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", 0x1000, 0xfffffffffffffff9) [ 509.531004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000b40)="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", 0x1000, r2) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r1) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x42) 07:04:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 1) 07:04:07 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB='\f\x00#'], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8e0, 0x77}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20002080) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 509.548027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 509.554451] FAULT_INJECTION: forcing a failure. [ 509.554451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.556933] CPU: 0 PID: 5475 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 509.558369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 509.560127] Call Trace: [ 509.560686] dump_stack+0x107/0x167 [ 509.561467] should_fail.cold+0x5/0xa [ 509.562285] _copy_from_user+0x2e/0x1b0 [ 509.563134] io_uring_setup+0x9b/0x2980 [ 509.563973] ? __mutex_unlock_slowpath+0xe1/0x600 [ 509.564986] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 509.566045] ? wait_for_completion_io+0x270/0x270 [ 509.567063] ? perf_trace_preemptirq_template+0x26d/0x400 [ 509.568211] ? perf_trace_preemptirq_template+0x26d/0x400 [ 509.569356] ? rcu_read_lock_any_held+0x75/0xa0 [ 509.570334] ? __traceiter_irq_enable+0xc0/0xc0 [ 509.571314] ? __traceiter_irq_enable+0xc0/0xc0 [ 509.572282] ? fput_many+0x2f/0x1a0 [ 509.573051] ? trace_rcu_dyntick+0x2f/0x170 [ 509.573965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 509.575071] ? syscall_enter_from_user_mode+0x1d/0x50 [ 509.576155] do_syscall_64+0x33/0x40 [ 509.576947] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 509.578019] RIP: 0033:0x7ff8e0e10b19 [ 509.578813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 509.582686] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 509.584272] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 509.585763] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 509.587265] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 509.588754] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 509.590249] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:04:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448c9, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5451, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:07 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 13) 07:04:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet(0x2, 0x1, 0x80) dup2(r1, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0xc286}, {r0, 0x1000}, {0xffffffffffffffff, 0x6000}], 0x4, 0x1f) 07:04:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448cc, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, &(0x7f00000005c0)={'wlan0\x00'}) [ 509.744588] FAULT_INJECTION: forcing a failure. [ 509.744588] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 509.747367] CPU: 1 PID: 5488 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 509.748925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 509.750806] Call Trace: [ 509.751409] dump_stack+0x107/0x167 [ 509.752231] should_fail.cold+0x5/0xa [ 509.753093] __alloc_pages_nodemask+0x182/0x600 [ 509.754141] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 509.755506] ? cap_capable+0x1cd/0x230 [ 509.756390] alloc_pages_current+0x187/0x280 [ 509.757385] __get_free_pages+0xc/0xa0 [ 509.758264] io_uring_setup+0xe27/0x2980 [ 509.759200] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 509.760337] ? wait_for_completion_io+0x270/0x270 [ 509.761445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 509.762620] ? syscall_enter_from_user_mode+0x1d/0x50 [ 509.763791] do_syscall_64+0x33/0x40 [ 509.764628] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 509.765774] RIP: 0033:0x7ff1de49fb19 [ 509.766609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 509.770744] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 509.772449] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 509.774058] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 509.775671] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 509.777265] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 509.778883] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:04:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 2) 07:04:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448dc, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:07 executing program 7: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x4bb6, 0x9350, 0x4, &(0x7f0000000000)={[0xc20]}, 0x8) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x18b283, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x8010, r1, 0x0) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @long}, 0x14) 07:04:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5460, &(0x7f00000005c0)={'wlan0\x00'}) [ 509.871239] FAULT_INJECTION: forcing a failure. [ 509.871239] name failslab, interval 1, probability 0, space 0, times 0 [ 509.872623] CPU: 0 PID: 5498 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 509.873442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 509.874424] Call Trace: [ 509.874754] dump_stack+0x107/0x167 [ 509.875186] should_fail.cold+0x5/0xa [ 509.875639] ? io_uring_setup+0x258/0x2980 [ 509.876140] should_failslab+0x5/0x20 [ 509.876594] kmem_cache_alloc_trace+0x55/0x320 [ 509.877141] io_uring_setup+0x258/0x2980 [ 509.877627] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 509.878231] ? perf_trace_preemptirq_template+0x266/0x400 [ 509.878892] ? perf_trace_preemptirq_template+0x26d/0x400 [ 509.879550] ? perf_trace_preemptirq_template+0x26d/0x400 [ 509.880215] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 509.880843] ? syscall_enter_from_user_mode+0x1d/0x50 [ 509.881461] do_syscall_64+0x33/0x40 [ 509.881906] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 509.882517] RIP: 0033:0x7ff8e0e10b19 [ 509.882965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 509.885160] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 509.886065] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 509.886918] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 509.887758] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 509.888607] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 509.889450] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:04:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0xc286}, {r0, 0x1000}, {0xffffffffffffffff, 0x6000}], 0x4, 0x1f) [ 523.068363] FAULT_INJECTION: forcing a failure. [ 523.068363] name failslab, interval 1, probability 0, space 0, times 0 [ 523.070938] CPU: 0 PID: 5516 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 523.072435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.074229] Call Trace: [ 523.074821] dump_stack+0x107/0x167 [ 523.075616] should_fail.cold+0x5/0xa [ 523.076460] ? io_uring_setup+0x17ed/0x2980 [ 523.077405] should_failslab+0x5/0x20 [ 523.078230] kmem_cache_alloc_trace+0x55/0x320 [ 523.079225] ? alloc_pages_current+0x18f/0x280 [ 523.080244] io_uring_setup+0x17ed/0x2980 [ 523.081147] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 523.082263] ? wait_for_completion_io+0x270/0x270 [ 523.083339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.084474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.085613] do_syscall_64+0x33/0x40 [ 523.086436] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.087582] RIP: 0033:0x7ff1de49fb19 07:04:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x43001, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000600)="82817b850059f40346a1b9dbc751ef969551dcbbf73e6cbabac801eef33acf6c2e32ef25c5f7eaea7ed3821575e567f2797cc3372c7a2ae413c05d02a1961d9865c3f97b5817e086f63057927aa59a3f67e1a9b459e66774997121c6ea5ad615588e0414d01deca4d3913b49f01c2bb413319a141a2cf80b357ed646d64f8cf8b0e4e4c8e7bc6a5edaef830a2b549b19dec738fda81bfadde47370e207cd863ec85ef47d4e77e7ca28fc01fea2889e09db5d99aa932e6f978bb79672fd04abffa5924db9080bcaaf02b38f83b371671363e219c27383df1db2a10eebd5418743970512932672c31767574e981dee77171cf4901447a56062ffb1b3d567ebb6c51fbc7c917318a22d5b5f2931ac86cd3e43add03f51331b83d96b4da5c6590537d78a742a1e2507dd3e008815f08e5bc48ada85827e2b5eec7400067b1f614a80608417c363dd02f0d232cfedbe935cf7f0a49d3c82cb36af3bbdbefb57931c6b092518cff1bba63e4942c5d08d3d3b6c3d4120125fbe4fdc29a77c14226f546fe388a67ce54ca9557b7e735fc8bf8bef8f7d1c155579f630481f3ff11e846be91f006245df5db61d92eaf2cf3bd1983a34a4db13cdab2d9d75579c5598ba35931fce1cae62c4ae52bc627a01b51c17662589dc8392fd130edb96d95bb81dee773ae587ffd8821ae246ce9abb7dc59d5bac56ae1e322197e407a15e16b9e0f24317e97d220235ec10670aaef1df48eb0c6f8aceddebe5859d73d3eb496e3d931c898da401b40662a572584b6361cb43e7328e572a8ebe70100aed18c90b46717c4fc33b45ba2bff5abec2961e6b4d220f9721895d63902603628b735ed8d817df786c299d9576cf7c51f499864c462ab1bce5e1100e5d7660074a31b90b5da9699f2d66e5094aa8cdb0abbcf1fa8a62cdeca7c0d3f70f31bd16d88014f6e657f0b289f8742d3500ed60a0b2b996b9c4d3cac8b5bb2b46d2508fb4b1dd2912e7f0c838b8ac30ba50012eb0a18d72c46f49c5bae337da5ad0e3d193a851504114c84b0951c43ffd5cedfe5ea105b05436cd3e73e3301ad360fe56b7b0a288030465b9a1d4fc9619ebbfe008a0019e57eacea1b094115072cc77c7fe7dabf58a48919fbc43d7e8b694875003579ebbd550f7fea350178493241446814321a4e90edbed44227d9d52d6d768588636b8835e8d70dfd782eb1a8efe0b7198fe09221341cb13b2fc7605bd82638bbc1fe4a6175a8c49ab7bd0b1f9a8e89e9a5fe0517d013b3010ff35153ab461906021476622344424afe51167371dceb627dc53450ac352036b23b0faff04efe6c63ea853dd48954fc57b3f63e53caa1e9b094db324cdf9e398a677d1841b9254853e1a657e2432e94b186a809779a8abc5c3fdc63453d16c37c88483b04b6144f37110db31a345671fa73e362da40c3d50bf891c3d55cea0b8c28ed1f1f2e94887ec73203d380994b5a2a8c4b761177d5e38bbd4eb099cbe5ff6d6fec489da420033c80df16d1a7b3fd6d4fcc56f1e2a5f0fbcaa4c8bdd86a3289a9e766ae3e13cc0e74144bb319b63549f3436dd79c76e3f16abc67577ee01d9b8d82bf609ba627747f52f82cb9af19de1fba231564ed52b5c78c2a1e8304a5f8233566c003401fc2b2339b090935b9ebea52644a27a596b68b9e371f7806a6a1111c1f5df65d4932a7554a1e4db61ceb3d7fd618f62449f17bf3256b4bfed5af10ee0363143a5e84f7764e1b3daf3a604ed328c66c40d919cc4cf1d5199cf5462124e4725659dc04e5f9320fa923f2ed7b641c724e259e95868cce32d3edc4cdc3e238d45bef7e7794def071e835ce408602180a79a26b0ff5b110671c240e55df8c5e511b80bd0fd2b1db0c37ff53a51a6e2951c82945175dcd53c776b3f7fd331e9c3cebf2f0f63f3778afec0b6bdfcfa9dcc229483c5c4eba7fe5d0598f96e8bf417e619c80d97007968260bff524c8550f3f4876658028f86ce3f0f71da547682f334aded9000ad6fc0443848cff3a6479ded4456a6e53afe26f4b211f8f0947d8f9d28b011eec6475351cf0355859f0fcd677864deb63db620b596d8d7d3715961ed4c8229452f1abe9f603bbe0bebb7c9d5cba3853acd79a012c4da28bc3ea2931cc6e555f8bef91342017ee1bc99301cfd4d42f0055822e62365b5f028d7ba30adea21013c36b06233f2b91bafc27bcdace1c8459a9e1be8ebb629d3b68c7cb4d52dd941157d7f43efbcdbab66f4726e91d77c0897317eef1cfb487abe01f243da0ff4a42da6801aa496127db600d6f6011f7eb82ca048452bb682458feded8715a980f7e50224b19312a840bd25ec0b95455284e2820916268602d551100f2a35f5ba2e65f3fca04a7fe546d619e6a01d93bcaa3a4d384d47e761e26e69112b7e2a053de82af630c25806b02c2772f7570c67c6bcb53cbe4152a9bc2db0951987caefabd4e5c082baa634bad276a2b0b0c277dfa107d003efeac0bdf16258b7fdd6c8cea8737d09346d6399cee383440d75324d0edb30f194ac6c8ff27d8f0f82d2e06c6659fa06c1843369c826394993f28a39c06f8c6521214dab2a90f9ac1151c917bdff7fcfc3de5d2ec1e818e379e2be7605e49bd1dcbf113dbeb43c98d42e97ca672b5179815c292030ffc9162633f94c0dfa8aae5980e3efbcd98e1bb5f906f8061ba867c8879b8ba6b06e94213b5a7f52f6099674d4f80539830afec4a1164faf0032cd961cc0537c33a62cadc9462f0a3a30740c8afeb877bfdcb55f4ca3209db2d7360efea55edd0b3633bf01efc9288f2953365a51743b203f59102019ffc7361d63ca41a5f5417da38aa0ed22f23a5ab4ff912c8088315469d75d9e53778c11c8153c37b9b36339ff46fb547dad08a79972bc4565542d4b73206cbe872014552e81c19702f12f014af688e6b196aa1c7ab09d995c07da22882795161ccf68db2d2cc55cdf5997e259ce78b4d703e537a092939d071a6c637c35aa5e38b635fff8ded35aa0cdd7eed139e6171e9d238a1175de374c52f7ea2f770147343682bd5cbda1129c92b237a73afc7d3ea1962204931ef25b5118236543c2fb7c6ffdd23af8534f7f5ef9acf29bd540a9ad802ef04fc8de967e556e76803ca16e73d58b55d40b1f08b4b84db5ded4de05cfc1e6f703ed9143344bca924bdd3ff8d5cc4d41bc66de9b0f99272cd59f63a4fc81d04c43e9cc17f60650a7d97f5b1b87e537fbfe7e767256a117f5876a1a488dc4c55f0ffc9e1a271d74647d70019165d8ffd85ccac3f6927ba042ca2cd48444d6511470d46a532fa1c41bd2c07892857c6a9f3557d1532e7d7dd238e90df5bed738de1d16851ad0bbef9957a540837f776241d4fff636d5fef0a78aaadcac469265f18c8b3fea924b66fe540cc78384f61e90d3fa12a014793134c36a8b80f5a50f237edeeebdc723abe4b88bc595fca016f1c7727b201c3a3006de268171825499a316b8648c3e133545c7ca6d0b11d9d2a772abf2fec67d1e859cb435ee7b6d5f39ae54ee0ec58e46686bd7dbd60cea6a4dc08b881ce9e5b95fb48737bf4bccd5e3b5915ee3d493a426f076b5b254fcb49ee35fa920942aad7c54a3c68a26c216ac08897d2fea167ecd54d40d3ae63f9cfb6d0da2fcf83354a8237f60cabaf501520fb61c3732b2bbfa53ea46d34b7bf3b5deb2795f95ad454fbcbfe26acde030693061d85a8483e7542fd73c8582cf9f4e1b54d0397d0abb3695ab22ee8c2711d4fd1a644a64217110134832fdc19bc0e7b2248d301994965c863bbe5d2da171cf2d6c561a7b370158cad9865be9d0d33ce8dbbe4755a97c795c6d62c97a3341a8856579968d7fb766b03d5e37a7824c7777715832642ce56f2bdee90a2f9bea4786a9f844f6b1ad9586e4e86b7039ca1ddac1f181c0fd358165e8167c6d2feffd6bb3e6da340c4afc21b004a7bc1d06ce360411bddd818540fb3120633382ed0367c1f6277502a02eb8f6113a60b217eab7279132e738cc5da133daddfbcc37a0e9ff50d647c2c6a086637835970736beb8ed512bd15adf9099b68f43551cc8379eabca7066e5541ece17db6a4f05db2fe8a7d42ffc9c786ebf491fca49472eae4ab96ff757f26e39a7963d87c78b006d9fc010f6c605643c3de8cd77d312af31bb1c78bcd2ddaf681dfecd43da9841a626ffc08497f9093a42d7cf443221aff0526ef58e034442d41f9df1e240dc7415a87b9c4f947e2741118ce9a4c90d73d902b65cea7dca2b397cf2616d014d2cbe41994a0dbe28e670ff1265dd11805c48fcc97fb8a46ce1ee0d2b7d121d8420b770e7d4031565122923a32286fb56c01d869a914fd012c64c0b693d313c062a5faf5abfbca593883de2eee48da7bfecc63fa63657c02ea037347c09e6c8651af82b721b3abb01227b27bd22c3016ceaec5017d126bf7680d0074e69e33f0abbab9748cb5e9a1362a9c195a1022c66b1e4b866d6bf457b69cd43cc84060ae6439cbcecb5672bab9b92b80761f77cc8de0f23bbf842a981ffb72784bc19f2c7c78ee3357c0d69172d6b2800689b230a027108fe5945087e4d39117f5c5114d16fca4523a87398be7bd87f418b7d0a51b171300dc60170068f3b8a438aaa408af426fe90e7757f1427b1743a508f0f721c592a98b3c644bf81b04a866d4eaee4bc4523ba11d46121e63e5b70f4f8465e2ca51dea7d6283cccbc36681dac90948cd388edfcdf57cb582f22af4736ccd274db008a79eb66e52290e22ca5a55c771ddc7873027f754f6b006204bf97715b76386ab124d4f4606fe442b2b64dfe0083a20f061d4aea744b77b0127b29c662d0e236c8d7040613b411b9fd3cf01b44350690b4a98bef712d80b001daa80d242872c9b0cc3fd2af14b21f5303df8feb38796fd75e7c99c8912996eb6c71135baff6639ada5e2f3be36fb82046ab8a0ff39ea19dd2e56e281ed0c823149a6984380ba83b51b006607f7226fbdc953090abf503240038c06d542cc2357ba5dbdf0bcaf42764cb9532e7c45b0417d2a2750194359eb1d4abf4df9c38819cba06f5ed50fb419491419a4f505db4c5335d5ba74d421b93912e0aa0edc505026a4d67c22d0eeebca4ac0a7effee58c6274b9f9e58f4953b45cde54c3292187a86bd523bad99006e8cc6335e4bd319e5e16fb366ed46e7f1562b5593021e74db26035a125c1bb82b1a5c16e91c2e43e58eea3908cbd7d2c4a15d4e9792309846177c1a009901041a159ed98490c880a0372e6ed3ab39fb7467efe4c6c73de18f43f65e99fd8aece9ba6401c5919e7d79a071cf16596ae050c40f65568f8912406961e52e3f251f09c74d14c4e30d90737548ddcdf3ca7391c46ab0199b02ad0b4461ce71ae20c2a83ad0e068c6a51df70ad25847ea0e5bf84b6d1809aa54518dda13529c22242b23125c90c870b42e56bdf71df281a325c8ce2d3947c754667ca5d87872ca4e1e7bbaa186fe59920dafa662fcba22060d560495ee8586338351c71e7d6531027fc19f81c5f050daf8fd556509269de94a1da4aed49743f2d2696a47428dc8bbeebe1992f801c96a2c217bba903d9b4a088772d5b4461bcb658ab2616f04195641be2b868fef89bed63d928e99f6890c13739f64f9d9e6a58818119294a73e5c5ec078d85fd90979f43f7d447a00a903a837d43ebf7985b40997400342a14d2241e466d7b377008cb6026bbda6fbcef3de9ae9386a9584e4d83870a9614087b496a364737f7228ee168c9b3f9a37e1757f3f42037219ffb2018f1a66824ebb84e") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 523.088403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.092654] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 523.094311] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 523.095865] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 523.097432] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 523.098999] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 523.100561] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:04:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448e4, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:20 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x1}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x8010, 0xffffffffffffffff, 0x3f899000) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x58, 0xffffffffffffff75, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000440)={0x0, @aes128}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xd}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x1c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x25}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5}]}]}, 0x3c}}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xcc, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x8e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="e0ffefff", @ANYRES16=0x0, @ANYBLOB="e30b26bdbafaffffffffffff001008000300", @ANYRES32=0x0, @ANYBLOB="0c0099400800000000000000"], 0x28}}, 0x20000010) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x2) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r4, &(0x7f0000000200), 0x0) 07:04:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x1f) 07:04:20 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 14) 07:04:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 3) 07:04:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8901, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x8, 0x400000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) mmap$perf(&(0x7f0000b4e000/0x11000)=nil, 0x11000, 0x4, 0x8010, r1, 0xfdf3) syz_io_uring_setup(0x1001, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000774000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) socket$inet(0x2, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_setup(0x6f75, &(0x7f0000000280)={0x0, 0xd596, 0x20, 0x3, 0x3a7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_setup(0x132, &(0x7f0000000180)={0x0, 0xe94e, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) [ 523.110121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 07:04:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8902, &(0x7f00000005c0)={'wlan0\x00'}) [ 523.131611] FAULT_INJECTION: forcing a failure. [ 523.131611] name failslab, interval 1, probability 0, space 0, times 0 [ 523.134237] CPU: 0 PID: 5526 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 523.135751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.137584] Call Trace: [ 523.138164] dump_stack+0x107/0x167 [ 523.138975] should_fail.cold+0x5/0xa [ 523.139807] ? create_object.isra.0+0x3a/0xa30 [ 523.140794] should_failslab+0x5/0x20 [ 523.141623] kmem_cache_alloc+0x5b/0x310 [ 523.142509] create_object.isra.0+0x3a/0xa30 [ 523.143455] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 523.144544] kmem_cache_alloc_trace+0x151/0x320 [ 523.145229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 523.145556] io_uring_setup+0x258/0x2980 [ 523.145587] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 523.145609] ? perf_trace_preemptirq_template+0x266/0x400 [ 523.149927] ? perf_trace_preemptirq_template+0x26d/0x400 [ 523.151151] ? perf_trace_preemptirq_template+0x26d/0x400 [ 523.152376] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.153498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.154606] do_syscall_64+0x33/0x40 [ 523.155405] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.156522] RIP: 0033:0x7ff8e0e10b19 [ 523.157330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.161357] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 523.162991] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 523.164532] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 523.166057] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 523.167602] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 523.169139] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:04:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8903, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:21 executing program 7: openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe6b02, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000001e00)="1fe9ef6a8d8503a91bc571e8c5dd9321f456fb15ecd733d4b97331e6d482b8f070f8231b00adf101be46dc305b68c353992b503c7cb429bf3d1c43f091cf08c57aaa98f2f6e02a5383f5b399c3a0ed9446531f6d8e51d02fd64c2d4cddfa0e212376e56d3f79f627b7f4115092f89a16c5d83c7baa91ab50dfab7dea8d0b1a8f83e4eb3e890070fe34c00b788081dfb07bf9f350533c66b98408ecd9b46c733d5c75e003fc7dba1b72c1ee045b11b13ba6b21c513b5ec697f1441d0f5327e3e4cec8e9becdb4d1239529cdd31c09f268988ffcedd23982f0aa1a16a760f81eda4f3d5fc1c99e532f4fb0ac9e56ad1488f86770a4642b65a3c4cf832eba28acb297d8f8f53f6e086ea694aef6308e548562012b80ab6306804220846f451dc369daf3c6e82e280151041dd5bce7074dc064fed64acbec2fb22478fa53cf2f37e7bca091ea148155687c73f0bc099bc50fd06635b77d69e684af6b06ac9dd504cc34eb6885150e19f16a72aa694c23f271774fb4063702e05c58e7f5d3348cc58b05f55b7c594cdb5a49b82f5a5a53b5f0f3bde92cdb9802773e84c4d56f5ede46dbf226cf1984651adafc2f347e0f3bd21203d9521d63570a7cc1e7a18e21c0604e93a787cbdaf7bcbd4669ee82abed815e1e5cb68aa14537b271182ba9778ff78f19b62bef968b9e001ca4f5a65c6c687e01c296766931fe803ad1c20e094026e098c8f1173d32c3bf847f0ed05b9dae96231fd210d41c8f390589c1abb1942ffbdc553b94bfa71bc48777c9373acc21c6d877c50017a349ec1110753dfa8a2e653ea7f82c98c2235d5e23fcc00b99bcc64022e5d8fa7bb241372a85e0f795e5f9c0d1c23c811302492054cb8930f6f9223001555d48e2d3659b597fec051362699b6ab4b329049fa23517503cf7df5eb65631d830830c19768da9c12962192f9a8cb0df0d05ec866df11e88755cf22599fa5fb520e9b33c6708480d2e8d315e49f87119cc148a0fff8d117a99293786398b0e5119772bd7673b30f7fa9c3b7066495de5b6fba079f7bde999ac88280af0826a096856500fa6ecf55961199ac8dd5f04bf143184a4bf6e3f2cd4bf44e7d9fdea0350ddd52407dd94d236b3406b767fe1ed86e2f7b2b807d8a6cb9e1a2dbff8c9287516af5235db2fd8c256151b5e259941635446f2fa98b0672251828296d6e30c24913b87f2e08cdd246cbd3094bf356153e0692146ef2e5a14347cf8e624407c2543015522ce8f99e94c9ad1ece918307d5e99e6f03b58408739c5786140e536a1e3db28189d88e77f73df9bfe4740455986eb888c6749b25cef72ea96cf432e49f4899bf2739dbb5d79292611018074c339db1daf1171943121fea9adfdfea91cad70e2f6f46045065eb43c7b9407689ef4d2748f97958a4ab08c2f2e4f76387db973defebb9259f78acf03fc1652838ecd712a0bd62173699decacccb7b122226c3c0065a70fcd4d951f927a8084b5de4899926a71cb167d23349e8ad3366c8ecc19aa24d132811e5a96aa467624b9be00b4b06edad0d5342fbe931c20bc10aa9552c72ccc5bbe706378631a5ec7fa4a5655fb0c71ef5c39c21b5454b49146357070a327d0b1da0ca86478d43c60d53ccc5fc6dd9a98c7d4b56e61a964af184720a885f800b0953a11682bb7083911cf640638863b9949f3192fa5dc212c1940d4382dc0b7ed2aaaf2d46baa689280af5cf6d3bb473f27ec54724c561356ddbda50c41b908905d994584684418b2b1d2204c12180e459c3de5bc6a93ac6d38ebaa0e49023958bfed64e027bbde2f843e6940e0d01c4408b5e9b068fe5ccb726d4109d83254e350019afb36a43ed07e36ac7b3b8e7721a9f6841b591d88d29d2d091f01ce9b68c6b3b8949be7e7b8ec672f4511670d6ade0a4665862cb0808c0f0f0f5b9c633432efcff89cf321e0d1412f3912356bf82f7db44a5260046217d81f7b5cd9a1432510792e92d335a118282d2329aaff767c7827d524719e64d5ebeb1e95a10c725a1dead1cc8743a5126c8e13a31ea867d3e6bd94fe019a145da30bebf8191218beb6b04ac364118280faaaf67e1cee11025f27eabb90ebe5b7c3b1b118a14be1287487255f366e43d43c568cfd7c114817975fbde5a8294f5494ae4864b0a1f5c5101c81bbb2d3f2c7bed7339ab04cebb5af5f4e76f7ff0c7878c80532546ed8a181df0fc16a7ed18fac495fb8e9a3e81571ff43a933a2e7ec2ba78f7230eebd2807aac196ee25f07192ff7eaf986425b3763fe8c3eb5e1f36a6da0e44cdfa676269d94a629d7f340e5a81391b31bed79dcfdc7bc453a443023d7d309fb9453946c49d47c5d2e5ba416072b2e5cea5b8c1494517b8650aa130e442d747fadd8195d70ed11c9a955723d6a09b8d7072e2a78adb7eeeed445350a8be55406f7966d8375f20af5dc8955eb4f807f86a086f5181d1049e77f657b8f16a4d1d4ecec81eaac39fbff8f0c0218423778eb33a12b5dee2e8cfc4e5878af5e5dc85fd2da68229ff8b74eee23a1eb89be6cfa049eae8de3fc25edcdeed339cf604f3519e7696a884cbf9df897fbcd56e9bc1799395c5f5f42b66d5c15c8e34b98a18c17901825af66787c2e554b90d78baa780758bfa0ec41455435b5edc1ca04880e8f12312185667a3a11ae25ea0e6bbde6111031c4b194249bf69f1a25064596c6f150ed837cb12200223237aaeb9b9be16dbee2fcbdff6654da583e84a7f738080366b6b7adde0ff9f1ef7095f2a533f5565bb8cdb3d95fecd1a226732e5fb38f1a4a5d2768277710fcd159580e2d08bac68a9e48c81b181b4c0e06e7e2f55e099ae2e7fcaaf63d8d3180e80e51493f81dc54b414580e7115d5cc6ac0da2b8199b26942f9fafae6f1369f8f3190888fb2d65008d3fbdfe8c0f033fde2aa49400e2b808a099280227705f5fe7dd927521e263a0d5bd933f5be4c440436d87873d0c5abc0a4d1b5461d5189599e5c1b60729099198e217dc10b11139e96856dd6a48763a9c179080c62835221cb34f3af9ccd4a7d27266cd5ea2ae935a26a5190f4d3ab284fc5bdbadc890f89decb01d430f582a80d87b7445c3ea104e213e2be9add303f6d98d76e48a3e1715e7c82f0ce4a6eae1ab62a0cb5dbf559de46e6e213abcc8256626a0327d02297ce96b012df7c84175aef247ca1653cf5313b0818ad0e5ae6d81d44784666e0140e030152385516f77c5e268c9e27548f2c2bd5b8ed59e5a2250179c82a6b57f9c4ca930288c7ecd1e0b1e9e9cb367baa0b26e49f775943d37ec606d5b55a562f3d7319cfe09520a8a729ec6791dc81850512bafc3f0ab814b995c52374ba5e6c466e5163b771f109bed36ea18475ca38b7ec146b435d08bba986d8bcaf2ec30f2844e257db4335f19dbdaee5da51669be13b8438c97436a50573d60ace7226a69c9c16793a3e3ffa87928c2b16e241e2d5777c8debd11db84774003362b17a41ec6dbe5ac5f39ce11bbeee2b93fe81b33b5304818fe08b90238120542e6401df684a04ccf323dd9143fa86f5f9c6ea479e042d7704206a17840c1134aee39ce7e0ccd6f9865bf14794d7839952ae9574bc054b1965af0bce955a5e107e8da7fa81c16fcb0f4902a3660e515699cc91cb18248e121cc315044a1838fae69c9fd3b8283f9f5601e78cab99de1211b3613e0222c1135ad37d1d539d6779a922b48fd65e523cc893becc7cb816daf941251f3671ffeb1610c4fb04a9ca5fe823f4fbc9406bc7419365dcb7896fa9bcd31ca5a97184f0836bcd4f941dd015ebd05fd475188da25ef381928e3969844712866d8f051ff73ed60ed4dc3ce8a97c904bd03ef0d7ef2e74eaabe9c5350b44865000c74a3452e229ad5e6a23bb50bef6205ce83f02915eca5db2c690570a8f1799b449b9db09909e5c2d56f1a5637f0940c9129fd85e7c86c8679f4b507d634ff87efbc38b61c6b69b6ee06c35cc3d341fe3e13ef60963c45d2674cf5713fc73d7764168b37366dbcb5915c0018926bc645051d8375d9ea0da6fe36e84ea502391c10eb030dcada0e8cfa9e002147901c76f310385096871caf97b7a19f5a10db1e0bbac073f86be35d3dde6703146414ae9d9d98478b2f2e2b5acee93859653cdf022bddfe3208576e492be6f14f403025a18b3316585a4046469708571f26d5554e72004ccad07183b28535cee4ea58edccbd068c7793fefbda83aee6d1f36d903cc535c1b4c37309422c271d43a17958855b9a21f96281b3b0c090995b2158211987c67dc15857f53269c9b258cb5ce364060230537c098d3bfd32ccc55c0ec26408f2db42f9a4f0fdb9f7eb32eed81d4ecba2e416563a7b71dce97c9cacef75b46f5c085f9ef6480b795238577fe533fc04635a697346d0f43acc60b40110402648f5f3b7df8b86e7c049323cded0b729dd5b9b738aee88da72d7954b31e7673747c2ceab874406043c99a988348f833a21b77167899619be22f4d1a0dd81c531e57fb914bc8073ccde5d97a1236277628525d25e50812227e70c070c85531048ce9d69c3902c15801c0fa3ea4b6ed2bb3396cdd505bd394e34f2e563f63b4b55ecbcb8ed83e2ae467629ac6810432a244382aadbea203e82d926c3eb756bd3ef9daaa257b6367bf48ec2ee56601e9f72a161ec6df97280d9c9020e24813134d3b605761eb36a56500988c996ca1a12b17187e5c391a3628d510aac3498eee492f211d106b02b211dad92f46cffb2bef8a59872f4057a22b211eafa29d11a29cf9ab4fd644e351c400f900350490ea26923ceddbc2365057a9cc720663c66c07461947807dc40dc8f9dcf9b698d2f267b27a8580bf15aab52faadd871c5acf499c658eddf243f2776be3b863d662387e3b45b58a321637fa9b52c039adb3f73636593f0ac6ddd7cc02809549729fc4721801f34f1e03fc3cd22bc69b3c569798d7ba78f38b963fa17b637074a77a5d8e8ed3347e71caf3d7c2fae8312a5f045550142b4b333586a6a68ca75031b9a0d5f22b302fd98fd7c13fde6e2142bb66d1273ee2bbdde7c24050f98e6f87c6efef1d9427c0a1caf44d9fff059bc035a56d8e7333ba8369ae68eb56e4d4dadf0733f2c130b338863dce1ad46ed15c420cb45bf2259cb4cfbad8c7bc342c585b47f2fd2ca087a6edc711972db55605f0c72aa5cff10d6601463bf7288fa0e3f5ab48b1745aace4257b2b9781a6c485902e495d72f07f701396625a533055856f9a8f8fc20c16125f43461421ef0884ea64ad0d9a812372fa84b3ff3e769e16a926851bf01067a9bf5b7ef98be55857f90338ee34ecabc35e7440066cb449e4348a49a44ed0e18cfd3211d0b88d8e5cc3dd6be68a6470468907c1bdac750a6751d52ca7bd4a10535558052776fd7fb562ce3dcfd8c77922aae7d9822a0d02d83fe71a1a840c4307a18cb59f8f4fbdd33c8c4eaae913000eccbf5bb03ac596a002e7e995a910e26c9751dbfb4785ac2b980e011e9cf6ac16903586ba49b9c4d3364926da6ab90533dcdd4778e8ae8c3f6ba87363549e9bce4c42c7ba13c721f7a71bde43142c2a27ac2a1b5c91ebc92fd23eda69de84c5afa63745f4c6c866bfb17fa8a2e4a240c7124eb77109f5cd67380c842adf9851097413443f1466e3a97f0106e9eb664369d3423e706134ea5472a07c9e53709e2bb788555bf3428e2b5a50b5a373c59bc16e13a3fae3f3d094a37e16af332cc3257f649df5892c63f0954208a19c04a6968e73a3147dd612be5e881b85d6b800ee2b116a95bcb0700") bind$bt_hci(r0, &(0x7f0000000040), 0x6) unshare(0x300f0100) acct(0x0) setxattr$security_evm(&(0x7f0000001280)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001100)={0x0, 0xfffffffffffffffd, 0xac, 0x6, @buffer={0x0, 0x19000, &(0x7f0000003600)=""/102400}, &(0x7f0000000240)="3dc19c9f7bc3371c512d41607b19e4ff97e6d960a09c39818f37608daed0ba44e13508800a6ebc647a4976c982699309977aa7fc4c5772fc89e24125aa8e46d61f0b638068136018e8eea6d9070b6dce2a97982a5960cded403ffc4f57a948187bcd40d7b09862512ddfba11b933adfcf940990e1906573201dfdaea31fc56cf08a24d8925ff9c026e914e5300b300ee42b693c4c87d2c7a040d6f2f0a89aaf3d31e66c489dac480f6912239", &(0x7f00000012c0)=""/253, 0x0, 0x10000, 0xffffffffffffffff, &(0x7f0000000340)}) perf_event_open(&(0x7f0000001180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5e, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0xffffbffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) unshare(0x5c000400) fspick(r1, &(0x7f0000001240)='./file0\x00', 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001480)) dup2(r1, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0xffff) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) fadvise64(r2, 0xffffffff, 0xfffffffffffff09a, 0x0) dup2(r0, r0) 07:04:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 07:04:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448e6, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8904, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x200, "57ec7b", 0x2, 0x4}) 07:04:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448e7, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan1\x00'}) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)="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") 07:04:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 4) [ 523.425625] FAULT_INJECTION: forcing a failure. [ 523.425625] name failslab, interval 1, probability 0, space 0, times 0 [ 523.427184] CPU: 1 PID: 5559 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 523.428102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.429211] Call Trace: [ 523.429547] dump_stack+0x107/0x167 [ 523.430003] should_fail.cold+0x5/0xa [ 523.430512] ? io_uring_setup+0x33c/0x2980 [ 523.431039] should_failslab+0x5/0x20 [ 523.431549] __kmalloc+0x72/0x390 [ 523.432009] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 523.432681] io_uring_setup+0x33c/0x2980 [ 523.433223] ? __mutex_unlock_slowpath+0xe1/0x600 [ 523.433866] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 523.434509] ? wait_for_completion_io+0x270/0x270 [ 523.435156] ? perf_trace_preemptirq_template+0x26d/0x400 [ 523.435878] ? perf_trace_preemptirq_template+0x26d/0x400 [ 523.436622] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.437315] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.438006] do_syscall_64+0x33/0x40 [ 523.438496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.439186] RIP: 0033:0x7ff8e0e10b19 [ 523.439675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.442109] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 523.443082] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 523.443965] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 523.445272] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 523.446219] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 523.447134] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:04:21 executing program 7: openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe6b02, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000001e00)="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") bind$bt_hci(r0, &(0x7f0000000040), 0x6) unshare(0x300f0100) acct(0x0) setxattr$security_evm(&(0x7f0000001280)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001100)={0x0, 0xfffffffffffffffd, 0xac, 0x6, @buffer={0x0, 0x19000, &(0x7f0000003600)=""/102400}, &(0x7f0000000240)="3dc19c9f7bc3371c512d41607b19e4ff97e6d960a09c39818f37608daed0ba44e13508800a6ebc647a4976c982699309977aa7fc4c5772fc89e24125aa8e46d61f0b638068136018e8eea6d9070b6dce2a97982a5960cded403ffc4f57a948187bcd40d7b09862512ddfba11b933adfcf940990e1906573201dfdaea31fc56cf08a24d8925ff9c026e914e5300b300ee42b693c4c87d2c7a040d6f2f0a89aaf3d31e66c489dac480f6912239", &(0x7f00000012c0)=""/253, 0x0, 0x10000, 0xffffffffffffffff, &(0x7f0000000340)}) perf_event_open(&(0x7f0000001180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5e, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0xffffbffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) unshare(0x5c000400) fspick(r1, &(0x7f0000001240)='./file0\x00', 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001480)) dup2(r1, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0xffff) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) fadvise64(r2, 0xffffffff, 0xfffffffffffff09a, 0x0) dup2(r0, r0) 07:04:21 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 15) 07:04:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40049409, &(0x7f00000005c0)={'wlan0\x00'}) [ 523.485160] FAULT_INJECTION: forcing a failure. [ 523.485160] name failslab, interval 1, probability 0, space 0, times 0 [ 523.487764] CPU: 0 PID: 5562 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 523.489298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 523.491171] Call Trace: [ 523.491771] dump_stack+0x107/0x167 [ 523.492601] should_fail.cold+0x5/0xa [ 523.493468] ? create_object.isra.0+0x3a/0xa30 [ 523.494504] should_failslab+0x5/0x20 [ 523.495377] kmem_cache_alloc+0x5b/0x310 [ 523.496296] create_object.isra.0+0x3a/0xa30 [ 523.497288] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 523.498445] kmem_cache_alloc_trace+0x151/0x320 [ 523.499508] ? alloc_pages_current+0x18f/0x280 [ 523.500540] io_uring_setup+0x17ed/0x2980 [ 523.501490] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 523.502628] ? wait_for_completion_io+0x270/0x270 [ 523.503755] ? perf_trace_preemptirq_template+0x26d/0x400 [ 523.504980] ? perf_trace_preemptirq_template+0x26d/0x400 [ 523.506206] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 523.507391] ? syscall_enter_from_user_mode+0x1d/0x50 [ 523.508562] do_syscall_64+0x33/0x40 [ 523.509399] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 523.510516] RIP: 0033:0x7ff1de49fb19 [ 523.511356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.515389] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 523.517087] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 523.518673] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 523.520230] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 523.521768] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 523.523351] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:04:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8907, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 5) [ 535.162429] FAULT_INJECTION: forcing a failure. [ 535.162429] name failslab, interval 1, probability 0, space 0, times 0 [ 535.164809] CPU: 0 PID: 5577 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 535.166222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 535.168011] Call Trace: [ 535.168576] dump_stack+0x107/0x167 [ 535.169361] should_fail.cold+0x5/0xa [ 535.170433] ? copy_process+0x3305/0x78b0 [ 535.171408] should_failslab+0x5/0x20 [ 535.172220] kmem_cache_alloc_node+0x55/0x330 [ 535.173176] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 535.174296] copy_process+0x3305/0x78b0 [ 535.175160] ? stack_trace_save+0x8c/0xc0 [ 535.176045] ? lock_acquire+0x197/0x470 [ 535.176889] ? io_sq_thread_park+0x79/0xd0 [ 535.177790] ? lock_release+0x680/0x680 [ 535.178642] ? __cleanup_sighand+0xb0/0xb0 [ 535.179548] ? kernel_text_address+0xf2/0x120 [ 535.180505] ? find_held_lock+0x2c/0x110 [ 535.181373] ? io_uring_setup+0x1c23/0x2980 [ 535.182291] ? lock_downgrade+0x6d0/0x6d0 [ 535.183181] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 535.184233] create_io_thread+0xb6/0xf0 [ 535.185078] ? pidfd_prepare+0x80/0x80 [ 535.185908] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 535.186983] io_uring_setup+0x1d79/0x2980 [ 535.187870] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 535.188946] ? wait_for_completion_io+0x270/0x270 [ 535.189989] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 535.191107] ? syscall_enter_from_user_mode+0x1d/0x50 [ 535.192202] do_syscall_64+0x33/0x40 [ 535.192990] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 535.194073] RIP: 0033:0x7ff1de49fb19 [ 535.194865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 535.198763] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 535.200386] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 535.201894] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 535.203426] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 535.204935] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 535.206462] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:04:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x8, 0x400000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c009b39830e4109622d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42c9254e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab695fa4726664c00ec9aa53b8c092760da4cd088f03fad6504eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46ec35180a8fcb898160855b5044023da75f2b1f285c1462a8afa95492a14be3f42052ff535612d226506a0", "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"}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) mmap$perf(&(0x7f0000b4e000/0x11000)=nil, 0x11000, 0x4, 0x8010, r1, 0xfdf3) syz_io_uring_setup(0x1001, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000774000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) socket$inet(0x2, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) syz_io_uring_setup(0x6f75, &(0x7f0000000280)={0x0, 0xd596, 0x20, 0x3, 0x3a7, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_setup(0x132, &(0x7f0000000180)={0x0, 0xe94e, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) 07:04:33 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8903, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40086602, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:33 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 16) 07:04:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x1f) 07:04:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8910, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "e22f97", 0x1, 0x40}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8911, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) bind$bt_sco(r1, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 1) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 07:04:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40087602, &(0x7f00000005c0)={'wlan0\x00'}) [ 535.288080] FAULT_INJECTION: forcing a failure. [ 535.288080] name failslab, interval 1, probability 0, space 0, times 0 [ 535.290612] CPU: 1 PID: 5593 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 535.292090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 535.293877] Call Trace: [ 535.294443] dump_stack+0x107/0x167 [ 535.295235] should_fail.cold+0x5/0xa [ 535.296057] ? create_object.isra.0+0x3a/0xa30 [ 535.297029] should_failslab+0x5/0x20 [ 535.297843] kmem_cache_alloc+0x5b/0x310 [ 535.298720] create_object.isra.0+0x3a/0xa30 [ 535.299663] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 535.300773] __kmalloc+0x16e/0x390 [ 535.301543] io_uring_setup+0x33c/0x2980 [ 535.302412] ? __mutex_unlock_slowpath+0xe1/0x600 [ 535.303462] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 535.304541] ? wait_for_completion_io+0x270/0x270 [ 535.305589] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 535.306710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 535.307823] do_syscall_64+0x33/0x40 [ 535.308618] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 535.309711] RIP: 0033:0x7ff8e0e10b19 [ 535.310504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 535.314433] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 535.316063] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 535.317586] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 535.319129] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 535.320652] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 535.322187] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:04:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4020940d, &(0x7f00000005c0)={'wlan0\x00'}) [ 535.384280] FAULT_INJECTION: forcing a failure. 