ioctl+0x19a/0x210 [ 2324.645171] do_syscall_64+0x33/0x40 [ 2324.645705] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2324.646447] RIP: 0033:0x7f6bde1e2b19 [ 2324.646980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2324.649661] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2324.650772] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2324.651826] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2324.652847] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2324.653864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2324.654886] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:54:36 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 54) 12:54:36 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 46) 12:54:36 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x2, 0x101) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) [ 2324.729008] FAULT_INJECTION: forcing a failure. [ 2324.729008] name failslab, interval 1, probability 0, space 0, times 0 [ 2324.730720] CPU: 1 PID: 11548 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2324.731711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.732887] Call Trace: [ 2324.733268] dump_stack+0x107/0x167 [ 2324.733790] should_fail.cold+0x5/0xa [ 2324.734327] ? create_object.isra.0+0x3a/0xa30 [ 2324.734976] should_failslab+0x5/0x20 [ 2324.735520] kmem_cache_alloc+0x5b/0x310 [ 2324.736104] ? mark_held_locks+0x9e/0xe0 [ 2324.736681] create_object.isra.0+0x3a/0xa30 [ 2324.737298] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2324.738022] kmem_cache_alloc+0x159/0x310 [ 2324.738614] xas_alloc+0x336/0x440 [ 2324.739119] xas_create+0x34a/0x10d0 [ 2324.739662] ? kernel_text_address+0xf2/0x120 [ 2324.740305] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2324.741045] xas_store+0x8c/0x1c40 [ 2324.741566] __xa_store+0x164/0x2d0 [ 2324.742078] ? xa_delete_node+0x280/0x280 [ 2324.742676] ? trace_hardirqs_on+0x5b/0x180 [ 2324.743286] xa_store+0x31/0x50 [ 2324.743761] __io_uring_add_tctx_node+0x1cf/0x520 [ 2324.744433] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2324.745178] ? alloc_fd+0x2e7/0x670 [ 2324.745693] io_uring_setup+0x1fbb/0x2980 [ 2324.746293] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2324.747008] ? wait_for_completion_io+0x270/0x270 [ 2324.747716] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2324.748456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2324.749186] do_syscall_64+0x33/0x40 [ 2324.749714] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2324.750439] RIP: 0033:0x7f55325f0b19 [ 2324.750959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2324.753564] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2324.754637] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2324.755647] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2324.756651] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2324.757655] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2324.758644] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2324.759980] FAULT_INJECTION: forcing a failure. [ 2324.759980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 12:54:36 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x2000000000000, 0x40802) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x3f, 0x1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/80, 0x50}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000280)=ANY=[@ANYBLOB="0100001001000000180000008362d32132a4cc11845419669a75a53f84a039338e01025edce52acf9bd74227e7ac84934cf131d2df2c2e14548339c84e567fcbfe5e5a6a1d25bb4444e7159524758c930095b0c35029a5dfa1415276936a0ac4d8528513e59b58ba6c4763f74c30165c1daa642ea4e983ca4bebaa3afca97c440c84df5f4e39e494e3712e608cd665dcc8a12064fb82ee9bd34c0a88f78f32e0c52df9d3ba6f4ea99a7e59d62935eaff1e85c9b9a4f1293dfc562606269a602c5a7460177100"/212, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) [ 2324.762652] CPU: 0 PID: 11552 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2324.764270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.766047] Call Trace: [ 2324.766635] dump_stack+0x107/0x167 [ 2324.767447] should_fail.cold+0x5/0xa [ 2324.768289] __alloc_pages_nodemask+0x182/0x600 [ 2324.769301] ? lock_release+0x680/0x680 [ 2324.770152] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2324.771473] ? lock_downgrade+0x6d0/0x6d0 [ 2324.772393] alloc_pages_current+0x187/0x280 [ 2324.773345] get_zeroed_page+0x14/0xb0 [ 2324.774188] ? kasan_unpoison_shadow+0x33/0x50 [ 2324.775176] mon_alloc_buff+0xed/0x250 [ 2324.776025] mon_bin_ioctl+0x493/0xcc0 [ 2324.776881] ? wait_for_completion_io+0x270/0x270 [ 2324.777933] ? mon_bin_get_event+0x440/0x440 [ 2324.778897] ? selinux_file_ioctl+0xb6/0x270 [ 2324.779858] ? mon_bin_get_event+0x440/0x440 [ 2324.780824] __x64_sys_ioctl+0x19a/0x210 [ 2324.781716] do_syscall_64+0x33/0x40 [ 2324.782530] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2324.783633] RIP: 0033:0x7f6bde1e2b19 [ 2324.784452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2324.788442] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2324.790077] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2324.791643] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2324.793191] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2324.794738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2324.796295] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2324.806916] loop0: detected capacity change from 0 to 32768 12:54:36 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 55) 12:54:36 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000040)={{r0}, r1, 0x0, @unused=[0x63d3, 0x3, 0x1f, 0x3], @name="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"}) syz_io_uring_setup(0x5ee6, &(0x7f0000001140)={0x0, 0xb41e, 0x4, 0x1, 0x355}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000011c0)=0x0, &(0x7f0000001200)) syz_io_uring_submit(r2, 0x0, &(0x7f0000001240)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0xa, 0x0, 0x0, 0xfd0, 0x1}, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001040)={"6a7a59a940f61c68132964ab7bf1dd2e", r1, 0x0, {0x9, 0x5}, {0x3, 0x400}, 0x9, [0x80000001, 0x6, 0xb5f, 0x5, 0x100, 0x8, 0x8, 0x3f, 0x7, 0x800, 0x8, 0x8, 0x285904c7, 0x100, 0xa76, 0x8]}) 12:54:36 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x52080) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) [ 2324.896091] FAULT_INJECTION: forcing a failure. [ 2324.896091] name failslab, interval 1, probability 0, space 0, times 0 [ 2324.898683] CPU: 0 PID: 11564 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2324.900199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.901946] Call Trace: [ 2324.902535] dump_stack+0x107/0x167 12:54:36 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 47) [ 2324.903312] should_fail.cold+0x5/0xa [ 2324.904242] ? xas_alloc+0x336/0x440 [ 2324.905020] should_failslab+0x5/0x20 [ 2324.905846] kmem_cache_alloc+0x5b/0x310 [ 2324.906856] xas_alloc+0x336/0x440 [ 2324.907862] xas_create+0x34a/0x10d0 [ 2324.908903] ? kernel_text_address+0xf2/0x120 [ 2324.910080] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2324.911252] xas_store+0x8c/0x1c40 [ 2324.912041] __xa_store+0x164/0x2d0 [ 2324.912835] ? xa_delete_node+0x280/0x280 [ 2324.913751] ? trace_hardirqs_on+0x5b/0x180 [ 2324.914712] xa_store+0x31/0x50 [ 2324.915453] __io_uring_add_tctx_node+0x1cf/0x520 [ 2324.916507] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2324.917634] ? alloc_fd+0x2e7/0x670 [ 2324.918454] io_uring_setup+0x1fbb/0x2980 [ 2324.919357] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2324.920464] ? wait_for_completion_io+0x270/0x270 [ 2324.921529] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2324.922674] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2324.923810] do_syscall_64+0x33/0x40 [ 2324.924624] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2324.925710] RIP: 0033:0x7f55325f0b19 [ 2324.926515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2324.930490] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2324.932111] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2324.933639] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2324.935157] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2324.936678] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2324.938210] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2324.964079] FAULT_INJECTION: forcing a failure. [ 2324.964079] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2324.966703] CPU: 0 PID: 11569 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2324.968220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.970001] Call Trace: [ 2324.970593] dump_stack+0x107/0x167 [ 2324.971423] should_fail.cold+0x5/0xa [ 2324.972261] __alloc_pages_nodemask+0x182/0x600 [ 2324.973278] ? lock_release+0x680/0x680 [ 2324.974128] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2324.975479] ? lock_downgrade+0x6d0/0x6d0 [ 2324.976396] alloc_pages_current+0x187/0x280 [ 2324.977343] get_zeroed_page+0x14/0xb0 [ 2324.978185] ? kasan_unpoison_shadow+0x33/0x50 [ 2324.979192] mon_alloc_buff+0xed/0x250 [ 2324.980048] mon_bin_ioctl+0x493/0xcc0 [ 2324.980897] ? wait_for_completion_io+0x270/0x270 [ 2324.981945] ? mon_bin_get_event+0x440/0x440 [ 2324.982918] ? selinux_file_ioctl+0xb6/0x270 [ 2324.983891] ? mon_bin_get_event+0x440/0x440 [ 2324.984850] __x64_sys_ioctl+0x19a/0x210 [ 2324.985733] do_syscall_64+0x33/0x40 [ 2324.986558] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2324.987681] RIP: 0033:0x7f6bde1e2b19 [ 2324.988490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2324.992497] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2324.994128] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2324.995699] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2324.997253] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2324.998794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2325.000362] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:54:50 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x8) dup2(r1, r0) 12:54:50 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x9204, 0x0) r1 = msgget(0x0, 0x172) msgsnd(r1, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:54:50 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 48) 12:54:50 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 56) 12:54:50 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x3) [ 2339.374931] FAULT_INJECTION: forcing a failure. [ 2339.374931] name fail_page_alloc, interval 1, probability 0, space 0, times 0 12:54:50 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) fstat(r1, &(0x7f0000000000)) 12:54:50 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xffffffffffffffff, 0x101000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:54:50 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}}, 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) [ 2339.378039] CPU: 1 PID: 11591 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2339.379964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2339.382058] Call Trace: [ 2339.382735] dump_stack+0x107/0x167 [ 2339.383670] should_fail.cold+0x5/0xa [ 2339.384640] __alloc_pages_nodemask+0x182/0x600 [ 2339.385822] ? lock_release+0x680/0x680 [ 2339.386845] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2339.388390] ? lock_downgrade+0x6d0/0x6d0 [ 2339.389450] alloc_pages_current+0x187/0x280 [ 2339.390562] get_zeroed_page+0x14/0xb0 [ 2339.391555] ? kasan_unpoison_shadow+0x33/0x50 [ 2339.392708] mon_alloc_buff+0xed/0x250 [ 2339.393696] mon_bin_ioctl+0x493/0xcc0 [ 2339.394680] ? wait_for_completion_io+0x270/0x270 [ 2339.395909] ? mon_bin_get_event+0x440/0x440 [ 2339.397023] ? selinux_file_ioctl+0xb6/0x270 [ 2339.398134] ? mon_bin_get_event+0x440/0x440 [ 2339.399243] __x64_sys_ioctl+0x19a/0x210 [ 2339.400282] do_syscall_64+0x33/0x40 [ 2339.401222] entry_SYSCALL_64_after_hwframe+0x67/0xd1 12:54:50 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) dup2(0xffffffffffffffff, r0) [ 2339.402518] RIP: 0033:0x7f6bde1e2b19 [ 2339.403641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2339.408283] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2339.409889] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2339.411398] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2339.412921] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2339.414432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2339.415951] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2339.439573] FAULT_INJECTION: forcing a failure. [ 2339.439573] name failslab, interval 1, probability 0, space 0, times 0 [ 2339.441977] CPU: 1 PID: 11596 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2339.443437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2339.445212] Call Trace: [ 2339.445782] dump_stack+0x107/0x167 [ 2339.446564] should_fail.cold+0x5/0xa [ 2339.447399] ? create_object.isra.0+0x3a/0xa30 [ 2339.448525] should_failslab+0x5/0x20 [ 2339.449391] kmem_cache_alloc+0x5b/0x310 [ 2339.450259] ? mark_held_locks+0x9e/0xe0 [ 2339.451127] create_object.isra.0+0x3a/0xa30 [ 2339.452264] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2339.453345] kmem_cache_alloc+0x159/0x310 [ 2339.454421] xas_alloc+0x336/0x440 [ 2339.455189] xas_create+0x34a/0x10d0 [ 2339.456171] ? kernel_text_address+0xf2/0x120 [ 2339.457357] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2339.458717] xas_store+0x8c/0x1c40 [ 2339.459673] __xa_store+0x164/0x2d0 [ 2339.460620] ? xa_delete_node+0x280/0x280 [ 2339.461686] ? trace_hardirqs_on+0x5b/0x180 [ 2339.462825] xa_store+0x31/0x50 [ 2339.463698] __io_uring_add_tctx_node+0x1cf/0x520 [ 2339.464928] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2339.466290] ? alloc_fd+0x2e7/0x670 [ 2339.467252] io_uring_setup+0x1fbb/0x2980 [ 2339.468359] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2339.469663] ? wait_for_completion_io+0x270/0x270 [ 2339.470938] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2339.472305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2339.473635] do_syscall_64+0x33/0x40 [ 2339.474611] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2339.475945] RIP: 0033:0x7f55325f0b19 [ 2339.476911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2339.481676] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2339.483674] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2339.485508] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2339.487366] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2339.489222] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2339.491053] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2339.534469] loop0: detected capacity change from 0 to 32768 12:55:05 executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a100, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x6, 0x1, 0x3f, 0x7ff}, {0x80, 0x0, 0x1, 0xc09}, {0x8, 0x6, 0x5, 0x7ff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x345842, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/unix\x00') ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000240)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/132, 0x84}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r3, 0x0, 0x100000001) read$usbmon(r1, &(0x7f00000000c0)=""/9, 0x9) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x80012, r0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000005, 0x8010, 0xffffffffffffffff, 0xca228000) 12:55:05 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13, 0x4010, r1, 0x905b7000) 12:55:05 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782d, &(0x7f0000000100)={0x0, 0x4f8f, 0x0, 0x4, 0x228}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) r3 = dup2(r1, r0) r4 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r7, r2, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x4}, 0x98) syz_io_uring_setup(0x3fd3, &(0x7f0000000000)={0x0, 0xc56c, 0x4, 0x40000000, 0x3a2, 0x0, r3}, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 12:55:05 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 57) 12:55:05 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 49) 12:55:05 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:55:05 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x4) 12:55:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000004fc0)={&(0x7f0000004f40)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x13}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xc0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x40) r6 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) [ 2353.730440] FAULT_INJECTION: forcing a failure. [ 2353.730440] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2353.732159] CPU: 1 PID: 11625 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2353.733235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2353.734549] Call Trace: [ 2353.734979] dump_stack+0x107/0x167 [ 2353.735554] should_fail.cold+0x5/0xa [ 2353.736167] __alloc_pages_nodemask+0x182/0x600 [ 2353.736908] ? lock_release+0x680/0x680 [ 2353.737543] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2353.738496] ? lock_downgrade+0x6d0/0x6d0 [ 2353.739157] alloc_pages_current+0x187/0x280 [ 2353.739858] get_zeroed_page+0x14/0xb0 [ 2353.740475] ? kasan_unpoison_shadow+0x33/0x50 [ 2353.741198] mon_alloc_buff+0xed/0x250 [ 2353.741814] mon_bin_ioctl+0x493/0xcc0 [ 2353.742421] ? wait_for_completion_io+0x270/0x270 [ 2353.743182] ? mon_bin_get_event+0x440/0x440 [ 2353.743889] ? selinux_file_ioctl+0xb6/0x270 [ 2353.744573] ? mon_bin_get_event+0x440/0x440 [ 2353.745255] __x64_sys_ioctl+0x19a/0x210 [ 2353.745889] do_syscall_64+0x33/0x40 [ 2353.746469] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2353.747280] RIP: 0033:0x7f6bde1e2b19 [ 2353.747746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2353.750622] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2353.751818] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2353.752626] FAULT_INJECTION: forcing a failure. [ 2353.752626] name failslab, interval 1, probability 0, space 0, times 0 [ 2353.752930] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2353.752950] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2353.758026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2353.759144] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2353.760296] CPU: 0 PID: 11630 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2353.762090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2353.764252] Call Trace: [ 2353.764944] dump_stack+0x107/0x167 [ 2353.765882] should_fail.cold+0x5/0xa [ 2353.766864] ? xas_alloc+0x336/0x440 [ 2353.767827] should_failslab+0x5/0x20 [ 2353.768807] kmem_cache_alloc+0x5b/0x310 [ 2353.769860] xas_alloc+0x336/0x440 [ 2353.770787] xas_create+0x34a/0x10d0 [ 2353.771771] ? kernel_text_address+0xf2/0x120 [ 2353.772928] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2353.774278] xas_store+0x8c/0x1c40 [ 2353.775214] __xa_store+0x164/0x2d0 [ 2353.776162] ? xa_delete_node+0x280/0x280 [ 2353.777146] ? trace_hardirqs_on+0x5b/0x180 [ 2353.778143] xa_store+0x31/0x50 [ 2353.778908] __io_uring_add_tctx_node+0x1cf/0x520 [ 2353.780026] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2353.781227] ? alloc_fd+0x2e7/0x670 [ 2353.782074] io_uring_setup+0x1fbb/0x2980 [ 2353.783044] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2353.784228] ? wait_for_completion_io+0x270/0x270 [ 2353.785356] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2353.786563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2353.787760] do_syscall_64+0x33/0x40 [ 2353.788614] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2353.789795] RIP: 0033:0x7f55325f0b19 [ 2353.790648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2353.794903] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2353.796669] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2353.798313] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2353.799964] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2353.801603] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2353.803246] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:55:05 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 50) [ 2353.827322] audit: type=1400 audit(1763988905.244:37): avc: denied { map } for pid=11621 comm="syz-executor.1" path="/proc/11621" dev="proc" ino=39307 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 2353.842718] audit: type=1400 audit(1763988905.244:38): avc: denied { execute } for pid=11621 comm="syz-executor.1" path="/proc/11621" dev="proc" ino=39307 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 2353.857116] FAULT_INJECTION: forcing a failure. [ 2353.857116] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2353.858887] CPU: 1 PID: 11641 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2353.859995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2353.861421] Call