07:04:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8912, &(0x7f00000005c0)={'wlan0\x00'}) [ 535.384280] name failslab, interval 1, probability 0, space 0, times 0 [ 535.386895] CPU: 0 PID: 5603 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 535.388384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 535.390176] Call Trace: [ 535.390747] dump_stack+0x107/0x167 [ 535.391540] should_fail.cold+0x5/0xa [ 535.392360] ? getname_flags.part.0+0x50/0x4f0 [ 535.393341] should_failslab+0x5/0x20 [ 535.394158] kmem_cache_alloc+0x5b/0x310 [ 535.395043] getname_flags.part.0+0x50/0x4f0 [ 535.395988] getname+0x8e/0xd0 [ 535.396684] do_sys_openat2+0xf9/0x4d0 [ 535.397521] ? finish_task_switch+0x126/0x5d0 [ 535.398476] ? finish_task_switch+0xef/0x5d0 [ 535.399427] ? build_open_flags+0x6f0/0x6f0 [ 535.400356] ? __schedule+0x82c/0x1ea0 [ 535.401198] __x64_sys_openat+0x13f/0x1f0 [ 535.402086] ? __ia32_sys_open+0x1c0/0x1c0 [ 535.403014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 535.404136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 535.405241] do_syscall_64+0x33/0x40 [ 535.406039] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 535.407144] RIP: 0033:0x7eff8d246b19 07:04:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x1}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 535.407943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 535.411866] RSP: 002b:00007eff8a79b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 535.413444] RAX: ffffffffffffffda RBX: 00007eff8d35a020 RCX: 00007eff8d246b19 [ 535.414952] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 535.416444] RBP: 00007eff8a79b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 535.417934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.419433] R13: 00007ffcc3c1737f R14: 00007eff8a79b300 R15: 0000000000022000 07:04:33 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 17) [ 535.545157] FAULT_INJECTION: forcing a failure. [ 535.545157] name failslab, interval 1, probability 0, space 0, times 0 [ 535.547694] CPU: 0 PID: 5615 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 535.549122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 535.550861] Call Trace: [ 535.551427] dump_stack+0x107/0x167 [ 535.552193] should_fail.cold+0x5/0xa [ 535.552995] ? create_object.isra.0+0x3a/0xa30 [ 535.553947] should_failslab+0x5/0x20 [ 535.554743] kmem_cache_alloc+0x5b/0x310 [ 535.555610] create_object.isra.0+0x3a/0xa30 [ 535.556524] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 535.557585] kmem_cache_alloc_node+0x169/0x330 [ 535.558552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 535.559662] copy_process+0x3305/0x78b0 [ 535.560481] ? stack_trace_save+0x8c/0xc0 [ 535.561350] ? lock_acquire+0x197/0x470 [ 535.562183] ? io_sq_thread_park+0x79/0xd0 [ 535.563074] ? lock_release+0x680/0x680 [ 535.563909] ? __cleanup_sighand+0xb0/0xb0 [ 535.564800] ? kernel_text_address+0xf2/0x120 [ 535.565743] ? find_held_lock+0x2c/0x110 [ 535.566592] ? io_uring_setup+0x1c23/0x2980 [ 535.567502] ? lock_downgrade+0x6d0/0x6d0 [ 535.568369] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 535.569396] create_io_thread+0xb6/0xf0 [ 535.570228] ? pidfd_prepare+0x80/0x80 [ 535.571058] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 535.572101] io_uring_setup+0x1d79/0x2980 [ 535.572976] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 535.574034] ? wait_for_completion_io+0x270/0x270 [ 535.575082] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 535.576182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 535.577257] do_syscall_64+0x33/0x40 [ 535.578031] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 535.579115] RIP: 0033:0x7ff1de49fb19 [ 535.579889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 535.583731] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 535.585322] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 535.586813] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 535.588319] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 535.589806] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 535.591309] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:04:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x800448d2, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 6) [ 548.698122] FAULT_INJECTION: forcing a failure. [ 548.698122] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 548.700705] CPU: 1 PID: 5628 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 548.702167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 548.703936] Call Trace: [ 548.704499] dump_stack+0x107/0x167 [ 548.705285] should_fail.cold+0x5/0xa [ 548.706106] __alloc_pages_nodemask+0x182/0x600 [ 548.707107] ? lock_downgrade+0x6d0/0x6d0 [ 548.707992] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 548.709278] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 548.710217] FAULT_INJECTION: forcing a failure. [ 548.710217] name failslab, interval 1, probability 0, space 0, times 0 [ 548.710384] ? kmem_cache_alloc_node+0x2bc/0x330 [ 548.710403] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 548.710428] copy_process+0x62b/0x78b0 [ 548.716128] ? stack_trace_save+0x8c/0xc0 [ 548.717010] ? lock_acquire+0x197/0x470 [ 548.717854] ? io_sq_thread_park+0x79/0xd0 [ 548.718754] ? lock_release+0x680/0x680 [ 548.719608] ? __cleanup_sighand+0xb0/0xb0 [ 548.720503] ? kernel_text_address+0xf2/0x120 [ 548.721458] ? find_held_lock+0x2c/0x110 [ 548.722324] ? io_uring_setup+0x1c23/0x2980 [ 548.723246] ? lock_downgrade+0x6d0/0x6d0 [ 548.724131] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 548.725168] create_io_thread+0xb6/0xf0 [ 548.726016] ? pidfd_prepare+0x80/0x80 [ 548.726842] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 548.727884] io_uring_setup+0x1d79/0x2980 [ 548.728780] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 548.729838] ? wait_for_completion_io+0x270/0x270 [ 548.730845] ? perf_trace_preemptirq_template+0x26d/0x400 [ 548.732012] ? perf_trace_preemptirq_template+0x26d/0x400 [ 548.733201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 548.734315] ? syscall_enter_from_user_mode+0x1d/0x50 [ 548.735429] do_syscall_64+0x33/0x40 [ 548.736218] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 548.737306] RIP: 0033:0x7ff1de49fb19 [ 548.738097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 548.742031] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 548.743629] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 548.745132] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 548.746627] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 548.748122] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 548.749627] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 548.751194] CPU: 0 PID: 5626 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 548.752659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 548.754396] Call Trace: [ 548.754952] dump_stack+0x107/0x167 [ 548.755233] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 548.755718] should_fail.cold+0x5/0xa [ 548.755739] ? io_uring_setup+0x40b/0x2980 [ 548.755762] should_failslab+0x5/0x20 [ 548.759963] kmem_cache_alloc_trace+0x55/0x320 [ 548.760913] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 548.761981] io_uring_setup+0x40b/0x2980 [ 548.762835] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 548.763898] ? perf_trace_preemptirq_template+0x266/0x400 [ 548.765053] ? perf_trace_preemptirq_template+0x26d/0x400 [ 548.766194] ? perf_trace_preemptirq_template+0x26d/0x400 [ 548.767380] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 548.768695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 548.769790] do_syscall_64+0x33/0x40 [ 548.770580] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 548.771692] RIP: 0033:0x7ff8e0e10b19 [ 548.772486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 548.774269] loop7: detected capacity change from 0 to 32768 [ 548.776400] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 548.776421] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 548.776432] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 548.776451] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 07:04:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8913, &(0x7f00000005c0)={'wlan0\x00'}) 07:04:46 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4003}], 0x14, &(0x7f00000004c0)=ANY=[]) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x5) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x105343, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000000c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x20, 0x1f, 0x0, 0x1f, 0x0, 0xf3f, 0x108, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0xff}, 0x4a0, 0x4, 0x100, 0x3, 0x5, 0x80, 0x800, 0x0, 0x24232603, 0x0, 0x8}, r2, 0x1, 0xffffffffffffffff, 0x3) 07:04:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x4c, 0x12, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5}}, 0x4c}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 07:04:46 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 18) 07:04:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="74756e7a300000000002000000007400", @ANYRES32=0x0, @ANYBLOB="0700000100000004000000004a130028006800007f299078e000000200000000440c581000000002fffff0010707b8e000000200"]}) 07:04:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 548.783726] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 548.783739] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 548.793082] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 07:04:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_reject_cis={{0x2067, 0x3}, {0xc9, 0x50}}}, 0x7) [ 548.834631] FAULT_INJECTION: forcing a failure. [ 548.834631] name failslab, interval 1, probability 0, space 0, times 0 07:04:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f00000005c0)={'wlan0\x00'}) [ 548.834653] CPU: 0 PID: 5636 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 548.834666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 548.834673] Call Trace: [ 548.834700] dump_stack+0x107/0x167 [ 548.834730] should_fail.cold+0x5/0xa [ 548.834756] ? create_object.isra.0+0x3a/0xa30 07:04:46 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 19) [ 548.834779] should_failslab+0x5/0x20 [ 548.834801] kmem_cache_alloc+0x5b/0x310 [ 548.834837] create_object.isra.0+0x3a/0xa30 [ 548.834855] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 548.834888] kmem_cache_alloc+0x159/0x310 [ 548.834925] getname_flags.part.0+0x50/0x4f0 07:04:46 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8970, &(0x7f00000005c0)={'wlan1\x00'}) 07:04:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 548.834957] getname+0x8e/0xd0 [ 548.834982] do_sys_openat2+0xf9/0x4d0 [ 548.835011] ? build_open_flags+0x6f0/0x6f0 [ 548.835030] ? __mutex_unlock_slowpath+0xe1/0x600 [ 548.835060] ? wait_for_completion_io+0x270/0x270 [ 548.835094] ? perf_trace_preemptirq_template+0x26d/0x400 [ 548.835112] ? perf_trace_preemptirq_template+0x26d/0x400 [ 548.835147] __x64_sys_openat+0x13f/0x1f0 [ 548.835171] ? __ia32_sys_open+0x1c0/0x1c0 [ 548.835211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 548.835234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 548.835265] do_syscall_64+0x33/0x40 [ 548.835288] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 548.835302] RIP: 0033:0x7eff8d246b19 [ 548.835322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 548.835334] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 548.835364] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 548.835378] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 548.835391] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 548.835403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.835416] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 [ 548.922866] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 548.968409] FAULT_INJECTION: forcing a failure. [ 548.968409] name failslab, interval 1, probability 0, space 0, times 0 [ 548.968431] CPU: 1 PID: 5649 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 548.968442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 548.968448] Call Trace: [ 548.968473] dump_stack+0x107/0x167 [ 548.968494] should_fail.cold+0x5/0xa [ 548.968516] ? __delayacct_tsk_init+0x1b/0x80 [ 548.968534] should_failslab+0x5/0x20 [ 548.968553] kmem_cache_alloc+0x5b/0x310 [ 548.968577] __delayacct_tsk_init+0x1b/0x80 [ 548.968596] copy_process+0x3399/0x78b0 [ 548.968623] ? stack_trace_save+0x8c/0xc0 [ 548.968649] ? lock_acquire+0x197/0x470 [ 548.968666] ? io_sq_thread_park+0x79/0xd0 [ 548.968694] ? __cleanup_sighand+0xb0/0xb0 [ 548.968713] ? kernel_text_address+0xf2/0x120 [ 548.968736] ? find_held_lock+0x2c/0x110 [ 548.968760] ? io_uring_setup+0x1c23/0x2980 [ 548.968779] ? lock_downgrade+0x6d0/0x6d0 [ 548.968802] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 548.968822] create_io_thread+0xb6/0xf0 [ 548.968841] ? pidfd_prepare+0x80/0x80 [ 548.968867] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 548.968901] io_uring_setup+0x1d79/0x2980 [ 548.968934] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 548.968952] ? wait_for_completion_io+0x270/0x270 [ 548.968970] ? perf_trace_preemptirq_template+0x26d/0x400 [ 548.968986] ? perf_trace_preemptirq_template+0x26d/0x400 [ 548.969024] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 548.969044] ? syscall_enter_from_user_mode+0x1d/0x50 [ 548.969066] do_syscall_64+0x33/0x40 [ 548.969085] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 548.969098] RIP: 0033:0x7ff1de49fb19 [ 548.969116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 548.969126] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 548.969147] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 548.969158] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 548.969169] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 548.969180] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 548.969191] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 548.994204] FAULT_INJECTION: forcing a failure. [ 548.994204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.061064] CPU: 1 PID: 5653 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 549.061076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 549.061082] Call Trace: [ 549.061108] dump_stack+0x107/0x167 [ 549.061130] should_fail.cold+0x5/0xa [ 549.061154] strncpy_from_user+0x34/0x470 [ 549.061181] getname_flags.part.0+0x95/0x4f0 [ 549.061204] getname+0x8e/0xd0 [ 549.061225] do_sys_openat2+0xf9/0x4d0 [ 549.061248] ? build_open_flags+0x6f0/0x6f0 [ 549.061265] ? __mutex_unlock_slowpath+0xe1/0x600 [ 549.061287] ? wait_for_completion_io+0x270/0x270 [ 549.061306] ? perf_trace_preemptirq_template+0x26d/0x400 [ 549.061322] ? perf_trace_preemptirq_template+0x26d/0x400 [ 549.061354] __x64_sys_openat+0x13f/0x1f0 [ 549.061374] ? __ia32_sys_open+0x1c0/0x1c0 [ 549.061403] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 549.061424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 549.061447] do_syscall_64+0x33/0x40 [ 549.061466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 549.061479] RIP: 0033:0x7eff8d246b19 [ 549.061498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 549.061508] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 549.061529] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 549.061540] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 549.061552] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 549.061563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.061575] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 [ 549.117043] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 549.119115] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 07:05:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x4c, 0x12, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5}}, 0x4c}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 07:05:00 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4003}], 0x14, &(0x7f00000004c0)=ANY=[]) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x5) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x105343, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000000c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x20, 0x1f, 0x0, 0x1f, 0x0, 0xf3f, 0x108, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0xff}, 0x4a0, 0x4, 0x100, 0x3, 0x5, 0x80, 0x800, 0x0, 0x24232603, 0x0, 0x8}, r2, 0x1, 0xffffffffffffffff, 0x3) [ 562.868026] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 07:05:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x800448d5, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891d, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:00 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 07:05:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:00 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 20) 07:05:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 7) [ 562.876612] FAULT_INJECTION: forcing a failure. [ 562.876612] name failslab, interval 1, probability 0, space 0, times 0 [ 562.879108] CPU: 0 PID: 5666 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 562.880561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 562.882313] Call Trace: [ 562.882883] dump_stack+0x107/0x167 [ 562.883675] should_fail.cold+0x5/0xa [ 562.884481] ? __alloc_file+0x21/0x320 [ 562.885308] should_failslab+0x5/0x20 [ 562.886118] kmem_cache_alloc+0x5b/0x310 [ 562.886985] __alloc_file+0x21/0x320 [ 562.887786] alloc_empty_file+0x6d/0x170 [ 562.888653] path_openat+0xe6/0x2770 [ 562.889445] ? __lock_acquire+0x1657/0x5b00 [ 562.890383] ? path_lookupat+0x860/0x860 [ 562.891251] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 562.892355] ? SOFTIRQ_verbose+0x10/0x10 [ 562.893218] ? find_held_lock+0x2c/0x110 [ 562.894099] do_filp_open+0x190/0x3e0 [ 562.894909] ? may_open_dev+0xf0/0xf0 [ 562.895733] ? alloc_fd+0x2e7/0x670 [ 562.896511] ? lock_downgrade+0x6d0/0x6d0 [ 562.897394] ? do_raw_spin_lock+0x121/0x260 [ 562.897418] ? rwlock_bug.part.0+0x90/0x90 [ 562.897461] ? _raw_spin_unlock+0x1a/0x30 [ 562.897482] ? alloc_fd+0x2e7/0x670 [ 562.897529] do_sys_openat2+0x171/0x4d0 [ 562.897559] ? build_open_flags+0x6f0/0x6f0 [ 562.897577] ? __mutex_unlock_slowpath+0xe1/0x600 [ 562.897607] ? wait_for_completion_io+0x270/0x270 [ 562.897649] __x64_sys_openat+0x13f/0x1f0 [ 562.897672] ? __ia32_sys_open+0x1c0/0x1c0 [ 562.897688] ? ksys_write+0x1a9/0x260 [ 562.897725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 562.897748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 562.897780] do_syscall_64+0x33/0x40 [ 562.897803] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 562.897818] RIP: 0033:0x7eff8d246b19 [ 562.897838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 562.897850] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 562.897875] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 562.897888] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 562.897901] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 562.897913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.897926] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 [ 562.902552] FAULT_INJECTION: forcing a failure. [ 562.902552] name failslab, interval 1, probability 0, space 0, times 0 [ 562.902585] CPU: 0 PID: 5669 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 562.906442] FAULT_INJECTION: forcing a failure. [ 562.906442] name failslab, interval 1, probability 0, space 0, times 0 [ 562.906930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 562.906937] Call Trace: [ 562.906957] dump_stack+0x107/0x167 [ 562.906983] should_fail.cold+0x5/0xa [ 562.939993] ? create_object.isra.0+0x3a/0xa30 [ 562.940012] should_failslab+0x5/0x20 [ 562.940030] kmem_cache_alloc+0x5b/0x310 [ 562.940057] create_object.isra.0+0x3a/0xa30 [ 562.940074] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 07:05:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891e, &(0x7f00000005c0)={'wlan0\x00'}) [ 562.940100] kmem_cache_alloc+0x159/0x310 [ 562.940126] __delayacct_tsk_init+0x1b/0x80 [ 562.940147] copy_process+0x3399/0x78b0 [ 562.940165] ? SOFTIRQ_verbose+0x10/0x10 [ 562.940192] ? stack_trace_save+0x8c/0xc0 [ 562.940218] ? lock_acquire+0x197/0x470 [ 562.940236] ? io_sq_thread_park+0x79/0xd0 [ 562.940266] ? __cleanup_sighand+0xb0/0xb0 [ 562.940286] ? kernel_text_address+0xf2/0x120 [ 562.940310] ? find_held_lock+0x2c/0x110 [ 562.940336] ? io_uring_setup+0x1c23/0x2980 [ 562.940356] ? lock_downgrade+0x6d0/0x6d0 [ 562.940379] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 562.940398] create_io_thread+0xb6/0xf0 [ 562.940417] ? pidfd_prepare+0x80/0x80 [ 562.940443] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 562.940480] io_uring_setup+0x1d79/0x2980 [ 562.940509] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 562.940526] ? wait_for_completion_io+0x270/0x270 [ 562.940545] ? perf_trace_preemptirq_template+0x26d/0x400 [ 562.940562] ? perf_trace_preemptirq_template+0x26d/0x400 [ 562.940602] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 562.940623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 562.940646] do_syscall_64+0x33/0x40 [ 562.940665] entry_SYSCALL_64_after_hwframe+0x67/0xd1 07:05:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x800448d7, &(0x7f00000005c0)={'wlan0\x00'}) [ 562.940678] RIP: 0033:0x7ff1de49fb19 [ 562.940697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 562.940708] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 562.940728] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 07:05:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 562.940740] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 562.940751] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 562.940762] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 562.940773] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 562.940827] CPU: 1 PID: 5670 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 562.940844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 562.940852] Call Trace: [ 562.940886] dump_stack+0x107/0x167 [ 562.940913] should_fail.cold+0x5/0xa [ 562.940945] ? create_object.isra.0+0x3a/0xa30 [ 562.940967] should_failslab+0x5/0x20 [ 562.940991] kmem_cache_alloc+0x5b/0x310 [ 562.941020] create_object.isra.0+0x3a/0xa30 [ 562.941040] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 562.941070] kmem_cache_alloc_trace+0x151/0x320 [ 562.941103] io_uring_setup+0x40b/0x2980 [ 562.941129] ? __mutex_unlock_slowpath+0xe1/0x600 [ 562.941156] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 562.941174] ? wait_for_completion_io+0x270/0x270 [ 562.941197] ? perf_trace_preemptirq_template+0x26d/0x400 [ 562.941216] ? perf_trace_preemptirq_template+0x26d/0x400 [ 562.941264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 562.941288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 562.941315] do_syscall_64+0x33/0x40 [ 562.941338] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 562.941360] RIP: 0033:0x7ff8e0e10b19 [ 562.941382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 562.941395] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 07:05:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 8) [ 562.941420] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 562.941433] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 562.941446] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 562.941459] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 562.941472] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 562.948924] loop7: detected capacity change from 0 to 32768 [ 562.966315] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 563.122331] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 563.200335] FAULT_INJECTION: forcing a failure. [ 563.200335] name failslab, interval 1, probability 0, space 0, times 0 [ 563.200365] CPU: 1 PID: 5688 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 563.200375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 563.200382] Call Trace: [ 563.200406] dump_stack+0x107/0x167 [ 563.200428] should_fail.cold+0x5/0xa [ 563.200449] ? create_object.isra.0+0x3a/0xa30 [ 563.200468] should_failslab+0x5/0x20 [ 563.200487] kmem_cache_alloc+0x5b/0x310 [ 563.200511] create_object.isra.0+0x3a/0xa30 [ 563.200539] kmemleak_alloc_percpu+0xa0/0x100 [ 563.200563] pcpu_alloc+0x4e2/0x1240 [ 563.200594] ? io_tctx_exit_cb+0xf0/0xf0 [ 563.200614] percpu_ref_init+0x31/0x3d0 [ 563.200638] io_uring_setup+0x47a/0x2980 [ 563.200658] ? __mutex_unlock_slowpath+0xe1/0x600 [ 563.200680] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 563.200696] ? wait_for_completion_io+0x270/0x270 [ 563.200715] ? perf_trace_preemptirq_template+0x26d/0x400 [ 563.200732] ? perf_trace_preemptirq_template+0x26d/0x400 [ 563.200771] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 563.200791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 563.200813] do_syscall_64+0x33/0x40 [ 563.200833] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 563.200846] RIP: 0033:0x7ff8e0e10b19 [ 563.200865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 563.200875] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 563.200896] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 563.200907] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 563.200919] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 563.200929] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 563.200940] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 576.253126] FAULT_INJECTION: forcing a failure. [ 576.253126] name failslab, interval 1, probability 0, space 0, times 0 [ 576.256142] CPU: 0 PID: 5695 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 576.257863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 576.259038] loop2: detected capacity change from 0 to 32768 [ 576.259956] Call Trace: [ 576.259986] dump_stack+0x107/0x167 [ 576.260013] should_fail.cold+0x5/0xa [ 576.260043] ? alloc_pid+0xd7/0xd30 [ 576.264934] should_failslab+0x5/0x20 [ 576.265904] kmem_cache_alloc+0x5b/0x310 [ 576.266963] alloc_pid+0xd7/0xd30 [ 576.267869] ? copy_namespaces+0x1ca/0x4f0 [ 576.268958] copy_process+0x3b8b/0x78b0 [ 576.269985] ? stack_trace_save+0x8c/0xc0 [ 576.271072] ? __cleanup_sighand+0xb0/0xb0 [ 576.272161] ? kernel_text_address+0xf2/0x120 [ 576.273316] ? find_held_lock+0x2c/0x110 [ 576.274364] ? io_uring_setup+0x1c23/0x2980 [ 576.275507] ? lock_downgrade+0x6d0/0x6d0 [ 576.276036] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 576.276573] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 576.276597] create_io_thread+0xb6/0xf0 [ 576.276624] ? pidfd_prepare+0x80/0x80 [ 576.281582] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 576.282858] io_uring_setup+0x1d79/0x2980 [ 576.283942] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 576.285236] ? wait_for_completion_io+0x270/0x270 [ 576.286491] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 576.287849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 576.289196] do_syscall_64+0x33/0x40 [ 576.290164] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 576.291517] RIP: 0033:0x7ff1de49fb19 [ 576.292490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 576.297285] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 576.299263] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 576.301118] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 576.302966] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 576.304823] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 576.306674] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 576.324112] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 07:05:14 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 21) 07:05:14 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4003}], 0x14, &(0x7f00000004c0)=ANY=[]) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x5) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x105343, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000000c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x20, 0x1f, 0x0, 0x1f, 0x0, 0xf3f, 0x108, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0xff}, 0x4a0, 0x4, 0x100, 0x3, 0x5, 0x80, 0x800, 0x0, 0x24232603, 0x0, 0x8}, r2, 0x1, 0xffffffffffffffff, 0x3) 07:05:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4003}], 0x14, &(0x7f00000004c0)=ANY=[]) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x5) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x105343, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000000c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x20, 0x1f, 0x0, 0x1f, 0x0, 0xf3f, 0x108, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0xff}, 0x4a0, 0x4, 0x100, 0x3, 0x5, 0x80, 0x800, 0x0, 0x24232603, 0x0, 0x8}, r2, 0x1, 0xffffffffffffffff, 0x3) 07:05:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 9) 07:05:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x800448f0, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891f, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 5) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 07:05:14 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x2) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(r0, r1, 0x0, 0x100000001) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc000, 0x9) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r3, 0x8, 0xffffffffffffffff, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r3, 0x8000}, {0xffffffffffffffff, 0xc286}, {r4, 0x1000}, {r3, 0x6000}], 0x4, 0x1f) inotify_add_watch(r3, &(0x7f0000000080)='./file1\x00', 0x800400) [ 576.354356] FAULT_INJECTION: forcing a failure. [ 576.354356] name failslab, interval 1, probability 0, space 0, times 0 [ 576.356983] CPU: 0 PID: 5702 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 576.358492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 576.360319] Call Trace: [ 576.360918] dump_stack+0x107/0x167 [ 576.361737] should_fail.cold+0x5/0xa [ 576.362565] ? __alloc_file+0x21/0x320 [ 576.363420] should_failslab+0x5/0x20 [ 576.364247] kmem_cache_alloc+0x5b/0x310 [ 576.365142] __alloc_file+0x21/0x320 [ 576.365956] alloc_empty_file+0x6d/0x170 [ 576.366844] path_openat+0xe6/0x2770 [ 576.367660] ? __lock_acquire+0x1657/0x5b00 [ 576.368625] ? path_lookupat+0x860/0x860 [ 576.369512] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 576.370650] ? SOFTIRQ_verbose+0x10/0x10 [ 576.371535] ? find_held_lock+0x2c/0x110 [ 576.372450] do_filp_open+0x190/0x3e0 [ 576.373279] ? may_open_dev+0xf0/0xf0 [ 576.374121] ? alloc_fd+0x2e7/0x670 [ 576.374918] ? lock_downgrade+0x6d0/0x6d0 [ 576.375828] ? do_raw_spin_lock+0x121/0x260 [ 576.376766] ? rwlock_bug.part.0+0x90/0x90 [ 576.377716] ? _raw_spin_unlock+0x1a/0x30 [ 576.378614] ? alloc_fd+0x2e7/0x670 [ 576.379442] do_sys_openat2+0x171/0x4d0 [ 576.380313] ? build_open_flags+0x6f0/0x6f0 [ 576.381245] ? __mutex_unlock_slowpath+0xe1/0x600 [ 576.382306] ? wait_for_completion_io+0x270/0x270 [ 576.383418] __x64_sys_openat+0x13f/0x1f0 [ 576.384331] ? __ia32_sys_open+0x1c0/0x1c0 [ 576.385257] ? ksys_write+0x1a9/0x260 [ 576.386112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 576.387276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 576.388432] do_syscall_64+0x33/0x40 [ 576.389253] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 576.390370] RIP: 0033:0x7eff8d246b19 [ 576.391182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 576.395189] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 576.396853] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 576.398406] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 576.399994] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 576.401546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.403102] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 [ 576.408927] loop7: detected capacity change from 0 to 32768 [ 576.444768] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 576.485031] FAULT_INJECTION: forcing a failure. [ 576.485031] name failslab, interval 1, probability 0, space 0, times 0 [ 576.488145] CPU: 1 PID: 5720 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 576.489803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 576.492011] Call Trace: [ 576.492740] dump_stack+0x107/0x167 [ 576.493635] should_fail.cold+0x5/0xa [ 576.494831] ? create_object.isra.0+0x3a/0xa30 [ 576.496061] should_failslab+0x5/0x20 [ 576.497071] kmem_cache_alloc+0x5b/0x310 [ 576.498136] create_object.isra.0+0x3a/0xa30 [ 576.499222] kmemleak_alloc_percpu+0xa0/0x100 [ 576.500343] pcpu_alloc+0x4e2/0x1240 [ 576.501266] ? io_tctx_exit_cb+0xf0/0xf0 [ 576.502260] percpu_ref_init+0x31/0x3d0 [ 576.503231] io_uring_setup+0x47a/0x2980 [ 576.504233] ? __mutex_unlock_slowpath+0xe1/0x600 [ 576.505642] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 576.507210] ? wait_for_completion_io+0x270/0x270 [ 576.508410] ? perf_trace_preemptirq_template+0x26d/0x400 [ 576.509876] ? perf_trace_preemptirq_template+0x26d/0x400 [ 576.511242] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 07:05:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80086601, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8920, &(0x7f00000005c0)={'wlan0\x00'}) [ 576.512517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 576.513977] do_syscall_64+0x33/0x40 [ 576.514880] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 576.516127] RIP: 0033:0x7ff8e0e10b19 [ 576.517027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 576.521463] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 576.523316] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 576.525057] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 576.526777] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 576.528499] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 576.530243] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:05:14 executing program 1: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f0000000000)="5cecec79b2b8eccdc3790bf5f631ab49879557b3dccb1f904b17dbe79be26f1b8b88a908a0e8d8986c1e0055c329b5c4fad3f432d53e5d49d3bf0d384f783e375156a68dea139d40b5902e7c026718a0123934c0fecdee19b3bbe1173adba4c9235d17cf454d30e2f9607823513bab952fcc35cf2403a8") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:14 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4003}], 0x14, &(0x7f00000004c0)=ANY=[]) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x5) r1 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x105343, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000000c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x20, 0x1f, 0x0, 0x1f, 0x0, 0xf3f, 0x108, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0xff}, 0x4a0, 0x4, 0x100, 0x3, 0x5, 0x80, 0x800, 0x0, 0x24232603, 0x0, 0x8}, r2, 0x1, 0xffffffffffffffff, 0x3) [ 576.722625] loop7: detected capacity change from 0 to 32768 [ 576.763757] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 576.836464] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 07:05:27 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 6) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 07:05:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)='P', 0x1}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r5, 0x8, 0xffffffffffffffff, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r6, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r5, 0x8000}, {0xffffffffffffffff, 0xc286}, {r6, 0x1000}, {r5, 0x6000}], 0x4, 0x1f) dup2(r2, r6) 07:05:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r0, &(0x7f0000000000)=""/232, 0xe8, 0x2000, &(0x7f0000000100)=@can, 0x80) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x260080, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8970, &(0x7f0000000240)={'wlan0\x00'}) 07:05:27 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 22) 07:05:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 10) 07:05:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80087601, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8921, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:27 executing program 2: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_create(0x6, &(0x7f0000000400)={0x0, 0x11, 0x4, @thr={&(0x7f00000004c0)="ba54947ac62196bc470c444630f55d731685611c1a1cad6fc195f2b1d31a3d682cdd7d88770fd52d6676a9002489034e19cc46cae9442b8cd30e81d4834b615949cb8d71ace15b64195f2a92f3c4a9255d9bd79c3a33c7b028c992ae71ad43b181415f140e02d8e0eb3f8a4ba0cd28f1ccc2e5e71265bdd8e0a59683dca9d7c5f934b5e3df0b855afeb669eb2b2742b479a1ca66b8eb81b621c7b75a199ff7cc9ca2cf38f98c", &(0x7f0000000580)="a60f13db6c0f1ad42b1bff1f38521ae7e0cbb9686b26f74cdd42c99c19747c9e43c9921c14ba0158718cb0b1f13c556e7fe90220a7e68afef367b96eef52984742db97f0748ba301976b23d9d1fce58807395c87bef5ffc047182ff999d25116dfaea9fed78be1dd80a56db2997cc5a9b08baeb51870ebb17b7b4e477f20cda6c78f2f7a0bf8539094fef687e7c52640b5e9137e39fef1a361"}}, &(0x7f0000000440)=0x0) timer_gettime(r2, &(0x7f0000000640)) timer_settime(r1, 0x0, &(0x7f00000003c0)={{0x0, 0x989680}}, 0x0) timer_gettime(r2, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_gettime(r0, &(0x7f0000000080)) timer_gettime(r0, &(0x7f0000000100)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x40) r4 = add_key$user(&(0x7f0000000300), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000340)="cc", 0x1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, r5, 0x0) r6 = add_key$user(&(0x7f0000000300), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000340)="cc", 0x1, 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r6, r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0xa08000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}, {@privport}, {@afid={'afid', 0x3d, 0x1000}}, {@version_9p2000}, {@aname={'aname', 0x3d, '[\''}}, {@cache_none}], [{@obj_user={'obj_user', 0x3d, '\'-\\}+!