Trace: [ 2353.861798] dump_stack+0x107/0x167 [ 2353.862504] should_fail.cold+0x5/0xa [ 2353.863180] __alloc_pages_nodemask+0x182/0x600 [ 2353.863897] ? lock_release+0x680/0x680 [ 2353.864487] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2353.865394] ? lock_downgrade+0x6d0/0x6d0 [ 2353.866008] alloc_pages_current+0x187/0x280 [ 2353.866675] get_zeroed_page+0x14/0xb0 [ 2353.867253] ? kasan_unpoison_shadow+0x33/0x50 [ 2353.867945] mon_alloc_buff+0xed/0x250 [ 2353.868527] mon_bin_ioctl+0x493/0xcc0 [ 2353.869107] ? wait_for_completion_io+0x270/0x270 [ 2353.869830] ? mon_bin_get_event+0x440/0x440 [ 2353.870488] ? selinux_file_ioctl+0xb6/0x270 [ 2353.871144] ? mon_bin_get_event+0x440/0x440 [ 2353.871806] __x64_sys_ioctl+0x19a/0x210 [ 2353.872415] do_syscall_64+0x33/0x40 [ 2353.872965] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2353.873724] RIP: 0033:0x7f6bde1e2b19 [ 2353.874274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2353.877021] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2353.878149] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2353.879195] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2353.880263] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2353.881313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2353.882133] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2353.892816] loop0: detected capacity change from 0 to 32768 12:55:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x20, 0x4, 0x7, 0xc2, 0x2, 0x3e, 0x0, 0x105, 0x40, 0x322, 0x2de, 0xa4, 0x38, 0x1, 0x7, 0x2, 0x20}, [{0x7, 0x7, 0x7, 0xf97, 0x3a924d77, 0xffff, 0xc22, 0x1}, {0x5, 0x3, 0x7, 0x8000, 0xa72d, 0xd4, 0x2, 0x5}], "5bca9f5b9212dbca9d5406b0ecf658d01ee4dd874103b19bc605830f1e87c915b869e1d81e48ff4371e3ffaa67aea22f25785191cdb861a82159a4489f1cf3e994768d66dff5bec64ccd519f96f8a43968189b39ef04fa2c134a00292193e61fd74d74c4a52f70b04e24d67f5ddcfcee313136a38de1870168d19849fb5bd316b455878952371a3edc0c577ea7cd3bc8741bf81a1a6cbf1ee9aa147cee6bd5193866bab783ac262f2eee8c509359e9948a725701258d77e6e46a781ad2ec748ef6c7df424ec03f7be082ca842a31d35f937b1e0ae6638e86b2fde273", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb8c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x80000001, 0x10001}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) syz_io_uring_setup(0x1f51, &(0x7f0000000000)={0x0, 0xdd6a, 0x8, 0x3, 0x2b8}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000140)=0x1c) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r4, 0x80, &(0x7f0000000180)=@qipcrtr={0x2a, 0x3, 0x3fff}}, 0x40000000) 12:55:05 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/135, 0x87) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, r0, 0x494d6000) 12:55:05 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 58) 12:55:05 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) read$usbmon(r1, &(0x7f0000000000)=""/59, 0x3b) r3 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r3, r0) [ 2353.944540] FAULT_INJECTION: forcing a failure. [ 2353.944540] name failslab, interval 1, probability 0, space 0, times 0 [ 2353.947353] CPU: 0 PID: 11647 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2353.948930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2353.950796] Call Trace: [ 2353.951393] dump_stack+0x107/0x167 [ 2353.952221] should_fail.cold+0x5/0xa [ 2353.953080] ? xas_alloc+0x336/0x440 [ 2353.953912] should_failslab+0x5/0x20 [ 2353.954763] kmem_cache_alloc+0x5b/0x310 [ 2353.955692] xas_alloc+0x336/0x440 [ 2353.956497] xas_create+0x34a/0x10d0 [ 2353.957349] ? kernel_text_address+0xf2/0x120 [ 2353.958364] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2353.959549] xas_store+0x8c/0x1c40 [ 2353.960370] __xa_store+0x164/0x2d0 [ 2353.961193] ? xa_delete_node+0x280/0x280 [ 2353.962129] ? trace_hardirqs_on+0x5b/0x180 [ 2353.963103] xa_store+0x31/0x50 [ 2353.963859] __io_uring_add_tctx_node+0x1cf/0x520 [ 2353.964942] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2353.966120] ? alloc_fd+0x2e7/0x670 [ 2353.966947] io_uring_setup+0x1fbb/0x2980 [ 2353.967898] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2353.969039] ? wait_for_completion_io+0x270/0x270 [ 2353.970157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2353.971339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2353.972516] do_syscall_64+0x33/0x40 [ 2353.973357] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2353.974513] RIP: 0033:0x7f55325f0b19 [ 2353.975350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2353.979504] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2353.981217] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2353.982814] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2353.984420] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2353.986026] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2353.987641] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:55:05 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x20010, r0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/255, 0xff) io_uring_enter(0xffffffffffffffff, 0x1518, 0x8bf1, 0x2, &(0x7f0000000000)={[0x100000000]}, 0x8) 12:55:05 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 51) [ 2354.039682] FAULT_INJECTION: forcing a failure. [ 2354.039682] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2354.041064] CPU: 1 PID: 11660 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2354.041809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2354.042761] Call Trace: [ 2354.043066] dump_stack+0x107/0x167 [ 2354.043482] should_fail.cold+0x5/0xa [ 2354.043931] __alloc_pages_nodemask+0x182/0x600 [ 2354.044464] ? lock_release+0x680/0x680 [ 2354.044920] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2354.045572] ? lock_downgrade+0x6d0/0x6d0 [ 2354.046049] alloc_pages_current+0x187/0x280 [ 2354.046529] get_zeroed_page+0x14/0xb0 [ 2354.046979] ? kasan_unpoison_shadow+0x33/0x50 [ 2354.047477] mon_alloc_buff+0xed/0x250 [ 2354.047938] mon_bin_ioctl+0x493/0xcc0 [ 2354.048362] ? wait_for_completion_io+0x270/0x270 [ 2354.048879] ? mon_bin_get_event+0x440/0x440 [ 2354.049383] ? selinux_file_ioctl+0xb6/0x270 [ 2354.049860] ? mon_bin_get_event+0x440/0x440 [ 2354.050359] __x64_sys_ioctl+0x19a/0x210 [ 2354.050799] do_syscall_64+0x33/0x40 [ 2354.051228] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2354.051791] RIP: 0033:0x7f6bde1e2b19 [ 2354.052215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2354.054183] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2354.054999] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2354.055819] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2354.056629] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2354.057444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2354.058253] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:55:05 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x7832, &(0x7f00000000c0)={0x0, 0x100000, 0x20, 0x0, 0x310}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r3 = dup2(r2, r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 12:55:05 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x80000000) 12:55:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r5, 0x4) sendfile(r5, r6, 0x0, 0x100000001) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x103200, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100"/12, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4007, @fd_index=0x2, 0x4, 0x8, 0x80, 0x5, 0x1, {0x3}}, 0x7fff) syz_io_uring_submit(r8, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x4000010, r7, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2000004, 0x4010, r2, 0x10000000) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, r6, &(0x7f0000000180)={0x60000000}, r7}, 0x3) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x5, &(0x7f0000000000)={0x77359400}, 0x1, 0x1, 0x1}, 0x1f) 12:55:05 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x11) dup2(r1, r0) 12:55:05 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 59) 12:55:05 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000080)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/65, 0x41}) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) [ 2354.151732] FAULT_INJECTION: forcing a failure. [ 2354.151732] name failslab, interval 1, probability 0, space 0, times 0 [ 2354.154370] CPU: 0 PID: 11672 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2354.155947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2354.157820] Call Trace: [ 2354.158422] dump_stack+0x107/0x167 [ 2354.159245] should_fail.cold+0x5/0xa [ 2354.160112] ? xas_alloc+0x336/0x440 [ 2354.160955] should_failslab+0x5/0x20 [ 2354.161817] kmem_cache_alloc+0x5b/0x310 [ 2354.162737] xas_alloc+0x336/0x440 [ 2354.163546] xas_create+0x34a/0x10d0 [ 2354.164403] ? kernel_text_address+0xf2/0x120 [ 2354.165403] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2354.166586] xas_store+0x8c/0x1c40 [ 2354.167399] __xa_store+0x164/0x2d0 [ 2354.168241] ? xa_delete_node+0x280/0x280 [ 2354.169184] ? trace_hardirqs_on+0x5b/0x180 [ 2354.170170] xa_store+0x31/0x50 [ 2354.170917] __io_uring_add_tctx_node+0x1cf/0x520 [ 2354.172014] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2354.173195] ? alloc_fd+0x2e7/0x670 [ 2354.174035] io_uring_setup+0x1fbb/0x2980 [ 2354.174977] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2354.176133] ? wait_for_completion_io+0x270/0x270 [ 2354.177244] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2354.178431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2354.179621] do_syscall_64+0x33/0x40 [ 2354.180467] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2354.181641] RIP: 0033:0x7f55325f0b19 [ 2354.182488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2354.186643] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2354.188369] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2354.189987] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2354.191599] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2354.193221] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2354.194833] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:55:05 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:55:05 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 52) [ 2354.577712] FAULT_INJECTION: forcing a failure. [ 2354.577712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2354.580559] CPU: 0 PID: 11685 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2354.582111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2354.583974] Call Trace: [ 2354.584568] dump_stack+0x107/0x167 [ 2354.585386] should_fail.cold+0x5/0xa [ 2354.586243] __alloc_pages_nodemask+0x182/0x600 [ 2354.587284] ? lock_release+0x680/0x680 [ 2354.588190] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2354.589552] ? lock_downgrade+0x6d0/0x6d0 [ 2354.590531] alloc_pages_current+0x187/0x280 [ 2354.591516] get_zeroed_page+0x14/0xb0 [ 2354.592412] ? kasan_unpoison_shadow+0x33/0x50 [ 2354.593441] mon_alloc_buff+0xed/0x250 [ 2354.594323] mon_bin_ioctl+0x493/0xcc0 [ 2354.595197] ? wait_for_completion_io+0x270/0x270 [ 2354.596294] ? mon_bin_get_event+0x440/0x440 [ 2354.597293] ? selinux_file_ioctl+0xb6/0x270 [ 2354.598289] ? mon_bin_get_event+0x440/0x440 [ 2354.599277] __x64_sys_ioctl+0x19a/0x210 [ 2354.600199] do_syscall_64+0x33/0x40 [ 2354.601034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2354.602188] RIP: 0033:0x7f6bde1e2b19 [ 2354.603025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2354.607159] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2354.608880] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2354.610482] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2354.612098] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2354.613702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2354.615304] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2354.782019] loop0: detected capacity change from 0 to 32768 [ 2367.816747] FAULT_INJECTION: forcing a failure. [ 2367.816747] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2367.819354] CPU: 0 PID: 11703 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2367.820797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2367.822538] Call Trace: [ 2367.823091] dump_stack+0x107/0x167 [ 2367.823857] should_fail.cold+0x5/0xa [ 2367.824651] __alloc_pages_nodemask+0x182/0x600 [ 2367.825624] ? lock_release+0x680/0x680 [ 2367.826453] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2367.827690] ? lock_downgrade+0x6d0/0x6d0 [ 2367.828881] alloc_pages_current+0x187/0x280 [ 2367.829799] get_zeroed_page+0x14/0xb0 [ 2367.830603] ? kasan_unpoison_shadow+0x33/0x50 [ 2367.831554] mon_alloc_buff+0xed/0x250 [ 2367.832394] mon_bin_ioctl+0x493/0xcc0 [ 2367.832685] FAULT_INJECTION: forcing a failure. [ 2367.832685] name failslab, interval 1, probability 0, space 0, times 0 [ 2367.833212] ? wait_for_completion_io+0x270/0x270 [ 2367.833232] ? mon_bin_get_event+0x440/0x440 [ 2367.833258] ? selinux_file_ioctl+0xb6/0x270 [ 2367.838431] ? mon_bin_get_event+0x440/0x440 [ 2367.839363] __x64_sys_ioctl+0x19a/0x210 [ 2367.840233] do_syscall_64+0x33/0x40 [ 2367.841023] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2367.842105] RIP: 0033:0x7f6bde1e2b19 [ 2367.842891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2367.846800] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2367.848424] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2367.849936] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2367.851447] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2367.852977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2367.854492] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2367.856044] CPU: 1 PID: 11708 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2367.857570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2367.859355] Call Trace: [ 2367.859949] dump_stack+0x107/0x167 12:55:19 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3, 0x10, r0, 0xe62d2000) 12:55:19 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0xc6e, 0x41) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={0x0, 0x0, 0x80000001}) 12:55:19 executing program 4: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r0, 0x4) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r2, 0x4) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000080)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000001c0)=""/14, 0xe}) syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), &(0x7f0000000280)) mq_open(&(0x7f0000000140)='\x00', 0x80, 0x1c4, &(0x7f0000000180)={0x3, 0x8, 0x0, 0xb4}) syz_io_uring_setup(0x7077, &(0x7f0000000300)={0x0, 0x9207, 0x4, 0x0, 0x7a}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000540)) dup2(r2, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x6715, 0x6a5a, 0x0, &(0x7f0000000040)={[0x400]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r4, 0x4) sendfile(r4, r5, 0x0, 0x100000001) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0x4) 12:55:19 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 60) 12:55:19 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x5) 12:55:19 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 53) 12:55:19 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x3, "43fc5f7cccf69bb935bf08d25a767a852afa3856eab3527da35b16a96b466c1751195cf4b7572d8be77b631f2d556c754e89387f6e643fe088e0fd4148e13f81d44eb86925c843e870acb5cd9ea41cd15e6d1f7e81a1b1e77b0e700494940b94e7601442fdb4fc85246c441bfbc815ab5236e209bd87d161512fb5a58c75d3bb328623d90f9d6598830eb0a30aa90cc79ca28563ff7eaae2537606d125dd7b0ff7d6c94430c6c87289b7dd3c23796893c0d737"}, 0xbb, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="90f23ee48414c664c5a43f762e4c066fb46c651599634978ad436839c78464320b6c96b3b20424870f3c2c06ff5d7954554895fb52ffeef44cb8428f018a7311e03dc310105175dc9c0211c4c3d97278f61e53c32677695a579612fbb8f5ba448869626a4ccaeaae7114a481e103e8e43576e44b8a1a88966a66b6e6b4868bf5132cbfb5bc28aa11f6dcafe94048bd40f1c5f93a760b22174a742576098c9f3a6cacab94927a4600b7455033a85d92450a398e67a065f49012273455707ce4f6ac3de7ab8003c8cdf8491d17087e25e66d7112c059f9f340c35262df6b049113566fbdd3f51963793385ba78d21a42e3a68ed5c340c7ae8e7c2912decbc2e8175a88728d5aaf4822588b5fc88aee41ed9174cc588c519b0c5869ff2d65e08d1b7821c97c58cb1be4f1c62363215f99f391d5441860295b530603b1976c54e83096e8942a43b55f24c3584a1f136a7f0d5ef95f557d2baecf95628bb94d7f1cf3bb70a37631af2938e91dbae32061fdb3e543e2c6ff3b003cf22fb97f78b59e0f97e9bae1ab06e67f32249b75ee87e1026f9856b9ed12135e6474800b00e9b304ac081713976ac37945d55ca0da28b9f4a6e2fb34cc12e8ab3f97cd3131eaa574858c0edc20098bbcd4fb98e10a3e1b88137d9b55cafe856a7fdfc52b870d13baf1025873d59cf7a73c4977ce2486005a2801c2f3b6ffd7ea4b95d6ea2d78a6b8b762c15ce619d64cf415ad208e6ecc922322251412bdafc6cc3bded6cf5b141f69a06ca222d18162d4caf3b70ba20407830be2a0b4d63fe3ea0aa668c4f6fe84bf98c2849de40db25fea70f0216c1df234e515b68fad8975e787c6c834aeff0fff9ddee36943907373d4d9b90554efd06020853cda7b28d77b515682678493081f7cf695cb23c20f791f36b8dcf209f4572de40de199fb323774b39d006299c24033a9670b63efaf60763843e57262aa2300cc3d8a00c41b1058d01496946d425e094c47feb6c05ac0e419af3519cedaeb69d798f6a8a0f6228be14c6896332eb4d233587d75107b472ec90573454d047feb3cce7ef7b4411c62bf805bc3c16d06d396546dfdff8e309cc97f47c0bdb1f145c961c1dbaae974296b1d9d726478d00bcda517db8ba710ea53e754f54181907b60c69b161145b437aa5fbb9cb55b7740dfd7ba18507369a582788206d9a513955b024c4b738adc72c93bb20a83787ba7736f66d7d0e201475050b7769b9083ccf66b34054fe8dd73023e9a936f67f2299dde07f5601a9e9fb478e1007824de649557be2676c8132ab6a20cc422a0dcec5828c240bebf8b8194c6077f70f7bc9f882693b9328512ec2f86c201661e1ac676feedb439ae38cb3bf0769348528540cf4c82fef3b38979639264d32966c4a54a829fdd28d21abe01d0d44999a3c70b8c216b90d375f0c73acaef274af90d96fed4394170f916780399a814b8684f0208626656a93f26fecdfa69ec34433d0021e96b4d977fe40c0a765cb9fb78f66b6098a49d450a87d515dbf467af3384e8ef356293bd4e8e2b06cfe5bbf6de5d393496d692029b083f8fb0f129be9007d4f1421c2398679f899357a97f9ca79ba1bb862d169e9d1ddf1d20accb950530f06e193db66724b3d12a0de09e9af272d4ca52b447d94b244407796fe08538bda0e9323bcbd9d6b3831bd80e2ab65786f1a2e8d64bb6a646514ac975068f70959a82f26a232da659eba634dab2d2c63fa0025079158bb5ff8f4da275099c68cf7bd59a6f440e6cd2bf313f846ec78194a8b22c1c9a106046cd5b01336d0bd9d6707397845b4033eb280b1f3c52d16efad9d488d4fe5c8052e78d992e155717719c49061927b0692340ad021438c71fac159817920b43ba0ac658720d8fe8b04a29c4dd0db5188c3951db8921426b2f1ec1b76d2c16d4d9b14eab6193a728fdb2f38ea193d6213337d1bed670afdab0d5d135b31dc60c0c900aa731ca0ef76cb26946d361b9beae8771c77115ed4d268190b60a2f4ffc1c5b5d30e6a996f9113352ac856a04bb42f0a6bd897f488698cd18a3367daf55b5487cbecee292a331fef96109bfa62eb7ed97a201401097123c8b06b7f8b90c0b195c2a40c74a19c4f0dd7e0a46da2f2a54b4082fa3ed2e7bcd64d394c1e60d219789623e03a70ea36decd1756cda599be2db946381a365c7795f960651b7e053201aafce20a270ec3470d7c13c0dac954b8dd8032c7668dc5740e8cb050dda39e286d211d63d9f8bc4f79838f5bbdd5d790b972dbba633b0bcd74a306ee02a0954741bcab06b3c78c61c95f1af9d10eb52b4e854764b0f78ffba56f4f83c15483105cc28c3a4f218b0f6bba100b545f1189a8103eac586eed81301eb70a7c446849d4cbcd9c521d10f70c6189ded9d8b48612d16a1a074564a67e882186da0c3828056aeb33ed98d6dbe5bbf591616f53edbd3684d7e393ed2ba808f1f5e434b970ab74ecdd616c703aaa4436e5fdec0dc44690ade613c8c99ba3033522025536e5b2d77102925eb1bb6970e5f9abcc0a4b2617169bafe95950fd4a7c02280a0ed2ca5096a1013fa62fb5200297e5e3a3ec64f8a80f268b08c37c051d7c8c2ac2499304d0cc9de38582ddb5710137aacf914c6567f9dbe33347723b4d2051b242bd50cca9ac78009202f6ecf8bae1415325f93581d82da36529ba569f00c1e62d2df4d1669cd62801448c1701ba8a53888de08e0618bc49e2d490e4dac43704fb8710d8e93d376d1179cf10fa18933fe975f266dfe45f53f92c7ddf32f71c74ed9f4c2c0bdca9d264ad8097c5939a0d8954156c75d8deeae5fa37178866622a700e50c9e7645ebeca7198ee248dd0ccbbc5e7ccd3c1afc9758b9b4d4926a7c391d0c2a13a0d87370de45409a380d6315fa2ce5adbf96c2f204bfec15beb54f053c638043030decfc8ff619944eefd96e378f2ee51a01234f8668b34aba36897896690616d499b7598d0b42072b07f217602cc8d43a3b44ac9d2bc19d3d1d3511365c53cafe8e412b2005ec908f2ca1fd00c0388e6e008ff968b735c0876c023430e12db4fa8e6f0fa6295de1779ca16aefaae37a8dd2aabac1fc14c67df6e287bf5bf0de1e00168996c58103088aa0e95b509ec834c68333a862cc5fefcb928772b32ad7d93abebc5c27b88d903f5d1902c248390ccc429ce0a0cd01b86e81d1dd62691a6b50a59fa51a44712dcb583b4281e9f764fc33c400a905fe890d239168091a56935dec0b071ed151c130f6c49b4b22ccb3152ebed7c7c85808d8d0e59550db98eb98242fb05f7e462bd4aa8ee010cbcdc23d4bbfb70f8538f2923a7078efdefbbb31c926fa2bac21aa99f666bc0073e57811255014bd3e9427515b61738ea4d8fd60276062343a2137fadddac497cdbc85fc23d63bf4adadb210cd8e2aa5caa39e81fbf1f5bab85f3ee5a741fb7f6bada7633efb46677b34aa3a49c60320f7ef436c0a02e89d5324daf7a3dc9c86b26f7bdc344b00b97a540924afcbbe671a3990b5d0a4621732580e04e1c4e7050b4759b37110570191a899afa12ff950d8b2066f4d57e5a210e9aa5ea70ab0e542cba52feed3e9b468f1b49d1b10ac4f0f7ccadace4b61f1b8a688bc0bbbf08e76199b889c7ed3e51100c3887fd0b85e0bdf97513b7997e1432192a9b16626ec183926da4783d222d804ad4d7cab74edae4113ae2af3d945f1ce16ff5df7cff5bc1a16b8c821dfaeff3e8c26d31472e71314bdec810496545877a18a66558e583b636fbf532c1f4f49f8d787ff1a3d44dbd1c971f9b3cd5489fb9c8c7e051e588ae5a5c1d1825aa8057296c85e3eaa019640475ebccb07896ea63c9d52aaf3ccf4322b8818a72ea93a91411009d938ef50b0febd075451ed490981aa22af8cf7f6893a1fae385b98d7b9c5103811a614ba05d6c8c2183ab4e209453a1991d9dcca6684b0290f53f9698edf8ce66765a0c360cbbcb885996ab7717b558776604b1844434e0d76ae2e51a7721b447e6e1b654f545944f8a68b72a24020a18292009717acd9ed1c1964e2fb8f147a8ec890078389cc7aed9d179306d00588bf2c5de4133e47722a9cde447adb3991c600e94b507702c4d03fb100c06e83ea6e5f94b3c729ecaa59cb5ead61507270fca669f126fc93ee038c9e9674cd8216df2b09129e0f1531b0c2538c7c8dd7fdf7f4fc5446166ee7cbad06caaf0c8c2e1b3e1ee60f516cafd189451d96f797ffc53897a5f19352e87bdb68cb728b1feacd7106acd6ad22944249fe9afc194e384c54569b940b3511a4f313f7159f6c52349112c2616914c4097fb5e98d448f001db1d1cc0ed28eb311aca71d4385826982ed170f3f3d0007b93e13bfc1952a2146de7b85a8f913f2708de08660ac53e02b837a63bf02c5699cf938340c52e1509bd26bb39e86fa30d3be2a4e8d5a371e2b730b5bacb3789f63a1050848a4eb16350e3cdaafed0d92d31c5585cd37e7f581547702e7d8148097b651b2c449ed53a2cc6a744b186565413a0e803f0a01d896e9bea217014416c12664a343c2492d8acdda4a254c3a090af6b422a27cebcfccecb1166affdf8fc77aad4457d5dfa1a1025232a4fbd3714525e1bdbe205eed8d1d73fb14b0e67f08ca2461a2fa8a3a28114cd87547a6d56197d2fa3788985457a5df3b4055dcb76b4cf9868ddefdabfc35275309bf26e0cb92ee5c252a9639f3eaa604f796eb36e1bbe7385f538e5ca2713ec80efc455458a7881d406bb8d9ad3dd405c0c8a84c4d08649a4b71e56587403d803988c5dda350dc417a466c732a779dd1374eb00984cc27b82e1a409e84cb376c27686cfd39cd5976849d2b62778127811dfdfb8340016efdf7e87c65639dbac756401d0d272329f4f2e5eb6fe6a36482202406817fa61d0a1053858fa127f1422be47b31b4d9b96b73484b0959e8b1ed896cbf64a6e93a2ffddc0db1d0b638018e6cc3afcf787a6eb3dac04d0035b6195c90a52c3da4d3420d31915b94f60f9af7a79fea0ba661992e24106a653124eae88b795798b4234f880f868f4953fa2651ae3da8657117a8921a0d19ea1a1c37a4766ff76911af8454bc295b718b9097974a7f66114a8759c47f3e5ccda81d14753090889d574184378fa4042e03d86810f6d94c3f61007a39b8c319f799039ee94e4cce5d59396a850a478925fc44aba4c602c2b62bea6b3db183c38b9cdb76a92770263b4c8d1a0caebe7141f306d07b30ef6b112088cea94bc9a8e9de007aca1caab9075f573546d4358642515602081b55d940a9f4aa654772b003ad839df6a384ded2bae2020f5f5f801796c260db96ff9381fb6f0767e5d18f0647b91fdaa3ed5a66212b3fb7a12e621a6baa0132c2f6e7674c25124c0f0a28455298269b3cbe61106f49a45b78519b37407b4a372294834d4cd6c6cb73de537cfb6a6525303d042212b66e7e71bbae1b3c4dc03278e8b51d4ace6ea5b3aab679e586a4487ec9873136ab29544fb9666d1a81935c1c05f21f7051790dcfe3fbaa0e3f19beecad449939e78e593763bf4e1fec0c5e0f2e18604bb55e941b433b74cb003c428ffde37d9e644abfcc0d2535ca64e973ef7cc9cdc369cd85c4886baf15f8c798237d3d7475bad4408eb150e9275e3a028ff94e0ae4a0d27cb2475ffedf238e51b825daa6686122c4a5e5f77b3b19ab0663a0bdac2c31669f3bc1d6023f17e05ed61a3f95eff867f0e34b352cc10e105ff8b0147d8f151d24a21114067fedcb263944758d84573566d19fab4f3695c40b176d733b", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:55:19 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) [ 2367.860844] should_fail.cold+0x5/0xa [ 2367.861797] ? create_object.isra.0+0x3a/0xa30 [ 2367.862771] should_failslab+0x5/0x20 [ 2367.863579] kmem_cache_alloc+0x5b/0x310 [ 2367.864442] ? mark_held_locks+0x9e/0xe0 [ 2367.865288] create_object.isra.0+0x3a/0xa30 [ 2367.866204] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2367.867266] kmem_cache_alloc+0x159/0x310 [ 2367.868149] xas_alloc+0x336/0x440 [ 2367.868901] xas_create+0x34a/0x10d0 [ 2367.869685] ? kernel_text_address+0xf2/0x120 [ 2367.870619] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2367.871721] xas_store+0x8c/0x1c40 [ 2367.872477] __xa_store+0x164/0x2d0 [ 2367.873246] ? xa_delete_node+0x280/0x280 [ 2367.874119] ? trace_hardirqs_on+0x5b/0x180 [ 2367.875020] xa_store+0x31/0x50 [ 2367.875724] __io_uring_add_tctx_node+0x1cf/0x520 [ 2367.876738] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2367.877827] ? alloc_fd+0x2e7/0x670 [ 2367.878592] io_uring_setup+0x1fbb/0x2980 [ 2367.879459] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2367.880529] ? wait_for_completion_io+0x270/0x270 [ 2367.881554] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2367.882651] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2367.883744] do_syscall_64+0x33/0x40 [ 2367.884527] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2367.885592] RIP: 0033:0x7f55325f0b19 [ 2367.886383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2367.890243] RSP: 002b:00007f552fb66108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2367.891826] RAX: ffffffffffffffda RBX: 00007f5532703f60 RCX: 00007f55325f0b19 [ 2367.893320] RDX: 0000000020ffc000 RSI: 0000000020000400 RDI: 00000000000003dc [ 2367.894810] RBP: 0000000020000400 R08: 0000000020000480 R09: 0000000020000480 [ 2367.896305] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000480 [ 2367.897789] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:55:19 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setresuid(r2, r2, 0x0) fchown(r1, r2, 0xee01) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) [ 2368.029508] loop0: detected capacity change from 0 to 32768 12:55:34 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)=0x1) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) [ 2382.964836] FAULT_INJECTION: forcing a failure. [ 2382.964836] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2382.967649] CPU: 0 PID: 11740 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2382.969224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2382.971081] Call Trace: [ 2382.971681] dump_stack+0x107/0x167 [ 2382.972516] should_fail.cold+0x5/0xa [ 2382.973383] __alloc_pages_nodemask+0x182/0x600 [ 2382.974441] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2382.975802] ? lock_downgrade+0x6d0/0x6d0 [ 2382.976765] alloc_pages_current+0x187/0x280 [ 2382.977765] get_zeroed_page+0x14/0xb0 [ 2382.978636] ? kasan_unpoison_shadow+0x33/0x50 [ 2382.979670] mon_alloc_buff+0xed/0x250 [ 2382.980568] mon_bin_ioctl+0x493/0xcc0 [ 2382.981453] ? wait_for_completion_io+0x270/0x270 [ 2382.982769] ? mon_bin_get_event+0x440/0x440 [ 2382.983772] ? selinux_file_ioctl+0xb6/0x270 [ 2382.984788] ? mon_bin_get_event+0x440/0x440 [ 2382.985788] __x64_sys_ioctl+0x19a/0x210 [ 2382.986707] do_syscall_64+0x33/0x40 [ 2382.987550] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2382.988715] RIP: 0033:0x7f6bde1e2b19 [ 2382.989554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2382.993902] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2382.995617] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2382.997240] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2382.998843] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2383.000258] FAULT_INJECTION: forcing a failure. [ 2383.000258] name failslab, interval 1, probability 0, space 0, times 0 [ 2383.000454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2383.000476] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2383.005973] CPU: 1 PID: 11748 Comm: syz-executor.3 Not tainted 5.10.246 #1 12:55:34 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0xffff, 0x101101) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000000), &(0x7f0000000040)=""/166, 0xa6}) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000140)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) 12:55:34 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) read$usbmon(r1, &(0x7f00000000c0)=""/153, 0x99) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000000)={0x0, 0x0, 0x7}) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000080000"]) 12:55:34 executing program 0: msgrcv(0xffffffffffffffff, &(0x7f0000001d00)={0x0, ""/35}, 0x2b, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:55:34 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 61) 12:55:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() r1 = getpgid(0x0) r2 = epoll_create(0x1) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000040)={r2}) r3 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r4 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r6 = gettid() rt_sigqueueinfo(r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xffffffc4}) getpgrp(r6) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x6, @private2, 0x80}}, 0x0, 0x0, 0x4c, 0x0, "5610fe640b07c253ed35302890dae000d6ed99f7cdd1eb034e33d84612c06e794df20f7e8e6e821151954f21aba5ced7f29a6266927fcb969250a4eaf112fe9cc1dbc4939a0a8b3247541c85800002b4"}, 0xd8) pread64(r2, &(0x7f00000000c0)=""/102, 0x66, 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r5, 0x4) sendfile(r5, r7, 0x0, 0x100000001) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000000)={0xd0000008}) dup2(r4, r3) 12:55:34 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x6) 12:55:34 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 54) [ 2383.007780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2383.009676] Call Trace: [ 2383.010226] dump_stack+0x107/0x167 [ 2383.010978] should_fail.cold+0x5/0xa [ 2383.011770] ? vm_area_dup+0x78/0x290 [ 2383.012558] should_failslab+0x5/0x20 [ 2383.013345] kmem_cache_alloc+0x5b/0x310 [ 2383.014173] vm_area_dup+0x78/0x290 [ 2383.014931] ? lock_release+0x680/0x680 [ 2383.015744] ? mark_lock+0xf5/0x2df0 [ 2383.016547] ? lock_chain_count+0x20/0x20 [ 2383.017395] ? mark_lock+0xf5/0x2df0 [ 2383.018159] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2383.019224] ? lock_chain_count+0x20/0x20 [ 2383.020079] ? mark_lock+0xf5/0x2df0 [ 2383.020845] ? vm_area_alloc+0x110/0x110 [ 2383.021677] ? lock_chain_count+0x20/0x20 [ 2383.022542] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2383.023608] ? vmacache_find+0x55/0x2a0 [ 2383.024421] __split_vma+0xa8/0x4e0 [ 2383.025160] __do_munmap+0x365/0x1260 [ 2383.025950] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2383.027055] ? trace_hardirqs_on+0x5b/0x180 [ 2383.027945] mmap_region+0x7cc/0x1500 [ 2383.028739] ? __sanitizer_cov_trace_switch+0x2/0x80 [ 2383.029770] do_mmap+0x868/0x1370 [ 2383.030488] vm_mmap_pgoff+0x198/0x1f0 [ 2383.031281] ? randomize_page+0xb0/0xb0 [ 2383.032115] ksys_mmap_pgoff+0x41c/0x560 [ 2383.032948] ? find_mergeable_anon_vma+0x250/0x250 [ 2383.033953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2383.035015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.036079] do_syscall_64+0x33/0x40 [ 2383.036839] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2383.037879] RIP: 0033:0x7f55325f0b62 [ 2383.038634] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2383.042376] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2383.043936] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2383.045386] RDX: 0000000000000003 RSI: 0000000000101140 RDI: 00000000200a0000 [ 2383.046838] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2383.048301] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2383.049749] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:55:34 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 62) 12:55:34 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x800, 0x7fffffff, 0x1f}) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000180)={&(0x7f0000000040), &(0x7f0000000080)=""/214, 0xd6}) [ 2383.127132] loop0: detected capacity change from 0 to 32768 [ 2383.172216] FAULT_INJECTION: forcing a failure. [ 2383.172216] name failslab, interval 1, probability 0, space 0, times 0 [ 2383.174705] CPU: 1 PID: 11762 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2383.176146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2383.177869] Call Trace: [ 2383.178428] dump_stack+0x107/0x167 [ 2383.179179] should_fail.cold+0x5/0xa [ 2383.179981] ? create_object.isra.0+0x3a/0xa30 [ 2383.180943] should_failslab+0x5/0x20 [ 2383.181738] kmem_cache_alloc+0x5b/0x310 [ 2383.182568] create_object.isra.0+0x3a/0xa30 [ 2383.183464] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2383.184514] kmem_cache_alloc+0x159/0x310 [ 2383.185364] vm_area_dup+0x78/0x290 [ 2383.186118] ? lock_release+0x680/0x680 [ 2383.186957] ? mark_lock+0xf5/0x2df0 [ 2383.187726] ? lock_chain_count+0x20/0x20 [ 2383.188575] ? mark_lock+0xf5/0x2df0 [ 2383.189366] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2383.190451] ? lock_chain_count+0x20/0x20 [ 2383.191309] ? mark_lock+0xf5/0x2df0 [ 2383.192076] ? vm_area_alloc+0x110/0x110 [ 2383.192914] ? __lock_acquire+0x1657/0x5b00 [ 2383.193822] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2383.194908] ? vmacache_find+0x55/0x2a0 [ 2383.195732] __split_vma+0xa8/0x4e0 [ 2383.196490] __do_munmap+0x365/0x1260 [ 2383.197281] ? arch_get_unmapped_area+0x450/0x450 [ 2383.198273] mmap_region+0x7cc/0x1500 [ 2383.199082] do_mmap+0x868/0x1370 [ 2383.199798] vm_mmap_pgoff+0x198/0x1f0 [ 2383.200609] ? randomize_page+0xb0/0xb0 [ 2383.201451] ksys_mmap_pgoff+0x41c/0x560 [ 2383.202295] ? find_mergeable_anon_vma+0x250/0x250 [ 2383.203313] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2383.204393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2383.205468] do_syscall_64+0x33/0x40 [ 2383.206236] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2383.207308] RIP: 0033:0x7f55325f0b62 [ 2383.208107] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2383.211882] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2383.213468] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2383.214924] RDX: 0000000000000003 RSI: 0000000000101140 RDI: 00000000200a0000 [ 2383.216401] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2383.217861] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2383.219344] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2396.660911] FAULT_INJECTION: forcing a failure. [ 2396.660911] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2396.662349] CPU: 0 PID: 11778 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2396.663136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.664086] Call Trace: [ 2396.664392] dump_stack+0x107/0x167 [ 2396.664808] should_fail.cold+0x5/0xa [ 2396.665253] __alloc_pages_nodemask+0x182/0x600 [ 2396.665786] ? lock_release+0x680/0x680 [ 2396.666240] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2396.666923] ? lock_downgrade+0x6d0/0x6d0 [ 2396.667399] alloc_pages_current+0x187/0x280 [ 2396.667901] get_zeroed_page+0x14/0xb0 [ 2396.668357] ? kasan_unpoison_shadow+0x33/0x50 [ 2396.668879] mon_alloc_buff+0xed/0x250 [ 2396.669332] mon_bin_ioctl+0x493/0xcc0 [ 2396.669779] ? wait_for_completion_io+0x270/0x270 [ 2396.670328] ? mon_bin_get_event+0x440/0x440 [ 2396.670835] ? selinux_file_ioctl+0xb6/0x270 [ 2396.671338] ? mon_bin_get_event+0x440/0x440 [ 2396.671844] __x64_sys_ioctl+0x19a/0x210 [ 2396.672317] do_syscall_64+0x33/0x40 [ 2396.672742] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2396.673332] RIP: 0033:0x7f6bde1e2b19 [ 2396.673755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2396.675870] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2396.676746] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2396.677562] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2396.678382] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2396.679197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2396.680019] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:55:48 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 55) 12:55:48 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x900) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) 12:55:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x1a) 12:55:48 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 63) 12:55:48 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x111002, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={&(0x7f0000000100), &(0x7f0000000140)=""/159, 0x9f}) r3 = syz_io_uring_setup(0x782e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r3, r0) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000300)=0x4) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x8000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x10ed90) 12:55:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x151bc2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ftruncate(r0, 0x4) sendfile(r0, r1, 0x0, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x80012, r2, 0x0) pread64(r2, &(0x7f0000000000)=""/72, 0x48, 0x800) 12:55:48 executing program 0: msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3800) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:55:48 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x7) [ 2396.699461] FAULT_INJECTION: forcing a failure. [ 2396.699461] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.701433] CPU: 1 PID: 11793 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2396.702637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.704084] Call Trace: [ 2396.704554] dump_stack+0x107/0x167 [ 2396.705184] should_fail.cold+0x5/0xa [ 2396.705852] ? create_object.isra.0+0x3a/0xa30 [ 2396.706642] should_failslab+0x5/0x20 [ 2396.707307] kmem_cache_alloc+0x5b/0x310 [ 2396.708027] create_object.isra.0+0x3a/0xa30 [ 2396.708801] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2396.709683] kmem_cache_alloc+0x159/0x310 [ 2396.710413] vm_area_dup+0x78/0x290 [ 2396.711054] ? lock_release+0x680/0x680 [ 2396.711749] ? mark_lock+0xf5/0x2df0 [ 2396.712413] ? lock_chain_count+0x20/0x20 [ 2396.713137] ? mark_lock+0xf5/0x2df0 [ 2396.713780] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2396.714692] ? lock_chain_count+0x20/0x20 [ 2396.715418] ? mark_lock+0xf5/0x2df0 [ 2396.716070] ? vm_area_alloc+0x110/0x110 [ 2396.716777] ? __lock_acquire+0x1657/0x5b00 [ 2396.717537] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2396.718450] ? vmacache_find+0x55/0x2a0 [ 2396.719144] __split_vma+0xa8/0x4e0 [ 2396.719776] __do_munmap+0x365/0x1260 [ 2396.720446] ? arch_get_unmapped_area+0x450/0x450 [ 2396.721287] mmap_region+0x7cc/0x1500 [ 2396.721958] do_mmap+0x868/0x1370 [ 2396.722588] vm_mmap_pgoff+0x198/0x1f0 [ 2396.723293] ? randomize_page+0xb0/0xb0 [ 2396.724007] ksys_mmap_pgoff+0x41c/0x560 [ 2396.724753] ? find_mergeable_anon_vma+0x250/0x250 [ 2396.725606] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2396.726513] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2396.727406] do_syscall_64+0x33/0x40 [ 2396.728057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2396.728954] RIP: 0033:0x7f55325f0b62 12:55:48 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 56) [ 2396.729602] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2396.732977] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2396.734311] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2396.735562] RDX: 0000000000000003 RSI: 0000000000101140 RDI: 00000000200a0000 [ 2396.736818] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2396.738058] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2396.739302] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2396.760090] FAULT_INJECTION: forcing a failure. [ 2396.760090] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2396.761793] CPU: 0 PID: 11799 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2396.762754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.763892] Call Trace: [ 2396.764276] dump_stack+0x107/0x167 [ 2396.764782] should_fail.cold+0x5/0xa [ 2396.765323] __alloc_pages_nodemask+0x182/0x600 [ 2396.765965] ? lock_release+0x680/0x680 [ 2396.766520] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2396.767357] ? lock_downgrade+0x6d0/0x6d0 [ 2396.767946] alloc_pages_current+0x187/0x280 [ 2396.768554] get_zeroed_page+0x14/0xb0 [ 2396.769091] ? kasan_unpoison_shadow+0x33/0x50 [ 2396.769722] mon_alloc_buff+0xed/0x250 [ 2396.770270] mon_bin_ioctl+0x493/0xcc0 [ 2396.770811] ? wait_for_completion_io+0x270/0x270 [ 2396.771481] ? mon_bin_get_event+0x440/0x440 [ 2396.772093] ? selinux_file_ioctl+0xb6/0x270 [ 2396.772704] ? mon_bin_get_event+0x440/0x440 [ 2396.773314] __x64_sys_ioctl+0x19a/0x210 [ 2396.773884] do_syscall_64+0x33/0x40 [ 2396.774400] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2396.775116] RIP: 0033:0x7f6bde1e2b19 [ 2396.775631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2396.778206] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2396.779259] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2396.780312] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2396.781306] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2396.782301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2396.783291] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2396.800648] loop0: detected capacity change from 0 to 32768 12:55:48 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f0000000600)=""/4096, 0x1000}) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) 