$(,,'}}, {@obj_role}, {@smackfstransmute={'smackfstransmute', 0x3d, '&\'^@*&}'}}, {@euid_lt={'euid<', 0xee01}}, {@measure}, {@euid_eq={'euid', 0x3d, r7}}]}}) timer_gettime(r1, &(0x7f0000000140)) timer_delete(0x0) [ 589.765021] FAULT_INJECTION: forcing a failure. [ 589.765021] name failslab, interval 1, probability 0, space 0, times 0 [ 589.766681] CPU: 1 PID: 5745 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 589.767668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.768861] Call Trace: [ 589.769234] dump_stack+0x107/0x167 [ 589.769759] should_fail.cold+0x5/0xa [ 589.770296] ? create_object.isra.0+0x3a/0xa30 [ 589.770931] should_failslab+0x5/0x20 [ 589.771468] kmem_cache_alloc+0x5b/0x310 [ 589.772046] create_object.isra.0+0x3a/0xa30 [ 589.772653] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 589.773363] kmem_cache_alloc+0x159/0x310 [ 589.773954] alloc_pid+0xd7/0xd30 [ 589.774449] ? copy_namespaces+0x1ca/0x4f0 [ 589.775033] copy_process+0x3b8b/0x78b0 [ 589.775606] ? stack_trace_save+0x8c/0xc0 [ 589.776191] ? __cleanup_sighand+0xb0/0xb0 [ 589.776769] ? kernel_text_address+0xf2/0x120 [ 589.777416] ? find_held_lock+0x2c/0x110 [ 589.777983] ? io_uring_setup+0x1c23/0x2980 [ 589.778585] ? lock_downgrade+0x6d0/0x6d0 [ 589.779162] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 589.779839] create_io_thread+0xb6/0xf0 [ 589.780397] ? pidfd_prepare+0x80/0x80 [ 589.780945] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 589.781632] io_uring_setup+0x1d79/0x2980 [ 589.782214] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 589.782933] ? wait_for_completion_io+0x270/0x270 [ 589.783632] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 589.784361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 589.785091] do_syscall_64+0x33/0x40 [ 589.785623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 589.786335] RIP: 0033:0x7ff1de49fb19 [ 589.786865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 589.789386] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 589.790438] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 589.791420] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 589.792404] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 589.793396] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 589.794376] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:05:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80108906, &(0x7f00000005c0)={'wlan0\x00'}) [ 589.822180] FAULT_INJECTION: forcing a failure. [ 589.822180] name failslab, interval 1, probability 0, space 0, times 0 [ 589.825104] CPU: 0 PID: 5754 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 589.826823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.828767] Call Trace: [ 589.829388] dump_stack+0x107/0x167 [ 589.830240] should_fail.cold+0x5/0xa [ 589.831132] ? percpu_ref_init+0xd8/0x3d0 [ 589.832102] should_failslab+0x5/0x20 [ 589.832993] kmem_cache_alloc_trace+0x55/0x320 [ 589.834053] ? io_tctx_exit_cb+0xf0/0xf0 [ 589.834994] percpu_ref_init+0xd8/0x3d0 [ 589.835935] io_uring_setup+0x47a/0x2980 [ 589.836877] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 589.838036] ? perf_trace_preemptirq_template+0x266/0x400 [ 589.839287] ? perf_trace_preemptirq_template+0x26d/0x400 [ 589.840548] ? perf_trace_preemptirq_template+0x26d/0x400 [ 589.841835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 589.843038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 589.844269] do_syscall_64+0x33/0x40 [ 589.845131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 589.846307] RIP: 0033:0x7ff8e0e10b19 [ 589.847160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 589.851365] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 589.853113] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 589.854743] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 589.856377] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 589.858000] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 589.859658] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:05:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8922, &(0x7f00000005c0)={'wlan0\x00'}) [ 589.889210] FAULT_INJECTION: forcing a failure. [ 589.889210] name failslab, interval 1, probability 0, space 0, times 0 [ 589.891908] CPU: 0 PID: 5755 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 589.893608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.895555] Call Trace: [ 589.896178] dump_stack+0x107/0x167 [ 589.897033] should_fail.cold+0x5/0xa [ 589.897924] ? security_file_alloc+0x34/0x170 [ 589.898967] should_failslab+0x5/0x20 [ 589.899865] kmem_cache_alloc+0x5b/0x310 [ 589.900823] security_file_alloc+0x34/0x170 [ 589.901837] __alloc_file+0xb7/0x320 07:05:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80108907, &(0x7f00000005c0)={'wlan0\x00'}) [ 589.902704] alloc_empty_file+0x6d/0x170 [ 589.903759] path_openat+0xe6/0x2770 [ 589.904627] ? __lock_acquire+0x1657/0x5b00 [ 589.905642] ? path_lookupat+0x860/0x860 [ 589.906589] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 589.907810] ? SOFTIRQ_verbose+0x10/0x10 [ 589.908748] ? find_held_lock+0x2c/0x110 [ 589.909706] do_filp_open+0x190/0x3e0 [ 589.910589] ? may_open_dev+0xf0/0xf0 [ 589.911493] ? alloc_fd+0x2e7/0x670 [ 589.912337] ? lock_downgrade+0x6d0/0x6d0 [ 589.913299] ? do_raw_spin_lock+0x121/0x260 [ 589.914299] ? rwlock_bug.part.0+0x90/0x90 [ 589.915287] ? _raw_spin_unlock+0x1a/0x30 [ 589.916250] ? alloc_fd+0x2e7/0x670 [ 589.917104] do_sys_openat2+0x171/0x4d0 [ 589.918026] ? build_open_flags+0x6f0/0x6f0 [ 589.919018] ? __mutex_unlock_slowpath+0xe1/0x600 [ 589.920141] ? wait_for_completion_io+0x270/0x270 [ 589.921251] ? perf_trace_preemptirq_template+0x26d/0x400 [ 589.922511] ? perf_trace_preemptirq_template+0x26d/0x400 [ 589.923788] __x64_sys_openat+0x13f/0x1f0 [ 589.924746] ? __ia32_sys_open+0x1c0/0x1c0 [ 589.925732] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 589.926942] ? syscall_enter_from_user_mode+0x1d/0x50 [ 589.928142] do_syscall_64+0x33/0x40 [ 589.929005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 589.930186] RIP: 0033:0x7eff8d246b19 [ 589.931044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 589.935277] RSP: 002b:00007eff8a79b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 589.937037] RAX: ffffffffffffffda RBX: 00007eff8d35a020 RCX: 00007eff8d246b19 [ 589.938746] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 589.940411] RBP: 00007eff8a79b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 589.942054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.943707] R13: 00007ffcc3c1737f R14: 00007eff8a79b300 R15: 0000000000022000 07:05:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0xe0460, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x7fff}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {0xffffffffffffffff, 0x6000}], 0x4, 0x1f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe44584e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f707e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82bf6b"], 0x24}}, 0x20000044) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000700)=ANY=[@ANYBLOB="8ad2900e7de810bd47a73a05c57ae3b8a6693ffee48c3cc68a4d38cec575edb9bf138bd7a2d8faf64992d674f96d23296200052d38", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x70d, 0x400000f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000000}, 0x4005) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x762}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) r6 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xfc, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x48b1, 0x200000000, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x5, 0xffffffffffffffff, 0xc) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x3f, 0x91, 0x1, 0x0, 0x4, 0x200, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0000000, 0x2, @perf_bp={&(0x7f0000000280), 0x1}, 0x600, 0x0, 0x743d, 0x4, 0xc2, 0x4, 0xf6b9, 0x0, 0x7, 0x0, 0x1}, 0x0, 0x2, r1, 0x8) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000100)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}, {&(0x7f0000000180)="1ab0a8202e037d91f3cd263295f12f7dda8c4ee42761963a830e02ff4fb83d159076f5a79c81762aca22e4c7d78080acb8c2e63b", 0x34}], 0x4) poll(&(0x7f0000000300)=[{r0, 0xc481}, {r6, 0xc2c6}, {r7, 0x77c54dc2dcde135}, {r1, 0x6000}], 0x4, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 07:05:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x210140, 0x135) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB='\f\x00#'], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x73}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40490}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa4080800}, 0xc, &(0x7f0000000100)={&(0x7f0000000c80)={0x10b0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3690}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf800}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x68, 0x5b, "9431dfc46198f22a73c09c86962989afff03959c28ac3f4c5dc65fd9f419ce8c64297f0722dfdba470b043d5aa2e14ef92d84b1181cffa07b65dd435edc8578763e1094bb121d8fea8bd379a7e3c1bacd63d7b4731682d04f982e045b4242d714cdcae6e"}]}, 0x10b0}}, 0x40008c0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)={0x18, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x4, 0x12}]}, 0x18}}, 0x0) [ 590.014085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 590.028280] wlan0: mtu less than device minimum [ 590.076997] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 590.122771] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 590.147861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:05:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 7) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 07:05:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8923, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:43 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x34, 0x802, 0x70bd29, 0x25dfdbfd, {0x9}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x2}, @nested={0x10, 0x3b, 0x0, 0x1, [@typed={0xc, 0x35, 0x0, 0x0, @u64=0xffff}]}, @typed={0x8, 0x71, 0x0, 0x0, @pid=r1}, @generic="d5529c20eaee49245446c06dcaaeefa40607c585995473fe6b183b856ad45a88228ba8d6bbad34b0609ca92ee0852186ece19f54ac00df02a52a1052d1094bbcb77b608e05cc3d4a01af173245a6098bc55c7953bb63c6f7c8ce84994514196d0f6d4034b1f593116c93d7fc6951c19a2e4bb4d761af7e8933ec07168e855085a0d9077730e6a62bf645b2e9ae65b380655ec2da5456bba20de88484916d5e6336fc3f4874ac3152f86602911e1cfd57307cc45f3ffb1359acaa2fc65e7650892a88f506535906b48b55a6bd96a98a50301a64c1f39d2c58939c6baaafdb4837", @generic]}, 0x114}}, 0x11014) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r2, 0x8, 0xffffffffffffffff, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r2, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r2, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0xe0460, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x7fff}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {0xffffffffffffffff, 0x6000}], 0x4, 0x1f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe44584e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f707e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82bf6b"], 0x24}}, 0x20000044) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000700)=ANY=[@ANYBLOB="8ad2900e7de810bd47a73a05c57ae3b8a6693ffee48c3cc68a4d38cec575edb9bf138bd7a2d8faf64992d674f96d23296200052d38", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x70d, 0x400000f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000000}, 0x4005) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x762}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) r6 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xfc, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x48b1, 0x200000000, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x5, 0xffffffffffffffff, 0xc) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x3f, 0x91, 0x1, 0x0, 0x4, 0x200, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0000000, 0x2, @perf_bp={&(0x7f0000000280), 0x1}, 0x600, 0x0, 0x743d, 0x4, 0xc2, 0x4, 0xf6b9, 0x0, 0x7, 0x0, 0x1}, 0x0, 0x2, r1, 0x8) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000100)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}, {&(0x7f0000000180)="1ab0a8202e037d91f3cd263295f12f7dda8c4ee42761963a830e02ff4fb83d159076f5a79c81762aca22e4c7d78080acb8c2e63b", 0x34}], 0x4) poll(&(0x7f0000000300)=[{r0, 0xc481}, {r6, 0xc2c6}, {r7, 0x77c54dc2dcde135}, {r1, 0x6000}], 0x4, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 07:05:43 executing program 7: syz_io_uring_setup(0x10000, 0x0, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000240)={0x0, @aes128, 0x0, @desc4}) r4 = socket$inet(0x2, 0xa, 0x0) getsockname(r4, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) r5 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x6, 0xa1, 0x8, 0x3f, 0x0, 0xc, 0xa0, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x8004, 0x2, 0xff, 0x7, 0xffffffff, 0x337, 0x4, 0x0, 0x9f3597d, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x10, r5, 0xa) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYBLOB="280026bd70ca826946dfaf5ca6287962bdc5ba09409857df8ca8d9211e0d8347b4ff65bb806b08b7ca0e6e4140156a37d225e825d86975ec85fb6af6ba4355d981000000112f81675387108e5f4156e1f305683505b43056f564caad1e4cb86ee92d3d7fe0c2970a00"/117, @ANYRES32, @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x0, 0x0, 0x2000004, 0x0) 07:05:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:43 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 23) 07:05:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 11) [ 605.688736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 605.689063] FAULT_INJECTION: forcing a failure. [ 605.689063] name failslab, interval 1, probability 0, space 0, times 0 [ 605.692464] CPU: 1 PID: 5794 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 605.692475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 605.692482] Call Trace: [ 605.692507] dump_stack+0x107/0x167 [ 605.692530] should_fail.cold+0x5/0xa [ 605.692552] ? create_object.isra.0+0x3a/0xa30 [ 605.692571] should_failslab+0x5/0x20 [ 605.692592] kmem_cache_alloc+0x5b/0x310 [ 605.692617] create_object.isra.0+0x3a/0xa30 [ 605.692634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 605.692660] kmem_cache_alloc_trace+0x151/0x320 [ 605.692683] ? io_tctx_exit_cb+0xf0/0xf0 [ 605.692703] percpu_ref_init+0xd8/0x3d0 [ 605.692727] io_uring_setup+0x47a/0x2980 [ 605.692749] ? __mutex_unlock_slowpath+0xe1/0x600 [ 605.692773] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 605.692789] ? wait_for_completion_io+0x270/0x270 [ 605.692808] ? perf_trace_preemptirq_template+0x26d/0x400 [ 605.692824] ? perf_trace_preemptirq_template+0x26d/0x400 [ 605.692866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 605.692887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 605.692909] do_syscall_64+0x33/0x40 [ 605.706132] FAULT_INJECTION: forcing a failure. [ 605.706132] name failslab, interval 1, probability 0, space 0, times 0 [ 605.706212] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 605.719282] RIP: 0033:0x7ff8e0e10b19 [ 605.719304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:05:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8924, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, &(0x7f00000005c0)={'wlan0\x00'}) [ 605.719316] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 605.719339] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 605.719353] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 605.719366] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 605.719379] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 605.719392] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 605.719432] CPU: 0 PID: 5796 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 605.719440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 605.719446] Call Trace: [ 605.719462] dump_stack+0x107/0x167 [ 605.719477] should_fail.cold+0x5/0xa [ 605.719492] ? io_uring_alloc_task_context+0x99/0x6a0 [ 605.719504] should_failslab+0x5/0x20 [ 605.719517] kmem_cache_alloc_trace+0x55/0x320 [ 605.719534] io_uring_alloc_task_context+0x99/0x6a0 [ 605.719549] ? io_import_iovec+0x1120/0x1120 [ 605.719573] io_uring_setup+0x1dd1/0x2980 [ 605.719592] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 605.719603] ? wait_for_completion_io+0x270/0x270 [ 605.719615] ? perf_trace_preemptirq_template+0x26d/0x400 [ 605.719626] ? perf_trace_preemptirq_template+0x26d/0x400 07:05:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8927, &(0x7f00000005c0)={'wlan0\x00'}) [ 605.719662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 605.719676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 605.719691] do_syscall_64+0x33/0x40 [ 605.719704] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 605.719712] RIP: 0033:0x7ff1de49fb19 [ 605.719724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 605.719731] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 07:05:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0189436, &(0x7f00000005c0)={'wlan0\x00'}) [ 605.719745] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 605.719752] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 605.719760] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 605.719767] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 605.719774] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 605.728855] FAULT_INJECTION: forcing a failure. [ 605.728855] name failslab, interval 1, probability 0, space 0, times 0 [ 605.728878] CPU: 1 PID: 5798 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 605.728890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 605.728897] Call Trace: [ 605.728920] dump_stack+0x107/0x167 [ 605.728946] should_fail.cold+0x5/0xa [ 605.728970] ? create_object.isra.0+0x3a/0xa30 [ 605.728990] should_failslab+0x5/0x20 [ 605.729011] kmem_cache_alloc+0x5b/0x310 [ 605.729035] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 605.729063] create_object.isra.0+0x3a/0xa30 [ 605.729081] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 605.729111] kmem_cache_alloc+0x159/0x310 [ 605.729140] security_file_alloc+0x34/0x170 [ 605.729164] __alloc_file+0xb7/0x320 [ 605.729186] alloc_empty_file+0x6d/0x170 [ 605.729210] path_openat+0xe6/0x2770 [ 605.729231] ? __lock_acquire+0x1657/0x5b00 [ 605.729266] ? path_lookupat+0x860/0x860 [ 605.729292] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 605.729312] ? SOFTIRQ_verbose+0x10/0x10 [ 605.729332] ? find_held_lock+0x2c/0x110 [ 605.729377] do_filp_open+0x190/0x3e0 [ 605.729397] ? may_open_dev+0xf0/0xf0 [ 605.729424] ? alloc_fd+0x2e7/0x670 [ 605.729447] ? lock_downgrade+0x6d0/0x6d0 [ 605.729466] ? do_raw_spin_lock+0x121/0x260 [ 605.729489] ? rwlock_bug.part.0+0x90/0x90 [ 605.729535] ? _raw_spin_unlock+0x1a/0x30 [ 605.729556] ? alloc_fd+0x2e7/0x670 [ 605.729604] do_sys_openat2+0x171/0x4d0 [ 605.729640] ? build_open_flags+0x6f0/0x6f0 [ 605.729660] ? __mutex_unlock_slowpath+0xe1/0x600 [ 605.729685] ? wait_for_completion_io+0x270/0x270 [ 605.729706] ? perf_trace_preemptirq_template+0x26d/0x400 [ 605.729725] ? perf_trace_preemptirq_template+0x26d/0x400 [ 605.729755] __x64_sys_openat+0x13f/0x1f0 [ 605.729778] ? __ia32_sys_open+0x1c0/0x1c0 07:05:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8929, &(0x7f00000005c0)={'wlan0\x00'}) [ 605.729810] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 605.729835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 605.729861] do_syscall_64+0x33/0x40 [ 605.729884] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 605.729897] RIP: 0033:0x7eff8d246b19 [ 605.729917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 605.729929] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 605.729952] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 605.729965] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 605.729978] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 605.729991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.730004] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 [ 605.783245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:05:43 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 24) 07:05:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc020660b, &(0x7f00000005c0)={'wlan0\x00'}) [ 605.793055] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 605.793676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.894645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 605.911830] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 07:05:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 07:05:43 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80100) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000040)=0x10) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) connect(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast1, 0x2}, 0x80) [ 605.925291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.926966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.928946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 07:05:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 12) [ 605.961245] FAULT_INJECTION: forcing a failure. [ 605.961245] name failslab, interval 1, probability 0, space 0, times 0 [ 605.962697] CPU: 0 PID: 5822 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 605.963572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 605.964643] Call Trace: [ 605.964986] dump_stack+0x107/0x167 [ 605.965450] should_fail.cold+0x5/0xa [ 605.965944] ? io_uring_alloc_task_context+0x99/0x6a0 [ 605.966606] should_failslab+0x5/0x20 [ 605.967107] kmem_cache_alloc_trace+0x55/0x320 [ 605.967707] io_uring_alloc_task_context+0x99/0x6a0 [ 605.968356] ? io_import_iovec+0x1120/0x1120 [ 605.968937] io_uring_setup+0x1dd1/0x2980 [ 605.969482] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 605.970146] ? wait_for_completion_io+0x270/0x270 [ 605.970784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 605.971469] ? syscall_enter_from_user_mode+0x1d/0x50 [ 605.972145] do_syscall_64+0x33/0x40 [ 605.972626] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 605.973285] RIP: 0033:0x7ff1de49fb19 [ 605.973765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 605.976144] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 605.977128] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 605.978040] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 605.978966] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 605.979886] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 605.980795] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:05:43 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8923, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x15, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b8200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33353633373030303500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000006e00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000005000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010400)="ff07ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dbf4655fdbf4655fdbf4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4080}, {&(0x7f0000012600)="8081000000c04000dbf4655fdbf4655fdbf4655f000000000000010080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000100"/128, 0x80, 0x4300}, {&(0x7f0000012700)="c041000000400000dbf4655fdbf4655fdbf4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4500}, {&(0x7f0000012800)="ed41000000100000dcf4655fdcf4655fdcf4655f00000000000002008000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000007f45710b000000000000000000000000000000000000000000000000ed8100001a040000dcf4655fdcf4655fdcf4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000043f00133000000000000000000000000000000000000000000000000ffa1000026000000dcf4655fdcf4655fdcf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3335363337303030352f66696c65302f66696c653000000000000000000000000000000000000000000000faa16068000000000000000000000000000000000000000000000000ed8100000a000000dcf4655fdcf4655fdcf4655f00000000000001000001000000000800010000000af30100040000000000000000000000010000007000000000000000000000000000000000000000000000000000000000000000000000000000000021678e75800000000000000000000000000000000000000000000000ed81000028230000dcf4655fdcf4655fdcf4655f00000000000002008000000000000800010000000af301000400000000000000000000000300000090000000020000000100000092000000020000000180000092000000000000000000000000000000938e8738000000000000000000000000000000000000000000000000ed81000064000000dcf4655fdcf4655fdcf4655f00000000000001008000000000000800010000000af3010004000000000000000000000001000000a000000000000000000000000000000000000000000000000000000000000000000000000000000065e174ae00"/768, 0x300, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000012c00)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x20000}, {&(0x7f0000012d00)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000012e00)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000012f00)="00000000001000"/32, 0x20, 0x23000}, {&(0x7f0000013000)="504d4d00504d4dffdcf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x40000}, {&(0x7f0000013100)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000013200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000013700)='syzkallers\x00'/32, 0x20, 0x70000}, {&(0x7f0000013800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f80f0000000006000000779b539778617474723100000601f00f00000000060000007498539778617474723200"/96, 0x60, 0x80000}, {&(0x7f0000013900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x80fe0}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xa0000}], 0x0, &(0x7f0000013b00)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) write$P9_RREADDIR(r0, &(0x7f0000000040)={0x2a, 0x29, 0x2, {0xd8, [{{0x20, 0x0, 0x8}, 0x0, 0x80, 0x7, './file0'}]}}, 0x2a) 07:05:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 07:05:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8930, &(0x7f00000005c0)={'wlan0\x00'}) [ 606.041950] FAULT_INJECTION: forcing a failure. [ 606.041950] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 606.043465] CPU: 0 PID: 5835 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 606.044317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 606.045336] Call Trace: [ 606.045665] dump_stack+0x107/0x167 [ 606.046115] should_fail.cold+0x5/0xa [ 606.046587] __alloc_pages_nodemask+0x182/0x600 [ 606.047161] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 606.047908] ? cap_capable+0x1cd/0x230 [ 606.048393] alloc_pages_current+0x187/0x280 [ 606.048932] __get_free_pages+0xc/0xa0 [ 606.049410] io_uring_setup+0xe27/0x2980 [ 606.049911] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 606.050528] ? wait_for_completion_io+0x270/0x270 [ 606.051132] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 606.051778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 606.052411] do_syscall_64+0x33/0x40 [ 606.052863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 606.053486] RIP: 0033:0x7ff8e0e10b19 [ 606.053939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 606.056183] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 606.057115] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 606.057991] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 606.058673] loop2: detected capacity change from 0 to 1310720 [ 606.058859] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 606.058874] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 606.062032] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:05:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe44584e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f707e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82bf6b"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="01008a527bb46ecd14ae0000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x70d, 0x400000f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000000}, 0x4005) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70393d9b27ba14e7}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x28}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x400}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xfd17}, {0x8, 0x0, 0x401}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0xe8}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfffb}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x100}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x56}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x20004015) [ 606.065662] FAULT_INJECTION: forcing a failure. [ 606.065662] name failslab, interval 1, probability 0, space 0, times 0 [ 606.068491] CPU: 1 PID: 5838 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 606.070110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 606.072093] Call Trace: [ 606.072724] dump_stack+0x107/0x167 [ 606.073590] should_fail.cold+0x5/0xa [ 606.074496] ? tty_open+0x13f/0x13e0 [ 606.075376] should_failslab+0x5/0x20 [ 606.076291] kmem_cache_alloc_trace+0x55/0x320 [ 606.077375] ? lock_acquire+0x197/0x470 [ 606.077927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 606.078327] tty_open+0x13f/0x13e0 [ 606.080179] ? tty_init_dev+0x80/0x80 [ 606.081069] ? rwlock_bug.part.0+0x90/0x90 [ 606.082071] ? tty_init_dev+0x80/0x80 [ 606.082964] chrdev_open+0x268/0x6e0 [ 606.083847] ? __unregister_chrdev+0x110/0x110 [ 606.084919] ? fsnotify_perm.part.0+0x22d/0x620 [ 606.086024] do_dentry_open+0x4b7/0x1090 [ 606.086980] ? __unregister_chrdev+0x110/0x110 07:05:43 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8923, &(0x7f00000005c0)={'wlan0\x00'}) [ 606.088067] ? may_open+0x1e4/0x400 [ 606.089028] path_openat+0x19ba/0x2770 [ 606.089961] ? path_lookupat+0x860/0x860 [ 606.090924] ? find_held_lock+0x2c/0x110 [ 606.091904] do_filp_open+0x190/0x3e0 [ 606.092634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 606.092788] ? may_open_dev+0xf0/0xf0 [ 606.094669] ? do_raw_spin_lock+0x121/0x260 [ 606.095683] ? rwlock_bug.part.0+0x90/0x90 [ 606.096682] ? _raw_spin_unlock+0x1a/0x30 [ 606.097649] ? alloc_fd+0x2e7/0x670 [ 606.098512] do_sys_openat2+0x171/0x4d0 [ 606.099445] ? build_open_flags+0x6f0/0x6f0 [ 606.100457] ? __mutex_unlock_slowpath+0xe1/0x600 [ 606.101585] ? wait_for_completion_io+0x270/0x270 [ 606.102721] __x64_sys_openat+0x13f/0x1f0 [ 606.103698] ? __ia32_sys_open+0x1c0/0x1c0 [ 606.104678] ? ksys_write+0x1a9/0x260 [ 606.105577] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 606.106791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 606.108000] do_syscall_64+0x33/0x40 [ 606.108864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 606.110051] RIP: 0033:0x7eff8d246b19 [ 606.110918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 606.115180] RSP: 002b:00007eff8a79b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 606.116954] RAX: ffffffffffffffda RBX: 00007eff8d35a020 RCX: 00007eff8d246b19 [ 606.118608] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 606.120267] RBP: 00007eff8a79b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 606.121903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.123543] R13: 00007ffcc3c1737f R14: 00007eff8a79b300 R15: 0000000000022000 07:05:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x54, 0x6, @buffer={0x0, 0xd0, &(0x7f00000000c0)=""/208}, &(0x7f00000001c0)="d141cd03ec62522a447bf40509dc83e410f6faedd7a7abd44d9c8e853c8545543136b90d8d4231992ea20347fc8b1bc34d7fdc67c99c581e67329504430337829a35607a095cee12aec3f186aa9b26621c6210d5", &(0x7f0000000240)=""/39, 0x7fff, 0x24, 0x0, &(0x7f0000000280)}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 07:05:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8932, &(0x7f00000005c0)={'wlan0\x00'}) [ 606.245997] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 606.247107] ext4 filesystem being mounted at /syzkaller-testdir018960114/syzkaller.OxqR6y/62/file0 supports timestamps until 2038-01-19 (0x7fffffff) 07:05:57 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 25) 07:05:57 executing program 2: waitid(0x1, 0x0, &(0x7f0000000000), 0x2, &(0x7f0000000080)) r0 = getpgrp(0x0) waitid(0x0, r0, &(0x7f0000000180), 0x40000000, &(0x7f0000000200)) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="1180c2240000aaaaaaaaaabb8906450000300000000000019078ac1414aaac1414aa0500907800000000450000000000000000000000ac1414aaac1414aad02e856d12e048ebeaeec83ad1b237ebe68033f4e29ba7475411d16d282f1eb54d62df2228c219"], 0x0) [ 619.406642] FAULT_INJECTION: forcing a failure. [ 