12:55:48 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x4e55, 0x2000) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) 12:55:48 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 64) 12:55:48 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0x9, &(0x7f00000000c0), 0x8) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) setresuid(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000180)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/194, 0xc2}) r2 = eventfd2(0x276, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r3, 0x4) sendfile(r3, r4, 0x0, 0x100000001) sendmsg$AUDIT_USER(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x98, 0x3ed, 0x400, 0x70bd2c, 0x25dfdbff, "0b128814592ccc1a88b79b1c2279628150ddd294906c45be395b86c1205d0eca3e878fa60183fa47c6aa4ab3cd99d9c74ad077121bc7778ae91a067f76b6a9eebb4a798aac31452d0940d407515b4d85e0a868fe5d17e3df28ae437b9c50cc168e7f7b0fa012ce37ee0bfecfc99344bed11b292e4528d55c6f9c027305c3ce065b9dca94ff", [""]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000000fd0000002e2f66076c65300023d234b78d0ed4f811254b84b8242021629016a253ae8d814603ccfe102bd56ee0ffcbab19cbf92b6a617b9850072d93444c95ad786c5ed920f928154820bd6164418e5a940f5586048d4e5759a4e2037cde36851245ba14f7c0784465361e7939be914ae8b72617d1e11f7bfeb0a289a4603df3db5e266398b62d32"]) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x16) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) sendfile(r5, r6, 0x0, 0x100000001) read$eventfd(r5, &(0x7f0000000200), 0x8) ioctl$int_in(r5, 0x5452, &(0x7f0000000480)=0x2c) 12:55:48 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 57) [ 2396.863550] FAULT_INJECTION: forcing a failure. [ 2396.863550] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2396.864628] FAULT_INJECTION: forcing a failure. [ 2396.864628] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.865299] CPU: 0 PID: 11810 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2396.868225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.869385] Call Trace: [ 2396.869757] dump_stack+0x107/0x167 [ 2396.870263] should_fail.cold+0x5/0xa [ 2396.870802] __alloc_pages_nodemask+0x182/0x600 [ 2396.871456] ? lock_release+0x680/0x680 [ 2396.872030] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2396.872856] ? lock_downgrade+0x6d0/0x6d0 [ 2396.873438] alloc_pages_current+0x187/0x280 [ 2396.874048] get_zeroed_page+0x14/0xb0 [ 2396.874590] ? kasan_unpoison_shadow+0x33/0x50 [ 2396.875230] mon_alloc_buff+0xed/0x250 [ 2396.875780] mon_bin_ioctl+0x493/0xcc0 [ 2396.876330] ? wait_for_completion_io+0x270/0x270 [ 2396.876994] ? mon_bin_get_event+0x440/0x440 [ 2396.877613] ? selinux_file_ioctl+0xb6/0x270 [ 2396.878230] ? mon_bin_get_event+0x440/0x440 [ 2396.878842] __x64_sys_ioctl+0x19a/0x210 [ 2396.879413] do_syscall_64+0x33/0x40 [ 2396.879944] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2396.880659] RIP: 0033:0x7f6bde1e2b19 [ 2396.881178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2396.883743] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2396.884811] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2396.885810] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2396.886812] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2396.887805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2396.888809] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2396.889823] CPU: 1 PID: 11809 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2396.891080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.892594] Call Trace: [ 2396.893077] dump_stack+0x107/0x167 [ 2396.893738] should_fail.cold+0x5/0xa [ 2396.894425] ? anon_vma_clone+0xdc/0x590 [ 2396.895153] should_failslab+0x5/0x20 12:55:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r2, 0x4) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000480)={&(0x7f0000000500), &(0x7f0000001700)=""/146, 0x109}) r3 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x37bfc) r6 = openat$cgroup_pressure(r1, &(0x7f0000001640)='memory.pressure\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000001680)={0x10000000}) clone3(&(0x7f0000000380)={0x20297a000, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000016c0), {0x31}, &(0x7f0000000600)=""/4096, 0x1000, &(0x7f00000002c0)=""/76, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x18000, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=0x0, @ANYBLOB="2c776654dd646e6f3d", @ANYRESHEX, @ANYBLOB=',cache=mmap,dfltgid=', @ANYRESHEX=r9, @ANYBLOB=',cache=none,appraise_type=imasig,seclabel,func=BPRM_CHECK,mask=^MAY_APPEND,fscontext=staff_u,obj_user=security.ima\x00,\x00']) fchown(r7, r8, r9) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x80012, r0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x400}, 0x1}, 0x7f) [ 2396.896022] kmem_cache_alloc+0x5b/0x310 [ 2396.896785] anon_vma_clone+0xdc/0x590 [ 2396.897460] __split_vma+0x17c/0x4e0 [ 2396.898112] __do_munmap+0x365/0x1260 [ 2396.898771] ? arch_get_unmapped_area+0x450/0x450 [ 2396.899611] mmap_region+0x7cc/0x1500 [ 2396.900293] do_mmap+0x868/0x1370 [ 2396.900901] vm_mmap_pgoff+0x198/0x1f0 [ 2396.901580] ? randomize_page+0xb0/0xb0 [ 2396.902278] ksys_mmap_pgoff+0x41c/0x560 [ 2396.902984] ? find_mergeable_anon_vma+0x250/0x250 [ 2396.903845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2396.904762] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2396.905655] do_syscall_64+0x33/0x40 [ 2396.906296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2396.907182] RIP: 0033:0x7f55325f0b62 [ 2396.907831] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2396.911006] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2396.912328] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2396.913570] RDX: 0000000000000003 RSI: 0000000000101140 RDI: 00000000200a0000 [ 2396.914804] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2396.916048] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2396.917285] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:55:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x420200) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f00000002c0)=""/247, 0xf7}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff], 0x38}, 0x141) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000580)={&(0x7f0000000480), &(0x7f00000004c0)=""/185, 0xb9}) 12:55:48 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x945cc000) syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x200) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) fchown(r1, 0xee00, 0xffffffffffffffff) 12:56:03 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 58) 12:56:03 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) dup2(r1, r0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x8401) 12:56:03 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x89a1, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="826551cebb7e360b07e68bc1938d176212d298b7111d04e71199baead3bc6704a9683af4f82c40a9648579cc66c21abc482e7e037f37", 0x36}], 0x400, &(0x7f0000000140)={[{@cruft}, {@session={'session', 0x3d, 0x32}}], [{@smackfshat={'smackfshat', 0x3d, '/-'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@appraise}]}) read$usbmon(r1, &(0x7f0000000000), 0x0) dup2(0xffffffffffffffff, r0) 12:56:03 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0) 12:56:03 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x8) 12:56:03 executing program 0: msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:56:03 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 65) 12:56:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x9, r2, 0x1, 0x8, 0x6, @random="1900de9961ac"}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x9, r5, 0x1, 0x8, 0x6, @random="1900de9961ac"}, 0x14) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x9, r5, 0x1, 0xff, 0x6, @random="de00"}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r6 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x101003) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b40), 0x80000, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r8, &(0x7f0000000040)={0x11, 0x9, r10, 0x1, 0x8, 0x6, @random="1900de9961ac"}, 0x14) bind$packet(r7, &(0x7f0000000b80)={0x11, 0xf6, r10, 0x1, 0xf9, 0x6, @multicast}, 0x14) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r6, 0x0) [ 2411.668490] FAULT_INJECTION: forcing a failure. [ 2411.668490] name failslab, interval 1, probability 0, space 0, times 0 [ 2411.669866] CPU: 1 PID: 11842 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2411.670657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2411.671605] Call Trace: [ 2411.671911] dump_stack+0x107/0x167 [ 2411.672337] should_fail.cold+0x5/0xa [ 2411.672773] ? vm_area_dup+0x78/0x290 [ 2411.673207] should_failslab+0x5/0x20 [ 2411.673638] kmem_cache_alloc+0x5b/0x310 [ 2411.674102] vm_area_dup+0x78/0x290 [ 2411.674519] ? find_held_lock+0x2c/0x110 [ 2411.674984] ? __vma_adjust+0x66e/0x2510 [ 2411.675446] ? lock_downgrade+0x6d0/0x6d0 [ 2411.675858] FAULT_INJECTION: forcing a failure. [ 2411.675858] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2411.675931] ? up_write+0x191/0x550 [ 2411.678992] ? downgrade_write+0x3a0/0x3a0 [ 2411.679478] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 2411.680103] ? vm_area_alloc+0x110/0x110 [ 2411.680568] ? __vma_adjust+0xbb8/0x2510 [ 2411.681038] ? vmacache_find+0x55/0x2a0 [ 2411.681491] __split_vma+0xa8/0x4e0 [ 2411.681907] __do_munmap+0xf40/0x1260 [ 2411.682347] ? arch_get_unmapped_area+0x450/0x450 [ 2411.682899] mmap_region+0x7cc/0x1500 [ 2411.683339] do_mmap+0x868/0x1370 [ 2411.683742] vm_mmap_pgoff+0x198/0x1f0 [ 2411.684200] ? randomize_page+0xb0/0xb0 [ 2411.684664] ksys_mmap_pgoff+0x41c/0x560 [ 2411.685128] ? find_mergeable_anon_vma+0x250/0x250 [ 2411.685693] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2411.686290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2411.686879] do_syscall_64+0x33/0x40 [ 2411.687298] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2411.687885] RIP: 0033:0x7f55325f0b62 [ 2411.688322] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2411.690401] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2411.691282] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2411.692102] RDX: 0000000000000003 RSI: 0000000000101140 RDI: 00000000200a0000 [ 2411.692909] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2411.693731] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2411.694540] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2411.695373] CPU: 0 PID: 11848 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2411.696965] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2411.698828] Call Trace: [ 2411.699432] dump_stack+0x107/0x167 [ 2411.700273] should_fail.cold+0x5/0xa [ 2411.701144] __alloc_pages_nodemask+0x182/0x600 [ 2411.702200] ? lock_release+0x680/0x680 [ 2411.703104] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2411.704480] ? lock_downgrade+0x6d0/0x6d0 [ 2411.705430] alloc_pages_current+0x187/0x280 [ 2411.706428] get_zeroed_page+0x14/0xb0 [ 2411.707310] ? kasan_unpoison_shadow+0x33/0x50 [ 2411.708358] mon_alloc_buff+0xed/0x250 [ 2411.709262] mon_bin_ioctl+0x493/0xcc0 [ 2411.710143] ? wait_for_completion_io+0x270/0x270 [ 2411.711230] ? mon_bin_get_event+0x440/0x440 [ 2411.712251] ? selinux_file_ioctl+0xb6/0x270 [ 2411.713254] ? mon_bin_get_event+0x440/0x440 [ 2411.714257] __x64_sys_ioctl+0x19a/0x210 [ 2411.715175] do_syscall_64+0x33/0x40 [ 2411.716050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2411.717218] RIP: 0033:0x7f6bde1e2b19 [ 2411.718067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2411.722261] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2411.723983] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2411.725604] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2411.727221] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2411.728854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2411.730468] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:56:03 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:56:03 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 66) 12:56:03 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x10d000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x202000) r4 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="0000003030303030fe6a7c21fa8be62a9e745060aef842f38045743425b1a8be0c8673ebe827d7a82831556be70070d79818faa73d80aa86248a6ddede79e013fa98ad26e790caf1aa4d1692e1b7011fadd85ebeb1b394b297712661fde953bd7ede000000000000000000"]) r5 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x2010, r5, 0x8000000) r8 = open_tree(r1, &(0x7f0000000080)='./file1\x00', 0x900) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r6, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r8, 0x4, 0x0, 0x7, 0x0, 0x0, {0x0, r9}}, 0x6) io_uring_enter(r5, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0x810, r5, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x6}) [ 2411.756796] FAULT_INJECTION: forcing a failure. [ 2411.756796] name failslab, interval 1, probability 0, space 0, times 0 [ 2411.758561] CPU: 1 PID: 11860 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2411.759392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2411.760346] Call Trace: [ 2411.760657] dump_stack+0x107/0x167 [ 2411.761070] should_fail.cold+0x5/0xa [ 2411.761503] ? create_object.isra.0+0x3a/0xa30 [ 2411.762019] should_failslab+0x5/0x20 [ 2411.762451] kmem_cache_alloc+0x5b/0x310 [ 2411.762913] create_object.isra.0+0x3a/0xa30 [ 2411.763408] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2411.763987] kmem_cache_alloc+0x159/0x310 [ 2411.764469] vm_area_dup+0x78/0x290 [ 2411.764889] ? find_held_lock+0x2c/0x110 [ 2411.765354] ? __vma_adjust+0x66e/0x2510 [ 2411.765813] ? lock_downgrade+0x6d0/0x6d0 [ 2411.766289] ? up_write+0x191/0x550 [ 2411.766704] ? downgrade_write+0x3a0/0x3a0 [ 2411.767180] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 2411.767793] ? vm_area_alloc+0x110/0x110 [ 2411.768257] ? __vma_adjust+0xbb8/0x2510 [ 2411.768727] ? vmacache_find+0x55/0x2a0 [ 2411.769175] __split_vma+0xa8/0x4e0 [ 2411.769590] __do_munmap+0xf40/0x1260 [ 2411.770023] ? arch_get_unmapped_area+0x450/0x450 [ 2411.770573] mmap_region+0x7cc/0x1500 [ 2411.771009] do_mmap+0x868/0x1370 [ 2411.771409] vm_mmap_pgoff+0x198/0x1f0 [ 2411.771851] ? randomize_page+0xb0/0xb0 [ 2411.772323] ksys_mmap_pgoff+0x41c/0x560 [ 2411.772791] ? find_mergeable_anon_vma+0x250/0x250 [ 2411.773347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2411.773938] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2411.774522] do_syscall_64+0x33/0x40 [ 2411.774944] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2411.775523] RIP: 0033:0x7f55325f0b62 [ 2411.775949] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2411.778039] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2411.778916] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2411.779737] RDX: 0000000000000003 RSI: 0000000000101140 RDI: 00000000200a0000 [ 2411.780551] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2411.781359] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2411.782163] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2411.790570] loop4: detected capacity change from 0 to 34816 [ 2411.802959] loop0: detected capacity change from 0 to 32768 12:56:03 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x80800) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:56:03 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x47b88000) 12:56:03 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 59) 12:56:03 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 67) 12:56:03 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x501a06) r1 = syz_io_uring_setup(0x7832, &(0x7f0000000580), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x1, 0x8, 0x8}, 0x18) read$usbmon(r2, &(0x7f00000000c0)=""/39, 0x27) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FIOCLEX(r1, 0x5451) dup2(r1, r0) [ 2411.895683] FAULT_INJECTION: forcing a failure. [ 2411.895683] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2411.897094] CPU: 1 PID: 11878 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2411.897875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2411.898814] Call Trace: [ 2411.899118] dump_stack+0x107/0x167 [ 2411.899535] should_fail.cold+0x5/0xa [ 2411.899970] __alloc_pages_nodemask+0x182/0x600 [ 2411.900507] ? lock_release+0x680/0x680 [ 2411.900966] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2411.901647] ? lock_downgrade+0x6d0/0x6d0 [ 2411.902125] alloc_pages_current+0x187/0x280 [ 2411.902621] get_zeroed_page+0x14/0xb0 [ 2411.903065] ? kasan_unpoison_shadow+0x33/0x50 [ 2411.903584] mon_alloc_buff+0xed/0x250 [ 2411.904039] mon_bin_ioctl+0x493/0xcc0 [ 2411.904485] ? wait_for_completion_io+0x270/0x270 [ 2411.905030] ? mon_bin_get_event+0x440/0x440 [ 2411.905535] ? selinux_file_ioctl+0xb6/0x270 [ 2411.906039] ? mon_bin_get_event+0x440/0x440 [ 2411.906579] __x64_sys_ioctl+0x19a/0x210 [ 2411.907041] do_syscall_64+0x33/0x40 [ 2411.907465] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2411.908054] RIP: 0033:0x7f6bde1e2b19 [ 2411.908476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2411.910561] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2411.911424] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2411.912241] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2411.913048] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2411.913854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2411.914661] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2411.931780] FAULT_INJECTION: forcing a failure. [ 2411.931780] name failslab, interval 1, probability 0, space 0, times 0 [ 2411.934417] CPU: 0 PID: 11881 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2411.935985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2411.937883] Call Trace: [ 2411.938495] dump_stack+0x107/0x167 [ 2411.939324] should_fail.cold+0x5/0xa [ 2411.940214] ? anon_vma_clone+0xdc/0x590 [ 2411.941143] should_failslab+0x5/0x20 [ 2411.942012] kmem_cache_alloc+0x5b/0x310 [ 2411.942940] anon_vma_clone+0xdc/0x590 [ 2411.943836] __split_vma+0x17c/0x4e0 [ 2411.944696] __do_munmap+0xf40/0x1260 [ 2411.945566] ? arch_get_unmapped_area+0x450/0x450 [ 2411.946667] mmap_region+0x7cc/0x1500 [ 2411.947546] do_mmap+0x868/0x1370 [ 2411.948360] vm_mmap_pgoff+0x198/0x1f0 [ 2411.949250] ? randomize_page+0xb0/0xb0 [ 2411.950181] ksys_mmap_pgoff+0x41c/0x560 [ 2411.951107] ? find_mergeable_anon_vma+0x250/0x250 [ 2411.952236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2411.953439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2411.954620] do_syscall_64+0x33/0x40 [ 2411.955470] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2411.956661] RIP: 0033:0x7f55325f0b62 [ 2411.957503] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2411.961708] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2411.963438] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2411.965057] RDX: 0000000000000003 RSI: 0000000000101140 RDI: 00000000200a0000 [ 2411.966682] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2411.968317] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2411.969948] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:56:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000040)=@sha1={0x1, "ecbb5bd9b05ec573d161eea7a9617e53fc17702e"}, 0x15, 0x3) syz_open_dev$usbmon(&(0x7f0000000100), 0x2, 0x1) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r2 = syz_io_uring_setup(0x394, &(0x7f0000000580)={0x0, 0x498e, 0x8, 0x0, 0x12b, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r2, 0x0, 0xe45, 0x4b, 0x4bd}) 12:56:16 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 68) 12:56:16 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x816e, 0x5, 0x58}) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0xc00) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xfffff800}}, './file0\x00'}) syz_io_uring_setup(0x733a, &(0x7f00000000c0)={0x0, 0xaabe, 0x2, 0x0, 0x381, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:56:16 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 60) 12:56:16 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xffff) r6 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(r5, r8, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000040)={r10, r11+10000000}, 0x1, 0x1, 0x1}, 0xbf) dup2(r1, r0) 12:56:16 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x300) [ 2425.018752] FAULT_INJECTION: forcing a failure. [ 2425.018752] name failslab, interval 1, probability 0, space 0, times 0 [ 2425.020655] CPU: 0 PID: 11907 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2425.022398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2425.024508] Call Trace: [ 2425.025179] dump_stack+0x107/0x167 [ 