619.406642] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 619.408491] CPU: 1 PID: 5866 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 619.409503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 619.410738] Call Trace: [ 619.411128] dump_stack+0x107/0x167 [ 619.411674] should_fail.cold+0x5/0xa [ 619.412254] __alloc_pages_nodemask+0x182/0x600 [ 619.412944] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 619.413838] ? cap_capable+0x1cd/0x230 [ 619.414417] alloc_pages_current+0x187/0x280 [ 619.415073] __get_free_pages+0xc/0xa0 [ 619.415645] io_uring_setup+0xf9a/0x2980 [ 619.416253] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 619.416995] ? wait_for_completion_io+0x270/0x270 [ 619.417703] ? perf_trace_preemptirq_template+0x26d/0x400 [ 619.418529] ? perf_trace_preemptirq_template+0x26d/0x400 [ 619.419364] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 619.420162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 619.420932] do_syscall_64+0x33/0x40 [ 619.421484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 619.422249] RIP: 0033:0x7ff8e0e10b19 [ 619.422806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 619.425526] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 619.426630] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 619.427670] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 619.428695] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 619.429717] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 619.430760] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:05:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 13) 07:05:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 9) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 07:05:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8100, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r4, 0x8, 0xffffffffffffffff, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r4, 0x8000}, {0xffffffffffffffff, 0xc286}, {r5, 0x1000}, {r4, 0x6000}], 0x4, 0x1f) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0x2, 0x3}, 0x6) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r6, 0x40c, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x171}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0xfff7}, {0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x28c1}, 0x90) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x24}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x38}}, 0x0) 07:05:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:57 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8923, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@local, 0x42}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) [ 619.445529] FAULT_INJECTION: forcing a failure. [ 619.445529] name failslab, interval 1, probability 0, space 0, times 0 [ 619.447989] CPU: 0 PID: 5873 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 619.449463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 619.451246] Call Trace: [ 619.451837] dump_stack+0x107/0x167 [ 619.452622] should_fail.cold+0x5/0xa [ 619.453450] ? create_object.isra.0+0x3a/0xa30 [ 619.454440] should_failslab+0x5/0x20 [ 619.455276] kmem_cache_alloc+0x5b/0x310 [ 619.456171] create_object.isra.0+0x3a/0xa30 [ 619.457136] kmemleak_alloc_percpu+0xa0/0x100 [ 619.458100] pcpu_alloc+0x4e2/0x1240 [ 619.458915] __percpu_counter_init+0x10d/0x2d0 [ 619.459919] io_uring_alloc_task_context+0xcc/0x6a0 [ 619.461000] ? io_import_iovec+0x1120/0x1120 [ 619.461954] io_uring_setup+0x1dd1/0x2980 [ 619.462851] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 619.463954] ? wait_for_completion_io+0x270/0x270 [ 619.464984] ? perf_trace_preemptirq_template+0x26d/0x400 [ 619.466155] ? perf_trace_preemptirq_template+0x26d/0x400 [ 619.467357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 619.468485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 619.469590] do_syscall_64+0x33/0x40 [ 619.470392] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 619.471498] RIP: 0033:0x7ff1de49fb19 [ 619.472314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 619.476294] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 619.477934] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 619.479472] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 619.481017] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 619.482552] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 619.484087] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:05:57 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8923, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8937, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:57 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x768b, &(0x7f00000000c0), &(0x7f0000d1a000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x26, 0x0, "30531d8e355a8770ac7656607d43a453bea64f181d9f31f40968d7db3916636db69d59a3b9bb324d14ec6595d5d578b9cf50a4036b820bf355df4c1a875a87e55324abc6bb167c819bb614f8a0cad687"}, 0xd8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 619.521666] FAULT_INJECTION: forcing a failure. [ 619.521666] name failslab, interval 1, probability 0, space 0, times 0 [ 619.523309] CPU: 1 PID: 5872 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 619.524269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 619.525422] Call Trace: [ 619.525803] dump_stack+0x107/0x167 07:05:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext, 0x48b1, 0x0, 0xa, 0x5, 0x9, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300), 0x0, 0x1f) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r3, 0x8, 0xffffffffffffffff, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r3, 0x8000}, {0xffffffffffffffff, 0xc286}, {r4, 0x1000}, {r3, 0x6000}], 0x4, 0x1f) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000080)=""/133) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) [ 619.526321] should_fail.cold+0x5/0xa [ 619.527072] ? create_object.isra.0+0x3a/0xa30 [ 619.527752] should_failslab+0x5/0x20 [ 619.528314] kmem_cache_alloc+0x5b/0x310 [ 619.528895] ? perf_trace_lock+0xac/0x490 [ 619.529482] create_object.isra.0+0x3a/0xa30 [ 619.530102] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 619.530826] kmem_cache_alloc_trace+0x151/0x320 [ 619.531480] tty_open+0x13f/0x13e0 [ 619.531999] ? tty_init_dev+0x80/0x80 [ 619.532522] ? rwlock_bug.part.0+0x90/0x90 [ 619.533113] ? tty_init_dev+0x80/0x80 [ 619.533644] chrdev_open+0x268/0x6e0 [ 619.534167] ? __unregister_chrdev+0x110/0x110 [ 619.534809] ? fsnotify_perm.part.0+0x22d/0x620 [ 619.535459] do_dentry_open+0x4b7/0x1090 [ 619.536030] ? __unregister_chrdev+0x110/0x110 [ 619.536660] ? may_open+0x1e4/0x400 [ 619.537166] path_openat+0x19ba/0x2770 [ 619.537724] ? path_lookupat+0x860/0x860 [ 619.538288] ? find_held_lock+0x2c/0x110 [ 619.538862] ? __lockdep_reset_lock+0x180/0x180 [ 619.539510] do_filp_open+0x190/0x3e0 [ 619.540064] ? may_open_dev+0xf0/0xf0 [ 619.540597] ? do_raw_spin_lock+0x121/0x260 [ 619.541196] ? rwlock_bug.part.0+0x90/0x90 [ 619.541794] ? _raw_spin_unlock+0x1a/0x30 [ 619.542368] ? alloc_fd+0x2e7/0x670 [ 619.542883] do_sys_openat2+0x171/0x4d0 [ 619.543440] ? build_open_flags+0x6f0/0x6f0 [ 619.544063] ? __mutex_unlock_slowpath+0xe1/0x600 [ 619.544749] ? wait_for_completion_io+0x270/0x270 [ 619.545428] ? perf_trace_preemptirq_template+0x26d/0x400 [ 619.546217] ? perf_trace_preemptirq_template+0x26d/0x400 [ 619.547012] __x64_sys_openat+0x13f/0x1f0 [ 619.547587] ? __ia32_sys_open+0x1c0/0x1c0 [ 619.548191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 07:05:57 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8923, &(0x7f00000005c0)={'wlan0\x00'}) [ 619.548926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 619.549809] do_syscall_64+0x33/0x40 [ 619.550330] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 619.551038] RIP: 0033:0x7eff8d246b19 [ 619.551549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 619.554101] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 619.555160] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 619.556146] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 619.557130] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 619.558108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.559086] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 07:05:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8940, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8941, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:57 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 26) 07:05:57 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8923, &(0x7f00000005c0)={'wlan0\x00'}) 07:05:57 executing program 2: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/35, 0x23) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x4, 0x0, &(0x7f0000000040)=0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000000380)) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44059, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) timer_create(0x6, 0x0, &(0x7f0000000040)=0x0) timer_gettime(r1, &(0x7f0000000080)) timer_gettime(0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) keyctl$read(0xb, 0x0, &(0x7f00000003c0)=""/181, 0xb5) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="6d616e676c6500000000040000040000000000000000000000000000000000003100000046bf6882c68f601df550a65e0e3f39a80f580a0dae3f5f4804e7c66c696f4a4750"], &(0x7f0000000240)=0x55) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 07:05:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 14) [ 619.755548] FAULT_INJECTION: forcing a failure. [ 619.755548] name failslab, interval 1, probability 0, space 0, times 0 [ 619.758159] CPU: 0 PID: 5909 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 619.759670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 619.761506] Call Trace: [ 619.762100] dump_stack+0x107/0x167 [ 619.762909] should_fail.cold+0x5/0xa [ 619.763756] ? create_object.isra.0+0x3a/0xa30 [ 619.764782] should_failslab+0x5/0x20 [ 619.765624] kmem_cache_alloc+0x5b/0x310 [ 619.766524] create_object.isra.0+0x3a/0xa30 [ 619.767506] kmemleak_alloc_percpu+0xa0/0x100 [ 619.768506] pcpu_alloc+0x4e2/0x1240 [ 619.769340] __percpu_counter_init+0x10d/0x2d0 [ 619.770344] io_uring_alloc_task_context+0xcc/0x6a0 [ 619.771434] ? io_import_iovec+0x1120/0x1120 [ 619.772421] io_uring_setup+0x1dd1/0x2980 [ 619.773338] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 619.774443] ? wait_for_completion_io+0x270/0x270 [ 619.775527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 619.776686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 619.777823] do_syscall_64+0x33/0x40 [ 619.778643] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 619.779764] RIP: 0033:0x7ff1de49fb19 [ 619.780588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 619.784611] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 619.786270] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 619.787837] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 619.789396] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 619.790958] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 619.792534] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 619.845619] FAULT_INJECTION: forcing a failure. [ 619.845619] name failslab, interval 1, probability 0, space 0, times 0 [ 619.847041] CPU: 1 PID: 5913 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 619.847869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 619.848859] Call Trace: [ 619.849179] dump_stack+0x107/0x167 [ 619.849618] should_fail.cold+0x5/0xa [ 619.850077] ? io_uring_setup+0x17ed/0x2980 [ 619.850601] should_failslab+0x5/0x20 [ 619.851066] kmem_cache_alloc_trace+0x55/0x320 [ 619.851619] ? alloc_pages_current+0x18f/0x280 [ 619.852183] io_uring_setup+0x17ed/0x2980 [ 619.852689] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 619.853297] ? wait_for_completion_io+0x270/0x270 [ 619.853892] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 619.854521] ? syscall_enter_from_user_mode+0x1d/0x50 [ 619.855146] do_syscall_64+0x33/0x40 [ 619.855605] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 619.856230] RIP: 0033:0x7ff8e0e10b19 [ 619.856674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 619.858884] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 619.859797] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 619.860645] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 619.861492] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 619.862339] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 619.863184] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 07:06:10 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 07:06:10 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_enter(r0, 0x5258, 0xd86e, 0x1, &(0x7f0000000000)={[0x8]}, 0x8) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r2, 0x8, 0xffffffffffffffff, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r2, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r2, 0x6000}], 0x4, 0x1f) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r4, 0x8, 0xffffffffffffffff, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r4, 0x8000}, {0xffffffffffffffff, 0xc286}, {r5, 0x1000}, {r4, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8970, &(0x7f0000000040)={'wlan0\x00'}) 07:06:10 executing program 5: clock_settime(0x0, &(0x7f0000000000)={0x77359400}) syz_io_uring_setup(0x3753, &(0x7f0000000200), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, &(0x7f0000000800)={0x0, 0x2}, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x3, 0x9, 0xff, 0x7f, 0x0, 0x7, 0x41890, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xcb, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x20, 0x8001, 0x0, 0x4, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0xb, r2, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1b222018fa8882da151ca799ec3644baddf20800fc2cfbf294482adbee836e5e81417cec5dea6000"], 0xa) 07:06:10 executing program 7: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8923, &(0x7f00000005c0)={'wlan0\x00'}) 07:06:10 executing program 2: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) madvise(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xb) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1000000a}) r3 = socket$netlink(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x4000007ffffffc) add_key$user(&(0x7f0000000300), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000340)="cc", 0x1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000180)=0x2, 0x1, 0x1) 07:06:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f00000005c0)={'wlan0\x00'}) 03:33:20 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 27) 07:06:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 15) [ 632.760984] FAULT_INJECTION: forcing a failure. [ 632.760984] name failslab, interval 1, probability 0, space 0, times 0 [ 632.763365] CPU: 1 PID: 5931 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 632.764789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 632.766503] Call Trace: [ 632.767053] dump_stack+0x107/0x167 [ 632.767813] should_fail.cold+0x5/0xa [ 632.768618] ? create_object.isra.0+0x3a/0xa30 [ 632.769574] should_failslab+0x5/0x20 [ 632.770363] kmem_cache_alloc+0x5b/0x310 [ 632.771207] create_object.isra.0+0x3a/0xa30 [ 632.772145] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 632.773214] kmem_cache_alloc_trace+0x151/0x320 [ 632.774181] ? alloc_pages_current+0x18f/0x280 [ 632.775130] io_uring_setup+0x17ed/0x2980 [ 632.776017] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 632.777082] ? wait_for_completion_io+0x270/0x270 [ 632.778084] ? perf_trace_preemptirq_template+0x26d/0x400 [ 632.779220] ? perf_trace_preemptirq_template+0x26d/0x400 [ 632.780393] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 632.781484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 632.782545] do_syscall_64+0x33/0x40 [ 632.783317] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 632.784398] RIP: 0033:0x7ff8e0e10b19 [ 632.785170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 632.789007] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 632.790594] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 632.792092] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 632.793564] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 632.795050] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 632.796541] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 632.815114] FAULT_INJECTION: forcing a failure. [ 632.815114] name failslab, interval 1, probability 0, space 0, times 0 [ 632.817825] CPU: 0 PID: 5934 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 632.819243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 632.820964] Call Trace: [ 632.821628] dump_stack+0x107/0x167 [ 632.822382] should_fail.cold+0x5/0xa [ 632.823188] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 632.824320] should_failslab+0x5/0x20 [ 632.825131] kmem_cache_alloc_trace+0x55/0x320 [ 632.826104] io_uring_alloc_task_context+0x4a3/0x6a0 [ 632.827169] ? io_import_iovec+0x1120/0x1120 [ 632.828123] io_uring_setup+0x1dd1/0x2980 [ 632.829005] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 632.830074] ? wait_for_completion_io+0x270/0x270 [ 632.831091] ? perf_trace_preemptirq_template+0x26d/0x400 [ 632.832252] ? perf_trace_preemptirq_template+0x26d/0x400 [ 632.833436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 632.834543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 632.835630] do_syscall_64+0x33/0x40 [ 632.836425] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 632.837516] RIP: 0033:0x7ff1de49fb19 [ 632.838294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 632.842179] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 632.843764] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 632.845276] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 632.846783] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 632.848291] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 632.849795] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:33:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8946, &(0x7f00000005c0)={'wlan0\x00'}) 03:33:20 executing program 7: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8923, &(0x7f00000005c0)={'wlan0\x00'}) [ 632.902565] FAULT_INJECTION: forcing a failure. [ 632.902565] name failslab, interval 1, probability 0, space 0, times 0 [ 632.905165] CPU: 0 PID: 5940 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 632.906608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 632.908359] Call Trace: [ 632.908917] dump_stack+0x107/0x167 [ 632.909710] should_fail.cold+0x5/0xa [ 632.910518] ? alloc_tty_struct+0x95/0x8e0 [ 632.911406] should_failslab+0x5/0x20 [ 632.912212] kmem_cache_alloc_trace+0x55/0x320 [ 632.913170] ? kmem_cache_alloc_trace+0x151/0x320 [ 632.914194] alloc_tty_struct+0x95/0x8e0 [ 632.915051] ? __do_SAK+0x30/0x30 [ 632.915782] ? trace_hardirqs_on+0x5b/0x180 [ 632.916707] tty_init_dev.part.0+0x20/0x610 [ 632.917610] tty_open+0xc0e/0x13e0 [ 632.918368] ? tty_init_dev+0x80/0x80 [ 632.919163] ? rwlock_bug.part.0+0x90/0x90 [ 632.920065] ? tty_init_dev+0x80/0x80 [ 632.920869] chrdev_open+0x268/0x6e0 [ 632.921648] ? __unregister_chrdev+0x110/0x110 [ 632.922611] ? fsnotify_perm.part.0+0x22d/0x620 [ 632.923599] do_dentry_open+0x4b7/0x1090 [ 632.924470] ? __unregister_chrdev+0x110/0x110 [ 632.925430] ? may_open+0x1e4/0x400 [ 632.926194] path_openat+0x19ba/0x2770 [ 632.927013] ? path_lookupat+0x860/0x860 [ 632.927863] ? lock_acquire+0x197/0x470 [ 632.928707] ? find_held_lock+0x2c/0x110 [ 632.929578] do_filp_open+0x190/0x3e0 [ 632.930403] ? may_open_dev+0xf0/0xf0 [ 632.931212] ? do_raw_spin_lock+0x121/0x260 [ 632.932138] ? rwlock_bug.part.0+0x90/0x90 [ 632.933057] ? _raw_spin_unlock+0x1a/0x30 [ 632.933941] ? alloc_fd+0x2e7/0x670 [ 632.934730] do_sys_openat2+0x171/0x4d0 [ 632.935586] ? build_open_flags+0x6f0/0x6f0 [ 632.936517] ? __mutex_unlock_slowpath+0xe1/0x600 [ 632.937539] ? wait_for_completion_io+0x270/0x270 [ 632.938552] ? perf_trace_preemptirq_template+0x26d/0x400 [ 632.939700] ? perf_trace_preemptirq_template+0x26d/0x400 [ 632.940871] __x64_sys_openat+0x13f/0x1f0 [ 632.941742] ? __ia32_sys_open+0x1c0/0x1c0 [ 632.942633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 632.943732] ? syscall_enter_from_user_mode+0x1d/0x50 [ 632.944846] do_syscall_64+0x33/0x40 [ 632.945629] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 632.946732] RIP: 0033:0x7eff8d246b19 [ 632.947519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 632.951400] RSP: 002b:00007eff8a79b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 632.953044] RAX: ffffffffffffffda RBX: 00007eff8d35a020 RCX: 00007eff8d246b19 [ 632.954563] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 632.956066] RBP: 00007eff8a79b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 632.957574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 632.959094] R13: 00007ffcc3c1737f R14: 00007eff8a79b300 R15: 0000000000022000 03:33:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8947, &(0x7f00000005c0)={'wlan0\x00'}) 03:33:20 executing program 7: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8923, &(0x7f00000005c0)={'wlan0\x00'}) 03:33:20 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 28) 03:33:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f0000000000)={'wlan0\x00'}) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe44584e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f707e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82bf6b"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="01008a527bb46ecd14ae0000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x70d, 0x400000f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000000}, 0x4005) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000001}, 0x20048811) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="f529a5d7731a8a487f2c03c80508ebf36aac0c88ce0647b6628dfdee3b9db024c95575820ab6a8d18dccf495", 0x2c}, {&(0x7f0000000080)="a43859406c289dda0dd0ddc06c0d94e8747c64cb7ec897bb4c89a8925a", 0x1d}, {&(0x7f00000000c0)="6d213028356f39c9a22c3e4bda", 0xd}, {&(0x7f0000000100)="d7695fd43b25a11481fec1d56aca3b5d05a22345c5", 0x15}, {&(0x7f0000000140)="33b65d90031efd747cada8e7f248434fa9cd6217fbced9b329cc09a0bd31112e197d3a439662c9e5494b7338cfd0436d638a3871f39ade784e91f22cd637e74ad887cbb68e473a3f8a3b967bd54514a4ffebf8c5cd9c76bee3809ca7604888a9fc1e2f949f6e56a21785baccc847c131a66d086579703526e82007a3a3a198febf38bc5f330baceb80495ac00ac4f87bef987e3b5c3677e140d8289a039dac9f319d54", 0xa3}, {&(0x7f0000000200)="af822f72de4ef3fe40d945f4a1152287738a57fc3a1ce91d1ac89ffbd3e1d2f112b4959e09b595e4b55d6df514a7c0ce9b133f25cace0644fb52704c543f3685cb04b6a47b904cb0cd437f82fc8a8d1326c33406c2f33295a3f1c5cb83c22aa3576203183834e61c55d95fa30c64087fd1355a05e2c0046fa5362bd27c63e50c49721b3145bfcc8a13f3b9e76b92ba74deef110eb35e9ed4b2f2ddb501229ef931214f2d0d9f9dd2f344cadedaf43baa1f68c6fc3175e7ef511134958a4eef595b9561ab8a31f1ddd049cb9dc5f06a49781e8823bcb1b7c2e545cc7f3e02fdd7287c72ddf028ccc60f3e489fe3be317a", 0xf0}, {&(0x7f0000000300)="1bf486bd3362943d75c484db20c8f6adf1e556094bd8b85cc89e97d7fc60fffcbce1afe8c1e2824d53a6e14ba465b2c64973e615aa0f0179065b0076a780a5fdd899fa6b026a8ca6482b952e7720c80868caa14121ce43d29c501c453e70bf6e62b0045f52f883a50c7feac62ac44a8c8a7b45fde93e757e91c0184e4ac0fc9a5c59a55c83f663aa3c6378719d6846b2bed161889c2bf1c0d465d6222b19b7934c597b2e0654b51ff733458ec089b55971e2ef8440e934f19f8b6bedd95736c47272d2f5917627fa286fdd13391f9c166fe424bd2a3e", 0xd6}, {&(0x7f0000000400)="ac851cc90d85626b4b4763030beac705e05c52332fc169fc5b8c82fb2f49d004f0329ddc50770e650ac660b311e7c5135571066bb987326c96c9ccd1d86280363b922052dfac764a99469e91f4d4d68c5d3e052e9e7885b789a9f6a9f388f055b8205280ca4dd3ceec1787aea9ce3935668e0b239300ee5799a3be637d5a25248488cca65860a13103ce3fedc000e02657c80cf4c19f31", 0x97}, {&(0x7f00000004c0)="039f2b3e784622a17239b51b47c6a6656218b1dd715273920960ff569ba412ee8912e16458bee424470db0a76b7c8cd8a584ee9b3e14149b5bee30d05b0fdda62cfc4ad3381c81c159b584bdbc1c6415852831ae007461b50f443b5a4ffca758ee4b6ad5ca078c775de46f79a2f92fe89463616acd5afb9292653b29b6a72a18d277f6c4d132989bd0312340cf1c5afa6134ed0dffd2278e2bcffe9fa41b04a79853f7db", 0xa4}, {&(0x7f0000000580)="901c26d3808364e2", 0x8}], 0xa, 0xfffffffa, 0x6) 03:33:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 16) [ 633.140963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 633.143727] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=5921 comm=syz-executor.2 [ 633.156711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:33:20 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8923, 0x0) [ 633.204308] FAULT_INJECTION: forcing a failure. [ 633.204308] name failslab, interval 1, probability 0, space 0, times 0 [ 633.206818] CPU: 0 PID: 5963 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 633.208301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.210088] Call Trace: [ 633.210664] dump_stack+0x107/0x167 [ 633.211426] should_fail.cold+0x5/0xa [ 633.212254] ? create_object.isra.0+0x3a/0xa30 [ 633.213235] should_failslab+0x5/0x20 [ 633.214054] kmem_cache_alloc+0x5b/0x310 [ 633.214901] create_object.isra.0+0x3a/0xa30 [ 633.215858] kmemleak_alloc_percpu+0xa0/0x100 [ 633.216837] pcpu_alloc+0x4e2/0x1240 [ 633.217657] __percpu_counter_init+0x10d/0x2d0 [ 633.218627] io_uring_alloc_task_context+0xcc/0x6a0 [ 633.219708] ? io_import_iovec+0x1120/0x1120 [ 633.220677] io_uring_setup+0x1dd1/0x2980 [ 633.221577] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 633.222666] ? wait_for_completion_io+0x270/0x270 [ 633.223731] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 633.224870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 633.225980] do_syscall_64+0x33/0x40 [ 633.226785] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 633.228095] RIP: 0033:0x7ff1de49fb19 [ 633.228898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.232782] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 633.234425] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 633.235924] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 633.237468] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 633.239005] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 633.240554] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 633.246781] FAULT_INJECTION: forcing a failure. [ 633.246781] name failslab, interval 1, probability 0, space 0, times 0 [ 633.250411] CPU: 0 PID: 5967 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 633.251887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 633.253680] Call Trace: [ 633.254248] dump_stack+0x107/0x167 [ 633.255036] should_fail.cold+0x5/0xa [ 633.255853] ? copy_process+0x3305/0x78b0 [ 633.256748] should_failslab+0x5/0x20 [ 633.257569] kmem_cache_alloc_node+0x55/0x330 [ 633.258534] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 633.259663] copy_process+0x3305/0x78b0 [ 633.260536] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 633.261672] ? _raw_spin_unlock_irq+0x1f/0x30 [ 633.262634] ? trace_hardirqs_on+0x5b/0x180 [ 633.263566] ? _raw_spin_unlock_irq+0x1f/0x30 [ 633.264541] ? finish_task_switch+0x126/0x5d0 [ 633.265491] ? finish_task_switch+0xef/0x5d0 [ 633.266441] ? lock_acquire+0x197/0x470 [ 633.267295] ? io_sq_thread_park+0x79/0xd0 [ 633.268214] ? lock_release+0x680/0x680 [ 633.269075] ? __cleanup_sighand+0xb0/0xb0 [ 633.269993] ? find_held_lock+0x2c/0x110 [ 633.270874] ? io_uring_setup+0x1c23/0x2980 [ 633.271802] ? lock_downgrade+0x6d0/0x6d0 [ 633.272704] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 633.273759] create_io_thread+0xb6/0xf0 [ 633.274620] ? pidfd_prepare+0x80/0x80 [ 633.275471] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 633.276553] io_uring_setup+0x1d79/0x2980 [ 633.277464] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 633.278563] ? perf_trace_preemptirq_template+0x266/0x400 [ 633.279758] ? perf_trace_preemptirq_template+0x26d/0x400 [ 633.280956] ? perf_trace_preemptirq_template+0x26d/0x400 [ 633.282143] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 633.283263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 633.284387] do_syscall_64+0x33/0x40 [ 633.285193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 633.286372] RIP: 0033:0x7ff8e0e10b19 [ 633.287224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.291196] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 633.291242] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=5921 comm=syz-executor.2 [ 633.292862] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 633.292874] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 633.292885] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 633.292896] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 633.292908] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 633.368841] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=5921 comm=syz-executor.2 [ 633.383001] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=5921 comm=syz-executor.2 [ 633.494315] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=5921 comm=syz-executor.2 [ 633.516332] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5921 comm=syz-executor.2 [ 633.551220] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=5921 comm=syz-executor.2 [ 633.574767] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=5921 comm=syz-executor.2 03:33:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 11) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:33:33 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8923, 0x0) 03:33:33 executing program 2: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) madvise(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xb) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1000000a}) r3 = socket$netlink(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x4000007ffffffc) add_key$user(&(0x7f0000000300), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000340)="cc", 0x1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000180)=0x2, 0x1, 0x1) 03:33:33 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:33:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r1, 0x0) r2 = perf_event_open(0x0, 0x0, 0x800000000000002, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xb, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001700)={{0x1, 0x1, 0x18, r0, {0xffffd942, 0x7fff}}, './file0\x00'}) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000001740)={0xa, 0x0, 0x0, @private2}, &(0x7f0000001780)=0x1c) r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000017c0), 0x2, 0x0) r7 = getpgrp(0x0) pidfd_open(r7, 0x0) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) r9 = semget(0x2, 0x0, 0x186) r10 = getuid() semctl$IPC_SET(r9, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r10, r8, 0x0, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) clone3(&(0x7f0000001a00)={0x800000, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)=0x0, {0x1}, &(0x7f00000018c0)=""/43, 0x2b, &(0x7f0000001900)=""/143, &(0x7f00000019c0)}, 0x58) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a80)={0x0, 0x0}, &(0x7f0000001ac0)=0xc) statx(r0, &(0x7f0000001b00)='./file0\x00', 0x800, 0x200, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x46009034}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000600)={0x10d4, 0x16, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x1083, 0x8a, 0x0, 0x1, [@generic="37d7c7c4f70e19d4269890fe47a2619ca2a916af74e7e39b8387d0f78729cb59dae080ddfc40f9be9b58306626890388b34420971563d0ac13986a6bac5fa49779ad7a6dafadc169b8ad1ea0f861d9ec14c26dbce2e2d8296ef860bb0082cbc12431123cca245f24e09f5323552f1d", @generic="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", @typed={0x8, 0x79, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0x4a, 0x0, 0x0, @uid=r1}]}, @typed={0x8, 0x87, 0x0, 0x0, @uid=0xee01}, @nested={0x1c, 0x13, 0x0, 0x1, [@typed={0xc, 0x78, 0x0, 0x0, @u64=0xe4}, @typed={0xa, 0x52, 0x0, 0x0, @str='wlan0\x00'}]}, @nested={0x1c, 0x1e, 0x0, 0x1, [@typed={0x4, 0x4e}, @typed={0x8, 0x1f, 0x0, 0x0, @uid=0xee00}, @typed={0xa, 0x49, 0x0, 0x0, @str='-*}(*\x00'}]}]}, 0x10d4}, {&(0x7f0000000040)={0x4cc, 0x2b, 0x200, 0x70bd25, 0x25dfdbfd, "", [@typed={0x4, 0x36}, @nested={0x262, 0x73, 0x0, 0x1, [@typed={0xc, 0x4f, 0x0, 0x0, @u64=0x1}, @generic="30779ec6cccb35a5a80beda872b4744b3fd072a308d93c6d3d721bb7f6724db234665ad981a9a3abf459e8803d936651e868e108f9fad64dc1a0477623c96e24202820304eea755e7f8fdb2fa75ca15b7dcbdd6ef948781c431e81d4f25469ba3d01a0375714f87684f6e8936539c9107e1e045b2253fb09f8b0daffd0f41aaac2b26f2d0b96c657fbedc479bf06f716054fa2a54468137249f75e089b22861dad8ed09cfa66590dc9b24a065275f547633b4f3719b2281257f52ee2457d8b07168d7315bec8ed034d556cf58a268a7dbe7ce3ab3e1e12032ce91149fa7be70da8c62233eeacb544bbb2c270359347b82a04daaf18", @generic="943f0889091a50068af729d904eb6a5009ffa4bda5926c0b81c0680334c0e7e0a81202695af1", @typed={0x8, 0xf, 0x0, 0x0, @fd=r2}, @generic="bda7ceaae18196c5aa9c13685c72c73f5f6e6690f5d85f22bfaee9cfd08cca5d086d3f824bba73f597b05166dfc5dba82760", @generic="910a0d89ff815cb914f67a092cb67df77f8bce39e93b1d9fa0c9fd5a770986865e4762e05904aadcee79348114756ba9f8df2a8593751618559d3133ad349311c2786658a1d761536c523bf7f68dbd41ceb1597059cfa33a5e60b6e01649adabe7c896526ba613edce5ac4623b9c0d58ec6ef6d89b75d2bb545e7e08a71f85a50c302e0f78ea0e246609279e1a92069dcdb052c5c08281a7b8b0", @generic="c7b222ee63335ec1063a8316e28802df6f4aad2cf29dec7d136788ec53cc924c22dd6234f3ca40bcafd52f048ff9787c6a944f96498e1ef66da1935df1b328a44e14ef7baae7673e1cf88f2047680c1641c7e90255388f7e3e8fa1ac27b7af", @typed={0x4, 0x71}]}, @typed={0xb8, 0x2e, 0x0, 0x0, @binary="04e66ced83bb0d1f3888dad0f0ca79ad2a142f61bf2a4c3d8c89707c978502c7bbdbda27234c9122f894f2dbd49d1fe3baf12cd0a83ab9622000d2632a83aac8c9446a3bf2bdce1705698f12b8acb93f5ec8858add411c36ca4f84e31a6d76d453d21cf6a738e90af652d9593568c60f49d27568b89a51f7fdb3166e05aa66fd93b86735debe7780f2d7a59dd638efa14ded389c6b7d5c577795d826951dd3e3d6cac1b7bc9c0fb306386cb8569a9029a050ddbb"}, @nested={0x19b, 0x96, 0x0, 0x1, [@generic="25d3da43901646ae94742cce162e6adf345d7c65595ee1245946e2e5aea2b1fdda655a3c73a554da8d21943040a9cd08980cf375809f367435c87ffae222c2921fd6d9e0d750152a107cf4e7c18d3a97653ca4e4e225ee384d3d40ed898295f2b502ab5f4c385a4c6711cc24c34819aa6f0705178f444442b463fa8ce2512bb143ccc370a90053bfe398a042d37020b9ea3c5ae63e53ca2f584c833cb9408f1063a06399aaa9888df75cef08d4e691615031c9357ce64e6f4ebd64417c80aafcca5cc95e5655edcf5917b8388baff5f31f8c29d96331754010964f572d04814a176525edca017e3983eb2da839055ec415887ea9ded3e28a12eeefa8a9f8fd", @typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@local}, @generic="2c085098c7564d2554cb75f51c0122c0b0c41a651ba870286be88e12fcab0657f729f1b8bc63797561c38cccaa6bcc00beb63d4f0ba33a5879725e8c56e2b51f68fecdbdb7bd6e6da80f65db4f86e0e78b4c2042e6c76d84a9f9a0c45ddbb758e4efca76e9ed143984d44699bdd71764cce58e062c10378678d6d849541fb393d0bc36cf"]}]}, 0x4cc}], 0x2, &(0x7f0000001c40)=[@rights={{0x28, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, r4, r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, r8}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}], 0xa0, 0x4}, 0x48015) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 03:33:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 17) 03:33:33 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 29) 03:33:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8948, &(0x7f00000005c0)={'wlan0\x00'}) [ 646.713798] FAULT_INJECTION: forcing a failure. [ 646.713798] name failslab, interval 1, probability 0, space 0, times 0 [ 646.716309] CPU: 0 PID: 6047 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 646.717756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 646.717843] FAULT_INJECTION: forcing a failure. [ 646.717843] name failslab, interval 1, probability 0, space 0, times 0 [ 646.719491] Call Trace: [ 646.719558] dump_stack+0x107/0x167 [ 646.723248] should_fail.cold+0x5/0xa [ 646.724061] ? create_object.isra.0+0x3a/0xa30 [ 646.725030] should_failslab+0x5/0x20 [ 646.725834] kmem_cache_alloc+0x5b/0x310 [ 646.726697] create_object.isra.0+0x3a/0xa30 [ 646.727636] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 646.728716] kmem_cache_alloc_trace+0x151/0x320 [ 646.729716] io_uring_alloc_task_context+0x4a3/0x6a0 [ 646.730789] ? io_import_iovec+0x1120/0x1120 [ 646.731744] io_uring_setup+0x1dd1/0x2980 [ 646.732628] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 646.733692] ? wait_for_completion_io+0x270/0x270 [ 646.734737] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 646.735834] ? syscall_enter_from_user_mode+0x1d/0x50 [ 646.736931] do_syscall_64+0x33/0x40 [ 646.737721] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 646.738810] RIP: 0033:0x7ff1de49fb19 [ 646.739601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.743474] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 646.745085] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 646.746585] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 646.748098] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 646.749597] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 646.751106] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 646.752637] CPU: 1 PID: 6040 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 646.754115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 646.755870] Call Trace: [ 646.756442] dump_stack+0x107/0x167 [ 646.757212] should_fail.cold+0x5/0xa [ 646.758021] ? create_object.isra.0+0x3a/0xa30 [ 646.758991] should_failslab+0x5/0x20 [ 646.759791] kmem_cache_alloc+0x5b/0x310 [ 646.760675] create_object.isra.0+0x3a/0xa30 [ 646.761604] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 646.762684] kmem_cache_alloc_trace+0x151/0x320 [ 646.763674] alloc_tty_struct+0x95/0x8e0 [ 646.764535] ? __do_SAK+0x30/0x30 [ 646.765277] ? trace_hardirqs_on+0x5b/0x180 [ 646.766195] tty_init_dev.part.0+0x20/0x610 [ 646.767103] tty_open+0xc0e/0x13e0 [ 646.767858] ? tty_init_dev+0x80/0x80 [ 646.768674] ? rwlock_bug.part.0+0x90/0x90 [ 646.769578] ? tty_init_dev+0x80/0x80 [ 646.770378] chrdev_open+0x268/0x6e0 [ 646.771169] ? __unregister_chrdev+0x110/0x110 [ 646.772135] ? fsnotify_perm.part.0+0x22d/0x620 [ 646.773127] do_dentry_open+0x4b7/0x1090 [ 646.773985] ? __unregister_chrdev+0x110/0x110 [ 646.774945] ? may_open+0x1e4/0x400 [ 646.775710] path_openat+0x19ba/0x2770 [ 646.776552] ? path_lookupat+0x860/0x860 [ 646.777415] ? find_held_lock+0x2c/0x110 [ 646.778286] do_filp_open+0x190/0x3e0 [ 646.779087] ? may_open_dev+0xf0/0xf0 [ 646.779895] ? do_raw_spin_lock+0x121/0x260 [ 646.780808] ? rwlock_bug.part.0+0x90/0x90 [ 646.781708] ? _raw_spin_unlock+0x1a/0x30 [ 646.782593] ? alloc_fd+0x2e7/0x670 [ 646.783380] do_sys_openat2+0x171/0x4d0 [ 646.784225] ? build_open_flags+0x6f0/0x6f0 [ 646.785125] ? __mutex_unlock_slowpath+0xe1/0x600 [ 646.786134] ? wait_for_completion_io+0x270/0x270 [ 646.787165] __x64_sys_openat+0x13f/0x1f0 [ 646.788035] ? __ia32_sys_open+0x1c0/0x1c0 [ 646.788930] ? ksys_write+0x1a9/0x260 [ 646.789744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 646.790849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 646.791943] do_syscall_64+0x33/0x40 [ 646.792742] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 646.793816] RIP: 0033:0x7eff8d246b19 [ 646.794616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.798479] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 646.800076] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 646.801567] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 646.803066] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 646.804567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 646.806066] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 03:33:33 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8923, 0x0) 03:33:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8949, &(0x7f00000005c0)={'wlan0\x00'}) 03:33:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f0000000000)={'wlan0\x00'}) 03:33:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x406a832, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x8, 0x81, 0x0, 0x9, 0x0, 0x1, {0x0, r4}}, 0x7) [ 646.918810] FAULT_INJECTION: forcing a failure. [ 646.918810] name failslab, interval 1, probability 0, space 0, times 0 [ 646.921395] CPU: 0 PID: 6057 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 646.922837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 646.924595] Call Trace: [ 646.925156] dump_stack+0x107/0x167 [ 646.925922] should_fail.cold+0x5/0xa [ 646.926725] ? copy_process+0x3305/0x78b0 [ 646.927595] should_failslab+0x5/0x20 [ 646.928397] kmem_cache_alloc_node+0x55/0x330 [ 646.929347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 646.930459] copy_process+0x3305/0x78b0 [ 646.931302] ? SOFTIRQ_verbose+0x10/0x10 [ 646.932167] ? stack_trace_save+0x8c/0xc0 [ 646.933043] ? lock_acquire+0x197/0x470 [ 646.933873] ? io_sq_thread_park+0x79/0xd0 [ 646.934772] ? lock_release+0x680/0x680 [ 646.935607] ? __cleanup_sighand+0xb0/0xb0 [ 646.936517] ? kernel_text_address+0xf2/0x120 [ 646.937472] ? find_held_lock+0x2c/0x110 [ 646.938326] ? io_uring_setup+0x1c23/0x2980 [ 646.939232] ? lock_downgrade+0x6d0/0x6d0 [ 646.940111] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 646.941132] create_io_thread+0xb6/0xf0 [ 646.941971] ? pidfd_prepare+0x80/0x80 [ 646.942802] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 646.943845] io_uring_setup+0x1d79/0x2980 [ 646.944761] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 646.945827] ? wait_for_completion_io+0x270/0x270 [ 646.946857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 646.947953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 646.949056] do_syscall_64+0x33/0x40 [ 646.949843] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 646.950914] RIP: 0033:0x7ff8e0e10b19 [ 646.951693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.955545] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 646.957154] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 646.958649] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 646.960150] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 646.961687] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 646.963194] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 646.997785] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=6056 comm=syz-executor.2 03:33:33 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 30) 03:33:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x9, 0x8001, 0x5f}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8970, &(0x7f00000005c0)={'wlan1\x00'}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000080), 0x10) 03:33:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x894c, &(0x7f00000005c0)={'wlan0\x00'}) [ 647.048105] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=6056 comm=syz-executor.2 [ 647.063255] FAULT_INJECTION: forcing a failure. [ 647.063255] name failslab, interval 1, probability 0, space 0, times 0 [ 647.064301] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=6056 comm=syz-executor.2 [ 647.065724] CPU: 1 PID: 6070 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 647.065744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 647.071489] Call Trace: [ 647.072079] dump_stack+0x107/0x167 [ 647.072865] should_fail.cold+0x5/0xa [ 647.073675] ? io_wq_create+0xeb/0xc00 [ 647.074510] should_failslab+0x5/0x20 [ 647.075323] __kmalloc+0x72/0x390 [ 647.076079] io_wq_create+0xeb/0xc00 [ 647.076884] io_uring_alloc_task_context+0x1f1/0x6a0 [ 647.077958] ? io_import_iovec+0x1120/0x1120 [ 647.078898] ? io_apoll_task_func+0x2d0/0x2d0 [ 647.079842] ? __io_req_find_next+0x300/0x300 [ 647.080811] io_uring_setup+0x1dd1/0x2980 [ 647.081701] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 647.082779] ? wait_for_completion_io+0x270/0x270 [ 647.083829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 647.084949] ? syscall_enter_from_user_mode+0x1d/0x50 [ 647.085550] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=6056 comm=syz-executor.2 [ 647.086039] do_syscall_64+0x33/0x40 [ 647.089364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 647.090458] RIP: 0033:0x7ff1de49fb19 [ 647.091243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 647.095135] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 647.096718] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 647.098209] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 647.099711] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 647.101211] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 647.102702] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:33:33 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) [ 647.239955] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=6056 comm=syz-executor.2 [ 647.260790] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6056 comm=syz-executor.2 [ 647.285921] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=6056 comm=syz-executor.2 [ 647.299083] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=6056 comm=syz-executor.2 [ 647.328733] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6056 comm=syz-executor.2 [ 647.332459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=6056 comm=syz-executor.2 [ 660.515210] FAULT_INJECTION: forcing a failure. [ 660.515210] name failslab, interval 1, probability 0, space 0, times 0 [ 660.517864] CPU: 0 PID: 6087 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 660.519459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 660.521388] Call Trace: [ 660.522006] dump_stack+0x107/0x167 [ 660.522852] should_fail.cold+0x5/0xa [ 660.523746] ? create_object.isra.0+0x3a/0xa30 [ 660.524818] should_failslab+0x5/0x20 [ 660.525697] kmem_cache_alloc+0x5b/0x310 [ 660.526658] create_object.isra.0+0x3a/0xa30 [ 660.527679] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 660.528887] kmem_cache_alloc_trace+0x151/0x320 [ 660.529973] tty_ldisc_get.part.0+0x70/0x180 [ 660.530988] tty_ldisc_init+0x15/0x90 [ 660.531861] alloc_tty_struct+0x119/0x8e0 [ 660.533091] ? __do_SAK+0x30/0x30 [ 660.533899] ? trace_hardirqs_on+0x5b/0x180 [ 660.534906] tty_init_dev.part.0+0x20/0x610 [ 660.535918] tty_open+0xc0e/0x13e0 [ 660.536768] ? tty_init_dev+0x80/0x80 [ 660.537648] ? rwlock_bug.part.0+0x90/0x90 [ 660.538651] ? tty_init_dev+0x80/0x80 [ 660.539538] chrdev_open+0x268/0x6e0 [ 660.540414] ? __unregister_chrdev+0x110/0x110 [ 660.541476] ? fsnotify_perm.part.0+0x22d/0x620 [ 660.542580] do_dentry_open+0x4b7/0x1090 [ 660.543534] ? __unregister_chrdev+0x110/0x110 [ 660.544606] ? may_open+0x1e4/0x400 [ 660.545460] path_openat+0x19ba/0x2770 [ 660.546393] ? path_lookupat+0x860/0x860 [ 660.547341] ? find_held_lock+0x2c/0x110 [ 660.548303] do_filp_open+0x190/0x3e0 [ 660.549175] ? may_open_dev+0xf0/0xf0 [ 660.550073] ? do_raw_spin_lock+0x121/0x260 [ 660.551078] ? rwlock_bug.part.0+0x90/0x90 [ 660.552067] ? _raw_spin_unlock+0x1a/0x30 [ 660.553031] ? alloc_fd+0x2e7/0x670 [ 660.553888] do_sys_openat2+0x171/0x4d0 [ 660.554820] ? build_open_flags+0x6f0/0x6f0 [ 660.555814] ? __mutex_unlock_slowpath+0xe1/0x600 [ 660.556942] ? wait_for_completion_io+0x270/0x270 [ 660.558072] __x64_sys_openat+0x13f/0x1f0 [ 660.559037] ? __ia32_sys_open+0x1c0/0x1c0 [ 660.560006] ? ksys_write+0x1a9/0x260 [ 660.560906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 660.562126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 660.563327] do_syscall_64+0x33/0x40 [ 660.564174] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 660.565345] RIP: 0033:0x7eff8d246b19 [ 660.566203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 660.570361] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 660.572090] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 660.573727] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 660.575356] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 660.576986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 660.578611] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 [ 660.582948] FAULT_INJECTION: forcing a failure. [ 660.582948] name failslab, interval 1, probability 0, space 0, times 0 [ 660.585523] CPU: 0 PID: 6096 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 660.587064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 660.588940] Call Trace: [ 660.589533] dump_stack+0x107/0x167 [ 660.590358] should_fail.cold+0x5/0xa [ 660.591207] ? io_wq_create+0x6ef/0xc00 [ 660.592092] should_failslab+0x5/0x20 [ 660.592948] kmem_cache_alloc_node_trace+0x59/0x340 [ 660.594073] io_wq_create+0x6ef/0xc00 [ 660.594935] io_uring_alloc_task_context+0x1f1/0x6a0 [ 660.596063] ? io_import_iovec+0x1120/0x1120 [ 660.597051] ? io_apoll_task_func+0x2d0/0x2d0 [ 660.598052] ? __io_req_find_next+0x300/0x300 [ 660.599065] io_uring_setup+0x1dd1/0x2980 [ 660.600000] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 660.601144] ? wait_for_completion_io+0x270/0x270 [ 660.602244] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 660.603411] ? syscall_enter_from_user_mode+0x1d/0x50 [ 660.604567] do_syscall_64+0x33/0x40 [ 660.605410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 660.606556] RIP: 0033:0x7ff1de49fb19 [ 660.607383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 660.611460] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 660.613152] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 660.614111] selinux_netlink_send: 38 callbacks suppressed [ 660.614123] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=6101 comm=syz-executor.7 [ 660.614711] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 03:33:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 12) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:33:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000180)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$lock(r4, 0x5, &(0x7f0000000180)) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r5, 0x8, 0xffffffffffffffff, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r6, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r5, 0x8000}, {0xffffffffffffffff, 0xc286}, {r6, 0x1000}, {r5, 0x6000}], 0x4, 0x1f) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000000)="845d63519638ef17b1fefdd1b2a4ac370072bd6cb1f3ce13bfe72dc5d7339120693c7d614ef67eb7402bba8e810466c113b00362f48f2935603b6edc34d7b9afa823c083316f4744f8235043fe538f4023d2478c1ffa22d6c33ea0b8f13e6939668bb70d187b182c2e7d34d8f9f071e9c75d4507bcf1eb48e3be510200d866c2a5043cca8f3bdb51d828a158cc50d13bab0b4a5022db70") 03:33:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f00000005c0)={'wlan0\x00'}) 03:33:46 executing program 7: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) madvise(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xb) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1000000a}) r3 = socket$netlink(0x10, 0x3, 0x9) sendfile(r3, r2, 0x0, 0x4000007ffffffc) add_key$user(&(0x7f0000000300), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000340)="cc", 0x1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000180)=0x2, 0x1, 0x1) 03:33:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = fsopen(&(0x7f0000000000)='aio\x00', 0x1) r2 = signalfd(r1, &(0x7f0000000040)={[0xff]}, 0x8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r3, 0x8, 0xffffffffffffffff, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000340)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r3, 0x8000}, {0xffffffffffffffff, 0xc286}, {r4, 0x1000}, {r3, 0x6000}], 0x4, 0x1f) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000a484b5ca82c660d84c95139ab85b00babcd6aa4f158cd64d76a48921149b30350a39de4fa42579ac895d83febd1e0305f73a03b381fa64d214fb521ea61f60e274a23804ac5b415992937ffa1aceab713d0e3ea514c1b3f19a05e93163614d2eba80456ef451f3357bc26259b70196d0f9cc6b898023e153840e6c6359a92df18e42930914fc34a6f95e0472b0c773187d6f9833ac44973f9dd29672c638b3b79582e1f29f5e363b42c3c499efc085f87d8369f7dd9444a9c9bb34f74e44c8d0b080817139cb262fb8e991caf3b5e0ba8167852954322610e07bbd", @ANYRES16=r5, @ANYBLOB="08002bbd7000fddbdf25440000001c0023800800140009ffffff060001006d00000005000e000100000008000c0064000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004094}, 0x44) 03:33:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 03:33:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 18) 03:33:46 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 31) [ 660.614724] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 660.614736] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 660.614748] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 660.639204] FAULT_INJECTION: forcing a failure. [ 660.639204] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 660.641871] CPU: 0 PID: 6106 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 660.643368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 660.645208] Call Trace: [ 660.645805] dump_stack+0x107/0x167 [ 660.646620] should_fail.cold+0x5/0xa [ 660.647474] __alloc_pages_nodemask+0x182/0x600 [ 660.648520] ? lock_downgrade+0x6d0/0x6d0 [ 660.649446] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 660.650783] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 660.651929] ? kmem_cache_alloc_node+0x2bc/0x330 [ 660.652969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 660.654131] copy_process+0x62b/0x78b0 [ 660.654986] ? SOFTIRQ_verbose+0x10/0x10 [ 660.655894] ? stack_trace_save+0x8c/0xc0 [ 660.656828] ? lock_acquire+0x197/0x470 [ 660.657705] ? io_sq_thread_park+0x79/0xd0 [ 660.658643] ? lock_release+0x680/0x680 [ 660.659526] ? __cleanup_sighand+0xb0/0xb0 [ 660.660480] ? find_held_lock+0x2c/0x110 [ 660.661366] ? io_uring_setup+0x1c23/0x2980 [ 660.662309] ? lock_downgrade+0x6d0/0x6d0 [ 660.663209] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 660.664215] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=6101 comm=syz-executor.7 [ 660.664285] create_io_thread+0xb6/0xf0 [ 660.666627] ? pidfd_prepare+0x80/0x80 [ 660.667473] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 660.668563] io_uring_setup+0x1d79/0x2980 [ 660.669477] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 660.670583] ? perf_trace_preemptirq_template+0x266/0x400 [ 660.671783] ? perf_trace_preemptirq_template+0x26d/0x400 [ 660.672989] ? perf_trace_preemptirq_template+0x26d/0x400 [ 660.674193] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 660.675326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 660.676473] do_syscall_64+0x33/0x40 [ 660.677290] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 660.678219] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=6101 comm=syz-executor.7 [ 660.678414] RIP: 0033:0x7ff8e0e10b19 [ 660.678434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 660.678450] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 [ 660.683263] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=6101 comm=syz-executor.7 [ 660.684663] ORIG_RAX: 00000000000001a9 [ 660.684677] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 660.684689] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 660.684702] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 660.684714] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 660.684729] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:33:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 13) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:33:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8971, &(0x7f00000005c0)={'wlan0\x00'}) 03:33:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f00000005c0)={'wlan0\x00'}) [ 660.757075] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=6101 comm=syz-executor.7 03:33:47 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 32) [ 660.770822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6101 comm=syz-executor.7 [ 660.786158] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=6101 comm=syz-executor.7 [ 660.800869] FAULT_INJECTION: forcing a failure. [ 660.800869] name failslab, interval 1, probability 0, space 0, times 0 [ 660.803595] CPU: 0 PID: 6119 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 660.805198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 660.807142] Call Trace: [ 660.807760] dump_stack+0x107/0x167 [ 660.808621] should_fail.cold+0x5/0xa [ 660.809508] ? create_object.isra.0+0x3a/0xa30 [ 660.810567] should_failslab+0x5/0x20 [ 660.811457] kmem_cache_alloc+0x5b/0x310 [ 660.812415] ? io_wq_create+0x114/0xc00 [ 660.813341] create_object.isra.0+0x3a/0xa30 [ 660.814360] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 660.815541] kmem_cache_alloc_node_trace+0x16d/0x340 03:33:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f00000005c0)={'wlan0\x00'}) [ 660.816734] io_wq_create+0x6ef/0xc00 [ 660.817785] io_uring_alloc_task_context+0x1f1/0x6a0 [ 660.818951] ? io_import_iovec+0x1120/0x1120 [ 660.819967] ? io_apoll_task_func+0x2d0/0x2d0 [ 660.821017] ? __io_req_find_next+0x300/0x300 [ 660.822060] io_uring_setup+0x1dd1/0x2980 [ 660.823023] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 660.824190] ? wait_for_completion_io+0x270/0x270 [ 660.825344] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 660.826557] ? syscall_enter_from_user_mode+0x1d/0x50 [ 660.827752] do_syscall_64+0x33/0x40 [ 660.828618] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 660.829803] RIP: 0033:0x7ff1de49fb19 [ 660.830662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 660.834894] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 660.836636] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 660.838246] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 660.839862] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 660.841476] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 660.841687] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=6101 comm=syz-executor.7 [ 660.843107] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 660.848516] FAULT_INJECTION: forcing a failure. [ 660.848516] name failslab, interval 1, probability 0, space 0, times 0 [ 660.849979] CPU: 1 PID: 6124 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 660.850773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 660.851726] Call Trace: [ 660.852028] dump_stack+0x107/0x167 [ 660.852467] should_fail.cold+0x5/0xa [ 660.852913] ? __get_vm_area_node+0xd4/0x340 [ 660.853423] should_failslab+0x5/0x20 [ 660.853864] kmem_cache_alloc_node_trace+0x59/0x340 [ 660.854438] __get_vm_area_node+0xd4/0x340 [ 660.854928] __vmalloc_node_range+0x13f/0x9e0 [ 660.855440] ? n_tty_open+0x16/0x170 [ 660.855866] ? n_tty_open+0x16/0x170 [ 660.856306] ? __ldsem_down_write_nested+0xf6/0x7e0 [ 660.856881] ? __vmalloc_node+0x110/0x110 [ 660.857358] ? __ldsem_down_read_nested+0x7e0/0x7e0 [ 660.857929] ? n_tty_open+0x16/0x170 [ 660.858361] __vmalloc_node+0xb5/0x110 [ 660.858809] ? n_tty_open+0x16/0x170 [ 660.859242] n_tty_open+0x16/0x170 [ 660.859652] ? n_tty_set_termios+0x1010/0x1010 [ 660.860170] tty_ldisc_open+0xa2/0x120 [ 660.860627] tty_ldisc_setup+0x43/0x100 [ 660.861082] tty_init_dev.part.0+0x1fa/0x610 [ 660.861588] tty_open+0xc0e/0x13e0 [ 660.861999] ? tty_init_dev+0x80/0x80 [ 660.862436] ? rwlock_bug.part.0+0x90/0x90 [ 660.862921] ? tty_init_dev+0x80/0x80 [ 660.863359] chrdev_open+0x268/0x6e0 [ 660.863780] ? __unregister_chrdev+0x110/0x110 [ 660.864345] ? fsnotify_perm.part.0+0x22d/0x620 [ 660.864897] do_dentry_open+0x4b7/0x1090 [ 660.865373] ? __unregister_chrdev+0x110/0x110 [ 660.865904] ? may_open+0x1e4/0x400 [ 660.866329] path_openat+0x19ba/0x2770 [ 660.866785] ? path_lookupat+0x860/0x860 [ 660.867257] ? find_held_lock+0x2c/0x110 [ 660.867737] do_filp_open+0x190/0x3e0 [ 660.868175] ? may_open_dev+0xf0/0xf0 [ 660.868628] ? do_raw_spin_lock+0x121/0x260 [ 660.869132] ? rwlock_bug.part.0+0x90/0x90 [ 660.869631] ? _raw_spin_unlock+0x1a/0x30 [ 660.870120] ? alloc_fd+0x2e7/0x670 [ 660.870558] do_sys_openat2+0x171/0x4d0 [ 660.871023] ? build_open_flags+0x6f0/0x6f0 [ 660.871524] ? __mutex_unlock_slowpath+0xe1/0x600 [ 660.872080] ? wait_for_completion_io+0x270/0x270 [ 660.872647] __x64_sys_openat+0x13f/0x1f0 [ 660.873129] ? __ia32_sys_open+0x1c0/0x1c0 [ 660.873618] ? ksys_write+0x1a9/0x260 [ 660.874061] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 660.874666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 660.875264] do_syscall_64+0x33/0x40 [ 660.875692] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 660.876288] RIP: 0033:0x7eff8d246b19 [ 660.876718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 660.878872] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 660.879755] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 660.880599] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 660.881431] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 660.882261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 660.883094] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 [ 660.884059] syz-executor.6: vmalloc: allocation failure: 9120 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 660.885748] CPU: 1 PID: 6124 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 660.886535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 660.887501] Call Trace: [ 660.887803] dump_stack+0x107/0x167 [ 660.888238] warn_alloc.cold+0x95/0x18a [ 660.888703] ? zone_watermark_ok_safe+0x260/0x260 [ 660.889268] ? __get_vm_area_node+0xd4/0x340 [ 660.889784] ? __kasan_kmalloc.constprop.0+0xa2/0xd0 [ 660.890378] ? __get_vm_area_node+0x262/0x340 [ 660.890906] __vmalloc_node_range+0x58f/0x9e0 [ 660.891425] ? n_tty_open+0x16/0x170 [ 660.891860] ? __ldsem_down_write_nested+0xf6/0x7e0 [ 660.892440] ? __vmalloc_node+0x110/0x110 [ 660.892927] ? __ldsem_down_read_nested+0x7e0/0x7e0 [ 660.893514] ? n_tty_open+0x16/0x170 [ 660.893947] __vmalloc_node+0xb5/0x110 [ 660.894398] ? n_tty_open+0x16/0x170 [ 660.894828] n_tty_open+0x16/0x170 [ 660.895240] ? n_tty_set_termios+0x1010/0x1010 [ 660.895774] tty_ldisc_open+0xa2/0x120 [ 660.896250] tty_ldisc_setup+0x43/0x100 [ 660.896721] tty_init_dev.part.0+0x1fa/0x610 [ 660.897228] tty_open+0xc0e/0x13e0 [ 660.897647] ? tty_init_dev+0x80/0x80 [ 660.898086] ? rwlock_bug.part.0+0x90/0x90 [ 660.898586] ? tty_init_dev+0x80/0x80 [ 660.899027] chrdev_open+0x268/0x6e0 [ 660.899463] ? __unregister_chrdev+0x110/0x110 [ 660.899989] ? fsnotify_perm.part.0+0x22d/0x620 [ 660.900540] do_dentry_open+0x4b7/0x1090 [ 660.901015] ? __unregister_chrdev+0x110/0x110 [ 660.901540] ? may_open+0x1e4/0x400 [ 660.901961] path_openat+0x19ba/0x2770 [ 660.902419] ? path_lookupat+0x860/0x860 [ 660.902904] ? find_held_lock+0x2c/0x110 [ 660.903382] do_filp_open+0x190/0x3e0 [ 660.903824] ? may_open_dev+0xf0/0xf0 [ 660.904281] ? do_raw_spin_lock+0x121/0x260 [ 660.904784] ? rwlock_bug.part.0+0x90/0x90 [ 660.905270] ? _raw_spin_unlock+0x1a/0x30 [ 660.905745] ? alloc_fd+0x2e7/0x670 [ 660.906176] do_sys_openat2+0x171/0x4d0 [ 660.906634] ? build_open_flags+0x6f0/0x6f0 [ 660.907131] ? __mutex_unlock_slowpath+0xe1/0x600 [ 660.907681] ? wait_for_completion_io+0x270/0x270 [ 660.908235] __x64_sys_openat+0x13f/0x1f0 [ 660.908700] ? __ia32_sys_open+0x1c0/0x1c0 [ 660.909177] ? ksys_write+0x1a9/0x260 [ 660.909611] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 660.910207] ? syscall_enter_from_user_mode+0x1d/0x50 [ 660.910800] do_syscall_64+0x33/0x40 [ 660.911226] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 660.911803] RIP: 0033:0x7eff8d246b19 [ 660.912234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 660.914295] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 660.915169] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 660.915979] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 660.916799] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 660.917608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 660.918416] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 [ 660.919569] Mem-Info: [ 660.919869] active_anon:59 inactive_anon:44444 isolated_anon:0 [ 660.919869] active_file:10829 inactive_file:83343 isolated_file:0 [ 660.919869] unevictable:0 dirty:16039 writeback:0 [ 660.919869] slab_reclaimable:9373 slab_unreclaimable:65597 [ 660.919869] mapped:81040 shmem:112 pagetables:1279 bounce:0 [ 660.919869] free:126486 free_pcp:548 free_cma:0 [ 660.923518] Node 0 active_anon:236kB inactive_anon:177776kB active_file:43316kB inactive_file:333372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:324160kB dirty:64156kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:4064kB all_unreclaimable? no [ 660.926213] Node 0 DMA free:15908kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 660.929176] lowmem_reserve[]: 0 1616 1616 1616 [ 660.929732] Node 0 DMA32 free:489932kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:236kB inactive_anon:177776kB active_file:43316kB inactive_file:333372kB unevictable:0kB writepending:64152kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:5116kB bounce:0kB free_pcp:2128kB local_pcp:792kB free_cma:0kB [ 660.933048] lowmem_reserve[]: 0 0 0 0 [ 660.933523] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 660.935155] Node 0 DMA32: 646*4kB (UME) 502*8kB (UME) 408*16kB (ME) 362*32kB (UME) 157*64kB (M) 21*128kB (ME) 6*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (UE) 108*4096kB (UM) = 490568kB [ 660.937159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 660.938125] 52602 total pagecache pages [ 660.938583] 0 pages in swap cache [ 660.938975] Swap cache stats: add 0, delete 0, find 0/0 [ 660.939585] Free swap = 0kB [ 660.939942] Total swap = 0kB [ 660.940293] 524158 pages RAM [ 660.940657] 0 pages HighMem/MovableOnly [ 660.941105] 105069 pages reserved [ 660.941569] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 660.959565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6101 comm=syz-executor.7 [ 660.962641] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=6101 comm=syz-executor.7 03:34:00 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8923, &(0x7f00000005c0)={'wlan0\x00'}) (fail_nth: 1) 03:34:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:00 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 14) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:34:00 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8943, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'sit0\x00', {0x2, 0x0, @loopback}}) 03:34:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 19) 03:34:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8980, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:00 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 33) [ 673.657709] FAULT_INJECTION: forcing a failure. [ 673.657709] name failslab, interval 1, probability 0, space 0, times 0 [ 673.660144] CPU: 0 PID: 6137 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 673.661613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 673.663374] Call Trace: [ 673.663955] dump_stack+0x107/0x167 [ 673.664750] should_fail.cold+0x5/0xa [ 673.665573] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 673.666771] should_failslab+0x5/0x20 [ 673.667589] kmem_cache_alloc_trace+0x55/0x320 [ 673.668587] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 673.669757] io_uring_setup+0x14f6/0x2980 [ 673.670653] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 673.671738] ? wait_for_completion_io+0x270/0x270 [ 673.672807] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 673.673934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 673.675042] do_syscall_64+0x33/0x40 [ 673.675842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 673.676956] RIP: 0033:0x7ff1de49fb19 [ 673.677761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.681710] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 673.683343] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 673.684880] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 673.686424] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 673.687954] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 673.689495] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 673.690537] FAULT_INJECTION: forcing a failure. [ 673.690537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.693675] CPU: 1 PID: 6146 Comm: syz-executor.7 Not tainted 5.10.251 #1 [ 673.695203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 673.697008] Call Trace: [ 673.697583] dump_stack+0x107/0x167 [ 673.698374] should_fail.cold+0x5/0xa [ 673.699335] _copy_from_user+0x2e/0x1b0 [ 673.700264] sock_do_ioctl+0x153/0x300 [ 673.701146] ? compat_ifr_data_ioctl+0x180/0x180 [ 673.702198] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 673.703467] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 673.704632] ? do_vfs_ioctl+0x283/0x10d0 [ 673.705543] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 673.706674] ? generic_block_fiemap+0x60/0x60 [ 673.707640] ? lock_downgrade+0x6d0/0x6d0 [ 673.708548] sock_ioctl+0x3ef/0x710 [ 673.709334] ? dlci_ioctl_set+0x30/0x30 [ 673.710201] ? selinux_file_ioctl+0xb6/0x270 [ 673.711154] ? dlci_ioctl_set+0x30/0x30 [ 673.712013] __x64_sys_ioctl+0x19a/0x210 [ 673.712900] do_syscall_64+0x33/0x40 [ 673.713707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 673.714811] RIP: 0033:0x7fda158dcb19 [ 673.715614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.720231] RSP: 002b:00007fda12e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 673.722312] RAX: ffffffffffffffda RBX: 00007fda159eff60 RCX: 00007fda158dcb19 [ 673.724093] RDX: 00000000200005c0 RSI: 0000000000008923 RDI: 0000000000000004 [ 673.725675] RBP: 00007fda12e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 673.727258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.728882] R13: 00007ffe342b758f R14: 00007fda12e52300 R15: 0000000000022000 [ 673.732957] FAULT_INJECTION: forcing a failure. [ 673.732957] name failslab, interval 1, probability 0, space 0, times 0 [ 673.735438] CPU: 0 PID: 6135 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 673.736923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 673.738189] FAULT_INJECTION: forcing a failure. [ 673.738189] name failslab, interval 1, probability 0, space 0, times 0 [ 673.738712] Call Trace: [ 673.738736] dump_stack+0x107/0x167 [ 673.738758] should_fail.cold+0x5/0xa [ 673.738784] ? __delayacct_tsk_init+0x1b/0x80 [ 673.744232] should_failslab+0x5/0x20 [ 673.745071] kmem_cache_alloc+0x5b/0x310 [ 673.745952] __delayacct_tsk_init+0x1b/0x80 [ 673.746891] copy_process+0x3399/0x78b0 [ 673.747762] ? stack_trace_save+0x8c/0xc0 [ 673.748677] ? lock_acquire+0x197/0x470 [ 673.749537] ? io_sq_thread_park+0x79/0xd0 [ 673.750462] ? __cleanup_sighand+0xb0/0xb0 [ 673.751385] ? find_held_lock+0x2c/0x110 [ 673.752276] ? io_uring_setup+0x1c23/0x2980 [ 673.753215] ? lock_downgrade+0x6d0/0x6d0 [ 673.754119] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 673.755181] create_io_thread+0xb6/0xf0 [ 673.756038] ? pidfd_prepare+0x80/0x80 [ 673.756893] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 673.757968] io_uring_setup+0x1d79/0x2980 [ 673.758873] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 673.759969] ? perf_trace_preemptirq_template+0x266/0x400 [ 673.761165] ? perf_trace_preemptirq_template+0x26d/0x400 [ 673.762347] ? perf_trace_preemptirq_template+0x26d/0x400 [ 673.763546] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 673.764691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 673.765806] do_syscall_64+0x33/0x40 [ 673.766609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 673.767720] RIP: 0033:0x7ff8e0e10b19 [ 673.768535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.772517] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 673.774161] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 673.775711] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 673.777261] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 673.778815] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 673.780364] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 673.781956] CPU: 1 PID: 6147 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 673.783827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 673.786090] Call Trace: [ 673.786818] dump_stack+0x107/0x167 [ 673.787817] should_fail.cold+0x5/0xa [ 673.788882] ? create_object.isra.0+0x3a/0xa30 [ 673.790128] should_failslab+0x5/0x20 [ 673.791160] kmem_cache_alloc+0x5b/0x310 [ 673.792266] ? mark_lock+0xf5/0x2df0 [ 673.793316] create_object.isra.0+0x3a/0xa30 [ 673.794513] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 673.795913] kmem_cache_alloc_node_trace+0x16d/0x340 [ 673.797358] __get_vm_area_node+0xd4/0x340 [ 673.798449] __vmalloc_node_range+0x13f/0x9e0 [ 673.799586] ? n_tty_open+0x16/0x170 [ 673.800551] ? n_tty_open+0x16/0x170 [ 673.801431] ? __ldsem_down_write_nested+0xf6/0x7e0 [ 673.802513] ? __vmalloc_node+0x110/0x110 [ 673.803401] ? __ldsem_down_read_nested+0x7e0/0x7e0 [ 673.804494] ? n_tty_open+0x16/0x170 [ 673.805296] __vmalloc_node+0xb5/0x110 [ 673.806129] ? n_tty_open+0x16/0x170 [ 673.806930] n_tty_open+0x16/0x170 [ 673.807691] ? n_tty_set_termios+0x1010/0x1010 [ 673.808679] tty_ldisc_open+0xa2/0x120 [ 673.809516] tty_ldisc_setup+0x43/0x100 [ 673.810370] tty_init_dev.part.0+0x1fa/0x610 [ 673.811318] tty_open+0xc0e/0x13e0 [ 673.812088] ? tty_init_dev+0x80/0x80 [ 673.812912] ? rwlock_bug.part.0+0x90/0x90 [ 673.813826] ? tty_init_dev+0x80/0x80 [ 673.814641] chrdev_open+0x268/0x6e0 [ 673.815440] ? __unregister_chrdev+0x110/0x110 [ 673.816426] ? fsnotify_perm.part.0+0x22d/0x620 [ 673.817435] do_dentry_open+0x4b7/0x1090 [ 673.818307] ? __unregister_chrdev+0x110/0x110 [ 673.819287] ? may_open+0x1e4/0x400 [ 673.820070] path_openat+0x19ba/0x2770 [ 673.820928] ? path_lookupat+0x860/0x860 [ 673.821801] ? lock_acquire+0x197/0x470 [ 673.822652] ? find_held_lock+0x2c/0x110 [ 673.823539] do_filp_open+0x190/0x3e0 [ 673.824374] ? may_open_dev+0xf0/0xf0 [ 673.825211] ? do_raw_spin_lock+0x121/0x260 [ 673.826139] ? rwlock_bug.part.0+0x90/0x90 [ 673.827067] ? _raw_spin_unlock+0x1a/0x30 [ 673.827962] ? alloc_fd+0x2e7/0x670 [ 673.828776] do_sys_openat2+0x171/0x4d0 [ 673.829641] ? build_open_flags+0x6f0/0x6f0 [ 673.830570] ? __mutex_unlock_slowpath+0xe1/0x600 [ 673.831613] ? wait_for_completion_io+0x270/0x270 [ 673.832673] ? perf_trace_preemptirq_template+0x26d/0x400 [ 673.833852] ? perf_trace_preemptirq_template+0x26d/0x400 [ 673.835050] __x64_sys_openat+0x13f/0x1f0 [ 673.835946] ? __ia32_sys_open+0x1c0/0x1c0 [ 673.836885] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 673.838020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 