2425.026108] should_fail.cold+0x5/0xa [ 2425.027126] ? create_object.isra.0+0x3a/0xa30 [ 2425.028408] should_failslab+0x5/0x20 [ 2425.029371] kmem_cache_alloc+0x5b/0x310 [ 2425.030402] create_object.isra.0+0x3a/0xa30 [ 2425.031507] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2425.032817] kmem_cache_alloc+0x159/0x310 [ 2425.033884] anon_vma_clone+0xdc/0x590 [ 2425.034876] __split_vma+0x17c/0x4e0 [ 2425.035818] __do_munmap+0xf40/0x1260 [ 2425.036793] ? arch_get_unmapped_area+0x450/0x450 [ 2425.038022] mmap_region+0x7cc/0x1500 [ 2425.038998] do_mmap+0x868/0x1370 [ 2425.039887] vm_mmap_pgoff+0x198/0x1f0 [ 2425.040876] ? randomize_page+0xb0/0xb0 [ 2425.041887] ksys_mmap_pgoff+0x41c/0x560 [ 2425.042914] ? find_mergeable_anon_vma+0x250/0x250 [ 2425.044164] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2425.045486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2425.046790] do_syscall_64+0x33/0x40 [ 2425.047733] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2425.049035] RIP: 0033:0x7f55325f0b62 [ 2425.050243] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2425.054882] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2425.056811] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2425.058606] RDX: 0000000000000003 RSI: 0000000000101140 RDI: 00000000200a0000 [ 2425.060417] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2425.062216] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2425.062277] FAULT_INJECTION: forcing a failure. [ 2425.062277] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2425.064012] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2425.066226] CPU: 1 PID: 11902 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2425.067006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2425.067953] Call Trace: [ 2425.068266] dump_stack+0x107/0x167 [ 2425.068680] should_fail.cold+0x5/0xa [ 2425.069112] __alloc_pages_nodemask+0x182/0x600 [ 2425.069639] ? lock_release+0x680/0x680 12:56:16 executing program 0: msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x100000000000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="90f23ee48414c664c5a43f762e4c066fb46c651599634978ad436839c78464320b6c96b3b20424870f3c2c06ff5d7954554895fb52ffeef44cb8428f018a7311e03dc310105175dc9c0211c4c3d97278f61e53c32677695a579612fbb8f5ba448869626a4ccaeaae7114a481e103e8e43576e44b8a1a88966a66b6e6b4868bf5132cbfb5bc28aa11f6dcafe94048bd40f1c5f93a760b22174a742576098c9f3a6cacab94927a4600b7455033a85d92450a398e67a065f49012273455707ce4f6ac3de7ab8003c8cdf8491d17087e25e66d7112c059f9f340c35262df6b049113566fbdd3f51963793385ba78d21a42e3a68ed5c340c7ae8e7c2912decbc2e8175a88728d5aaf4822588b5fc88aee41ed9174cc588c519b0c5869ff2d65e08d1b7821c97c58cb1be4f1c62363215f99f391d5441860295b530603b1976c54e83096e8942a43b55f24c3584a1f136a7f0d5ef95f557d2baecf95628bb94d7f1cf3bb70a37631af2938e91dbae32061fdb3e543e2c6ff3b003cf22fb97f78b59e0f97e9bae1ab06e67f32249b75ee87e1026f9856b9ed12135e6474800b00e9b304ac081713976ac37945d55ca0da28b9f4a6e2fb34cc12e8ab3f97cd3131eaa574858c0edc20098bbcd4fb98e10a3e1b88137d9b55cafe856a7fdfc52b870d13baf1025873d59cf7a73c4977ce2486005a2801c2f3b6ffd7ea4b95d6ea2d78a6b8b762c15ce619d64cf415ad208e6ecc922322251412bdafc6cc3bded6cf5b141f69a06ca222d18162d4caf3b70ba20407830be2a0b4d63fe3ea0aa668c4f6fe84bf98c2849de40db25fea70f0216c1df234e515b68fad8975e787c6c834aeff0fff9ddee36943907373d4d9b90554efd06020853cda7b28d77b515682678493081f7cf695cb23c20f791f36b8dcf209f4572de40de199fb323774b39d006299c24033a9670b63efaf60763843e57262aa2300cc3d8a00c41b1058d01496946d425e094c47feb6c05ac0e419af3519cedaeb69d798f6a8a0f6228be14c6896332eb4d233587d75107b472ec90573454d047feb3cce7ef7b4411c62bf805bc3c16d06d396546dfdff8e309cc97f47c0bdb1f145c961c1dbaae974296b1d9d726478d00bcda517db8ba710ea53e754f54181907b60c69b161145b437aa5fbb9cb55b7740dfd7ba18507369a582788206d9a513955b024c4b738adc72c93bb20a83787ba7736f66d7d0e201475050b7769b9083ccf66b34054fe8dd73023e9a936f67f2299dde07f5601a9e9fb478e1007824de649557be2676c8132ab6a20cc422a0dcec5828c240bebf8b8194c6077f70f7bc9f882693b9328512ec2f86c201661e1ac676feedb439ae38cb3bf0769348528540cf4c82fef3b38979639264d32966c4a54a829fdd28d21abe01d0d44999a3c70b8c216b90d375f0c73acaef274af90d96fed4394170f916780399a814b8684f0208626656a93f26fecdfa69ec34433d0021e96b4d977fe40c0a765cb9fb78f66b6098a49d450a87d515dbf467af3384e8ef356293bd4e8e2b06cfe5bbf6de5d393496d692029b083f8fb0f129be9007d4f1421c2398679f899357a97f9ca79ba1bb862d169e9d1ddf1d20accb950530f06e193db66724b3d12a0de09e9af272d4ca52b447d94b244407796fe08538bda0e9323bcbd9d6b3831bd80e2ab65786f1a2e8d64bb6a646514ac975068f70959a82f26a232da659eba634dab2d2c63fa0025079158bb5ff8f4da275099c68cf7bd59a6f440e6cd2bf313f846ec78194a8b22c1c9a106046cd5b01336d0bd9d6707397845b4033eb280b1f3c52d16efad9d488d4fe5c8052e78d992e155717719c49061927b0692340ad021438c71fac159817920b43ba0ac658720d8fe8b04a29c4dd0db5188c3951db8921426b2f1ec1b76d2c16d4d9b14eab6193a728fdb2f38ea193d6213337d1bed670afdab0d5d135b31dc60c0c900aa731ca0ef76cb26946d361b9beae8771c77115ed4d268190b60a2f4ffc1c5b5d30e6a996f9113352ac856a04bb42f0a6bd897f488698cd18a3367daf55b5487cbecee292a331fef96109bfa62eb7ed97a201401097123c8b06b7f8b90c0b195c2a40c74a19c4f0dd7e0a46da2f2a54b4082fa3ed2e7bcd64d394c1e60d219789623e03a70ea36decd1756cda599be2db946381a365c7795f960651b7e053201aafce20a270ec3470d7c13c0dac954b8dd8032c7668dc5740e8cb050dda39e286d211d63d9f8bc4f79838f5bbdd5d790b972dbba633b0bcd74a306ee02a0954741bcab06b3c78c61c95f1af9d10eb52b4e854764b0f78ffba56f4f83c15483105cc28c3a4f218b0f6bba100b545f1189a8103eac586eed81301eb70a7c446849d4cbcd9c521d10f70c6189ded9d8b48612d16a1a074564a67e882186da0c3828056aeb33ed98d6dbe5bbf591616f53edbd3684d7e393ed2ba808f1f5e434b970ab74ecdd616c703aaa4436e5fdec0dc44690ade613c8c99ba3033522025536e5b2d77102925eb1bb6970e5f9abcc0a4b2617169bafe95950fd4a7c02280a0ed2ca5096a1013fa62fb5200297e5e3a3ec64f8a80f268b08c37c051d7c8c2ac2499304d0cc9de38582ddb5710137aacf914c6567f9dbe33347723b4d2051b242bd50cca9ac78009202f6ecf8bae1415325f93581d82da36529ba569f00c1e62d2df4d1669cd62801448c1701ba8a53888de08e0618bc49e2d490e4dac43704fb8710d8e93d376d1179cf10fa18933fe975f266dfe45f53f92c7ddf32f71c74ed9f4c2c0bdca9d264ad8097c5939a0d8954156c75d8deeae5fa37178866622a700e50c9e7645ebeca7198ee248dd0ccbbc5e7ccd3c1afc9758b9b4d4926a7c391d0c2a13a0d87370de45409a380d6315fa2ce5adbf96c2f204bfec15beb54f053c638043030decfc8ff619944eefd96e378f2ee51a01234f8668b34aba36897896690616d499b7598d0b42072b07f217602cc8d43a3b44ac9d2bc19d3d1d3511365c53cafe8e412b2005ec908f2ca1fd00c0388e6e008ff968b735c0876c023430e12db4fa8e6f0fa6295de1779ca16aefaae37a8dd2aabac1fc14c67df6e287bf5bf0de1e00168996c58103088aa0e95b509ec834c68333a862cc5fefcb928772b32ad7d93abebc5c27b88d903f5d1902c248390ccc429ce0a0cd01b86e81d1dd62691a6b50a59fa51a44712dcb583b4281e9f764fc33c400a905fe890d239168091a56935dec0b071ed151c130f6c49b4b22ccb3152ebed7c7c85808d8d0e59550db98eb98242fb05f7e462bd4aa8ee010cbcdc23d4bbfb70f8538f2923a7078efdefbbb31c926fa2bac21aa99f666bc0073e57811255014bd3e9427515b61738ea4d8fd60276062343a2137fadddac497cdbc85fc23d63bf4adadb210cd8e2aa5caa39e81fbf1f5bab85f3ee5a741fb7f6bada7633efb46677b34aa3a49c60320f7ef436c0a02e89d5324daf7a3dc9c86b26f7bdc344b00b97a540924afcbbe671a3990b5d0a4621732580e04e1c4e7050b4759b37110570191a899afa12ff950d8b2066f4d57e5a210e9aa5ea70ab0e542cba52feed3e9b468f1b49d1b10ac4f0f7ccadace4b61f1b8a688bc0bbbf08e76199b889c7ed3e51100c3887fd0b85e0bdf97513b7997e1432192a9b16626ec183926da4783d222d804ad4d7cab74edae4113ae2af3d945f1ce16ff5df7cff5bc1a16b8c821dfaeff3e8c26d31472e71314bdec810496545877a18a66558e583b636fbf532c1f4f49f8d787ff1a3d44dbd1c971f9b3cd5489fb9c8c7e051e588ae5a5c1d1825aa8057296c85e3eaa019640475ebccb07896ea63c9d52aaf3ccf4322b8818a72ea93a91411009d938ef50b0febd075451ed490981aa22af8cf7f6893a1fae385b98d7b9c5103811a614ba05d6c8c2183ab4e209453a1991d9dcca6684b0290f53f9698edf8ce66765a0c360cbbcb885996ab7717b558776604b1844434e0d76ae2e51a7721b447e6e1b654f545944f8a68b72a24020a18292009717acd9ed1c1964e2fb8f147a8ec890078389cc7aed9d179306d00588bf2c5de4133e47722a9cde447adb3991c600e94b507702c4d03fb100c06e83ea6e5f94b3c729ecaa59cb5ead61507270fca669f126fc93ee038c9e9674cd8216df2b09129e0f1531b0c2538c7c8dd7fdf7f4fc5446166ee7cbad06caaf0c8c2e1b3e1ee60f516cafd189451d96f797ffc53897a5f19352e87bdb68cb728b1feacd7106acd6ad22944249fe9afc194e384c54569b940b3511a4f313f7159f6c52349112c2616914c4097fb5e98d448f001db1d1cc0ed28eb311aca71d4385826982ed170f3f3d0007b93e13bfc1952a2146de7b85a8f913f2708de08660ac53e02b837a63bf02c5699cf938340c52e1509bd26bb39e86fa30d3be2a4e8d5a371e2b730b5bacb3789f63a1050848a4eb16350e3cdaafed0d92d31c5585cd37e7f581547702e7d8148097b651b2c449ed53a2cc6a744b186565413a0e803f0a01d896e9bea217014416c12664a343c2492d8acdda4a254c3a090af6b422a27cebcfccecb1166affdf8fc77aad4457d5dfa1a1025232a4fbd3714525e1bdbe205eed8d1d73fb14b0e67f08ca2461a2fa8a3a28114cd87547a6d56197d2fa3788985457a5df3b4055dcb76b4cf9868ddefdabfc35275309bf26e0cb92ee5c252a9639f3eaa604f796eb36e1bbe7385f538e5ca2713ec80efc455458a7881d406bb8d9ad3dd405c0c8a84c4d08649a4b71e56587403d803988c5dda350dc417a466c732a779dd1374eb00984cc27b82e1a409e84cb376c27686cfd39cd5976849d2b62778127811dfdfb8340016efdf7e87c65639dbac756401d0d272329f4f2e5eb6fe6a36482202406817fa61d0a1053858fa127f1422be47b31b4d9b96b73484b0959e8b1ed896cbf64a6e93a2ffddc0db1d0b638018e6cc3afcf787a6eb3dac04d0035b6195c90a52c3da4d3420d31915b94f60f9af7a79fea0ba661992e24106a653124eae88b795798b4234f880f868f4953fa2651ae3da8657117a8921a0d19ea1a1c37a4766ff76911af8454bc295b718b9097974a7f66114a8759c47f3e5ccda81d14753090889d574184378fa4042e03d86810f6d94c3f61007a39b8c319f799039ee94e4cce5d59396a850a478925fc44aba4c602c2b62bea6b3db183c38b9cdb76a92770263b4c8d1a0caebe7141f306d07b30ef6b112088cea94bc9a8e9de007aca1caab9075f573546d4358642515602081b55d940a9f4aa654772b003ad839df6a384ded2bae2020f5f5f801796c260db96ff9381fb6f0767e5d18f0647b91fdaa3ed5a66212b3fb7a12e621a6baa0132c2f6e7674c25124c0f0a28455298269b3cbe61106f49a45b78519b37407b4a372294834d4cd6c6cb73de537cfb6a6525303d042212b66e7e71bbae1b3c4dc03278e8b51d4ace6ea5b3aab679e586a4487ec9873136ab29544fb9666d1a81935c1c05f21f7051790dcfe3fbaa0e3f19beecad449939e78e593763bf4e1fec0c5e0f2e18604bb55e941b433b74cb003c428ffde37d9e644abfcc0d2535ca64e973ef7cc9cdc369cd85c4886baf15f8c798237d3d7475bad4408eb150e9275e3a028ff94e0ae4a0d27cb2475ffedf238e51b825daa6686122c4a5e5f77b3b19ab0663a0bdac2c31669f3bc1d6023f17e05ed61a3f95eff867f0e34b352cc10e105ff8b0147d8f151d24a21114067fedcb263944758d84573566d19fab4f3695c40b176d733b", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:56:16 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x3c7, 0x8040) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r2, 0x4) sendfile(r2, r3, 0x0, 0x100000001) openat(r2, &(0x7f0000000000)='./file0\x00', 0x4000, 0x70) [ 2425.070088] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2425.070872] ? lock_downgrade+0x6d0/0x6d0 [ 2425.071489] alloc_pages_current+0x187/0x280 [ 2425.072051] get_zeroed_page+0x14/0xb0 [ 2425.072498] ? kasan_unpoison_shadow+0x33/0x50 [ 2425.073017] mon_alloc_buff+0xed/0x250 [ 2425.073459] mon_bin_ioctl+0x493/0xcc0 [ 2425.073899] ? wait_for_completion_io+0x270/0x270 [ 2425.074449] ? mon_bin_get_event+0x440/0x440 [ 2425.074949] ? selinux_file_ioctl+0xb6/0x270 [ 2425.075453] ? mon_bin_get_event+0x440/0x440 [ 2425.075957] __x64_sys_ioctl+0x19a/0x210 [ 2425.076429] do_syscall_64+0x33/0x40 [ 2425.076850] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2425.077431] RIP: 0033:0x7f6bde1e2b19 [ 2425.077886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2425.079975] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2425.080856] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2425.081661] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2425.082467] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2425.083273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2425.084082] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:56:16 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x6, 0x0, 0x65, 0x2}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x50, r4, 0x0) dup2(r1, r0) 12:56:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x44800) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x20800) 12:56:16 executing program 4: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0x5, {{0x2, 0x4e21, @private=0xa010101}}}, 0x88) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x0, 0x20, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000000)) dup2(r1, r0) 12:56:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000080)) r2 = getpgrp(0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xffffffc4}) r4 = syz_open_procfs(r2, &(0x7f0000000000)='net/bnep\x00') read$usbmon(r4, &(0x7f0000000040)=""/2, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) 12:56:16 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 69) 12:56:16 executing program 6: getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x5, 0x4, 0x5]}, &(0x7f0000000080)=0x44) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e24, @local}, {0x1, @local}, 0x44, {0x2, 0x4e21, @loopback}, 'veth0_to_batadv\x00'}) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) 12:56:16 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0xd2, 0x404001) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x501000, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000080)={&(0x7f0000000040), &(0x7f0000000180)=""/229, 0xe5}) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x5f8fc3c3}) 12:56:16 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 61) [ 2425.202734] loop0: detected capacity change from 0 to 32768 [ 2425.213185] FAULT_INJECTION: forcing a failure. [ 2425.213185] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2425.214662] CPU: 1 PID: 11941 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2425.215451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2425.216396] Call Trace: [ 2425.216699] dump_stack+0x107/0x167 [ 2425.217118] should_fail.cold+0x5/0xa [ 2425.217551] __alloc_pages_nodemask+0x182/0x600 [ 2425.218075] ? lock_release+0x680/0x680 [ 2425.218524] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2425.219201] ? lock_downgrade+0x6d0/0x6d0 [ 2425.219677] alloc_pages_current+0x187/0x280 [ 2425.220180] get_zeroed_page+0x14/0xb0 [ 2425.220620] ? kasan_unpoison_shadow+0x33/0x50 [ 2425.221137] mon_alloc_buff+0xed/0x250 [ 2425.221577] mon_bin_ioctl+0x493/0xcc0 [ 2425.222019] ? wait_for_completion_io+0x270/0x270 [ 2425.222563] ? mon_bin_get_event+0x440/0x440 [ 2425.223064] ? selinux_file_ioctl+0xb6/0x270 [ 2425.223563] ? mon_bin_get_event+0x440/0x440 [ 2425.224063] __x64_sys_ioctl+0x19a/0x210 [ 2425.224530] do_syscall_64+0x33/0x40 [ 2425.224952] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2425.225535] RIP: 0033:0x7f6bde1e2b19 [ 2425.225960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2425.228050] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2425.228915] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2425.229723] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2425.230527] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2425.231331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2425.232141] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:56:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x80084503, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f0000000080), &(0x7f00000000c0)=""/104, 0x68}) dup2(r2, r1) r3 = syz_io_uring_setup(0x782e, &(0x7f0000000000), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r4 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x109010, r4, 0x10000000) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) write$binfmt_elf32(r3, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x1, 0x9, 0x75, 0x2, 0x0, 0x5, 0x2, 0x53, 0x38, 0x27b, 0x7fffffff, 0x5, 0x20, 0x2, 0x7fff, 0x5, 0x7}, [{0x5, 0x1, 0x0, 0x6, 0x2, 0x80, 0x2, 0xff}, {0x2, 0x81, 0xdb, 0x4a, 0x7, 0x9, 0x10000, 0x3}], "12c9169c36b7168dc060d651ce0ff9912d953aab2118fb68006dc4af9443526bd43844f6e84597162dae6b4e5238700e3444861eca59157a80d9f6dd28d7894f4827c72d344157295e9d69ec035daf73021e83264df5faac9735302d08f2ae1f84d179ace2042c612cac2a1879a41404a90974441cdb483b70faeb484c1fe4ba30f1d60b31997a9c0f224b6c38feb0b0c4ca842c5f49e2a6d6682ff224861dd63b07e16c3ae6f89ba3dbc4ae6e7199628927db45c47556d49b356af85d67f15c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x838) [ 2425.248830] FAULT_INJECTION: forcing a failure. [ 2425.248830] name failslab, interval 1, probability 0, space 0, times 0 [ 2425.251409] CPU: 0 PID: 11944 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2425.252973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2425.254833] Call Trace: [ 2425.255432] dump_stack+0x107/0x167 [ 2425.256267] should_fail.cold+0x5/0xa [ 2425.257124] ? vm_area_alloc+0x1c/0x110 [ 2425.258021] should_failslab+0x5/0x20 [ 2425.258879] kmem_cache_alloc+0x5b/0x310 [ 2425.259802] vm_area_alloc+0x1c/0x110 [ 2425.260667] mmap_region+0x982/0x1500 [ 2425.261537] do_mmap+0x868/0x1370 [ 2425.262324] vm_mmap_pgoff+0x198/0x1f0 [ 2425.263201] ? randomize_page+0xb0/0xb0 [ 2425.264110] ksys_mmap_pgoff+0x41c/0x560 [ 2425.265045] ? find_mergeable_anon_vma+0x250/0x250 [ 2425.266154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2425.267337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2425.268515] do_syscall_64+0x33/0x40 [ 2425.269355] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2425.270505] RIP: 0033:0x7f55325f0b62 [ 2425.271343] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2425.275486] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2425.277216] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2425.278817] RDX: 0000000000000003 RSI: 0000000000101140 RDI: 00000000200a0000 [ 2425.280426] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2425.282031] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2425.283637] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:56:16 executing program 6: r0 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x80400) r6 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001340)={0x0}) syz_open_procfs(0x0, &(0x7f0000001540)='autogroup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000000340)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {r1}], 0x5, "b53acec1810ff0"}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001e00)={{0x0, 0x6, 0x7, 0xb7, 0x40, 0x2, 0x0, 0x40, 0x3, 0x53, 0x10001, 0x10800, 0x7fffffff, 0x0, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x0, "544d056968f26f"}) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001580), 0xc000, 0x0) r13 = openat$nvram(0xffffffffffffff9c, &(0x7f00000015c0), 0x2000, 0x0) pidfd_getfd(r12, r13, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000000)={r2}) r14 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r14, 0x0) 12:56:30 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 70) 12:56:30 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 62) 12:56:30 executing program 4: r0 = timerfd_create(0x2, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$binfmt_elf64(r1, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x6, 0x1, 0x2, 0x75fc1854, 0x3, 0x3, 0x1ff, 0x100, 0x40, 0x178, 0x7fff, 0x8dbe, 0x38, 0x1, 0x0, 0x200}, [{0x5, 0x8, 0x8, 0x1, 0x5, 0x200, 0x15, 0x8}, {0x60000000, 0xe87c, 0x9, 0xc98, 0x100000000, 0x80000000, 0x1f, 0xfffffffffffffff8}], "550e6587e36e66a2a6cf409419239559d822e2a9bd3d4a10f13eb65e2c024a2feaae567db1b91d42020f6ffef497a8021eb595b8203dbf2f3d5304a3c3415496b74147248abdc8698f0f0882e6aadcd2a0bdd0bfdfc3e6f5b259918b1ae15669559015674fccdb0bcd2a39b9ce1b9e8ede89023e90a9d059eeda8d0634a750f972312da9bc9a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x936) timerfd_settime(r1, 0x1, &(0x7f0000000140)={{0x0, 0x3938700}, {r3, r4+60000000}}, &(0x7f0000000180)) read(r0, &(0x7f0000000000)=""/237, 0xed) r5 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r6 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) dup2(r6, r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000005, 0x4000010, r0, 0xe343c000) 12:56:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) fstat(r0, &(0x7f0000000000)) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)}) 12:56:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r0, 0x4) sendfile(r0, r1, 0x0, 0x100000001) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24cf62000000", @ANYRES16=r2, @ANYBLOB="20003d5eb3d90007000000080002000004b709000000000000000000000000000800"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20044000) r3 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r3, 0x0) 12:56:30 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x480) 12:56:30 executing program 0: msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) [ 2438.915080] FAULT_INJECTION: forcing a failure. [ 2438.915080] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2438.917690] CPU: 0 PID: 11973 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2438.919283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2438.920645] FAULT_INJECTION: forcing a failure. [ 2438.920645] name failslab, interval 1, probability 0, space 0, times 0 [ 2438.921164] Call Trace: [ 2438.921193] dump_stack+0x107/0x167 [ 2438.921219] should_fail.cold+0x5/0xa [ 2438.925696] __alloc_pages_nodemask+0x182/0x600 [ 2438.926703] ? lock_release+0x680/0x680 [ 2438.927556] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2438.928861] ? lock_downgrade+0x6d0/0x6d0 [ 2438.929757] alloc_pages_current+0x187/0x280 [ 2438.930697] get_zeroed_page+0x14/0xb0 [ 2438.931531] ? kasan_unpoison_shadow+0x33/0x50 [ 2438.932517] mon_alloc_buff+0xed/0x250 [ 2438.933358] mon_bin_ioctl+0x493/0xcc0 [ 2438.934192] ? wait_for_completion_io+0x270/0x270 [ 2438.935215] ? mon_bin_get_event+0x440/0x440 [ 2438.936153] ? selinux_file_ioctl+0xb6/0x270 [ 2438.937101] ? mon_bin_get_event+0x440/0x440 [ 2438.938037] __x64_sys_ioctl+0x19a/0x210 [ 2438.938901] do_syscall_64+0x33/0x40 [ 2438.939692] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2438.940785] RIP: 0033:0x7f6bde1e2b19 [ 2438.941580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2438.945498] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2438.947111] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2438.948634] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2438.950144] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2438.951654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2438.953172] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:56:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x10010, r0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x7698}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x755, 0x0, 0x2, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xb, 0x12, r1, 0xa757f000) syz_io_uring_setup(0x28d3, &(0x7f0000000000)={0x0, 0x9387, 0x8, 0x0, 0x1f2, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000e, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r6, 0x4, 0xc00) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f0000000240)="9469578b57fc8cef9b2f42e2f616db401c6fb86b1b0e0f837820473d07cc3f64af8963e615b33c6004bc84cef10f8c66a423e0b8324c54f84dfc4b2dbadbaeec758c2e9890d059db6ff016dbad65998a07cb965fcd9c4fcb", 0x58}, {&(0x7f0000000700)="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", 0x1000}], 0x3}, 0x3000c080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r6, &(0x7f0000000100), 0x0, 0x0, 0x80000, 0x1, {0x0, r7}}, 0x3f) [ 2438.954716] CPU: 1 PID: 11967 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2438.956500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2438.958306] Call Trace: [ 2438.958885] dump_stack+0x107/0x167 [ 2438.959677] should_fail.cold+0x5/0xa [ 2438.960508] ? create_object.isra.0+0x3a/0xa30 [ 2438.961477] should_failslab+0x5/0x20 [ 2438.962484] kmem_cache_alloc+0x5b/0x310 [ 2438.963353] create_object.isra.0+0x3a/0xa30 [ 2438.964292] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2438.965391] kmem_cache_alloc+0x159/0x310 [ 2438.966272] vm_area_alloc+0x1c/0x110 [ 2438.967080] mmap_region+0x982/0x1500 [ 2438.967894] do_mmap+0x868/0x1370 [ 2438.968645] vm_mmap_pgoff+0x198/0x1f0 [ 2438.969475] ? randomize_page+0xb0/0xb0 [ 2438.970326] ksys_mmap_pgoff+0x41c/0x560 [ 2438.971182] ? find_mergeable_anon_vma+0x250/0x250 [ 2438.972218] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2438.973332] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2438.974424] do_syscall_64+0x33/0x40 [ 2438.975212] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2438.976305] RIP: 0033:0x7f55325f0b62 [ 2438.977090] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2438.980970] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2438.982580] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2438.984100] RDX: 0000000000000003 RSI: 0000000000101140 RDI: 00000000200a0000 [ 2438.985618] RBP: 00000000200a0000 R08: 0000000000000004 R09: 0000000000000000 [ 2438.987122] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2438.988636] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:56:30 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 63) [ 2439.069105] FAULT_INJECTION: forcing a failure. [ 2439.069105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2439.071884] CPU: 1 PID: 11987 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2439.073396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2439.075188] Call Trace: [ 2439.075762] dump_stack+0x107/0x167 [ 2439.076556] should_fail.cold+0x5/0xa [ 2439.077383] __alloc_pages_nodemask+0x182/0x600 [ 2439.078387] ? lock_release+0x680/0x680 [ 2439.079246] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2439.080553] ? lock_downgrade+0x6d0/0x6d0 [ 2439.081455] alloc_pages_current+0x187/0x280 [ 2439.082403] get_zeroed_page+0x14/0xb0 [ 2439.083239] ? kasan_unpoison_shadow+0x33/0x50 [ 2439.084234] mon_alloc_buff+0xed/0x250 [ 2439.085081] mon_bin_ioctl+0x493/0xcc0 [ 2439.085903] ? wait_for_completion_io+0x270/0x270 [ 2439.086917] ? mon_bin_get_event+0x440/0x440 [ 2439.087845] ? selinux_file_ioctl+0xb6/0x270 [ 2439.088778] ? mon_bin_get_event+0x440/0x440 [ 2439.089696] __x64_sys_ioctl+0x19a/0x210 [ 2439.090540] do_syscall_64+0x33/0x40 [ 2439.091317] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2439.092397] RIP: 0033:0x7f6bde1e2b19 [ 2439.093183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2439.097041] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2439.098644] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2439.100141] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2439.101642] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2439.103151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2439.104668] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2439.119753] loop0: detected capacity change from 0 to 32768 12:56:30 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x0, 0x20}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x4, 0x2010, r1, 0x0) 12:56:30 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 71) 12:56:30 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x92200, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x5) [ 2439.161965] FAULT_INJECTION: forcing a failure. [ 2439.161965] name failslab, interval 1, probability 0, space 0, times 0 [ 2439.164695] CPU: 1 PID: 11995 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2439.166199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2439.167997] Call Trace: [ 2439.168590] dump_stack+0x107/0x167 [ 2439.169378] should_fail.cold+0x5/0xa [ 2439.170202] ? vm_area_dup+0x78/0x290 [ 2439.171024] should_failslab+0x5/0x20 [ 2439.171850] kmem_cache_alloc+0x5b/0x310 [ 2439.172746] vm_area_dup+0x78/0x290 [ 2439.173537] ? lock_acquire+0x197/0x470 [ 2439.174405] ? mark_lock+0xf5/0x2df0 [ 2439.175221] ? lock_chain_count+0x20/0x20 [ 2439.176128] ? __lock_acquire+0x1657/0x5b00 [ 2439.177081] ? mark_lock+0xf5/0x2df0 [ 2439.177889] ? find_held_lock+0x2c/0x110 [ 2439.178768] ? vm_area_alloc+0x110/0x110 [ 2439.179655] ? __lock_acquire+0x1657/0x5b00 [ 2439.180615] ? lock_acquire+0x197/0x470 [ 2439.181473] ? __mm_populate+0x24e/0x360 [ 2439.182360] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2439.183496] ? vmacache_find+0x55/0x2a0 [ 2439.184371] __split_vma+0xa8/0x4e0 [ 2439.185165] __do_munmap+0x365/0x1260 [ 2439.185991] ? arch_get_unmapped_area+0x450/0x450 [ 2439.187036] ? lock_release+0x680/0x680 [ 2439.187899] mmap_region+0x7cc/0x1500 [ 2439.188745] do_mmap+0x868/0x1370 [ 2439.189505] vm_mmap_pgoff+0x198/0x1f0 [ 2439.190351] ? randomize_page+0xb0/0xb0 [ 2439.191257] ksys_mmap_pgoff+0x41c/0x560 [ 2439.192134] ? find_mergeable_anon_vma+0x250/0x250 [ 2439.193204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2439.194337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2439.195458] do_syscall_64+0x33/0x40 [ 2439.196266] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2439.197380] RIP: 0033:0x7f55325f0b62 12:56:30 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 64) [ 2439.198184] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2439.202404] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2439.204047] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2439.205591] RDX: 0000000000000003 RSI: 0000000000010000 RDI: 0000000020ffc000 [ 2439.207128] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2439.208677] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2439.210215] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:56:30 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r2, 0x4) sendfile(r2, r3, 0x0, 0x100000001) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x1ff) 12:56:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x12, r0, 0x0) [ 2439.287729] FAULT_INJECTION: forcing a failure. [ 2439.287729] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2439.290396] CPU: 1 PID: 12004 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2439.291894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2439.293696] Call Trace: [ 2439.294270] dump_stack+0x107/0x167 [ 2439.295059] should_fail.cold+0x5/0xa [ 2439.295888] __alloc_pages_nodemask+0x182/0x600 [ 2439.296904] ? lock_release+0x680/0x680 [ 2439.297766] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2439.299068] ? lock_downgrade+0x6d0/0x6d0 [ 2439.299977] alloc_pages_current+0x187/0x280 [ 2439.300936] get_zeroed_page+0x14/0xb0 12:56:30 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8000000, 0x80881) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) [ 2439.301775] ? kasan_unpoison_shadow+0x33/0x50 [ 2439.302898] mon_alloc_buff+0xed/0x250 [ 2439.303741] mon_bin_ioctl+0x493/0xcc0 [ 2439.304585] ? wait_for_completion_io+0x270/0x270 [ 2439.305610] ? mon_bin_get_event+0x440/0x440 [ 2439.306547] ? selinux_file_ioctl+0xb6/0x270 [ 2439.307481] ? mon_bin_get_event+0x440/0x440 [ 2439.308419] __x64_sys_ioctl+0x19a/0x210 [ 2439.309287] do_syscall_64+0x33/0x40 [ 2439.310080] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2439.311165] RIP: 0033:0x7f6bde1e2b19 [ 2439.311952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2439.315849] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2439.317464] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2439.318977] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2439.320486] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2439.321990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2439.323496] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:56:30 executing program 1: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) 12:56:30 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r2, 0x0, 0x100000001) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xa79d) 12:56:30 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="01a206000000000018000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000280)) dup2(r2, r0) 12:56:45 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 72) [ 2453.860692] FAULT_INJECTION: forcing a failure. [ 2453.860692] name failslab, interval 1, probability 0, space 0, times 0 [ 2453.863410] CPU: 1 PID: 12033 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2453.865042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2453.866961] Call Trace: [ 2453.867576] dump_stack+0x107/0x167 12:56:45 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r1, 0x4) sendfile(r1, r1, 0x0, 0x100000001) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:sysfs_t:s0\x00', 0x1d, 0x1) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x8) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0xfffffffffffffff8, 0x0, 0x3, 0x1, 0x1, [{0x7, 0xffff, 0x3, '\x00', 0x1100}]}) 12:56:45 executing program 0: msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 12:56:45 executing program 1: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x408, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x4008000) r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x1b28}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x2, 0x9) 12:56:45 executing program 4: semop(0x0, &(0x7f0000000000)=[{0x2, 0xffff, 0x1000}], 0x1) r0 = semget(0x1, 0x0, 0x80) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x8, 0x1000}, {0x4, 0x8, 0x1800}], 0x2, &(0x7f0000000080)={0x0, 0x3938700}) r1 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r2, r1) 12:56:45 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 65) 12:56:45 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/36, 0x24) 12:56:45 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x500) [ 2453.868597] should_fail.cold+0x5/0xa [ 2453.869821] ? create_object.isra.0+0x3a/0xa30 [ 2453.871010] should_failslab+0x5/0x20 [ 2453.872004] kmem_cache_alloc+0x5b/0x310 [ 2453.873081] create_object.isra.0+0x3a/0xa30 [ 2453.874219] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2453.875544] kmem_cache_alloc+0x159/0x310 [ 2453.876642] vm_area_dup+0x78/0x290 [ 2453.877586] ? lock_acquire+0x197/0x470 [ 2453.878628] ? mark_lock+0xf5/0x2df0 [ 2453.879608] ? lock_chain_count+0x20/0x20 [ 2453.880706] ? __lock_acquire+0x1657/0x5b00 [ 2453.881830] ? mark_lock+0xf5/0x2df0 [ 2453.882791] ? find_held_lock+0x2c/0x110 [ 2453.883837] ? vm_area_alloc+0x110/0x110 [ 2453.884901] ? __lock_acquire+0x1657/0x5b00 [ 2453.886028] ? lock_acquire+0x197/0x470 [ 2453.887052] ? __mm_populate+0x24e/0x360 [ 2453.888101] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2453.889467] ? vmacache_find+0x55/0x2a0 [ 2453.890493] __split_vma+0xa8/0x4e0 [ 2453.891430] __do_munmap+0x365/0x1260 [ 2453.892415] ? arch_get_unmapped_area+0x450/0x450 [ 2453.893655] ? lock_release+0x680/0x680 [ 2453.894677] mmap_region+0x7cc/0x1500 [ 2453.895665] do_mmap+0x868/0x1370 [ 2453.896574] vm_mmap_pgoff+0x198/0x1f0 [ 2453.897576] ? randomize_page+0xb0/0xb0 [ 2453.898611] ksys_mmap_pgoff+0x41c/0x560 [ 2453.899654] ? find_mergeable_anon_vma+0x250/0x250 [ 2453.900923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2453.902432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2453.903752] do_syscall_64+0x33/0x40 [ 2453.904723] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2453.906034] RIP: 0033:0x7f55325f0b62 [ 2453.906993] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2453.911727] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2453.913682] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2453.915503] RDX: 0000000000000003 RSI: 0000000000010000 RDI: 0000000020ffc000 [ 2453.916745] FAULT_INJECTION: forcing a failure. [ 2453.916745] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2453.917335] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2453.917348] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2453.917368] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2453.924258] CPU: 0 PID: 12048 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2453.925105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2453.926152] Call Trace: [ 2453.926477] dump_stack+0x107/0x167 [ 2453.926922] should_fail.cold+0x5/0xa [ 2453.927389] __alloc_pages_nodemask+0x182/0x600 [ 2453.927952] ? lock_release+0x680/0x680 [ 2453.928435] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2453.929155] ? lock_downgrade+0x6d0/0x6d0 [ 2453.929657] alloc_pages_current+0x187/0x280 [ 2453.930185] get_zeroed_page+0x14/0xb0 [ 2453.930650] ? kasan_unpoison_shadow+0x33/0x50 [ 2453.931228] mon_alloc_buff+0xed/0x250 [ 2453.931696] mon_bin_ioctl+0x493/0xcc0 [ 2453.932164] ? wait_for_completion_io+0x270/0x270 [ 2453.932775] ? mon_bin_get_event+0x440/0x440 [ 2453.933303] ? selinux_file_ioctl+0xb6/0x270 [ 2453.933825] ? mon_bin_get_event+0x440/0x440 [ 2453.934353] __x64_sys_ioctl+0x19a/0x210 [ 2453.934835] do_syscall_64+0x33/0x40 [ 2453.935278] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2453.935893] RIP: 0033:0x7f6bde1e2b19 [ 2453.936345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2453.938674] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2453.939587] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2453.940485] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2453.941394] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2453.942296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2453.943193] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2453.955042] audit: type=1400 audit(1763989005.371:39): avc: denied { associate } for pid=12037 comm="syz-executor.2" name="usbmon0" dev="devtmpfs" ino=119 scontext=system_u:object_r:sysfs_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 12:56:45 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) 12:56:45 executing program 6: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x10, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) r1 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000f, 0x81013, r1, 0x0) 12:56:45 executing program 1: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r0 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r0, 0x0) 12:56:45 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 66) [ 2454.015802] FAULT_INJECTION: forcing a failure. [ 2454.015802] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2454.017255] CPU: 0 PID: 12061 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2454.018088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2454.019086] Call Trace: [ 2454.019418] dump_stack+0x107/0x167 [ 2454.019856] should_fail.cold+0x5/0xa [ 2454.020321] __alloc_pages_nodemask+0x182/0x600 [ 2454.020896] ? lock_release+0x680/0x680 [ 2454.021375] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2454.022098] ? lock_downgrade+0x6d0/0x6d0 [ 2454.022603] alloc_pages_current+0x187/0x280 [ 2454.023134] get_zeroed_page+0x14/0xb0 [ 2454.023610] ? kasan_unpoison_shadow+0x33/0x50 [ 2454.024162] mon_alloc_buff+0xed/0x250 [ 2454.024640] mon_bin_ioctl+0x493/0xcc0 [ 2454.025112] ? wait_for_completion_io+0x270/0x270 [ 2454.025692] ? mon_bin_get_event+0x440/0x440 [ 2454.026226] ? selinux_file_ioctl+0xb6/0x270 [ 2454.026759] ? mon_bin_get_event+0x440/0x440 [ 2454.027293] __x64_sys_ioctl+0x19a/0x210 [ 2454.027784] do_syscall_64+0x33/0x40 [ 2454.028233] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2454.028855] RIP: 0033:0x7f6bde1e2b19 [ 2454.029302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2454.031514] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2454.032443] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2454.033300] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2454.034155] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2454.035013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2454.035868] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:56:45 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x7446, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r4 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x7, 0x8, 0x0, {0x0, 0x0, r1}}, 0x8) dup2(r1, r0) [ 2454.059030] loop0: detected capacity change from 0 to 32768 12:56:45 executing program 6: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x6) epoll_create(0x6) 12:56:45 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 73) [ 2454.096754] FAULT_INJECTION: forcing a failure. [ 2454.096754] name failslab, interval 1, probability 0, space 0, times 0 [ 2454.098155] CPU: 0 PID: 12073 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2454.098954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2454.099916] Call Trace: [ 2454.100231] dump_stack+0x107/0x167 [ 2454.100663] should_fail.cold+0x5/0xa [ 2454.101104] ? anon_vma_clone+0xdc/0x590 [ 2454.101581] should_failslab+0x5/0x20 [ 2454.102021] kmem_cache_alloc+0x5b/0x310 [ 2454.102497] anon_vma_clone+0xdc/0x590 [ 2454.102950] __split_vma+0x17c/0x4e0 [ 2454.103384] __do_munmap+0x365/0x1260 [ 2454.103835] ? arch_get_unmapped_area+0x450/0x450 [ 2454.104411] ? lock_release+0x680/0x680 [ 2454.104870] mmap_region+0x7cc/0x1500 [ 2454.105321] do_mmap+0x868/0x1370 [ 2454.105733] vm_mmap_pgoff+0x198/0x1f0 [ 2454.106187] ? randomize_page+0xb0/0xb0 [ 2454.106660] ksys_mmap_pgoff+0x41c/0x560 [ 2454.107133] ? find_mergeable_anon_vma+0x250/0x250 [ 2454.107705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2454.108314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2454.108926] do_syscall_64+0x33/0x40 [ 2454.109357] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2454.109956] RIP: 0033:0x7f55325f0b62 [ 2454.110389] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2454.112559] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2454.113442] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2454.114266] RDX: 0000000000000003 RSI: 0000000000010000 RDI: 0000000020ffc000 [ 2454.115091] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2454.115914] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2454.116751] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:56:45 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 67) [ 2454.137466] FAULT_INJECTION: forcing a failure. [ 2454.137466] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2454.138844] CPU: 0 PID: 12078 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2454.139639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2454.140602] Call Trace: [ 2454.140907] dump_stack+0x107/0x167 [ 2454.141323] should_fail.cold+0x5/0xa [ 2454.141766] __alloc_pages_nodemask+0x182/0x600 [ 2454.142295] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2454.142893] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2454.143585] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2454.144214] alloc_pages_current+0x187/0x280 [ 2454.144725] get_zeroed_page+0x14/0xb0 [ 2454.145169] ? kasan_unpoison_shadow+0x33/0x50 [ 2454.145693] mon_alloc_buff+0xed/0x250 [ 2454.146136] mon_bin_ioctl+0x493/0xcc0 [ 2454.146583] ? wait_for_completion_io+0x270/0x270 [ 2454.147128] ? mon_bin_get_event+0x440/0x440 [ 2454.147636] ? selinux_file_ioctl+0xb6/0x270 [ 2454.148139] ? mon_bin_get_event+0x440/0x440 [ 2454.148657] __x64_sys_ioctl+0x19a/0x210 [ 2454.149124] do_syscall_64+0x33/0x40 [ 2454.149548] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2454.150135] RIP: 0033:0x7f6bde1e2b19 [ 2454.150559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2454.152677] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2454.153550] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2454.154365] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2454.155175] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2454.155993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2454.156811] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 12:56:45 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x480800, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setresuid(r2, r2, 0x0) clone3(&(0x7f0000001240)={0x10000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x28}, &(0x7f0000000140)=""/191, 0xbf, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) sendmsg$nl_generic(r1, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000003800)={0x1c0, 0x19, 0x100, 0x70bd2c, 0x25dfdbfd, {0x11}, [@generic="42704674f18d17d0fd2ae4fa7efeee29ebc6f873205a4a5ca398388fe165f17ae615bbb48dc117c0ec94a4d1e562493a6846b1a1780b25be4715a3a591e055e979abf5ab9c8eb826a6040409c9d9265cf90fc299a60b567851b55e689a9226c3b831b7b887c2ef99bc77cfdc12ccdb8fe5259a6b099f63e1c04c4cf43f85b30b7c9454e5b56deb5b467aae74351c42", @generic="89b88090de5047adfc0438ca668d0ae3d227a5f8ee3b1537262e7c6f24a1d32a87b017a3231da5840668346be6869e84", @nested={0x24, 0x58, 0x0, 0x1, [@typed={0xd, 0x9, 0x0, 0x0, @binary="9c8b431133916e70fb"}, @typed={0xd, 0x2f, 0x0, 0x0, @str='/dev/vcs\x00'}]}, @typed={0x8, 0x27, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x34, 0x0, 0x0, @ipv4=@empty}, @typed={0x6, 0x11, 0x0, 0x0, @str='\x1e\x00'}, @generic="a29aa1be23053bfd90a431569b0f2fb813db41302a796f3567f0ad9e23914e7d080832280590cdf17ce424327c1c7b0c6e0c8fd37ee3e58c3cd9c6b6e4c77a22f668c9ae41f309610af0c906ef73488770431b532615422ae55d45cf20a8b1cf20cddaa6cc931834323c813344e995a4509837505ccfaff109dc0de620fe20b8e34383561f47e5d9b596538b570c3190419a43a6f230b3cf3929bf2cbc276951f064cab06909db005a6debec439bb54b9d"]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) 12:56:59 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 74) 12:56:59 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x600) 12:56:59 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x401) r2 = accept4$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x40800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000001180), 0x2) fchown(r2, 0x0, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000080)={&(0x7f0000000040), &(0x7f0000000180)=""/4095, 0xfff}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000011c0), 0x10080, 0x0) writev(r3, &(0x7f0000001680)=[{&(0x7f0000001200)="bd29f8876fb1e6d123c57fd64db7bda8a429ac867100d9fe4c18912aa38ef6b196afbf5313a6753202d8dab9b47e791eeb2a31f205731969d7165e7c476acdbddd9d700025a2285c20d0abed14c421edc73099f54bec2dc411530a9ae4123fbd7fbdd095526bcd8c350b7b5060542124ba9e6e1488d48d8b97e0478f064ec5142c851d72665fe8cece8b19d82a340771598e77f3611b2ce52cf5d8fe9d7e0f5a02c518500082057588936bf344fdbdd081363d838d771f8fb6d54002ac6cc4f27836507ad27b14b284ca72c08512b6b86e4d4d7f8a205036b13aae999d5d87d8bd0f72bfdd", 0xe5}, {&(0x7f0000001300)="c258eb79f2762d4efca41b72ca72b2e7140f5d7a009aea7b8d3232fe83554570544823c2ae011d9827002b924c14e788376aa46c90882f7c8bc9c55f1fa5a0b361dedfec3adfbdbb36a113f4111baec61d1a1fe693518a77e383c8e6", 0x5c}, {&(0x7f0000001380)="adbe38dd51f5beecbccd3aa85c4bdf4a3510dd35ed46c520a422c31bcde3580dd564982f502ef8bb22303134dcf30f43e2afd09d98b696753d7bfd9e6d5d8b99ac08106c1d8a4380ea405226332032cec4c0183473ccc177ea3c6b6a94f36f6232be96dd8ff88a0c33d30bdaee0dd660f94f7b107cab556fdbf4ec8cf7c40fcb64fbc6446812d4241ae70ac96e8109b5486b64d3f519320abe07cd1a5b659f34f7a6ba5d8e179a1d5c54606c8f723f824b7cfd8ea2f67e555468d415472427d0bef18ead5f38be0d1805e3acbdb433ab76d79fef55e54f96e309c9e7a4bd8885bbbd2c", 0xe3}, {&(0x7f0000001480)="c2113a6e0eab86e8a5799be6315d27625b7157f9c912b27e71aaf0c6a823db84e48ffcf37f05d892d9c71c622d55f8b648a3aae6c5c2180d31b16dfa90b483a5046dc5cecf4a8dcebc565aedf6c2d2de24aa51d1f0844883684145bb898a511730b56167acf0a3e176f470c2668db48758005d87b1534cd5498fee956c054938edae3f1bd661b68021337486c830c1a138488bf0a4a02d5adb629504cbcc71d0cc7a2979630114cc519a634542564ab6d7e9519f047c30cd69d784d3843cfe2a20a4634d7ec17b76918561ed7eb9fb0d26f51f216db16c1277", 0xd9}, {&(0x7f0000001580)="e7f0d3a0b34ed78ba558a3bf44b7879432905accfdb1854e555e7e39c9e630404a6074689b070430574872c50dbe37f56cc67eb9609ace49e0cd8928a3023cf4d2ab509d90a96dfc143bdd253158bf00242223756f5f1d2e257e892dd74a1b6586ef03f9d4e1caaa12580e2cf5b9e8d89efd440cd480f98f932e69336f70b839cde2fdb29ce0e0f3e5e49563322f5f5fdb6f1ea3a1a798e42f937bf6c523b2a9a0b782727315cd98300d9e2c207ea0cccb5a4c0e5892d10236a3440e8ef7980cb5185eba5c5b79bc2581933d9dbe1266a26482084509f52717d15e9f65fea2", 0xdf}], 0x5) 12:56:59 executing program 0: msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) [ 2468.225723] FAULT_INJECTION: forcing a failure. [ 2468.225723] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2468.228305] CPU: 0 PID: 12096 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2468.229762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2468.231502] Call Trace: [ 2468.232066] dump_stack+0x107/0x167 [ 2468.232842] should_fail.cold+0x5/0xa [ 2468.233647] __alloc_pages_nodemask+0x182/0x600 [ 2468.234626] ? lock_release+0x680/0x680 [ 2468.235468] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2468.236751] ? lock_downgrade+0x6d0/0x6d0 12:56:59 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x800, 0x63280) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x44a80) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4c000, 0x0) ftruncate(r2, 0x4) sendfile(r2, r3, 0x0, 0x100000001) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000340)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000280)=""/168, 0xa8}) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000080), &(0x7f00000000c0)=""/3, 0x3}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) 12:56:59 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x3, [0xf3, 0x3f, 0x7f, 0x3f, 0x8, 0x80000001]}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x2a431c44) 12:56:59 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x10001) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000180)={&(0x7f0000000100), &(0x7f0000000140)=""/32, 0x20}) r2 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r3 = dup2(r2, r0) setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r3, 0x228e, 0x99c8, 0x0, &(0x7f0000000080)={[0x3]}, 0x8) io_uring_enter(r2, 0x94e, 0xdf58, 0x2, &(0x7f0000000040)={[0x7]}, 0x8) 12:56:59 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 68) [ 2468.237637] alloc_pages_current+0x187/0x280 [ 2468.238739] get_zeroed_page+0x14/0xb0 [ 2468.239553] ? kasan_unpoison_shadow+0x33/0x50 [ 2468.240526] mon_alloc_buff+0xed/0x250 [ 2468.241353] mon_bin_ioctl+0x493/0xcc0 [ 2468.242178] ? wait_for_completion_io+0x270/0x270 [ 2468.243197] ? mon_bin_get_event+0x440/0x440 [ 2468.244136] ? selinux_file_ioctl+0xb6/0x270 [ 2468.245077] ? mon_bin_get_event+0x440/0x440 [ 2468.246009] __x64_sys_ioctl+0x19a/0x210 [ 2468.246872] do_syscall_64+0x33/0x40 [ 2468.247658] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2468.248745] RIP: 0033:0x7f6bde1e2b19 [ 2468.249529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2468.253410] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2468.255019] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2468.256527] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2468.258019] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2468.259513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2468.261143] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2468.269123] FAULT_INJECTION: forcing a failure. [ 2468.269123] name failslab, interval 1, probability 0, space 0, times 0 [ 2468.271624] CPU: 0 PID: 12105 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2468.273100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2468.274850] Call Trace: [ 2468.275412] dump_stack+0x107/0x167 [ 2468.276183] should_fail.cold+0x5/0xa [ 2468.277004] ? create_object.isra.0+0x3a/0xa30 [ 2468.277970] should_failslab+0x5/0x20 [ 2468.278777] kmem_cache_alloc+0x5b/0x310 [ 2468.279640] create_object.isra.0+0x3a/0xa30 [ 2468.280598] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2468.281681] kmem_cache_alloc+0x159/0x310 [ 2468.282568] anon_vma_clone+0xdc/0x590 [ 2468.283398] __split_vma+0x17c/0x4e0 [ 2468.284188] __do_munmap+0x365/0x1260 [ 2468.285007] ? arch_get_unmapped_area+0x450/0x450 [ 2468.286036] ? lock_release+0x680/0x680 [ 2468.286876] mmap_region+0x7cc/0x1500 [ 2468.287692] do_mmap+0x868/0x1370 [ 2468.288432] vm_mmap_pgoff+0x198/0x1f0 [ 2468.289273] ? randomize_page+0xb0/0xb0 [ 2468.290174] ksys_mmap_pgoff+0x41c/0x560 12:56:59 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x200, 0x94002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r2, 0x2) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/151, 0x97}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) [ 2468.291190] ? find_mergeable_anon_vma+0x250/0x250 [ 2468.292357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2468.293478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2468.294567] do_syscall_64+0x33/0x40 [ 2468.295348] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2468.296419] RIP: 0033:0x7f55325f0b62 [ 2468.297204] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2468.301089] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2468.302682] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2468.304175] RDX: 0000000000000003 RSI: 0000000000010000 RDI: 0000000020ffc000 [ 2468.305677] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2468.307173] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2468.308680] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:56:59 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 75) 12:56:59 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 69) [ 2468.414858] FAULT_INJECTION: forcing a failure. [ 2468.414858] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2468.417542] CPU: 1 PID: 12119 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2468.418997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2468.419175] FAULT_INJECTION: forcing a failure. [ 2468.419175] name failslab, interval 1, probability 0, space 0, times 0 [ 2468.420768] Call Trace: [ 2468.420795] dump_stack+0x107/0x167 [ 2468.420816] should_fail.cold+0x5/0xa [ 2468.420841] __alloc_pages_nodemask+0x182/0x600 [ 2468.426197] ? lock_release+0x680/0x680 [ 2468.427049] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2468.428321] ? lock_downgrade+0x6d0/0x6d0 [ 2468.429225] alloc_pages_current+0x187/0x280 [ 2468.430156] get_zeroed_page+0x14/0xb0 [ 2468.430989] ? kasan_unpoison_shadow+0x33/0x50 [ 2468.431961] mon_alloc_buff+0xed/0x250 [ 2468.432808] mon_bin_ioctl+0x493/0xcc0 [ 2468.433646] ? wait_for_completion_io+0x270/0x270 [ 2468.434677] ? mon_bin_get_event+0x440/0x440 [ 2468.435625] ? selinux_file_ioctl+0xb6/0x270 [ 2468.436579] ? mon_bin_get_event+0x440/0x440 [ 2468.437521] __x64_sys_ioctl+0x19a/0x210 [ 2468.438393] do_syscall_64+0x33/0x40 [ 2468.439190] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2468.440291] RIP: 0033:0x7f6bde1e2b19 [ 2468.441096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2468.445047] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2468.446660] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2468.448171] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2468.449701] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2468.451564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2468.453513] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2468.455475] CPU: 0 PID: 12118 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2468.456948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2468.458698] Call Trace: [ 2468.459254] dump_stack+0x107/0x167 [ 2468.460020] should_fail.cold+0x5/0xa [ 2468.460841] ? vm_area_alloc+0x1c/0x110 [ 2468.461689] should_failslab+0x5/0x20 [ 2468.462488] kmem_cache_alloc+0x5b/0x310 [ 2468.463350] vm_area_alloc+0x1c/0x110 [ 2468.464154] mmap_region+0x982/0x1500 [ 2468.464977] do_mmap+0x868/0x1370 [ 2468.465711] vm_mmap_pgoff+0x198/0x1f0 [ 2468.466537] ? randomize_page+0xb0/0xb0 [ 2468.467387] ksys_mmap_pgoff+0x41c/0x560 [ 2468.468245] ? find_mergeable_anon_vma+0x250/0x250 [ 2468.469304] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2468.470404] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2468.471493] do_syscall_64+0x33/0x40 [ 2468.472285] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2468.473372] RIP: 0033:0x7f55325f0b62 [ 2468.474157] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2468.478037] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2468.479642] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2468.481152] RDX: 0000000000000003 RSI: 0000000000010000 RDI: 0000000020ffc000 [ 2468.482651] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2468.484154] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2468.485656] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2468.492697] loop0: detected capacity change from 0 to 32768 [ 2468.628482] audit: type=1326 audit(1763989020.045:40): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12112 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b2d22b19 code=0x7ffc0000 [ 2468.635572] audit: type=1326 audit(1763989020.045:41): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12112 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b2d22b19 code=0x7ffc0000 [ 2468.645478] audit: type=1326 audit(1763989020.054:42): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12112 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60b2cd5a04 code=0x7ffc0000 [ 2468.654702] audit: type=1326 audit(1763989020.055:43): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12112 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b2d22b19 code=0x7ffc0000 [ 2468.662846] audit: type=1326 audit(1763989020.055:44): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12112 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b2d22b19 code=0x7ffc0000 [ 2468.670856] audit: type=1326 audit(1763989020.060:45): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12112 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b2d22b19 code=0x7ffc0000 [ 2468.678925] audit: type=1326 audit(1763989020.060:46): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12112 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f60b2d22b19 code=0x7ffc0000 [ 2468.687075] audit: type=1326 audit(1763989020.060:47): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12112 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b2d22b19 code=0x7ffc0000 [ 2468.694066] audit: type=1326 audit(1763989020.061:48): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12112 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b2d22b19 code=0x7ffc0000 [ 2468.701977] audit: type=1326 audit(1763989020.061:49): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12112 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60b2cd5a04 code=0x7ffc0000 12:57:13 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x404041) r3 = dup2(r1, r0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r3, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0xfcc) 12:57:13 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 76) 12:57:13 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 70) 12:57:13 executing program 0: msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"], 0x1b, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000001d40)={0x3, "9ba270128bb22e15f0ce08d5dc8452"}, 0x17, 0x0) ioctl$MON_IOCX_GET(r0, 0x9204, 0x0) r2 = msgget(0x0, 0x172) msgsnd(r2, &(0x7f0000001c80)={0x1, "8937020842090a9a7edf506e589b405baa23aab6140f26915e62de802bcc1e77183ce18b407ebd56ca5d4248dda48f377827126b2d5738a5f5bc1a7309ecb14f5b22841602c12bf2a7c216c843a52f0b8f745d96e3beb06bb37ad6174886994b19c5b877c027d21061e5b71289f68c8798a1c1"}, 0x7b, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000, 0x9}], 0x801020, &(0x7f0000001180)={[{'/dev/usbmon#\x00'}, {':\xf9$($)\\]*@\\+'}, {'/dev/usbmon#\x00'}, {'/dev/usbmon#\x00'}], [{@measure}, {@permit_directio}, {@obj_type}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) [ 2481.832215] FAULT_INJECTION: forcing a failure. [ 2481.832215] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2481.833601] FAULT_INJECTION: forcing a failure. [ 2481.833601] name failslab, interval 1, probability 0, space 0, times 0 [ 2481.834877] CPU: 1 PID: 12142 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2481.837591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.839361] Call Trace: [ 2481.839933] dump_stack+0x107/0x167 [ 2481.840724] should_fail.cold+0x5/0xa [ 2481.841541] __alloc_pages_nodemask+0x182/0x600 [ 2481.842532] ? lock_release+0x680/0x680 [ 2481.843378] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2481.844681] ? lock_downgrade+0x6d0/0x6d0 [ 2481.845575] alloc_pages_current+0x187/0x280 [ 2481.846503] get_zeroed_page+0x14/0xb0 [ 2481.847328] ? kasan_unpoison_shadow+0x33/0x50 [ 2481.848294] mon_alloc_buff+0xed/0x250 [ 2481.849134] mon_bin_ioctl+0x493/0xcc0 [ 2481.849955] ? wait_for_completion_io+0x270/0x270 [ 2481.850978] ? mon_bin_get_event+0x440/0x440 [ 2481.851913] ? selinux_file_ioctl+0xb6/0x270 [ 2481.852853] ? mon_bin_get_event+0x440/0x440 [ 2481.853787] __x64_sys_ioctl+0x19a/0x210 [ 2481.854650] do_syscall_64+0x33/0x40 [ 2481.855443] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2481.856526] RIP: 0033:0x7f6bde1e2b19 [ 2481.857317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2481.861218] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2481.862829] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2481.864422] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2481.866153] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2481.867868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2481.869638] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2481.871387] CPU: 0 PID: 12143 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2481.872212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.873209] Call Trace: [ 2481.873525] dump_stack+0x107/0x167 [ 2481.873958] should_fail.cold+0x5/0xa [ 2481.874413] ? create_object.isra.0+0x3a/0xa30 [ 2481.874956] should_failslab+0x5/0x20 [ 2481.875416] kmem_cache_alloc+0x5b/0x310 [ 2481.875908] create_object.isra.0+0x3a/0xa30 [ 2481.876428] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2481.877041] kmem_cache_alloc+0x159/0x310 [ 2481.877537] vm_area_alloc+0x1c/0x110 [ 2481.877993] mmap_region+0x982/0x1500 [ 2481.878453] do_mmap+0x868/0x1370 [ 2481.878874] vm_mmap_pgoff+0x198/0x1f0 [ 2481.879342] ? randomize_page+0xb0/0xb0 [ 2481.879823] ksys_mmap_pgoff+0x41c/0x560 [ 2481.880308] ? find_mergeable_anon_vma+0x250/0x250 [ 2481.880899] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2481.881522] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2481.882135] do_syscall_64+0x33/0x40 [ 2481.882577] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2481.883195] RIP: 0033:0x7f55325f0b62 [ 2481.883634] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2481.885817] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2481.886713] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2481.887551] RDX: 0000000000000003 RSI: 0000000000010000 RDI: 0000000020ffc000 [ 2481.888387] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2481.889230] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2481.890068] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:57:13 executing program 1: syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r0 