673.839136] do_syscall_64+0x33/0x40 [ 673.839946] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 673.841060] RIP: 0033:0x7eff8d246b19 [ 673.841863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.845815] RSP: 002b:00007eff8a79b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 673.847455] RAX: ffffffffffffffda RBX: 00007eff8d35a020 RCX: 00007eff8d246b19 [ 673.848998] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 673.850527] RBP: 00007eff8a79b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 673.852059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 673.853600] R13: 00007ffcc3c1737f R14: 00007eff8a79b300 R15: 0000000000022000 03:34:00 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 34) [ 673.895600] FAULT_INJECTION: forcing a failure. [ 673.895600] name failslab, interval 1, probability 0, space 0, times 0 03:34:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) ftruncate(r0, 0x9) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) io_uring_enter(r1, 0x7fdd, 0xe6cb, 0x2, &(0x7f0000000000)={[0x9]}, 0x2e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 673.898228] CPU: 1 PID: 6150 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 673.899910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 673.901745] Call Trace: [ 673.902323] dump_stack+0x107/0x167 [ 673.903111] should_fail.cold+0x5/0xa [ 673.903933] ? create_object.isra.0+0x3a/0xa30 [ 673.904926] should_failslab+0x5/0x20 [ 673.905749] kmem_cache_alloc+0x5b/0x310 [ 673.906621] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 673.907709] ? trace_hardirqs_on+0x5b/0x180 [ 673.908652] create_object.isra.0+0x3a/0xa30 [ 673.909594] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 673.910692] kmem_cache_alloc_trace+0x151/0x320 [ 673.911703] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 673.912884] io_uring_setup+0x14f6/0x2980 [ 673.913787] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 673.914875] ? wait_for_completion_io+0x270/0x270 [ 673.915939] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 673.917083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 673.918196] do_syscall_64+0x33/0x40 [ 673.919003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 673.920102] RIP: 0033:0x7ff1de49fb19 [ 673.920914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.924875] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 673.926512] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 673.928056] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 673.929595] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 673.931141] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 673.932689] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:34:15 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8943, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 15) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:34:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0x1, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) clone3(&(0x7f0000000340)={0x24000000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x31}, &(0x7f00000000c0)=""/26, 0x1a, &(0x7f0000000100)=""/71, &(0x7f0000000180)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58) bind$bt_hci(r1, &(0x7f00000003c0)={0x1f, 0x2, 0x3}, 0x6) fadvise64(r3, 0x2e, 0x6, 0x3) r5 = syz_open_procfs(r4, &(0x7f0000000240)='net/ipv6_route\x00') r6 = pidfd_getfd(r1, r0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000002c0)=0x0) fcntl$setown(r2, 0x8, r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 20) 03:34:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8981, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:16 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8923, &(0x7f00000005c0)={'wlan0\x00'}) (fail_nth: 2) 03:34:16 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 35) 03:34:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4015) [ 689.591600] FAULT_INJECTION: forcing a failure. [ 689.591600] name failslab, interval 1, probability 0, space 0, times 0 [ 689.594801] CPU: 0 PID: 6166 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 689.596636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 689.598788] Call Trace: [ 689.599461] dump_stack+0x107/0x167 [ 689.600398] should_fail.cold+0x5/0xa [ 689.600693] FAULT_INJECTION: forcing a failure. [ 689.600693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.601385] ? create_object.isra.0+0x3a/0xa30 [ 689.601408] should_failslab+0x5/0x20 [ 689.601434] kmem_cache_alloc+0x5b/0x310 [ 689.601469] create_object.isra.0+0x3a/0xa30 [ 689.608139] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 689.609455] kmem_cache_alloc+0x159/0x310 [ 689.610528] __delayacct_tsk_init+0x1b/0x80 [ 689.611550] copy_process+0x3399/0x78b0 [ 689.612569] ? SOFTIRQ_verbose+0x10/0x10 [ 689.613501] ? stack_trace_save+0x8c/0xc0 [ 689.614396] ? lock_acquire+0x197/0x470 [ 689.615224] ? io_sq_thread_park+0x79/0xd0 [ 689.616187] ? __cleanup_sighand+0xb0/0xb0 [ 689.617128] ? find_held_lock+0x2c/0x110 [ 689.618039] ? io_uring_setup+0x1c23/0x2980 [ 689.618975] ? lock_downgrade+0x6d0/0x6d0 [ 689.619879] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 689.621148] create_io_thread+0xb6/0xf0 [ 689.622017] ? pidfd_prepare+0x80/0x80 [ 689.622898] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 689.623963] io_uring_setup+0x1d79/0x2980 [ 689.624891] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 689.625958] ? perf_trace_preemptirq_template+0x266/0x400 [ 689.627094] ? perf_trace_preemptirq_template+0x26d/0x400 [ 689.628239] ? perf_trace_preemptirq_template+0x26d/0x400 [ 689.629440] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 689.630532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 689.631590] do_syscall_64+0x33/0x40 [ 689.632349] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 689.633452] RIP: 0033:0x7ff8e0e10b19 [ 689.634216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 689.638169] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 689.639749] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 689.641239] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 689.642711] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 689.644173] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 689.645719] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 689.647289] CPU: 1 PID: 6163 Comm: syz-executor.7 Not tainted 5.10.251 #1 [ 689.649130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 689.650955] Call Trace: [ 689.651526] dump_stack+0x107/0x167 [ 689.651612] FAULT_INJECTION: forcing a failure. [ 689.651612] name failslab, interval 1, probability 0, space 0, times 0 [ 689.652304] should_fail.cold+0x5/0xa [ 689.655414] _copy_to_user+0x2e/0x180 [ 689.656216] simple_read_from_buffer+0xcc/0x160 [ 689.657201] proc_fail_nth_read+0x198/0x230 [ 689.658107] ? proc_sessionid_read+0x230/0x230 [ 689.659064] ? security_file_permission+0xb1/0xe0 [ 689.660085] ? proc_sessionid_read+0x230/0x230 [ 689.661046] vfs_read+0x228/0x620 [ 689.661774] ksys_read+0x12d/0x260 [ 689.662523] ? vfs_write+0xb10/0xb10 [ 689.663306] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 689.664402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 689.665499] do_syscall_64+0x33/0x40 [ 689.666273] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 689.667335] RIP: 0033:0x7fda1588f69c [ 689.668109] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 689.671940] RSP: 002b:00007fda12e52170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 689.673540] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fda1588f69c [ 689.675030] RDX: 000000000000000f RSI: 00007fda12e521e0 RDI: 0000000000000003 [ 689.676533] RBP: 00007fda12e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 689.678021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.679517] R13: 00007ffe342b758f R14: 00007fda12e52300 R15: 0000000000022000 [ 689.681064] CPU: 0 PID: 6170 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 689.682494] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 689.684207] Call Trace: [ 689.684811] dump_stack+0x107/0x167 [ 689.685607] should_fail.cold+0x5/0xa [ 689.686421] ? alloc_vmap_area+0x148/0x1d10 [ 689.687326] should_failslab+0x5/0x20 [ 689.688125] kmem_cache_alloc_node+0x55/0x330 [ 689.689113] alloc_vmap_area+0x148/0x1d10 [ 689.689991] ? kmem_cache_alloc_node_trace+0x16d/0x340 [ 689.691112] ? mark_held_locks+0x9e/0xe0 [ 689.691991] ? purge_vmap_area_lazy+0xc0/0xc0 [ 689.693006] ? kasan_unpoison_shadow+0x33/0x50 [ 689.693790] FAULT_INJECTION: forcing a failure. [ 689.693790] name failslab, interval 1, probability 0, space 0, times 0 [ 689.694011] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 689.697451] __get_vm_area_node+0x127/0x340 [ 689.698374] __vmalloc_node_range+0x13f/0x9e0 [ 689.699318] ? n_tty_open+0x16/0x170 [ 689.700109] ? n_tty_open+0x16/0x170 [ 689.700909] ? __ldsem_down_write_nested+0xf6/0x7e0 [ 689.701978] ? __vmalloc_node+0x110/0x110 [ 689.702855] ? __ldsem_down_read_nested+0x7e0/0x7e0 [ 689.703924] ? n_tty_open+0x16/0x170 [ 689.704731] __vmalloc_node+0xb5/0x110 [ 689.705565] ? n_tty_open+0x16/0x170 [ 689.706348] n_tty_open+0x16/0x170 [ 689.707107] ? n_tty_set_termios+0x1010/0x1010 [ 689.708064] tty_ldisc_open+0xa2/0x120 [ 689.708916] tty_ldisc_setup+0x43/0x100 [ 689.709775] tty_init_dev.part.0+0x1fa/0x610 [ 689.710775] tty_open+0xc0e/0x13e0 [ 689.711561] ? tty_init_dev+0x80/0x80 [ 689.712337] ? rwlock_bug.part.0+0x90/0x90 [ 689.713253] ? tty_init_dev+0x80/0x80 [ 689.714079] chrdev_open+0x268/0x6e0 [ 689.714870] ? __unregister_chrdev+0x110/0x110 [ 689.715832] ? fsnotify_perm.part.0+0x22d/0x620 [ 689.716856] do_dentry_open+0x4b7/0x1090 [ 689.717727] ? __unregister_chrdev+0x110/0x110 [ 689.718721] ? may_open+0x1e4/0x400 [ 689.719499] path_openat+0x19ba/0x2770 [ 689.720330] ? path_lookupat+0x860/0x860 [ 689.721208] ? find_held_lock+0x2c/0x110 [ 689.722104] do_filp_open+0x190/0x3e0 [ 689.722904] ? may_open_dev+0xf0/0xf0 [ 689.723735] ? do_raw_spin_lock+0x121/0x260 [ 689.724663] ? rwlock_bug.part.0+0x90/0x90 [ 689.725585] ? _raw_spin_unlock+0x1a/0x30 [ 689.726484] ? alloc_fd+0x2e7/0x670 [ 689.727261] do_sys_openat2+0x171/0x4d0 [ 689.728102] ? build_open_flags+0x6f0/0x6f0 [ 689.729017] ? __mutex_unlock_slowpath+0xe1/0x600 [ 689.730041] ? wait_for_completion_io+0x270/0x270 [ 689.731050] ? perf_trace_preemptirq_template+0x26d/0x400 [ 689.732187] ? perf_trace_preemptirq_template+0x26d/0x400 [ 689.733350] __x64_sys_openat+0x13f/0x1f0 [ 689.734229] ? __ia32_sys_open+0x1c0/0x1c0 [ 689.735147] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 689.736239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 689.737341] do_syscall_64+0x33/0x40 [ 689.738137] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 689.739197] RIP: 0033:0x7eff8d246b19 [ 689.739984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 689.743783] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 689.745389] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 689.746875] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 689.748360] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 689.749874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 689.751358] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 [ 689.752965] CPU: 1 PID: 6173 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 689.753072] syz-executor.6: vmalloc: allocation failure: 9120 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 689.754405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 689.754413] Call Trace: [ 689.754438] dump_stack+0x107/0x167 [ 689.754463] should_fail.cold+0x5/0xa [ 689.756721] ,cpuset= [ 689.758432] ? create_object.isra.0+0x3a/0xa30 [ 689.758451] should_failslab+0x5/0x20 [ 689.758478] kmem_cache_alloc+0x5b/0x310 [ 689.758505] create_object.isra.0+0x3a/0xa30 [ 689.759151] syz6 [ 689.759923] kmemleak_alloc_percpu+0xa0/0x100 [ 689.760848] ,mems_allowed=0 [ 689.761306] pcpu_alloc+0x4e2/0x1240 [ 689.762275] [ 689.763040] ? io_async_queue_proc+0x80/0x80 [ 689.763065] percpu_ref_init+0x31/0x3d0 [ 689.769536] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 689.770673] io_uring_setup+0x14f6/0x2980 [ 689.771556] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 689.772624] ? wait_for_completion_io+0x270/0x270 [ 689.773646] ? perf_trace_preemptirq_template+0x26d/0x400 [ 689.774792] ? perf_trace_preemptirq_template+0x26d/0x400 [ 689.775968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 689.777074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 689.778163] do_syscall_64+0x33/0x40 [ 689.778940] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 689.780010] RIP: 0033:0x7ff1de49fb19 [ 689.780797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 689.784648] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 689.786245] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 689.787734] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 689.789238] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 689.790741] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 689.792243] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 689.793791] CPU: 0 PID: 6170 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 689.795262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 689.797054] Call Trace: [ 689.797631] dump_stack+0x107/0x167 [ 689.798437] warn_alloc.cold+0x95/0x18a [ 689.799296] ? zone_watermark_ok_safe+0x260/0x260 [ 689.800326] ? slab_free_freelist_hook+0xa9/0x180 [ 689.801404] ? __get_vm_area_node+0x2cf/0x340 [ 689.802363] ? kasan_unpoison_shadow+0x33/0x50 [ 689.803360] ? __get_vm_area_node+0x262/0x340 [ 689.804350] __vmalloc_node_range+0x58f/0x9e0 [ 689.805348] ? n_tty_open+0x16/0x170 [ 689.806166] ? __ldsem_down_write_nested+0xf6/0x7e0 [ 689.807261] ? __vmalloc_node+0x110/0x110 [ 689.808217] ? __ldsem_down_read_nested+0x7e0/0x7e0 [ 689.809339] ? n_tty_open+0x16/0x170 [ 689.810154] __vmalloc_node+0xb5/0x110 [ 689.811001] ? n_tty_open+0x16/0x170 [ 689.811817] n_tty_open+0x16/0x170 [ 689.812598] ? n_tty_set_termios+0x1010/0x1010 [ 689.813585] tty_ldisc_open+0xa2/0x120 [ 689.814444] tty_ldisc_setup+0x43/0x100 [ 689.815339] tty_init_dev.part.0+0x1fa/0x610 [ 689.816314] tty_open+0xc0e/0x13e0 [ 689.817117] ? tty_init_dev+0x80/0x80 [ 689.817940] ? rwlock_bug.part.0+0x90/0x90 [ 689.818870] ? tty_init_dev+0x80/0x80 [ 689.819699] chrdev_open+0x268/0x6e0 [ 689.820532] ? __unregister_chrdev+0x110/0x110 [ 689.821518] ? fsnotify_perm.part.0+0x22d/0x620 [ 689.822551] do_dentry_open+0x4b7/0x1090 [ 689.823460] ? __unregister_chrdev+0x110/0x110 [ 689.824453] ? may_open+0x1e4/0x400 [ 689.825261] path_openat+0x19ba/0x2770 [ 689.826141] ? path_lookupat+0x860/0x860 [ 689.827038] ? find_held_lock+0x2c/0x110 [ 689.827956] do_filp_open+0x190/0x3e0 [ 689.828793] ? may_open_dev+0xf0/0xf0 [ 689.829642] ? do_raw_spin_lock+0x121/0x260 [ 689.830569] ? rwlock_bug.part.0+0x90/0x90 [ 689.831509] ? _raw_spin_unlock+0x1a/0x30 [ 689.832405] ? alloc_fd+0x2e7/0x670 [ 689.833227] do_sys_openat2+0x171/0x4d0 [ 689.834098] ? build_open_flags+0x6f0/0x6f0 [ 689.835016] ? __mutex_unlock_slowpath+0xe1/0x600 [ 689.836069] ? wait_for_completion_io+0x270/0x270 [ 689.837120] ? perf_trace_preemptirq_template+0x26d/0x400 [ 689.838300] ? perf_trace_preemptirq_template+0x26d/0x400 [ 689.839509] __x64_sys_openat+0x13f/0x1f0 [ 689.840424] ? __ia32_sys_open+0x1c0/0x1c0 [ 689.841364] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 689.842525] ? syscall_enter_from_user_mode+0x1d/0x50 [ 689.843650] do_syscall_64+0x33/0x40 [ 689.844446] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 689.845543] RIP: 0033:0x7eff8d246b19 [ 689.846331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 689.850200] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 689.851799] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 689.853315] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 689.854817] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 689.856321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 689.857836] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 [ 689.859457] Mem-Info: [ 689.860017] active_anon:59 inactive_anon:44396 isolated_anon:0 [ 689.860017] active_file:10843 inactive_file:83419 isolated_file:0 [ 689.860017] unevictable:0 dirty:321 writeback:0 [ 689.860017] slab_reclaimable:9330 slab_unreclaimable:64191 [ 689.860017] mapped:81032 shmem:112 pagetables:1403 bounce:0 [ 689.860017] free:127711 free_pcp:449 free_cma:0 [ 689.866754] Node 0 active_anon:236kB inactive_anon:177584kB active_file:43372kB inactive_file:333676kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:324128kB dirty:1284kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:4384kB all_unreclaimable? no [ 689.872428] Node 0 DMA free:15908kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 689.878048] lowmem_reserve[]: 0 1616 1616 1616 [ 689.879143] Node 0 DMA32 free:494936kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:236kB inactive_anon:177584kB active_file:43372kB inactive_file:333676kB unevictable:0kB writepending:1364kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:5612kB bounce:0kB free_pcp:1620kB local_pcp:1332kB free_cma:0kB [ 689.885537] lowmem_reserve[]: 0 0 0 0 [ 689.886454] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 689.889673] Node 0 DMA32: 600*4kB (UME) 708*8kB (UME) 404*16kB (ME) 431*32kB (UME) 196*64kB (UM) 33*128kB (UME) 7*256kB (UM) 5*512kB (UM) 3*1024kB (M) 2*2048kB (UE) 107*4096kB (UM) = 494880kB [ 689.893675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 689.895513] 52689 total pagecache pages [ 689.896353] 0 pages in swap cache [ 689.897158] Swap cache stats: add 0, delete 0, find 0/0 [ 689.898348] Free swap = 0kB [ 689.899044] Total swap = 0kB [ 689.899759] 524158 pages RAM [ 689.900483] 0 pages HighMem/MovableOnly [ 689.901434] 105069 pages reserved [ 689.902188] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 03:34:16 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="54a70bd83a7c65d84c6040222b25d38be82729f01a484862", 0x18}, {&(0x7f0000000080)="7d04ec3419c152be5060f503c6", 0xd}, {&(0x7f00000000c0)="aec5077e7aecf10538375425a4279b0e57e3a010cd21c3ea025a2ad55fda846ba715a411e0315827bf7a411501c7a22d1bbf2e0adc74825a65bdad458766e4df6fbc0c6efc7a4a4479281d6c451c69bd72af1c22e728f6a464354bc17f43ea62148602d46e2537193b4dc803970bb6f7198f09a25ec3c1a4651fe874cb6163714eac265daf4dc5434dcedb26f6e574c04d071048ae00c101", 0x98}], 0x3, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x2, 0x3, 0x6, 0x7}, {0xfff9, 0x2, 0xc6, 0x1775}, {0xee, 0x1f, 0x7}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r2, 0x8, 0xffffffffffffffff, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r2, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r2, 0x6000}], 0x4, 0x1f) close_range(r1, r2, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x151802, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x48010) 03:34:16 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8923, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:16 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8943, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 21) 03:34:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 16) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:34:16 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 36) 03:34:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(r0, &(0x7f0000000000)={[0x2]}, 0x8) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) kcmp(r2, 0xffffffffffffffff, 0x6, r1, r0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000080)) [ 690.087028] FAULT_INJECTION: forcing a failure. [ 690.087028] name failslab, interval 1, probability 0, space 0, times 0 [ 690.089497] CPU: 1 PID: 6194 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 690.090940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 690.092678] Call Trace: [ 690.093243] dump_stack+0x107/0x167 [ 690.094006] should_fail.cold+0x5/0xa [ 690.094808] ? alloc_pid+0xd7/0xd30 [ 690.095578] should_failslab+0x5/0x20 [ 690.096386] kmem_cache_alloc+0x5b/0x310 [ 690.097252] alloc_pid+0xd7/0xd30 [ 690.097988] ? copy_namespaces+0x1ca/0x4f0 [ 690.098870] copy_process+0x3b8b/0x78b0 [ 690.099718] ? stack_trace_save+0x8c/0xc0 [ 690.100621] ? __cleanup_sighand+0xb0/0xb0 [ 690.101507] ? kernel_text_address+0xf2/0x120 [ 690.102459] ? find_held_lock+0x2c/0x110 [ 690.103323] ? io_uring_setup+0x1c23/0x2980 [ 690.104227] ? lock_downgrade+0x6d0/0x6d0 [ 690.105114] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 690.106146] create_io_thread+0xb6/0xf0 [ 690.106984] ? pidfd_prepare+0x80/0x80 [ 690.107806] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 690.108868] io_uring_setup+0x1d79/0x2980 [ 690.109751] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 690.110816] ? wait_for_completion_io+0x270/0x270 [ 690.111829] ? perf_trace_preemptirq_template+0x26d/0x400 [ 690.112991] ? perf_trace_preemptirq_template+0x26d/0x400 [ 690.114165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 690.115262] ? syscall_enter_from_user_mode+0x1d/0x50 [ 690.116349] do_syscall_64+0x33/0x40 [ 690.117193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 690.118274] RIP: 0033:0x7ff8e0e10b19 [ 690.118816] FAULT_INJECTION: forcing a failure. [ 690.118816] name failslab, interval 1, probability 0, space 0, times 0 [ 690.119058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 690.119070] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 690.126906] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 690.128395] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 690.129919] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 690.131420] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 690.132926] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 690.134450] CPU: 0 PID: 6197 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 690.135852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 690.137545] Call Trace: [ 690.138090] dump_stack+0x107/0x167 [ 690.138844] should_fail.cold+0x5/0xa [ 690.139625] ? create_object.isra.0+0x3a/0xa30 [ 690.140571] should_failslab+0x5/0x20 [ 690.141356] kmem_cache_alloc+0x5b/0x310 [ 690.142195] create_object.isra.0+0x3a/0xa30 [ 690.143098] kmemleak_alloc_percpu+0xa0/0x100 [ 690.144016] pcpu_alloc+0x4e2/0x1240 [ 690.144807] ? io_async_queue_proc+0x80/0x80 [ 690.145718] percpu_ref_init+0x31/0x3d0 [ 690.146531] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 690.147635] io_uring_setup+0x14f6/0x2980 [ 690.148490] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 690.149559] ? wait_for_completion_io+0x270/0x270 [ 690.150546] ? perf_trace_preemptirq_template+0x26d/0x400 [ 690.151657] ? perf_trace_preemptirq_template+0x26d/0x400 [ 690.152818] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 690.153880] ? syscall_enter_from_user_mode+0x1d/0x50 [ 690.154935] do_syscall_64+0x33/0x40 [ 690.155690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 690.156739] RIP: 0033:0x7ff1de49fb19 [ 690.157493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 690.161262] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 690.162811] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 690.164269] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 690.165737] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 690.167184] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 690.168646] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 690.212185] FAULT_INJECTION: forcing a failure. [ 690.212185] name failslab, interval 1, probability 0, space 0, times 0 [ 690.214659] CPU: 1 PID: 6201 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 690.216089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 690.217836] Call Trace: [ 690.218394] dump_stack+0x107/0x167 [ 690.219159] should_fail.cold+0x5/0xa [ 690.219955] ? create_object.isra.0+0x3a/0xa30 [ 690.220917] should_failslab+0x5/0x20 [ 690.221714] kmem_cache_alloc+0x5b/0x310 [ 690.222567] ? tty_ldisc_setup+0x43/0x100 [ 690.223428] ? tty_init_dev.part.0+0x1fa/0x610 [ 690.224394] create_object.isra.0+0x3a/0xa30 [ 690.225327] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 690.226509] kmem_cache_alloc_node+0x169/0x330 [ 690.227471] alloc_vmap_area+0x148/0x1d10 [ 690.228341] ? kmem_cache_alloc_node_trace+0x16d/0x340 [ 690.229450] ? mark_held_locks+0x9e/0xe0 [ 690.230310] ? purge_vmap_area_lazy+0xc0/0xc0 [ 690.231248] ? kasan_unpoison_shadow+0x33/0x50 [ 690.232201] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 690.233278] __get_vm_area_node+0x127/0x340 [ 690.234194] __vmalloc_node_range+0x13f/0x9e0 [ 690.235135] ? n_tty_open+0x16/0x170 [ 690.235918] ? n_tty_open+0x16/0x170 [ 690.236712] ? __ldsem_down_write_nested+0xf6/0x7e0 [ 690.237761] ? __vmalloc_node+0x110/0x110 [ 690.238629] ? __ldsem_down_read_nested+0x7e0/0x7e0 [ 690.239684] ? n_tty_open+0x16/0x170 [ 690.240470] __vmalloc_node+0xb5/0x110 [ 690.241290] ? n_tty_open+0x16/0x170 [ 690.242072] n_tty_open+0x16/0x170 [ 690.242821] ? n_tty_set_termios+0x1010/0x1010 [ 690.243776] tty_ldisc_open+0xa2/0x120 [ 690.244607] tty_ldisc_setup+0x43/0x100 [ 690.245438] tty_init_dev.part.0+0x1fa/0x610 [ 690.246361] tty_open+0xc0e/0x13e0 [ 690.247110] ? tty_init_dev+0x80/0x80 [ 690.247890] ? rwlock_bug.part.0+0x90/0x90 [ 690.248803] ? tty_init_dev+0x80/0x80 [ 690.249596] chrdev_open+0x268/0x6e0 [ 690.250385] ? __unregister_chrdev+0x110/0x110 [ 690.251342] ? fsnotify_perm.part.0+0x22d/0x620 [ 690.252324] do_dentry_open+0x4b7/0x1090 [ 690.253182] ? __unregister_chrdev+0x110/0x110 [ 690.254132] ? may_open+0x1e4/0x400 [ 690.254898] path_openat+0x19ba/0x2770 [ 690.255723] ? path_lookupat+0x860/0x860 [ 690.256603] ? find_held_lock+0x2c/0x110 [ 690.257459] do_filp_open+0x190/0x3e0 [ 690.258253] ? may_open_dev+0xf0/0xf0 [ 690.259054] ? do_raw_spin_lock+0x121/0x260 [ 690.259960] ? rwlock_bug.part.0+0x90/0x90 [ 690.260866] ? _raw_spin_unlock+0x1a/0x30 [ 690.261727] ? alloc_fd+0x2e7/0x670 [ 690.262503] do_sys_openat2+0x171/0x4d0 [ 690.263341] ? build_open_flags+0x6f0/0x6f0 [ 690.264235] ? __mutex_unlock_slowpath+0xe1/0x600 [ 690.265253] ? wait_for_completion_io+0x270/0x270 [ 690.266261] ? perf_trace_preemptirq_template+0x26d/0x400 [ 690.267401] ? perf_trace_preemptirq_template+0x26d/0x400 [ 690.268564] __x64_sys_openat+0x13f/0x1f0 [ 690.269433] ? __ia32_sys_open+0x1c0/0x1c0 [ 690.270326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 690.271428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 690.272521] do_syscall_64+0x33/0x40 [ 690.273302] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 690.274375] RIP: 0033:0x7eff8d246b19 [ 690.275154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 690.278999] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 690.280596] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 690.282101] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 690.283586] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 690.285087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 690.286584] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 03:34:35 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:35 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8943, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:35 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x2, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:35 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8983, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:35 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 37) 03:34:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 17) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:34:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)="9013d9f8f97656942a51e5557a7c168de2dbe5fc0b81c4391319ea02aca495238ff837894e1e9de2a076221fe9d0bff6447e3d7385509e001731efcbeb5d11f6a5c5421b5ab12e76cd52ae8899f7169b45162a") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 22) [ 709.203398] FAULT_INJECTION: forcing a failure. [ 709.203398] name failslab, interval 1, probability 0, space 0, times 0 [ 709.205855] CPU: 0 PID: 6225 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 709.207304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 709.209061] Call Trace: [ 709.209627] dump_stack+0x107/0x167 [ 709.210385] should_fail.cold+0x5/0xa [ 709.211181] ? percpu_ref_init+0xd8/0x3d0 [ 709.212064] should_failslab+0x5/0x20 [ 709.212876] kmem_cache_alloc_trace+0x55/0x320 [ 709.213842] ? io_async_queue_proc+0x80/0x80 [ 709.214770] percpu_ref_init+0xd8/0x3d0 [ 709.215612] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 709.216755] io_uring_setup+0x14f6/0x2980 [ 709.217641] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 709.218711] ? wait_for_completion_io+0x270/0x270 [ 709.219754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 709.220875] ? syscall_enter_from_user_mode+0x1d/0x50 [ 709.221953] do_syscall_64+0x33/0x40 [ 709.222741] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 709.223819] RIP: 0033:0x7ff1de49fb19 [ 709.224598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 709.228486] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 709.230104] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 709.231602] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 709.233121] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 709.234647] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 709.236134] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:34:35 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8943, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:35 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4b47, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:35 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x6f0080, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) [ 709.283065] FAULT_INJECTION: forcing a failure. [ 709.283065] name failslab, interval 1, probability 0, space 0, times 0 [ 709.285506] CPU: 1 PID: 6234 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 709.286951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 709.288685] Call Trace: [ 709.289274] dump_stack+0x107/0x167 [ 709.290041] should_fail.cold+0x5/0xa [ 709.290839] ? kmemleak_scan_area+0xa6/0x360 [ 709.291758] should_failslab+0x5/0x20 [ 709.292557] kmem_cache_alloc+0x5b/0x310 [ 709.293428] kmemleak_scan_area+0xa6/0x360 [ 709.294320] alloc_vmap_area+0x171/0x1d10 [ 709.295197] ? kmem_cache_alloc_node_trace+0x16d/0x340 [ 709.296310] ? mark_held_locks+0x9e/0xe0 [ 709.297198] ? purge_vmap_area_lazy+0xc0/0xc0 [ 709.298149] ? kasan_unpoison_shadow+0x33/0x50 [ 709.299105] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 709.300176] __get_vm_area_node+0x127/0x340 [ 709.301107] __vmalloc_node_range+0x13f/0x9e0 [ 709.302054] ? n_tty_open+0x16/0x170 [ 709.302837] ? n_tty_open+0x16/0x170 [ 709.303632] ? __ldsem_down_write_nested+0xf6/0x7e0 [ 709.304713] ? __vmalloc_node+0x110/0x110 [ 709.305577] ? __ldsem_down_read_nested+0x7e0/0x7e0 [ 709.306630] ? n_tty_open+0x16/0x170 [ 709.307415] __vmalloc_node+0xb5/0x110 [ 709.308245] ? n_tty_open+0x16/0x170 [ 709.309055] n_tty_open+0x16/0x170 [ 709.309826] ? n_tty_set_termios+0x1010/0x1010 [ 709.310811] tty_ldisc_open+0xa2/0x120 [ 709.311655] tty_ldisc_setup+0x43/0x100 [ 709.312501] tty_init_dev.part.0+0x1fa/0x610 [ 709.313446] tty_open+0xc0e/0x13e0 [ 709.314201] ? tty_init_dev+0x80/0x80 [ 709.315001] ? rwlock_bug.part.0+0x90/0x90 [ 709.315915] ? tty_init_dev+0x80/0x80 [ 709.316738] chrdev_open+0x268/0x6e0 [ 709.317549] ? __unregister_chrdev+0x110/0x110 [ 709.318521] ? fsnotify_perm.part.0+0x22d/0x620 [ 709.319513] do_dentry_open+0x4b7/0x1090 [ 709.320384] ? __unregister_chrdev+0x110/0x110 [ 709.321355] ? may_open+0x1e4/0x400 [ 709.322128] path_openat+0x19ba/0x2770 [ 709.322957] ? path_lookupat+0x860/0x860 [ 709.323816] ? lock_acquire+0x197/0x470 [ 709.324652] ? find_held_lock+0x2c/0x110 [ 709.325531] do_filp_open+0x190/0x3e0 [ 709.326340] ? may_open_dev+0xf0/0xf0 [ 709.327156] ? do_raw_spin_lock+0x121/0x260 [ 709.328062] ? rwlock_bug.part.0+0x90/0x90 [ 709.328993] ? _raw_spin_unlock+0x1a/0x30 [ 709.329879] ? alloc_fd+0x2e7/0x670 [ 709.330651] do_sys_openat2+0x171/0x4d0 [ 709.331487] ? build_open_flags+0x6f0/0x6f0 [ 709.332397] ? __mutex_unlock_slowpath+0xe1/0x600 [ 709.333422] ? wait_for_completion_io+0x270/0x270 [ 709.334441] __x64_sys_openat+0x13f/0x1f0 [ 709.335309] ? __ia32_sys_open+0x1c0/0x1c0 [ 709.336198] ? ksys_write+0x1a9/0x260 [ 709.337033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 709.338144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 709.339232] do_syscall_64+0x33/0x40 [ 709.340015] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 709.341105] RIP: 0033:0x7eff8d246b19 [ 709.341908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 709.345780] RSP: 002b:00007eff8a79b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 709.347379] RAX: ffffffffffffffda RBX: 00007eff8d35a020 RCX: 00007eff8d246b19 [ 709.348891] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 709.350381] RBP: 00007eff8a79b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 709.351877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 709.353379] R13: 00007ffcc3c1737f R14: 00007eff8a79b300 R15: 0000000000022000 [ 709.356018] kmemleak: Cannot allocate a scan area, scanning the full object [ 709.359829] FAULT_INJECTION: forcing a failure. [ 709.359829] name failslab, interval 1, probability 0, space 0, times 0 [ 709.362195] CPU: 1 PID: 6235 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 709.363619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 709.365352] Call Trace: [ 709.365915] dump_stack+0x107/0x167 [ 709.366689] should_fail.cold+0x5/0xa [ 709.367513] ? create_object.isra.0+0x3a/0xa30 [ 709.368477] should_failslab+0x5/0x20 [ 709.369289] kmem_cache_alloc+0x5b/0x310 [ 709.370147] create_object.isra.0+0x3a/0xa30 [ 709.371083] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 709.372148] kmem_cache_alloc+0x159/0x310 [ 709.373037] alloc_pid+0xd7/0xd30 [ 709.373771] ? copy_namespaces+0x1ca/0x4f0 [ 709.374658] copy_process+0x3b8b/0x78b0 [ 709.375505] ? stack_trace_save+0x8c/0xc0 [ 709.376398] ? __cleanup_sighand+0xb0/0xb0 [ 709.377301] ? kernel_text_address+0xf2/0x120 [ 709.378253] ? find_held_lock+0x2c/0x110 [ 709.379110] ? io_uring_setup+0x1c23/0x2980 [ 709.380016] ? lock_downgrade+0x6d0/0x6d0 [ 709.380898] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 709.381930] create_io_thread+0xb6/0xf0 [ 709.382765] ? pidfd_prepare+0x80/0x80 [ 709.383607] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 709.384662] io_uring_setup+0x1d79/0x2980 [ 709.385555] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 709.386617] ? wait_for_completion_io+0x270/0x270 [ 709.387671] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 709.388787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 709.389874] do_syscall_64+0x33/0x40 [ 709.390649] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 709.391743] RIP: 0033:0x7ff8e0e10b19 [ 709.392526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 709.396408] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 709.398028] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 709.399529] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 709.401051] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 709.402559] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 709.404069] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:34:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe44584e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f707e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82bf6b"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="01008a527bb46ecd14ae0000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x70d, 0x400000f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000000}, 0x4005) pidfd_open(0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r6, 0x8, 0xffffffffffffffff, 0xc) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r7, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r6, 0x8000}, {0xffffffffffffffff, 0xc286}, {r7, 0x1000}, {r6, 0x6000}], 0x4, 0x1f) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2, 0x6, 0x0, 0xff, 0x0, 0x1, 0x300, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x1100, 0x0, 0x80, 0x0, 0x3, 0x3f, 0x0, 0x0, 0x10001, 0x0, 0xffff}, 0x0, 0x7, r6, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x2, 0x2, 0x0, {0x1ae, 0x13, 0x0, 0x316, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x0, 0x9}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x2, 0x0, 0x0, {0x5, 0x4, 0x0, 0x40, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x20, 0x8}}, @NL80211_ATTR_MAC={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4015}, 0x804) 03:34:35 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8990, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:35 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8943, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:35 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 38) [ 709.483757] FAULT_INJECTION: forcing a failure. [ 709.483757] name failslab, interval 1, probability 0, space 0, times 0 [ 709.486256] CPU: 1 PID: 6249 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 709.487746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 709.489556] Call Trace: [ 709.490124] dump_stack+0x107/0x167 [ 709.490920] should_fail.cold+0x5/0xa [ 709.491736] ? create_object.isra.0+0x3a/0xa30 [ 709.492713] should_failslab+0x5/0x20 [ 709.493528] kmem_cache_alloc+0x5b/0x310 [ 709.494419] create_object.isra.0+0x3a/0xa30 [ 709.495377] kmemleak_alloc_percpu+0xa0/0x100 [ 709.496323] pcpu_alloc+0x4e2/0x1240 [ 709.497143] ? io_async_queue_proc+0x80/0x80 [ 709.498074] percpu_ref_init+0x31/0x3d0 [ 709.498938] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 709.500074] io_uring_setup+0x14f6/0x2980 [ 709.500971] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 709.502040] ? wait_for_completion_io+0x270/0x270 [ 709.503101] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 709.504226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 709.505334] do_syscall_64+0x33/0x40 [ 709.506121] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 709.507207] RIP: 0033:0x7ff1de49fb19 [ 709.507995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 709.511895] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 709.513520] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 709.515024] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 709.516539] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 709.518059] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 709.519559] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 709.522739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 721.923283] FAULT_INJECTION: forcing a failure. [ 721.923283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.925264] CPU: 1 PID: 6263 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 721.926371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 721.927680] Call Trace: [ 721.928099] dump_stack+0x107/0x167 [ 721.928668] should_fail.cold+0x5/0xa [ 721.929269] _copy_to_user+0x2e/0x180 [ 721.929878] io_uring_setup+0x11b5/0x2980 [ 721.930530] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 721.931331] ? wait_for_completion_io+0x270/0x270 [ 721.932123] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 721.932955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 721.933782] do_syscall_64+0x33/0x40 [ 721.934369] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 721.935183] RIP: 0033:0x7ff1de49fb19 [ 721.935775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 721.938700] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 721.939914] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 721.941050] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 721.942188] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 721.943291] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 721.944437] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:34:48 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4b49, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 18) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:34:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB='\f\x00#'], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x400, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f728791463"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 03:34:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, 0x0) 03:34:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) fadvise64(r0, 0x7, 0x0, 0x2) 03:34:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8992, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:48 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 39) 03:34:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 23) 03:34:48 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 40) 03:34:48 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0xffffffffffffffff) [ 722.001095] FAULT_INJECTION: forcing a failure. [ 722.001095] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 722.003577] CPU: 1 PID: 6279 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 722.004628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.005932] Call Trace: [ 722.006346] dump_stack+0x107/0x167 [ 722.006910] should_fail.cold+0x5/0xa [ 722.007522] __alloc_pages_nodemask+0x182/0x600 [ 722.008236] ? lock_chain_count+0x20/0x20 [ 722.008921] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 722.009858] alloc_pages_vma+0xbb/0x410 [ 722.010473] wp_page_copy+0xee7/0x1f00 [ 722.011078] ? print_bad_pte+0x5a0/0x5a0 [ 722.011701] ? lock_downgrade+0x6d0/0x6d0 [ 722.012353] ? vm_normal_page+0x162/0x2e0 [ 722.013015] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 722.013848] do_wp_page+0x27b/0x1390 [ 722.014427] handle_mm_fault+0x1cc7/0x3500 [ 722.015097] ? __lock_acquire+0x1657/0x5b00 [ 722.015783] ? __pmd_alloc+0x630/0x630 [ 722.016388] ? vmacache_find+0x55/0x2a0 [ 722.017026] do_user_addr_fault+0x56e/0xc60 [ 722.017704] exc_page_fault+0xa2/0x1a0 [ 722.018297] asm_exc_page_fault+0x1e/0x30 [ 722.018948] RIP: 0010:copy_user_generic_string+0x2c/0x40 [ 722.019807] Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca e9 93 0b 1d 02 0f 1f 00 0f 01 [ 722.022589] RSP: 0018:ffff88801792fd90 EFLAGS: 00050246 [ 722.023407] RAX: 0000000000000001 RBX: 0000000000000078 RCX: 0000000000000007 [ 722.024490] RDX: 0000000000000000 RSI: ffff88801792fe90 RDI: 0000000020001000 [ 722.025562] RBP: 0000000020000fc0 R08: 0000000000000000 R09: ffff88801792fec7 [ 722.026666] R10: ffffed1002f25fd8 R11: 0000000000000001 R12: 0000000020001038 [ 722.027769] R13: ffff88801792fe50 R14: 00007ffffffff000 R15: 0000000000000000 [ 722.028886] _copy_to_user+0x13d/0x180 [ 722.029508] io_uring_setup+0x11b5/0x2980 [ 722.030145] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 722.030912] ? wait_for_completion_io+0x270/0x270 [ 722.031671] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 722.032465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 722.033324] do_syscall_64+0x33/0x40 [ 722.033933] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 722.034733] RIP: 0033:0x7ff1de49fb19 [ 722.035290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.038107] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 722.039276] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 722.040344] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 722.041463] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 722.042571] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 722.043709] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 722.048312] FAULT_INJECTION: forcing a failure. [ 722.048312] name failslab, interval 1, probability 0, space 0, times 0 03:34:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8993, &(0x7f00000005c0)={'wlan0\x00'}) 03:34:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, 0x0) [ 722.050709] CPU: 0 PID: 6283 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 722.052285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.054004] Call Trace: [ 722.054560] dump_stack+0x107/0x167 [ 722.055312] should_fail.cold+0x5/0xa [ 722.056095] ? io_uring_alloc_task_context+0x99/0x6a0 [ 722.057155] should_failslab+0x5/0x20 [ 722.057949] kmem_cache_alloc_trace+0x55/0x320 [ 722.058901] io_uring_alloc_task_context+0x99/0x6a0 [ 722.059943] ? io_import_iovec+0x1120/0x1120 [ 722.060875] io_uring_setup+0x1dd1/0x2980 [ 722.061734] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 722.062769] ? wait_for_completion_io+0x270/0x270 [ 722.063782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 722.064871] ? syscall_enter_from_user_mode+0x1d/0x50 [ 722.065946] do_syscall_64+0x33/0x40 [ 722.066719] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 722.067784] RIP: 0033:0x7ff8e0e10b19 [ 722.068575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.072362] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 722.073945] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 722.075414] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 722.076908] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 722.078397] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 722.079862] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 722.085881] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 722.087763] FAULT_INJECTION: forcing a failure. [ 722.087763] name failslab, interval 1, probability 0, space 0, times 0 [ 722.090138] CPU: 0 PID: 6281 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 722.091565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 03:34:48 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, &(0x7f00000005c0)={'wlan0\x00'}) [ 722.093283] Call Trace: [ 722.094010] dump_stack+0x107/0x167 [ 722.094770] should_fail.cold+0x5/0xa [ 722.095567] ? __vmalloc_node_range+0x7a2/0x9e0 [ 722.096529] should_failslab+0x5/0x20 [ 722.097327] __kmalloc_node+0x76/0x420 [ 722.098141] __vmalloc_node_range+0x7a2/0x9e0 [ 722.099090] ? __ldsem_down_write_nested+0xf6/0x7e0 [ 722.100133] ? __vmalloc_node+0x110/0x110 [ 722.100986] ? __ldsem_down_read_nested+0x7e0/0x7e0 [ 722.102021] ? n_tty_open+0x16/0x170 [ 722.102808] __vmalloc_node+0xb5/0x110 [ 722.103605] ? n_tty_open+0x16/0x170 [ 722.104389] n_tty_open+0x16/0x170 [ 722.105134] ? n_tty_set_termios+0x1010/0x1010 [ 722.106077] tty_ldisc_open+0xa2/0x120 [ 722.106877] tty_ldisc_setup+0x43/0x100 [ 722.107706] tty_init_dev.part.0+0x1fa/0x610 [ 722.108625] tty_open+0xc0e/0x13e0 [ 722.109371] ? tty_init_dev+0x80/0x80 [ 722.110172] ? rwlock_bug.part.0+0x90/0x90 [ 722.111060] ? tty_init_dev+0x80/0x80 [ 722.111866] chrdev_open+0x268/0x6e0 [ 722.112639] ? __unregister_chrdev+0x110/0x110 [ 722.113613] ? fsnotify_perm.part.0+0x22d/0x620 [ 722.114571] do_dentry_open+0x4b7/0x1090 03:34:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="2cd4d53ea1ebf9188789469ecd932668ecd9b785c968f4c563626762ba9d63501f1a99476896195428a063ce47dac614b0fe173bc7c1ca5e5e53e68d1f7fde41e4a38bb9a286ccccfe24b5f01cfaca7f4644a38e22f8433b5f676abcf24477e427712209b1c99949937827b24be7f5271ce9863bb62460a8b12107850a37e45be74c0ab1193617f95297f0caf39c29109614bef9f646668368928c3e7d085d574ead3c3b0addbdcb4de73f52f9") ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f00000000c0)="dd9d9b3ccc5b2b6ced105268af8ffa3a5da207c179a32c59767479d5bf94af5bbe8f31b8440d7162f2ed83597f06fb80b08f70e9d612189e8659637a7a14412ebccfd387e047a93f205d90e8bbdcb2766dab73fd2c5397b064f1a84dcf9c586d8b177a664f26f02513826d48f446dfaa4e7c069f371f50337045207734ee6226ce5bc71428e00198d891feaf4f2045cb03a789ed7ef2d36889d6fcc4eb5d3876ed53d15b0ccdb67964ac2c24ded74e4d4ed348cdb68a6ed7cfcc1ae8ab81b7fe7f9ee7b63fa5bfe5e414965598bcc0443e65df7f5cbd6b5f6053e381186f448d1eb68faf5cd36940065ddeec2dcee1f156bb45c2adfb4d67") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) [ 722.115412] ? __unregister_chrdev+0x110/0x110 [ 722.116461] ? may_open+0x1e4/0x400 [ 722.117221] path_openat+0x19ba/0x2770 [ 722.118033] ? path_lookupat+0x860/0x860 [ 722.118876] ? lock_acquire+0x197/0x470 [ 722.119699] ? find_held_lock+0x2c/0x110 [ 722.120547] do_filp_open+0x190/0x3e0 [ 722.121343] ? may_open_dev+0xf0/0xf0 [ 722.122159] ? do_raw_spin_lock+0x121/0x260 [ 722.123045] ? rwlock_bug.part.0+0x90/0x90 [ 722.123919] ? _raw_spin_unlock+0x1a/0x30 [ 722.124799] ? alloc_fd+0x2e7/0x670 [ 722.125565] do_sys_openat2+0x171/0x4d0 [ 722.126384] ? build_open_flags+0x6f0/0x6f0 [ 722.127277] ? __mutex_unlock_slowpath+0xe1/0x600 [ 722.128261] ? wait_for_completion_io+0x270/0x270 [ 722.129260] __x64_sys_openat+0x13f/0x1f0 [ 722.130102] ? __ia32_sys_open+0x1c0/0x1c0 [ 722.130962] ? ksys_write+0x1a9/0x260 [ 722.131762] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 722.132838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 722.133923] do_syscall_64+0x33/0x40 [ 722.134702] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 722.135745] RIP: 0033:0x7eff8d246b19 [ 722.136520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.140289] RSP: 002b:00007eff8a79b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 722.141855] RAX: ffffffffffffffda RBX: 00007eff8d35a020 RCX: 00007eff8d246b19 [ 722.143314] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 722.144772] RBP: 00007eff8a79b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.146242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 722.147717] R13: 00007ffcc3c1737f R14: 00007eff8a79b300 R15: 0000000000022000 03:34:48 executing program 5: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000000c0)="76a5f234096bb4f29920da99e6ac5e47f4df16f0d459b9565a8c58239318a004ab2d2bb93a5030f9974b2b51e8573c49cc7e9e10a6f7cca97f2019b4763f134359dd25f46cdb946b0fbded78fdbe02d53545a1ec98d7904299243a44894e6f15bb8b3f6bf314b8f2f8d77cc88f6aebebef121d9b927e84a162c70a572574c17cddc7138ede7b3a9e6d686d8f364da4c2006f30e8308548cbae7eb5227e01701e4438fb2475189b0229e2f19922e38a385d8408d49d133ac4d362591ed25516a59f6dc89bde7146c618c7dd4e74769497fa2a78c5a45198c4b6cec368d10d0bc4e044028fc485d9171cad2cb7") r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000040)}) 03:34:48 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5421, &(0x7f00000005c0)={'wlan0\x00'}) [ 722.190548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:34:48 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x19) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) write$P9_RREADDIR(r0, &(0x7f0000000040)={0x147, 0x29, 0x2, {0x3, [{{0x40}, 0x0, 0x3, 0x7, './file0'}, {{0x1, 0x4, 0x7}, 0x9, 0x1, 0x7, './file0'}, {{0x0, 0x2, 0x8}, 0x7, 0x5, 0x7, './file0'}, {{0x4, 0x3, 0x1}, 0x80000001, 0x3, 0x7, './file0'}, {{0x20, 0x4, 0x8}, 0x3, 0x0, 0xd, './file0/file0'}, {{0x40, 0x4, 0x6}, 0x0, 0xff, 0x7, './file0'}, {{0x20, 0x3, 0x8}, 0x7fff, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x7}, 0x7, 0xff, 0x7, './file0'}, {{0x20, 0x2, 0x7}, 0x20000000000000, 0x0, 0x7, './file1'}, {{0x40, 0x4, 0x6}, 0xffffffffffffffff, 0x9, 0x7, './file0'}]}}, 0x147) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 722.228739] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 03:35:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000140)="dbf50d166c33a5cf133d1d7bf8e7be1aca1e1d58c3853289dc0ef515371f2904cde1a2f26b1a958e5d5e154e8dd0aa5fcd5df019cc873fa82071d32d253f394d0e8af295735717282dba4da566b7ddf52b367a8287763e51058784cdcdeb8aa6b025eb019b50ba33c6f103f2685067c2e47a625db0db9a837de689cec08fca4adca2a5") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x52}, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240040c0}, 0x850) 03:35:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8994, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:04 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 41) 03:35:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 24) 03:35:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, 0x0) 03:35:04 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5450, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448eb, &(0x7f0000000000)="80bd0f3a5de4452ec023101374dddb6a2654436df64a46b9105197f4f6c8247fbf858d15fe96da48348b8d9c9f0ca5f414b1b3be46545ea555538a38b0d95ec2e7a10530dd37a4fb685b44fa7fa7c38b165c892e98c01c00d9054d126cab1b8c338d90724b74fa47a68b269e6bd5a91b271b4fdc9760ed37eaec0fb9dd2d5a7d159ad5fe4a0f08d4bd26891b7307a4ae8680140721e764d692ac17277692de037f9949b042e84a45bbe49ea9b3d06f8bf54b130f5a48f332d6892817a4be66ec88ce7a52cb91a6722dbf949a609593d9e24e6464141223475c4f17629e84030e91f3f0d977999b4b85ca187dfc") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 03:35:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 19) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 737.656303] FAULT_INJECTION: forcing a failure. [ 737.656303] name failslab, interval 1, probability 0, space 0, times 0 [ 737.657622] CPU: 0 PID: 6327 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 737.658387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 737.659322] Call Trace: [ 737.659627] dump_stack+0x107/0x167 [ 737.660045] should_fail.cold+0x5/0xa [ 737.660482] ? create_object.isra.0+0x3a/0xa30 [ 737.661006] should_failslab+0x5/0x20 [ 737.661439] kmem_cache_alloc+0x5b/0x310 [ 737.661912] create_object.isra.0+0x3a/0xa30 [ 737.662411] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 737.662993] __kmalloc_node+0x1ae/0x420 [ 737.663456] __vmalloc_node_range+0x7a2/0x9e0 [ 737.663972] ? __ldsem_down_write_nested+0xf6/0x7e0 [ 737.664545] ? __vmalloc_node+0x110/0x110 [ 737.665025] ? __ldsem_down_read_nested+0x7e0/0x7e0 [ 737.665599] ? n_tty_open+0x16/0x170 [ 737.666023] __vmalloc_node+0xb5/0x110 [ 737.666466] ? n_tty_open+0x16/0x170 [ 737.666896] n_tty_open+0x16/0x170 [ 737.667299] ? n_tty_set_termios+0x1010/0x1010 [ 737.667818] tty_ldisc_open+0xa2/0x120 [ 737.668268] tty_ldisc_setup+0x43/0x100 [ 737.668721] tty_init_dev.part.0+0x1fa/0x610 [ 737.669231] tty_open+0xc0e/0x13e0 [ 737.669644] ? tty_init_dev+0x80/0x80 [ 737.670072] ? rwlock_bug.part.0+0x90/0x90 [ 737.670565] ? tty_init_dev+0x80/0x80 [ 737.670997] chrdev_open+0x268/0x6e0 [ 737.671420] ? __unregister_chrdev+0x110/0x110 [ 737.671937] ? fsnotify_perm.part.0+0x22d/0x620 [ 737.672475] do_dentry_open+0x4b7/0x1090 [ 737.672938] ? __unregister_chrdev+0x110/0x110 [ 737.673262] FAULT_INJECTION: forcing a failure. [ 737.673262] name failslab, interval 1, probability 0, space 0, times 0 [ 737.673469] ? may_open+0x1e4/0x400 [ 737.673487] path_openat+0x19ba/0x2770 [ 737.673518] ? path_lookupat+0x860/0x860 [ 737.677615] ? find_held_lock+0x2c/0x110 [ 737.678094] do_filp_open+0x190/0x3e0 [ 737.678524] ? may_open_dev+0xf0/0xf0 [ 737.678967] ? do_raw_spin_lock+0x121/0x260 [ 737.679458] ? rwlock_bug.part.0+0x90/0x90 [ 737.679950] ? _raw_spin_unlock+0x1a/0x30 [ 737.680422] ? alloc_fd+0x2e7/0x670 [ 737.680854] do_sys_openat2+0x171/0x4d0 [ 737.681317] ? build_open_flags+0x6f0/0x6f0 [ 737.681803] ? __mutex_unlock_slowpath+0xe1/0x600 [ 737.682354] ? wait_for_completion_io+0x270/0x270 [ 737.682909] __x64_sys_openat+0x13f/0x1f0 [ 737.683379] ? __ia32_sys_open+0x1c0/0x1c0 [ 737.683855] ? ksys_write+0x1a9/0x260 [ 737.684297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 737.684894] ? syscall_enter_from_user_mode+0x1d/0x50 [ 737.685495] do_syscall_64+0x33/0x40 [ 737.685918] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 737.686498] RIP: 0033:0x7eff8d246b19 [ 737.686922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 737.688995] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 737.689876] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 737.690685] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 737.691487] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 737.692286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 737.693097] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 [ 737.693943] CPU: 1 PID: 6331 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 737.695541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 737.697461] Call Trace: [ 737.698057] dump_stack+0x107/0x167 [ 737.699056] should_fail.cold+0x5/0xa [ 737.700062] ? __d_alloc+0x2a/0x990 [ 737.700927] should_failslab+0x5/0x20 [ 737.701820] kmem_cache_alloc+0x5b/0x310 [ 737.702769] __d_alloc+0x2a/0x990 [ 737.703585] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 737.704873] d_alloc_pseudo+0x19/0x70 [ 737.705768] alloc_file_pseudo+0xce/0x250 [ 737.706713] ? alloc_file+0x5a0/0x5a0 [ 737.707617] anon_inode_getfile+0xc8/0x1f0 [ 737.708595] io_uring_setup+0x138b/0x2980 [ 737.709589] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 737.710748] ? wait_for_completion_io+0x270/0x270 [ 737.711886] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 737.713097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 737.714285] do_syscall_64+0x33/0x40 [ 737.715140] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 737.716325] RIP: 0033:0x7ff1de49fb19 [ 737.717196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 737.721397] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 737.723129] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 737.724770] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 737.726411] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 737.728043] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 737.729688] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:35:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0xd2869617ee5f7f52, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4}, 0x6) listen(0xffffffffffffffff, 0x81) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000180)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$lock(r4, 0x5, &(0x7f0000000180)) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r5, 0x8, 0xffffffffffffffff, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r6, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r5, 0x8000}, {0xffffffffffffffff, 0xc286}, {r6, 0x1000}, {r5, 0x6000}], 0x4, 0x1f) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000000)="845d63519638ef17b1fefdd1b2a4ac370072bd6cb1f3ce13bfe72dc5d7339120693c7d614ef67eb7402bba8e810466c113b00362f48f2935603b6edc34d7b9afa823c083316f4744f8235043fe538f4023d2478c1ffa22d6c33ea0b8f13e6939668bb70d187b182c2e7d34d8f9f071e9c75d4507bcf1eb48e3be510200d866c2a5043cca8f3bdb51d828a158cc50d13bab0b4a5022db70") [ 737.760389] FAULT_INJECTION: forcing a failure. [ 737.760389] name failslab, interval 1, probability 0, space 0, times 0 [ 737.761680] CPU: 0 PID: 6329 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 737.762451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 737.763398] Call Trace: [ 737.763705] dump_stack+0x107/0x167 [ 737.764115] should_fail.cold+0x5/0xa [ 737.764544] ? create_object.isra.0+0x3a/0xa30 [ 737.765062] should_failslab+0x5/0x20 [ 737.765491] kmem_cache_alloc+0x5b/0x310 [ 737.765952] create_object.isra.0+0x3a/0xa30 [ 737.766445] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 737.767014] kmem_cache_alloc_trace+0x151/0x320 [ 737.767542] io_uring_alloc_task_context+0x99/0x6a0 [ 737.768104] ? io_import_iovec+0x1120/0x1120 [ 737.768606] io_uring_setup+0x1dd1/0x2980 [ 737.769084] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 737.769651] ? perf_trace_preemptirq_template+0x266/0x400 [ 737.770266] ? perf_trace_preemptirq_template+0x26d/0x400 [ 737.770882] ? perf_trace_preemptirq_template+0x26d/0x400 [ 737.771511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 737.772104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 737.772684] do_syscall_64+0x33/0x40 [ 737.773111] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 737.773686] RIP: 0033:0x7ff8e0e10b19 [ 737.774102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 737.776161] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 737.777027] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 737.777825] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 737.778627] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 737.779427] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 737.780228] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:35:04 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000000000)="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", 0x19f}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0xe1a0}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) openat(r0, &(0x7f0000000240)='\x00', 0xf0001, 0x1) 03:35:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8995, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:04 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5451, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 20) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:35:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a0, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 737.878685] FAULT_INJECTION: forcing a failure. [ 737.878685] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 737.880110] CPU: 0 PID: 6356 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 737.880884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 737.881829] Call Trace: [ 737.882134] dump_stack+0x107/0x167 [ 737.882552] should_fail.cold+0x5/0xa [ 737.882999] __alloc_pages_nodemask+0x182/0x600 [ 737.883527] ? __kmalloc_node+0x1ae/0x420 [ 737.884010] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 737.884695] ? mark_held_locks+0x9e/0xe0 [ 737.885173] ? trace_hardirqs_on+0x5b/0x180 [ 737.885690] alloc_pages_current+0x187/0x280 [ 737.886198] __vmalloc_node_range+0x60a/0x9e0 [ 737.886722] ? __vmalloc_node+0x110/0x110 [ 737.887196] ? __ldsem_down_read_nested+0x7e0/0x7e0 [ 737.887774] ? n_tty_open+0x16/0x170 [ 737.888197] __vmalloc_node+0xb5/0x110 [ 737.888640] ? n_tty_open+0x16/0x170 [ 737.889075] n_tty_open+0x16/0x170 [ 737.889481] ? n_tty_set_termios+0x1010/0x1010 [ 737.889998] tty_ldisc_open+0xa2/0x120 [ 737.890441] tty_ldisc_setup+0x43/0x100 [ 737.890895] tty_init_dev.part.0+0x1fa/0x610 [ 737.891399] tty_open+0xc0e/0x13e0 [ 737.891817] ? tty_init_dev+0x80/0x80 [ 737.892247] ? rwlock_bug.part.0+0x90/0x90 [ 737.892740] ? tty_init_dev+0x80/0x80 [ 737.893183] chrdev_open+0x268/0x6e0 [ 737.893608] ? __unregister_chrdev+0x110/0x110 [ 737.894127] ? fsnotify_perm.part.0+0x22d/0x620 [ 737.894666] do_dentry_open+0x4b7/0x1090 [ 737.895132] ? __unregister_chrdev+0x110/0x110 [ 737.895653] ? may_open+0x1e4/0x400 [ 737.896071] path_openat+0x19ba/0x2770 [ 737.896531] ? path_lookupat+0x860/0x860 [ 737.897006] ? find_held_lock+0x2c/0x110 [ 737.897490] do_filp_open+0x190/0x3e0 [ 737.897924] ? may_open_dev+0xf0/0xf0 [ 737.898367] ? do_raw_spin_lock+0x121/0x260 [ 737.898858] ? rwlock_bug.part.0+0x90/0x90 [ 737.899354] ? _raw_spin_unlock+0x1a/0x30 [ 737.899829] ? alloc_fd+0x2e7/0x670 [ 737.900257] do_sys_openat2+0x171/0x4d0 [ 737.900712] ? build_open_flags+0x6f0/0x6f0 [ 737.901212] ? __mutex_unlock_slowpath+0xe1/0x600 [ 737.901764] ? wait_for_completion_io+0x270/0x270 [ 737.902322] __x64_sys_openat+0x13f/0x1f0 [ 737.902836] ? __ia32_sys_open+0x1c0/0x1c0 [ 737.903329] ? ksys_write+0x1a9/0x260 [ 737.903778] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 737.904373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 737.904966] do_syscall_64+0x33/0x40 [ 737.905400] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 737.905981] RIP: 0033:0x7eff8d246b19 [ 737.906404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 737.908474] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 737.909342] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 737.910145] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 737.910956] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 737.911760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 737.912568] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 [ 737.944904] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 03:35:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f00000005c0)={'wlan0\x00'}) (fail_nth: 1) 03:35:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r1 = perf_event_open(0x0, 0x0, 0x800000000000002, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xb, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x8, 0x1, 0x80, 0x3, 0x0, 0xfffffffffffffff7, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x4, @perf_config_ext={0x1, 0x3a0}, 0x911, 0x200, 0x9, 0x1, 0x4, 0x80000000, 0x61a, 0x0, 0x968, 0x0, 0x1}, 0xffffffffffffffff, 0xc, r1, 0x0) 03:35:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000face31f1f5d85162df89de4889230e6ab56b28bb9c5d00ec28551510f08a80c16af81c5a", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000040)="a711edc12c1860e8f4e11912e927383dd9f85a71897da800bf84790a5cbe5f2c9040d5") r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x20000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) 03:35:19 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 42) 03:35:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 25) [ 752.919943] FAULT_INJECTION: forcing a failure. [ 752.919943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.922486] CPU: 0 PID: 6373 Comm: syz-executor.2 Not tainted 5.10.251 #1 [ 752.923938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 752.925736] Call Trace: [ 752.926314] dump_stack+0x107/0x167 [ 752.927102] should_fail.cold+0x5/0xa [ 752.927923] _copy_from_user+0x2e/0x1b0 [ 752.928780] sock_do_ioctl+0x153/0x300 [ 752.929623] ? compat_ifr_data_ioctl+0x180/0x180 [ 752.930648] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 752.931881] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 752.932993] ? do_vfs_ioctl+0x283/0x10d0 [ 752.933878] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 752.935009] ? generic_block_fiemap+0x60/0x60 [ 752.935970] ? lock_downgrade+0x6d0/0x6d0 [ 752.936869] sock_ioctl+0x3ef/0x710 [ 752.937657] ? dlci_ioctl_set+0x30/0x30 [ 752.938521] ? selinux_file_ioctl+0xb6/0x270 [ 752.939467] ? dlci_ioctl_set+0x30/0x30 [ 752.940321] __x64_sys_ioctl+0x19a/0x210 [ 752.941204] do_syscall_64+0x33/0x40 [ 752.942003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 752.943111] RIP: 0033:0x7f8fe0561b19 [ 752.943912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 752.947891] RSP: 002b:00007f8fddad7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.949547] RAX: ffffffffffffffda RBX: 00007f8fe0674f60 RCX: 00007f8fe0561b19 [ 752.951085] RDX: 00000000200005c0 RSI: 0000000000008943 RDI: 0000000000000004 [ 752.952620] RBP: 00007f8fddad71d0 R08: 0000000000000000 R09: 0000000000000000 [ 752.954152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.955686] R13: 00007ffd9c8a4a9f R14: 00007f8fddad7300 R15: 0000000000022000 [ 752.963638] FAULT_INJECTION: forcing a failure. [ 752.963638] name failslab, interval 1, probability 0, space 0, times 0 [ 752.966102] CPU: 1 PID: 6367 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 752.967565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 752.969347] Call Trace: 03:35:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a1, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:19 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 21) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 752.969916] dump_stack+0x107/0x167 [ 752.970858] should_fail.cold+0x5/0xa [ 752.971672] ? create_object.isra.0+0x3a/0xa30 [ 752.972651] should_failslab+0x5/0x20 [ 752.973476] kmem_cache_alloc+0x5b/0x310 [ 752.974354] create_object.isra.0+0x3a/0xa30 [ 752.975292] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 752.976385] kmem_cache_alloc+0x159/0x310 [ 752.977284] __d_alloc+0x2a/0x990 [ 752.978031] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 752.979149] d_alloc_pseudo+0x19/0x70 [ 752.979962] alloc_file_pseudo+0xce/0x250 [ 752.980852] ? alloc_file+0x5a0/0x5a0 [ 752.981688] anon_inode_getfile+0xc8/0x1f0 [ 752.982646] io_uring_setup+0x138b/0x2980 [ 752.983547] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 752.984634] ? wait_for_completion_io+0x270/0x270 [ 752.985703] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 752.986835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 752.987946] do_syscall_64+0x33/0x40 [ 752.988748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 752.989858] RIP: 0033:0x7ff1de49fb19 [ 752.990659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 752.994642] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 752.996278] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 752.997817] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 752.999342] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 753.000867] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 753.002416] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:35:19 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r3, 0x8, 0xffffffffffffffff, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r3, 0x8000}, {0xffffffffffffffff, 0xc286}, {r4, 0x1000}, {r3, 0x6000}], 0x4, 0x1f) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000000)={0x1, 0x1ff, "90d455"}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) [ 753.023711] FAULT_INJECTION: forcing a failure. [ 753.023711] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 753.026292] CPU: 0 PID: 6386 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 753.027762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 753.029548] Call Trace: [ 753.030113] dump_stack+0x107/0x167 [ 753.030897] should_fail.cold+0x5/0xa [ 753.031718] __alloc_pages_nodemask+0x182/0x600 [ 753.032715] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 753.034000] ? mark_held_locks+0x9e/0xe0 [ 753.034868] ? trace_hardirqs_on+0x5b/0x180 [ 753.035790] alloc_pages_current+0x187/0x280 [ 753.036730] __vmalloc_node_range+0x60a/0x9e0 [ 753.037703] ? __vmalloc_node+0x110/0x110 [ 753.038585] ? __ldsem_down_read_nested+0x7e0/0x7e0 [ 753.039651] ? n_tty_open+0x16/0x170 [ 753.040439] __vmalloc_node+0xb5/0x110 [ 753.041270] ? n_tty_open+0x16/0x170 [ 753.042065] n_tty_open+0x16/0x170 [ 753.042820] ? n_tty_set_termios+0x1010/0x1010 [ 753.043790] tty_ldisc_open+0xa2/0x120 [ 753.044616] tty_ldisc_setup+0x43/0x100 [ 753.045469] tty_init_dev.part.0+0x1fa/0x610 [ 753.046406] tty_open+0xc0e/0x13e0 [ 753.047166] ? tty_init_dev+0x80/0x80 [ 753.047970] ? rwlock_bug.part.0+0x90/0x90 [ 753.048878] ? tty_init_dev+0x80/0x80 [ 753.049698] chrdev_open+0x268/0x6e0 [ 753.050493] ? __unregister_chrdev+0x110/0x110 [ 753.051466] ? fsnotify_perm.part.0+0x22d/0x620 [ 753.052471] do_dentry_open+0x4b7/0x1090 [ 753.053350] ? __unregister_chrdev+0x110/0x110 [ 753.054328] ? may_open+0x1e4/0x400 [ 753.055106] path_openat+0x19ba/0x2770 [ 753.055947] ? path_lookupat+0x860/0x860 [ 753.056817] ? lock_acquire+0x197/0x470 [ 753.057672] ? find_held_lock+0x2c/0x110 [ 753.058556] do_filp_open+0x190/0x3e0 [ 753.059367] ? may_open_dev+0xf0/0xf0 [ 753.060187] ? do_raw_spin_lock+0x121/0x260 [ 753.061107] ? rwlock_bug.part.0+0x90/0x90 [ 753.062029] ? _raw_spin_unlock+0x1a/0x30 [ 753.062917] ? alloc_fd+0x2e7/0x670 [ 753.063705] do_sys_openat2+0x171/0x4d0 [ 753.064556] ? build_open_flags+0x6f0/0x6f0 [ 753.065392] FAULT_INJECTION: forcing a failure. [ 753.065392] name failslab, interval 1, probability 0, space 0, times 0 [ 753.065479] ? __mutex_unlock_slowpath+0xe1/0x600 [ 753.065502] ? wait_for_completion_io+0x270/0x270 [ 753.069931] __x64_sys_openat+0x13f/0x1f0 [ 753.070810] ? __ia32_sys_open+0x1c0/0x1c0 [ 753.071701] ? ksys_write+0x1a9/0x260 [ 753.072519] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 753.073631] ? syscall_enter_from_user_mode+0x1d/0x50 [ 753.074712] do_syscall_64+0x33/0x40 [ 753.075493] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 753.076571] RIP: 0033:0x7eff8d246b19 [ 753.077359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 753.081235] RSP: 002b:00007eff8a79b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 753.082831] RAX: ffffffffffffffda RBX: 00007eff8d35a020 RCX: 00007eff8d246b19 [ 753.084327] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 753.085831] RBP: 00007eff8a79b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.087331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 753.088831] R13: 00007ffcc3c1737f R14: 00007eff8a79b300 R15: 0000000000022000 [ 753.090382] CPU: 1 PID: 6389 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 753.091867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 753.093665] Call Trace: [ 753.094238] dump_stack+0x107/0x167 [ 753.095025] should_fail.cold+0x5/0xa [ 753.095850] ? create_object.isra.0+0x3a/0xa30 [ 753.096835] should_failslab+0x5/0x20 [ 753.097668] kmem_cache_alloc+0x5b/0x310 [ 753.098549] create_object.isra.0+0x3a/0xa30 [ 753.099514] kmemleak_alloc_percpu+0xa0/0x100 [ 753.100481] pcpu_alloc+0x4e2/0x1240 [ 753.101321] __percpu_counter_init+0x10d/0x2d0 [ 753.102312] io_uring_alloc_task_context+0xcc/0x6a0 [ 753.103388] ? io_import_iovec+0x1120/0x1120 [ 753.104344] io_uring_setup+0x1dd1/0x2980 [ 753.105247] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 753.106336] ? wait_for_completion_io+0x270/0x270 [ 753.107392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 753.108516] ? syscall_enter_from_user_mode+0x1d/0x50 [ 753.109634] do_syscall_64+0x33/0x40 [ 753.110438] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 753.111555] RIP: 0033:0x7ff8e0e10b19 [ 753.112362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 753.116330] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 753.117980] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 753.119533] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 753.121069] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 753.122628] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 753.124167] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:35:19 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5460, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f00000005c0)={'wlan0\x00'}) (fail_nth: 2) [ 753.171059] FAULT_INJECTION: forcing a failure. [ 753.171059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.173459] CPU: 0 PID: 6395 Comm: syz-executor.2 Not tainted 5.10.251 #1 [ 753.174815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 753.176467] Call Trace: [ 753.177004] dump_stack+0x107/0x167 [ 753.177750] should_fail.cold+0x5/0xa [ 753.178514] _copy_to_user+0x2e/0x180 [ 753.179276] simple_read_from_buffer+0xcc/0x160 [ 753.180206] proc_fail_nth_read+0x198/0x230 [ 753.181070] ? proc_sessionid_read+0x230/0x230 [ 753.181986] ? security_file_permission+0xb1/0xe0 [ 753.182952] ? proc_sessionid_read+0x230/0x230 [ 753.183855] vfs_read+0x228/0x620 [ 753.184547] ksys_read+0x12d/0x260 [ 