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x495446f6e4f922f1, r0, 0x0) 12:57:13 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000001d40)={0x3}, 0x8, 0x700) 12:57:13 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x7100f000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) 12:57:13 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0, 0x0, 0x1}) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(r1, 0x58af, 0x0, 0x2, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001cc0), 0x410800, 0x0) read$usbmon(r3, &(0x7f0000001d40)=""/188, 0xbc) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, r3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x9, r7, 0x1, 0x8, 0x6, @random="1900de9961ac"}, 0x14) bind$packet(r5, &(0x7f00000002c0)={0x11, 0x5, 0x0, 0x1, 0xff, 0x6, @random="b1f4a6611bde"}, 0x14) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000001e80)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r5, 0x80, &(0x7f0000001e00)=@can, 0x0, 0x0, 0x1, {0x0, r8}}, 0x80000000) clone3(&(0x7f00000006c0)={0x20000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x19}, &(0x7f00000005c0)=""/65, 0x41, &(0x7f0000000640)=""/87, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r0}}, 0x58) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) sendmsg$netlink(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000a00)={0x4d4, 0x7fff, 0x4, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x71, 0x0, 0x0, @uid=0xee00}, @nested={0x372, 0x58, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}}, @typed={0x8, 0x3c, 0x0, 0x0, @fd=r1}, @generic="263d8236608e6240e22fa55ca659424ee593507cc98044da35d339597a4b400c5fdc3aa59b8ca573b9a0554e4a034723ea994b3873ecdba8a0e73bd344ee3dce5475b884b0c1355e8495e5fa0d98444759e21d0e9b720452ae3a78b41d7d117a76657f3ae99f4e0eb2b0996d272a02640b0a725cf41d053ccc37a99fc13ddf5747ea80514567d7d2e4b1725bc7ed4dfe567cdf32b8cc328e5525828c0b025ef320", @generic="7b8e6b4150c8e02529eb5f9dde6deb5049894b1d548cd4fde3504c53465fa4605fb213d3f04bd186ae3764d57591b06d8752389a0db6e6bfe83a03e65cd6be56ab391fd7ada8117b3bd61d4438c7f4b8014607983a8545a47b14d7fe81622befa5530961e27a66a40830df92aab4a1259e03a2bef0566a0431e477653455d0964b6af3316532d81d8a35fa2465f9257f7767030218d38a88174d616faad352e818b16377746bbbbd688bc38bbb14133130c497b3", @generic="6faff08ffc15dc21d26009811908a9f0eab8a77ac729f01d56f51fe1f2a6c15b96df1cf116286471bd1721cf3575327296e766dad1057cb7b0571d060a320ffd1415cd542f96590988e842c8a049af44e0de4be9da4babcec2389cb6827974429abca02b47902ed3a7b746e3b2886a938b11450a28c90960bd44e74b831ad3ab49dcc27bbcf17b348fa1d646985a184ef1db0a5aa35c8e45a8b63189", @typed={0x39, 0x17, 0x0, 0x0, @binary="18087c47427ea6137f25a9d33c5672fadc380a2f5c539b44973e997dedfb00074876dad219699b28c14a7c1a0fe7f130234806c92d"}, @generic="18c04a4478908f958867f76321caaa9b5fde031e8ba5665f3dc601f56517bc7d1a0361a3560706821996f40fb0e4e72e37b86aacf4fe1504f779e77a63b30ccf60890444eb18eb8904197eb1b41f645665489ada82dfd13b6e6d6c1774c7e2f00363dd639171a286c2f9784316c9af36cbb45616b2f40f87667aa54b12b8b4aaba93a8c3a929e6cce8e9919e37ab96617bda9531d1aebbef6c6c19403d5c56a9d462ce3c48793f8d41245dac22b54eb840956288361a0b109eb536dad7f761dee3813e20a96d83ae9a55d723d857adf6b5ff1f0a713c41b83f3e55003c88cbec", @generic="1d04cce374e46ff9428d50dc6fcacc93fba3a72deac83e4a73c0920479e2589f43c9f23e75906559ea53a4e3b7ed41036b35f9b4d9a46496b9e39a939a92fc10a699263fdcaf739de4aaf2ca6f1db006b7"]}, @generic="0167728d7c8a9f170a0bad5a15ad12b367a4faed9576dbc263625ef0c55f40cae6b86186aa683213e269c5bf053751038ac7c5bd82afea310955c8f09c5113495aa5251cb92f358d2e723729c1d238d1aeec5cd3659bbddda559f33afe7be06b43c1362272d9c8fffa519625128a5dd27b7fa154999bce52a4f7d072fc199cfbd2598e4cdd20a72421f2cfa36ef37eac6d8e9baf75e0d0505b11fc4d6377e6a548db5d68dd76d63489e3623a24fc9ca3e8f5a3cfe1f836a6becc32dcca64", @nested={0x7d, 0x39, 0x0, 0x1, [@generic="9b2c823ad89f6a63e8776251f4d04d5cd127405872cb60fca55547d549e9c55f8da0301d19d2c9e30d20e69dab6d1d8428f3fb96eaaf025cb5950d6a3fdbd86e6f4349b0f0425aef312b0a412ecd3b87b9fb3c562a8a3385c7ae7c069d20cbad1c09d9b8ef4f5e21dbd84379512a8da9c1", @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x9}]}, @typed={0x8, 0x91, 0x0, 0x0, @u32=0x1}]}, 0x4d4}, {&(0x7f0000001ec0)={0x268, 0x1a, 0x200, 0x70bd29, 0x25dfdbff, "", [@nested={0x148, 0x78, 0x0, 0x1, [@generic="236ac698e69a27d52bf0766c68738d337c9ad144d7e4d1323e7f6ef5cf5c2ffdc2a11b3f9594079a6170aae9df844ccef4c99b009a7aa5e2b6ed522e00d6cd3fd14e2c636f76b279c7328d2a221d67a946edddb0e2a99de1575deb96dafce834d926cf4dbaf9ae781550fd4e3920cb565273128aa2d0fe7c5848664ae3a09d62e140ce50b0913ef9d453209d2512413fcdcbd112fc34c7b264925af1c66b61353e71f49e5d6bdc2599d8a6025ea74f959f27f67e66e91d53581636f46836978fa8033c47fa02", @generic="bdda5cbafa52b628c6a6a7c152c0e2b4c17b2f961d98d1d5204eb353a31055164dc5399527d326cbce7d7e65b99618ccbee05f7ddd655c708b26b4d8cc3d271c2d9521057de85b49003ea3903e96f108f31c6050cd78824552f1de1d1d25b66cfe27d73e0c0cc5173bd6c14b733f53a9f98ac9bf3f68b28e2b7317a28f1d"]}, @typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x105, 0x2f, 0x0, 0x1, [@generic="0ea74e42503f64fb8445ab1e74f85791517b6d6505cb4ac626ab56df96fdc5bf3b89f5d66f7b59a944ea06717d340b6fd411167033792e8dceafc4308324876d7e51ac3ab2e790e31ed96c9233f4de2337e315bdb35c53e51704756bdd0c4d3a3443e8c59384a139a66b93b30510a8e8144d17f1d10960cf326d3f3fb6c503483e4f9e55396b0b92e65384c49b4f70ae641d746a3c54140c6790020856d6ff30735f76f7fabea542f83ff04833f0540fb7a6a6d92cad0f7ea2de33fa08058522c5a527761c97311d9f99e2c97d05ad9e7834701bd2d02b48ee85207fbf30fc464f7675699987dea2515c450b85dfb24341f556731fb51ca92b", @typed={0x8, 0x78, 0x0, 0x0, @uid}]}]}, 0x268}, {&(0x7f0000000880)={0x7c, 0x22, 0x10, 0x70bd26, 0x25dfdbfb, "", [@typed={0x69, 0x72, 0x0, 0x0, @binary="c03b468bb947da80b83067647c0a00945048d2e39275461215255471e43ea69204ac7d478c89732042dc1db93eb1d81432d7852636f338eb13174b29d263283e7eb04387fdef3c78fdf2e0e916575796c8e2146450015e77816e83008a023a8bf580c39f90"}]}, 0x7c}, {&(0x7f0000000900)={0xf4, 0x42, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@generic="40154d1c00734a697cfa770a30650a59e647382766063180ce48d98ab4cfbe5777c7076b221d118565f98059c34c72c56b0d3a96fe4139e20c52b759d517e14b2d8a4190f97ed0f03942b2d6c06c54b47ed8ed987ad6e2b3030ba01f559930d108236b4c222762e571bf6332aae3c71586e1480c31ccc2e09e89742a242eb48c987616c96702727ee112187850efa074bd8b962d2c3faa04862179966d39908ed0b64e808b8de9e2431079cbd13492943a33ae0ab91f3d19fe224c4ce24a178211dd0a655b58ffaefa0aeccbe7f6adf532fe4fbe286ec7ca4110a133ffc58efba5f5f1"]}, 0xf4}, {&(0x7f0000002480)={0x12e0, 0x27, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x10d, 0x58, 0x0, 0x1, [@generic="f4e9fe616918641c73dccaaa7770a5c01eea907776045c6aebd9dbc0de38945aa6e8766b8996884dd97a06e7eac655c99b6a3daef5743833a1b295af98c560153b8199f837a058fc9e49c054b4f3675db903fbb33da14dff4a342840b83862add6b5c2e380934234b69c0851b8cb63874582289883a6355b677c2bc6866a39396b4aba58bfbd769134febb43f43576860ee708b7c580e346f26868ade5f771bbdbdba1598b7f3ea41927bc50ad7fbe28df671523be70b19fbc6d5509165c82ee4fb46096d2c1183af586c334a668aede5d967a5abebdbe109d25", @typed={0x7, 0x53, 0x0, 0x0, @str=',{\x00'}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x92, 0x0, 0x0, @u32=0x5}, @typed={0x4}, @generic="441f7592b202f9dc2e8b6a3555aec3f616c206"]}, @generic="8cb0ee26bd41af4a00132fa70cc05dca221879916da9a02a899e9a6b8109d4f71653f1babe4d4ea4f12b61b96f221c4724bfdd0f7690da75dd21e4009118a82e36f6cc9d2a90cf947f1926d9bd8942ae1fd501de68b567c4addbb3d690aeafd4e6d47cb049e9f45ffb80828ea733e7529387be4616c879df4627c481ed65af637c5a67347494450a287446ef80514f2831977a37cae81b65667ec898453ff94d0dff142447dc6c6af4c4a79a68c1443216bb10510aa1aa6a9e9765bd1050f63235ef6e65c41f4437cf4339b1682e11257cfbc6b01aa9829f06", @generic="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", @nested={0xe4, 0x1a, 0x0, 0x1, [@typed={0x8, 0x88, 0x0, 0x0, @u32}, @generic="950795b35c199115d6ed4d5235e5614308a1d96bc1094309", @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@mcast2}, @generic="2b7f0c3152f13491f39c4846542794f7361f4f7b5083649d86f5587c1eee18aa201903e1f33b939de813c35f665c69fe0b63e2b80a7c2ec54a4fb297f76e79f8f1b8305af11b53f767287477488e7e6a859cb41020ca0ec264946a8385844f5340b140a451241d63b6b439c1f716dea5056ee1109de9211b1a2b13c06fbdf9d9bc79d5cc9f3ec024c7ea9f865b8262fc2a457059018678ec7b78eba87aa356bdd12bb913ff1d88164c677a31"]}]}, 0x12e0}], 0x5, &(0x7f0000001cc0), 0x0, 0x10}, 0x40004) syz_open_dev$usbmon(&(0x7f0000000000), 0x608, 0x200000) 12:57:13 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) dup2(r0, r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48894}, 0x4840) r2 = syz_open_dev$usbmon(&(0x7f0000000200), 0x0, 0x480000) flock(r2, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x80012, r2, 0x0) 12:57:13 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080)) r1 = syz_io_uring_setup(0x782e, &(0x7f0000000000), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x2, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000001c0)={0x1, 0x3, 0xffffffffffffff7f, 0xeb1, 0xffffffffffffffff}) dup2(r1, r0) r3 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_enter(r3, 0x58af, 0x0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 12:57:13 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 71) 12:57:13 executing program 3: syz_io_uring_setup(0x3dc, &(0x7f0000000400)={0x0, 0x80000, 0x19}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000480)) (fail_nth: 77) [ 2481.953104] FAULT_INJECTION: forcing a failure. [ 2481.953104] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2481.954503] CPU: 0 PID: 12160 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2481.955301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.956254] Call Trace: [ 2481.956571] dump_stack+0x107/0x167 [ 2481.956996] should_fail.cold+0x5/0xa [ 2481.957438] __alloc_pages_nodemask+0x182/0x600 [ 2481.957978] ? lock_release+0x680/0x680 [ 2481.958434] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2481.959133] ? lock_downgrade+0x6d0/0x6d0 [ 2481.959613] alloc_pages_current+0x187/0x280 [ 2481.960119] get_zeroed_page+0x14/0xb0 [ 2481.960576] ? kasan_unpoison_shadow+0x33/0x50 [ 2481.961099] mon_alloc_buff+0xed/0x250 [ 2481.961553] mon_bin_ioctl+0x493/0xcc0 [ 2481.962001] ? wait_for_completion_io+0x270/0x270 [ 2481.962558] ? mon_bin_get_event+0x440/0x440 [ 2481.963069] ? selinux_file_ioctl+0xb6/0x270 [ 2481.963579] ? mon_bin_get_event+0x440/0x440 [ 2481.964087] __x64_sys_ioctl+0x19a/0x210 [ 2481.964564] do_syscall_64+0x33/0x40 [ 2481.964992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2481.965576] RIP: 0033:0x7f6bde1e2b19 [ 2481.966003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2481.968101] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2481.968980] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2481.969793] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2481.970611] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2481.971429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2481.972246] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 [ 2481.997714] FAULT_INJECTION: forcing a failure. [ 2481.997714] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2481.999162] CPU: 0 PID: 12167 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2481.999949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2482.000904] Call Trace: [ 2482.001212] dump_stack+0x107/0x167 [ 2482.001629] should_fail.cold+0x5/0xa [ 2482.002076] __alloc_pages_nodemask+0x182/0x600 [ 2482.002609] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2482.003300] ? walk_mem_res+0x170/0x170 [ 2482.003762] alloc_pages_current+0x187/0x280 [ 2482.004267] pte_alloc_one+0x16/0x1a0 [ 2482.004715] __pte_alloc+0x1d/0x330 [ 2482.005142] remap_pfn_range_internal+0x9a3/0xf60 [ 2482.005699] ? lookup_memtype+0x5b/0x200 [ 2482.006172] ? apply_to_existing_page_range+0x40/0x40 [ 2482.006768] remap_pfn_range+0xcd/0x160 [ 2482.007225] ? remap_pfn_range_notrack+0x70/0x70 [ 2482.007765] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2482.008360] io_uring_mmap+0x398/0x530 [ 2482.008819] mmap_file+0x5e/0xe0 [ 2482.009205] mmap_region+0xc4d/0x1500 [ 2482.009648] do_mmap+0x868/0x1370 [ 2482.010050] vm_mmap_pgoff+0x198/0x1f0 [ 2482.010496] ? randomize_page+0xb0/0xb0 [ 2482.010957] ksys_mmap_pgoff+0x41c/0x560 [ 2482.011421] ? find_mergeable_anon_vma+0x250/0x250 [ 2482.011986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2482.012589] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2482.013180] do_syscall_64+0x33/0x40 [ 2482.013605] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2482.014191] RIP: 0033:0x7f55325f0b62 [ 2482.014619] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2482.016721] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2482.017591] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2482.018399] RDX: 0000000000000003 RSI: 0000000000010000 RDI: 0000000020ffc000 [ 2482.019208] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2482.020019] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2482.020836] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 12:57:13 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x20000000006, 0x27aac5) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x80012, r0, 0x0) [ 2482.025524] ------------[ cut here ]------------ [ 2482.026083] WARNING: CPU: 0 PID: 12167 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 2482.027133] Modules linked in: [ 2482.027585] CPU: 0 PID: 12167 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2482.028385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2482.029364] RIP: 0010:get_pat_info+0x216/0x270 [ 2482.029884] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 31 89 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 1a 89 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 a5 a2 5a 00 e9 [ 2482.031998] RSP: 0018:ffff88805b7e7890 EFLAGS: 00010216 [ 2482.032631] RAX: 000000000001401e RBX: ffff888050f3b900 RCX: ffffc900033f9000 [ 2482.033466] RDX: 0000000000040000 RSI: ffffffff81124466 RDI: 0000000000000007 [ 2482.034292] RBP: ffff88805b7e7948 R08: 0000000000000000 R09: ffff88805b7e7818 [ 2482.035106] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 2482.035938] R13: 1ffff1100b6fcf12 R14: 0000000000000000 R15: ffff888050f3b950 [ 2482.036778] FS: 00007f552fb66700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2482.037722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2482.038406] CR2: 00007f7e4fa9ad58 CR3: 000000000e5b4000 CR4: 0000000000350ef0 [ 2482.039234] Call Trace: [ 2482.039539] ? pgprot_writethrough+0xc0/0xc0 [ 2482.040044] ? finish_task_switch+0x126/0x5d0 [ 2482.040581] ? finish_task_switch+0xef/0x5d0 [ 2482.041078] loop0: detected capacity change from 0 to 32768 [ 2482.041741] untrack_pfn+0xdc/0x240 [ 2482.042628] ? track_pfn_insert+0x150/0x150 [ 2482.043503] ? lock_downgrade+0x6d0/0x6d0 [ 2482.044398] ? uprobe_munmap+0x1c/0x560 [ 2482.045175] unmap_single_vma+0x1bc/0x300 [ 2482.045942] zap_page_range_single+0x2ce/0x450 [ 2482.046948] ? unmap_single_vma+0x300/0x300 [ 2482.048031] ? remap_pfn_range_internal+0xc56/0xf60 [ 2482.049792] ? lookup_memtype+0x5b/0x200 [ 2482.050846] ? apply_to_existing_page_range+0x40/0x40 [ 2482.052214] remap_pfn_range+0x139/0x160 [ 2482.053324] ? remap_pfn_range_notrack+0x70/0x70 [ 2482.053868] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2482.054481] io_uring_mmap+0x398/0x530 [ 2482.054930] mmap_file+0x5e/0xe0 [ 2482.055334] mmap_region+0xc4d/0x1500 [ 2482.055777] do_mmap+0x868/0x1370 [ 2482.056189] vm_mmap_pgoff+0x198/0x1f0 [ 2482.056659] ? randomize_page+0xb0/0xb0 [ 2482.057122] ksys_mmap_pgoff+0x41c/0x560 [ 2482.057605] ? find_mergeable_anon_vma+0x250/0x250 [ 2482.058168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2482.058786] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2482.059406] do_syscall_64+0x33/0x40 [ 2482.059833] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2482.060441] RIP: 0033:0x7f55325f0b62 [ 2482.060873] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2482.062987] RSP: 002b:00007f552fb660f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2482.063874] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f55325f0b62 [ 2482.064718] RDX: 0000000000000003 RSI: 0000000000010000 RDI: 0000000020ffc000 [ 2482.065550] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000010000000 [ 2482.066382] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000480 [ 2482.067212] R13: 0000000020ffc000 R14: 0000000020000200 R15: 00000000200a0000 [ 2482.068035] irq event stamp: 1083 [ 2482.068450] hardirqs last enabled at (1093): [] console_unlock+0x92d/0xb40 [ 2482.069463] hardirqs last disabled at (1102): [] console_unlock+0x839/0xb40 [ 2482.070455] softirqs last enabled at (592): [] asm_call_irq_on_stack+0x12/0x20 [ 2482.071487] softirqs last disabled at (541): [] asm_call_irq_on_stack+0x12/0x20 [ 2482.072515] ---[ end trace 688fdd747f6da450 ]--- 12:57:13 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc666e) (fail_nth: 72) 12:57:13 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x0, 0x0) r1 = syz_io_uring_setup(0x792e, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x262}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)) dup2(r1, r0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000600)) 12:57:13 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x40, 0x36000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80012, r0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)={@multicast2, @multicast2, @loopback}, 0xc) 12:57:13 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000002440), 0x4, 0x2b1102) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80012, r0, 0x0) [ 2482.134914] FAULT_INJECTION: forcing a failure. [ 2482.134914] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2482.136322] CPU: 0 PID: 12178 Comm: syz-executor.7 Tainted: G W 5.10.246 #1 [ 2482.137270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2482.138210] Call Trace: [ 2482.138518] dump_stack+0x107/0x167 [ 2482.138935] should_fail.cold+0x5/0xa [ 2482.139377] __alloc_pages_nodemask+0x182/0x600 [ 2482.139911] ? lock_release+0x680/0x680 [ 2482.140362] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2482.141051] ? lock_downgrade+0x6d0/0x6d0 [ 2482.141526] alloc_pages_current+0x187/0x280 [ 2482.142026] get_zeroed_page+0x14/0xb0 [ 2482.142467] ? kasan_unpoison_shadow+0x33/0x50 [ 2482.142985] mon_alloc_buff+0xed/0x250 [ 2482.143431] mon_bin_ioctl+0x493/0xcc0 [ 2482.143878] ? wait_for_completion_io+0x270/0x270 [ 2482.144425] ? mon_bin_get_event+0x440/0x440 [ 2482.144939] ? selinux_file_ioctl+0xb6/0x270 [ 2482.145441] ? mon_bin_get_event+0x440/0x440 [ 2482.145948] __x64_sys_ioctl+0x19a/0x210 [ 2482.146412] do_syscall_64+0x33/0x40 [ 2482.146841] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2482.147423] RIP: 0033:0x7f6bde1e2b19 [ 2482.147844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2482.149946] RSP: 002b:00007f6bdb758188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2482.150814] RAX: ffffffffffffffda RBX: 00007f6bde2f5f60 RCX: 00007f6bde1e2b19 [ 2482.151653] RDX: 00000000000c666e RSI: 0000000000009204 RDI: 0000000000000003 [ 2482.152459] RBP: 00007f6bdb7581d0 R08: 0000000000000000 R09: 0000000000000000 [ 2482.153282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2482.154089] R13: 00007ffd3e37627f R14: 00007f6bdb758300 R15: 0000000000022000 VM DIAGNOSIS: 12:57:13 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e5c51 RDI=ffffffff879f8240 RBP=ffffffff879f8200 RSP=ffff88805b7e7238 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000031 R13=0000000000000031 R14=ffffffff879f8200 R15=dffffc0000000000 RIP=ffffffff822e5ca8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f552fb66700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7e4fa9ad58 CR3=000000000e5b4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88800fe92388 RCX=ffffffff8126ea67 RDX=1ffffffff0d0e7a7 RSI=0000000000000008 RDI=ffffffff86873d38 RBP=ffffffff86873c80 RSP=ffff88806cf09ae0 R8 =0000000000000000 R9 =ffffffff868716a7 R10=fffffbfff0d0e2d4 R11=0000000000000001 R12=ffff88800fe91a40 R13=ffff88800fe923b0 R14=ffff88806cf3b2d8 R15=0000000000044000 RIP=ffffffff8126eaa1 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ffaf1490900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7aa76936f4 CR3=000000000ef48000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=5837fe9dc1c91f3200000000000ae618 XMM01=3091d78b7ad210bf87470c67854282a4 XMM02=6b1e99b806172e3b00000000000aea08 XMM03=ac8bc31478ec851100000000000aef80 XMM04=89e0e6d072a4bda1000000000020f1d8 XMM05=d3fdd5f48436fbd700000000000aeab0 XMM06=17205ad94b433b1200000000000ae968 XMM07=a1fcdcf819d7e1e500000000000ae728 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000020200000000000002000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000