753.185267] ? vfs_write+0xb10/0xb10 [ 753.186021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 753.187060] ? syscall_enter_from_user_mode+0x1d/0x50 [ 753.188090] do_syscall_64+0x33/0x40 [ 753.188828] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 753.189857] RIP: 0033:0x7f8fe051469c [ 753.190186] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 03:35:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a2, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:19 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 43) [ 753.190591] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 753.190602] RSP: 002b:00007f8fddad7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 753.197332] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fe051469c [ 753.197343] RDX: 000000000000000f RSI: 00007f8fddad71e0 RDI: 0000000000000003 [ 753.197353] RBP: 00007f8fddad71d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.197363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.197374] R13: 00007ffd9c8a4a9f R14: 00007f8fddad7300 R15: 0000000000022000 03:35:19 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ce133c5063c2"}, 0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ce133c5063c2"}, 0x14) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="ce133c5063c2"}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000010}, 0x4c094) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 753.244956] FAULT_INJECTION: forcing a failure. [ 753.244956] name failslab, interval 1, probability 0, space 0, times 0 [ 753.247494] CPU: 1 PID: 6403 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 753.248933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 753.250672] Call Trace: [ 753.251228] dump_stack+0x107/0x167 [ 753.251991] should_fail.cold+0x5/0xa [ 753.252796] ? __alloc_file+0x21/0x320 [ 753.253618] should_failslab+0x5/0x20 [ 753.254411] kmem_cache_alloc+0x5b/0x310 [ 753.255263] __alloc_file+0x21/0x320 [ 753.256043] alloc_empty_file+0x6d/0x170 [ 753.256895] alloc_file+0x5e/0x5a0 [ 753.257653] alloc_file_pseudo+0x16a/0x250 [ 753.258537] ? alloc_file+0x5a0/0x5a0 [ 753.259348] anon_inode_getfile+0xc8/0x1f0 [ 753.260243] io_uring_setup+0x138b/0x2980 [ 753.261121] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 753.262185] ? wait_for_completion_io+0x270/0x270 [ 753.263248] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 753.264348] ? syscall_enter_from_user_mode+0x1d/0x50 [ 753.265446] do_syscall_64+0x33/0x40 [ 753.266227] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 753.267298] RIP: 0033:0x7ff1de49fb19 [ 753.268076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 753.271922] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 753.273530] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 753.275022] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 753.276514] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 753.278029] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 753.279530] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:35:34 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 44) 03:35:34 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000005180)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/184, 0xb8}, {&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f0000000100)=""/139, 0x8b}], 0x3}, 0x5}, {{&(0x7f0000000200), 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/178, 0xb2}], 0x2}, 0x7}, {{&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/19, 0x13}, {&(0x7f00000004c0)=""/193, 0xc1}, {&(0x7f0000000600)=""/25, 0x19}], 0x3, &(0x7f0000000680)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000001680)=@alg, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/189, 0xbd}, 0x200}, {{&(0x7f0000001800)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/84, 0x54}, {&(0x7f0000002900)=""/170, 0xaa}], 0x3, &(0x7f0000002a00)=""/195, 0xc3}, 0x50647cbe}, {{&(0x7f0000002b00)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000002b80)=""/77, 0x4d}, {&(0x7f0000002c00)=""/246, 0xf6}, {&(0x7f0000002d00)=""/123, 0x7b}, {&(0x7f0000002d80)=""/167, 0xa7}, {&(0x7f0000002e40)=""/4, 0x4}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x7, &(0x7f0000004f00)=""/240, 0xf0}, 0x7fffffff}], 0x6, 0x8020, &(0x7f00000051c0)={r1, r2+10000000}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r3, 0x8, 0xffffffffffffffff, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r3, 0x8000}, {0xffffffffffffffff, 0xc286}, {r4, 0x1000}, {r3, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) [ 767.569143] FAULT_INJECTION: forcing a failure. [ 767.569143] name failslab, interval 1, probability 0, space 0, times 0 [ 767.571717] CPU: 0 PID: 6413 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 767.573312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 767.575156] Call Trace: [ 767.575746] dump_stack+0x107/0x167 [ 767.576555] should_fail.cold+0x5/0xa [ 767.577410] ? __alloc_file+0x21/0x320 [ 767.578272] should_failslab+0x5/0x20 [ 767.579121] kmem_cache_alloc+0x5b/0x310 [ 767.580022] __alloc_file+0x21/0x320 [ 767.580851] alloc_empty_file+0x6d/0x170 [ 767.581757] alloc_file+0x5e/0x5a0 [ 767.582548] alloc_file_pseudo+0x16a/0x250 [ 767.583486] ? alloc_file+0x5a0/0x5a0 [ 767.584345] anon_inode_getfile+0xc8/0x1f0 [ 767.585298] io_uring_setup+0x138b/0x2980 [ 767.586232] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 767.587352] ? wait_for_completion_io+0x270/0x270 [ 767.588445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 767.589606] ? syscall_enter_from_user_mode+0x1d/0x50 [ 767.590746] do_syscall_64+0x33/0x40 [ 767.591568] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 767.592698] RIP: 0033:0x7ff1de49fb19 [ 767.593527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.597605] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 767.599308] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 767.600880] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 767.602466] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 767.604042] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 767.605627] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:35:34 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8901, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a3, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:34 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 26) 03:35:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 22) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 767.620777] FAULT_INJECTION: forcing a failure. [ 767.620777] name failslab, interval 1, probability 0, space 0, times 0 [ 767.622236] CPU: 1 PID: 6422 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 767.623079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 767.624110] Call Trace: [ 767.624445] dump_stack+0x107/0x167 [ 767.624898] should_fail.cold+0x5/0xa [ 767.625383] ? create_object.isra.0+0x3a/0xa30 [ 767.625946] should_failslab+0x5/0x20 [ 767.626417] kmem_cache_alloc+0x5b/0x310 [ 767.626922] create_object.isra.0+0x3a/0xa30 [ 767.627469] kmemleak_alloc_percpu+0xa0/0x100 [ 767.628024] pcpu_alloc+0x4e2/0x1240 [ 767.628499] __percpu_counter_init+0x10d/0x2d0 [ 767.629070] io_uring_alloc_task_context+0xcc/0x6a0 [ 767.629702] ? io_import_iovec+0x1120/0x1120 [ 767.630258] io_uring_setup+0x1dd1/0x2980 [ 767.630773] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 767.631402] ? wait_for_completion_io+0x270/0x270 [ 767.632003] ? perf_trace_preemptirq_template+0x26d/0x400 [ 767.632679] ? perf_trace_preemptirq_template+0x26d/0x400 [ 767.633386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 767.634028] ? syscall_enter_from_user_mode+0x1d/0x50 [ 767.634668] do_syscall_64+0x33/0x40 [ 767.635124] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 767.635760] RIP: 0033:0x7ff8e0e10b19 [ 767.636219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.638476] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 767.639407] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 767.640296] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 767.641177] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 767.642066] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 767.642971] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:35:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000000)={0x77359400}, 0x1, 0x1}, 0xfffffffc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 767.658343] FAULT_INJECTION: forcing a failure. [ 767.658343] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 767.659844] CPU: 1 PID: 6429 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 767.660676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 767.661731] Call Trace: [ 767.662057] dump_stack+0x107/0x167 [ 767.662506] should_fail.cold+0x5/0xa [ 767.662979] __alloc_pages_nodemask+0x182/0x600 [ 767.663560] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 767.664297] ? mark_held_locks+0x9e/0xe0 [ 767.664801] ? trace_hardirqs_on+0x5b/0x180 [ 767.665350] alloc_pages_current+0x187/0x280 [ 767.665895] __vmalloc_node_range+0x60a/0x9e0 [ 767.666453] ? __vmalloc_node+0x110/0x110 [ 767.666966] ? __ldsem_down_read_nested+0x7e0/0x7e0 [ 767.667593] ? n_tty_open+0x16/0x170 [ 767.668056] __vmalloc_node+0xb5/0x110 [ 767.668531] ? n_tty_open+0x16/0x170 [ 767.668990] n_tty_open+0x16/0x170 [ 767.669441] ? n_tty_set_termios+0x1010/0x1010 [ 767.670001] tty_ldisc_open+0xa2/0x120 [ 767.670478] tty_ldisc_setup+0x43/0x100 [ 767.670968] tty_init_dev.part.0+0x1fa/0x610 [ 767.671513] tty_open+0xc0e/0x13e0 [ 767.671955] ? tty_init_dev+0x80/0x80 [ 767.672422] ? rwlock_bug.part.0+0x90/0x90 [ 767.672951] ? tty_init_dev+0x80/0x80 [ 767.673428] chrdev_open+0x268/0x6e0 [ 767.673900] ? __unregister_chrdev+0x110/0x110 [ 767.674454] ? fsnotify_perm.part.0+0x22d/0x620 [ 767.675034] do_dentry_open+0x4b7/0x1090 [ 767.675531] ? __unregister_chrdev+0x110/0x110 [ 767.676103] ? may_open+0x1e4/0x400 [ 767.676551] path_openat+0x19ba/0x2770 [ 767.677042] ? path_lookupat+0x860/0x860 [ 767.677565] ? find_held_lock+0x2c/0x110 [ 767.678082] do_filp_open+0x190/0x3e0 [ 767.678547] ? may_open_dev+0xf0/0xf0 [ 767.679024] ? do_raw_spin_lock+0x121/0x260 [ 767.679547] ? rwlock_bug.part.0+0x90/0x90 [ 767.680083] ? _raw_spin_unlock+0x1a/0x30 [ 767.680599] ? alloc_fd+0x2e7/0x670 [ 767.681055] do_sys_openat2+0x171/0x4d0 [ 767.681553] ? build_open_flags+0x6f0/0x6f0 [ 767.682080] ? __mutex_unlock_slowpath+0xe1/0x600 [ 767.682671] ? wait_for_completion_io+0x270/0x270 [ 767.683269] ? perf_trace_preemptirq_template+0x26d/0x400 [ 767.683935] ? perf_trace_preemptirq_template+0x26d/0x400 [ 767.684615] __x64_sys_openat+0x13f/0x1f0 [ 767.685121] ? __ia32_sys_open+0x1c0/0x1c0 [ 767.685656] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 767.686298] ? syscall_enter_from_user_mode+0x1d/0x50 [ 767.686949] do_syscall_64+0x33/0x40 [ 767.687410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 767.688053] RIP: 0033:0x7eff8d246b19 [ 767.688507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.690763] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 767.691687] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 767.692547] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 767.693415] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.694268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 767.695123] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 03:35:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89b0, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x2, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:34 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8902, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f0000000140)={'wlan1\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0xf9, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0xffffffffffffffff}, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x8086a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xd) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000400), 0x0) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0x4106}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)="c641ae8a6cc95d78e763ef44c7d4b6ea21e99eec76f78d375cf1fa8104e48a04ae4fde7a63e0d487cfd0aab3bebf2a0406a0e83a5383945f75f3f9ee3e78783a3de9b1800966b6c01f576e4c86d1958544b7ba2e25c72cdc0db6f5f339518943b77fbec326") [ 767.768472] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 782.683798] FAULT_INJECTION: forcing a failure. [ 782.683798] name failslab, interval 1, probability 0, space 0, times 0 [ 782.686218] CPU: 0 PID: 6454 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 782.687633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 782.689322] Call Trace: [ 782.689892] dump_stack+0x107/0x167 [ 782.690653] should_fail.cold+0x5/0xa [ 782.691440] ? create_object.isra.0+0x3a/0xa30 [ 782.692380] should_failslab+0x5/0x20 [ 782.693181] kmem_cache_alloc+0x5b/0x310 [ 782.694057] create_object.isra.0+0x3a/0xa30 [ 782.694985] kmemleak_vmalloc+0x49/0x120 [ 782.695837] __vmalloc_node_range+0x574/0x9e0 [ 782.696818] ? __vmalloc_node+0x110/0x110 [ 782.697987] ? __ldsem_down_read_nested+0x7e0/0x7e0 [ 782.699034] ? n_tty_open+0x16/0x170 [ 782.699804] __vmalloc_node+0xb5/0x110 [ 782.700613] ? n_tty_open+0x16/0x170 [ 782.701406] n_tty_open+0x16/0x170 [ 782.702182] ? n_tty_set_termios+0x1010/0x1010 [ 782.703146] tty_ldisc_open+0xa2/0x120 [ 782.703952] tty_ldisc_setup+0x43/0x100 [ 782.704800] tty_init_dev.part.0+0x1fa/0x610 [ 782.705734] tty_open+0xc0e/0x13e0 [ 782.706493] ? tty_init_dev+0x80/0x80 [ 782.707275] ? rwlock_bug.part.0+0x90/0x90 [ 782.708164] ? tty_init_dev+0x80/0x80 [ 782.708955] chrdev_open+0x268/0x6e0 [ 782.709735] ? __unregister_chrdev+0x110/0x110 [ 782.710673] ? fsnotify_perm.part.0+0x22d/0x620 [ 782.711654] do_dentry_open+0x4b7/0x1090 [ 782.712516] ? __unregister_chrdev+0x110/0x110 [ 782.713477] ? may_open+0x1e4/0x400 [ 782.714264] path_openat+0x19ba/0x2770 [ 782.715130] ? path_lookupat+0x860/0x860 [ 782.715972] ? find_held_lock+0x2c/0x110 [ 782.716830] do_filp_open+0x190/0x3e0 [ 782.717644] ? may_open_dev+0xf0/0xf0 [ 782.718455] ? do_raw_spin_lock+0x121/0x260 [ 782.719378] ? rwlock_bug.part.0+0x90/0x90 [ 782.720271] ? _raw_spin_unlock+0x1a/0x30 [ 782.721152] FAULT_INJECTION: forcing a failure. [ 782.721152] name failslab, interval 1, probability 0, space 0, times 0 [ 782.721170] ? alloc_fd+0x2e7/0x670 [ 782.721222] do_sys_openat2+0x171/0x4d0 [ 782.725569] ? build_open_flags+0x6f0/0x6f0 [ 782.726454] ? __mutex_unlock_slowpath+0xe1/0x600 [ 782.727457] ? wait_for_completion_io+0x270/0x270 [ 782.728461] __x64_sys_openat+0x13f/0x1f0 [ 782.729323] ? __ia32_sys_open+0x1c0/0x1c0 [ 782.730203] ? ksys_write+0x1a9/0x260 [ 782.731032] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 782.732123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 782.733223] do_syscall_64+0x33/0x40 [ 782.734026] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 782.735068] RIP: 0033:0x7eff8d246b19 [ 782.735862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 782.739619] RSP: 002b:00007eff8a7bc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 782.741192] RAX: ffffffffffffffda RBX: 00007eff8d359f60 RCX: 00007eff8d246b19 [ 782.742695] RDX: 0000000000004000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 782.744157] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 782.745642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 782.747092] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 [ 782.748659] CPU: 1 PID: 6462 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 782.750168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 782.751910] Call Trace: [ 782.752481] dump_stack+0x107/0x167 [ 782.753253] should_fail.cold+0x5/0xa [ 782.754084] ? security_file_alloc+0x34/0x170 [ 782.755052] should_failslab+0x5/0x20 [ 782.755852] kmem_cache_alloc+0x5b/0x310 03:35:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4b47, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8903, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000040)="c02680fc7ae7fb2212dac8ffd2960181ae0a80b7156147e04e047a32bdf3d25ae69a944f5f0b59d528d33f2877e1ceef5630cb89784ea3b9fdc6341cc6db162df31b1097dd1a421651b55ae32b608a227fa958e5f981578d081196e3fdd07d8fa092518b6cb74140294adec9d6ace49a0cf5f10fab9681d28faa4c5b") setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x5, 0x2) 03:35:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r2, 0x8, 0xffffffffffffffff, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r2, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r2, 0x6000}], 0x4, 0x1f) pipe(&(0x7f0000000040)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r4, 0x8, 0xffffffffffffffff, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r4, 0x8000}, {0xffffffffffffffff, 0xc286}, {r5, 0x1000}, {r4, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8970, &(0x7f0000000080)={'wlan1\x00'}) 03:35:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448c9, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 27) 03:35:49 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 45) 03:35:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 23) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 782.756777] security_file_alloc+0x34/0x170 [ 782.757953] __alloc_file+0xb7/0x320 [ 782.758789] alloc_empty_file+0x6d/0x170 [ 782.759645] alloc_file+0x5e/0x5a0 [ 782.760407] alloc_file_pseudo+0x16a/0x250 [ 782.761301] ? alloc_file+0x5a0/0x5a0 [ 782.762143] anon_inode_getfile+0xc8/0x1f0 [ 782.763045] io_uring_setup+0x138b/0x2980 [ 782.763933] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 782.765007] ? wait_for_completion_io+0x270/0x270 [ 782.766074] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 782.767154] ? syscall_enter_from_user_mode+0x1d/0x50 [ 782.768254] do_syscall_64+0x33/0x40 [ 782.769033] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 782.770117] RIP: 0033:0x7ff1de49fb19 [ 782.770902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 782.774796] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 782.776430] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 782.777951] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 782.779464] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 782.780976] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 782.782493] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:35:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448cc, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8904, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4b49, &(0x7f00000005c0)={'wlan0\x00'}) [ 782.828627] FAULT_INJECTION: forcing a failure. [ 782.828627] name failslab, interval 1, probability 0, space 0, times 0 [ 782.831421] CPU: 1 PID: 6469 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 782.833188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 782.835025] Call Trace: [ 782.835633] dump_stack+0x107/0x167 [ 782.836415] should_fail.cold+0x5/0xa [ 782.837321] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 782.838463] should_failslab+0x5/0x20 [ 782.839273] kmem_cache_alloc_trace+0x55/0x320 [ 782.840239] io_uring_alloc_task_context+0x4a3/0x6a0 [ 782.841313] ? io_import_iovec+0x1120/0x1120 [ 782.842270] io_uring_setup+0x1dd1/0x2980 [ 782.843151] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 782.844223] ? wait_for_completion_io+0x270/0x270 [ 782.845266] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 782.846387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 782.847497] do_syscall_64+0x33/0x40 [ 782.848294] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 782.849364] RIP: 0033:0x7ff8e0e10b19 [ 782.850155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 782.854045] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 782.855658] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 782.857174] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 782.858706] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 782.860228] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 782.861737] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:35:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x3, "81a688", 0x84, 0x63}) 03:35:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448dc, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:49 executing program 5: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c7465720000000000001f000000000000000000000000000000000000007a000000a6b080c08785ebc1f7a75d67ee159937c1ba56c3dd7035f8c34b4712161115cf396313962c53aad1475909815554911dc613c62fc360f4904794872f7c69baf6e41540beef8f85e6378c9cf30e22e48836eab7bfe24dec7a50a4c4fd4b8087ba201d93d828d797973cce4f197ffe908ddf8649c7dbeb4a70ebac"], &(0x7f00000000c0)=0x9e) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r3, 0x8, 0xffffffffffffffff, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r3, 0x8000}, {0xffffffffffffffff, 0xc286}, {r4, 0x1000}, {r3, 0x6000}], 0x4, 0x1f) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r5, 0x8, 0xffffffffffffffff, 0xc) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r7, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r5, 0x8000}, {0xffffffffffffffff, 0xc286}, {r7, 0x1000}, {r5, 0x6000}], 0x4, 0x1f) inotify_init() poll(&(0x7f0000000140)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}, {r6, 0x4000}, {r5}, {}], 0x7, 0x100) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) (fail_nth: 24) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:35:49 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 46) 03:35:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @llc={0x1a, 0x18, 0x80, 0x40, 0x5, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x2, 0x3}}, @l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x1}, 0xffff, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)='veth1_vlan\x00', 0xcd, 0x0, 0x5}) 03:35:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8907, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448e4, &(0x7f00000005c0)={'wlan0\x00'}) 03:35:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 28) [ 783.141735] FAULT_INJECTION: forcing a failure. [ 783.141735] name failslab, interval 1, probability 0, space 0, times 0 [ 783.144296] CPU: 1 PID: 6495 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 783.145750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 783.147516] Call Trace: [ 783.148079] dump_stack+0x107/0x167 [ 783.148863] should_fail.cold+0x5/0xa [ 783.149692] ? create_object.isra.0+0x3a/0xa30 [ 783.150653] should_failslab+0x5/0x20 [ 783.151467] kmem_cache_alloc+0x5b/0x310 [ 783.152325] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 783.153496] create_object.isra.0+0x3a/0xa30 [ 783.154433] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 783.155521] kmem_cache_alloc+0x159/0x310 [ 783.156408] security_file_alloc+0x34/0x170 [ 783.157321] __alloc_file+0xb7/0x320 [ 783.158131] alloc_empty_file+0x6d/0x170 [ 783.159012] alloc_file+0x5e/0x5a0 [ 783.159766] alloc_file_pseudo+0x16a/0x250 [ 783.160663] ? alloc_file+0x5a0/0x5a0 [ 783.161504] anon_inode_getfile+0xc8/0x1f0 [ 783.161531] io_uring_setup+0x138b/0x2980 [ 783.161559] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 783.161577] ? wait_for_completion_io+0x270/0x270 [ 783.161622] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 783.161643] ? syscall_enter_from_user_mode+0x1d/0x50 [ 783.161666] do_syscall_64+0x33/0x40 [ 783.161686] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 783.161699] RIP: 0033:0x7ff1de49fb19 [ 783.161718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 783.161729] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 783.161750] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 783.161772] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 783.178816] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 783.178828] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 783.178840] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 783.183103] FAULT_INJECTION: forcing a failure. [ 783.183103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.186488] CPU: 1 PID: 6496 Comm: syz-executor.6 Not tainted 5.10.251 #1 [ 783.187937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 783.189711] Call Trace: [ 783.190267] dump_stack+0x107/0x167 [ 783.191027] should_fail.cold+0x5/0xa [ 783.191841] _copy_to_user+0x2e/0x180 [ 783.192650] simple_read_from_buffer+0xcc/0x160 [ 783.193645] proc_fail_nth_read+0x198/0x230 [ 783.194560] ? proc_sessionid_read+0x230/0x230 [ 783.195520] ? security_file_permission+0xb1/0xe0 [ 783.196551] ? proc_sessionid_read+0x230/0x230 [ 783.197521] vfs_read+0x228/0x620 [ 783.198257] ksys_read+0x12d/0x260 [ 783.199013] ? vfs_write+0xb10/0xb10 [ 783.199814] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 783.200918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 783.202016] do_syscall_64+0x33/0x40 [ 783.202809] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 783.203929] RIP: 0033:0x7eff8d1f969c [ 783.203948] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 03:35:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x23}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x6}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2c801) [ 783.203960] RSP: 002b:00007eff8a7bc170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 783.203980] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007eff8d1f969c [ 783.203992] RDX: 000000000000000f RSI: 00007eff8a7bc1e0 RDI: 0000000000000004 [ 783.204003] RBP: 00007eff8a7bc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 783.204014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 783.204026] R13: 00007ffcc3c1737f R14: 00007eff8a7bc300 R15: 0000000000022000 [ 783.232618] FAULT_INJECTION: forcing a failure. [ 783.232618] name failslab, interval 1, probability 0, space 0, times 0 [ 783.232639] CPU: 1 PID: 6505 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 783.232650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 783.232657] Call Trace: [ 783.232678] dump_stack+0x107/0x167 [ 783.232701] should_fail.cold+0x5/0xa [ 783.232723] ? create_object.isra.0+0x3a/0xa30 [ 783.232741] should_failslab+0x5/0x20 [ 783.232760] kmem_cache_alloc+0x5b/0x310 [ 783.232787] create_object.isra.0+0x3a/0xa30 [ 783.232803] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 783.232830] kmem_cache_alloc_trace+0x151/0x320 [ 783.232858] io_uring_alloc_task_context+0x4a3/0x6a0 [ 783.232881] ? io_import_iovec+0x1120/0x1120 [ 783.232919] io_uring_setup+0x1dd1/0x2980 [ 783.232949] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 783.232965] ? wait_for_completion_io+0x270/0x270 [ 783.232985] ? perf_trace_preemptirq_template+0x26d/0x400 [ 783.233002] ? perf_trace_preemptirq_template+0x26d/0x400 [ 783.233045] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 783.233065] ? syscall_enter_from_user_mode+0x1d/0x50 [ 783.233089] do_syscall_64+0x33/0x40 [ 783.233110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 783.233122] RIP: 0033:0x7ff8e0e10b19 [ 783.233140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 783.233151] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 783.233171] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 783.233183] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 783.233195] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 783.233206] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 783.233218] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:36:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448e6, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5421, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:02 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x4201, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000}, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x868, 0x0, 0x7fff}, r2, 0x8, 0xffffffffffffffff, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r2, 0x8000}, {0xffffffffffffffff, 0xc286}, {r4, 0x1000}, {r2, 0x6000}], 0x4, 0x1f) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r5, 0x8, 0xffffffffffffffff, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r6, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) write(r3, &(0x7f0000000840)="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", 0x1000) poll(&(0x7f0000000300)=[{r5, 0x8000}, {0xffffffffffffffff, 0xc286}, {r6, 0x1000}, {r5, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) 03:36:02 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r0, 0x0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="a2bfffbb", 0x4}, {&(0x7f0000000080)="344a3a3744698232adb5357e5d6c979232be6d146ef92ae123ac9bdcdbd836ee641001da3b1f707dfbbb845caf8326880e43e33133407ed15044bcfa7f31028c1e45488623165302372110a2f58cc633493f7a2986fede94c83c4332aee4803d2a2cecffacd18a78e0657aa1a1661eb4cfb1de3795e6d419b623968fd60fa7c2748df27c7edd0a7cf9e8cdd08d4fb22cfa87da3db570b295c62b843bd97648ecf1af252fde403b5f734bbd7c8737fe8fdc0c", 0xb2}], 0x2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x3a0}, 0x0, 0x40080, 0x1, {0x0, r2}}, 0x6) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f0000000000)={'wlan0\x00'}) 03:36:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 29) 03:36:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:36:02 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 47) 03:36:02 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8910, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448e7, &(0x7f00000005c0)={'wlan0\x00'}) [ 796.003294] FAULT_INJECTION: forcing a failure. [ 796.003294] name failslab, interval 1, probability 0, space 0, times 0 [ 796.005110] CPU: 1 PID: 6527 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 796.006195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 796.007471] Call Trace: [ 796.007877] dump_stack+0x107/0x167 [ 796.008457] should_fail.cold+0x5/0xa [ 796.009039] ? security_file_alloc+0x34/0x170 [ 796.009749] should_failslab+0x5/0x20 [ 796.010345] kmem_cache_alloc+0x5b/0x310 [ 796.010971] security_file_alloc+0x34/0x170 [ 796.011644] __alloc_file+0xb7/0x320 [ 796.012217] alloc_empty_file+0x6d/0x170 [ 796.012839] alloc_file+0x5e/0x5a0 [ 796.013391] alloc_file_pseudo+0x16a/0x250 [ 796.014041] ? alloc_file+0x5a0/0x5a0 [ 796.014635] anon_inode_getfile+0xc8/0x1f0 [ 796.015284] io_uring_setup+0x138b/0x2980 [ 796.015926] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 796.016694] ? wait_for_completion_io+0x270/0x270 [ 796.017444] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 796.018239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 796.019025] do_syscall_64+0x33/0x40 [ 796.019577] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 796.020337] RIP: 0033:0x7ff1de49fb19 [ 796.020895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 796.023655] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 796.024787] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 796.025865] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 796.026930] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 796.027988] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 796.029054] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 796.097797] FAULT_INJECTION: forcing a failure. [ 796.097797] name failslab, interval 1, probability 0, space 0, times 0 [ 796.100200] CPU: 0 PID: 6538 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 796.101614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 796.103363] Call Trace: [ 796.103919] dump_stack+0x107/0x167 [ 796.104690] should_fail.cold+0x5/0xa [ 796.105490] ? io_wq_create+0xeb/0xc00 [ 796.106319] should_failslab+0x5/0x20 [ 796.107116] __kmalloc+0x72/0x390 [ 796.107854] io_wq_create+0xeb/0xc00 [ 796.108644] io_uring_alloc_task_context+0x1f1/0x6a0 [ 796.109718] ? io_import_iovec+0x1120/0x1120 [ 796.110644] ? io_apoll_task_func+0x2d0/0x2d0 [ 796.111584] ? __io_req_find_next+0x300/0x300 [ 796.112535] io_uring_setup+0x1dd1/0x2980 [ 796.113414] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 796.114486] ? wait_for_completion_io+0x270/0x270 [ 796.115500] ? perf_trace_preemptirq_template+0x26d/0x400 [ 796.116652] ? perf_trace_preemptirq_template+0x26d/0x400 [ 796.117841] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 796.118930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 796.120016] do_syscall_64+0x33/0x40 [ 796.120808] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 796.121893] RIP: 0033:0x7ff8e0e10b19 [ 796.122678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 796.126561] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 796.128146] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 796.129649] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 796.131146] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 796.132641] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 796.134153] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:36:15 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={0x0, 0x0, r2, 0x2fce, 0x80000}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_bt_hci(r1, 0xc000000c, &(0x7f0000000000)="8092be1e5eed169bafdfa3a81624df44e08fc6babe092173c77f83a96101bb03ed7c484f7ccd32d81e9d82be49baf9b59f703e4c2bd71f31182b80288d5b340f7a283e656ad53b67599a6a9ec1499a2647bcb207748d90c15d1f7568fc43bffdc7b0ee2da2c121e1174c9c837fd7a00f260a497ca9f372b27750a15032babe056228bac8c93f48318e6c4db5be") r4 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7ffb}, r0, 0x8, 0xffffffffffffffff, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x4) sendfile(r4, r5, &(0x7f0000000100)=0x9, 0x7d) writev(r5, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) 03:36:15 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8911, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 30) 03:36:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8400, 0x82) r3 = fsmount(r2, 0x1, 0x6) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000400)="d6b254015af7c2") sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002cbd7000fbdbdf256b00000008000300", @ANYRES32=r1, @ANYBLOB="0c009900f8ffffdf630000000a001a0008021100000100000a00060008021100000100000a001a0008021100000100000a00060008021100000000000a00060008021100000100000a001a00ffffffffffff00000a001a000802110000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40810}, 0x2000c0c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}]}, 0x58}}, 0x95) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe44584e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f707e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82bf6b"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="01008a527bb46ecd14ae0000", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r7, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x70d, 0x400000f}}}}}, 0x20}}, 0x4005) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r7, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x13}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x79}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x30}}, 0x407ee8a96b6180f1) 03:36:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5450, &(0x7f00000005c0)={'wlan0\x00'}) [ 809.284195] FAULT_INJECTION: forcing a failure. [ 809.284195] name failslab, interval 1, probability 0, space 0, times 0 [ 809.286923] CPU: 0 PID: 6546 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 809.288723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 809.290880] Call Trace: 03:36:15 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 48) 03:36:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40049409, &(0x7f00000005c0)={'wlan0\x00'}) [ 809.291629] dump_stack+0x107/0x167 [ 809.292618] should_fail.cold+0x5/0xa [ 809.293623] ? create_object.isra.0+0x3a/0xa30 [ 809.294861] should_failslab+0x5/0x20 [ 809.295838] kmem_cache_alloc+0x5b/0x310 [ 809.296912] create_object.isra.0+0x3a/0xa30 [ 809.298076] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 809.299407] __kmalloc+0x16e/0x390 [ 809.300315] io_wq_create+0xeb/0xc00 [ 809.301271] io_uring_alloc_task_context+0x1f1/0x6a0 [ 809.302565] ? io_import_iovec+0x1120/0x1120 [ 809.303682] ? io_apoll_task_func+0x2d0/0x2d0 [ 809.304807] ? __io_req_find_next+0x300/0x300 [ 809.306000] io_uring_setup+0x1dd1/0x2980 [ 809.307068] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 809.308359] ? perf_trace_preemptirq_template+0x266/0x400 [ 809.309798] ? perf_trace_preemptirq_template+0x26d/0x400 [ 809.309826] ? perf_trace_preemptirq_template+0x26d/0x400 [ 809.309878] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 809.309903] ? syscall_enter_from_user_mode+0x1d/0x50 [ 809.309929] do_syscall_64+0x33/0x40 [ 809.309953] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 809.309969] RIP: 0033:0x7ff8e0e10b19 [ 809.309991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 809.310004] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 809.310028] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 809.310042] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 809.310055] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 809.310069] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 809.310082] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 809.312958] FAULT_INJECTION: forcing a failure. [ 809.312958] name failslab, interval 1, probability 0, space 0, times 0 [ 809.337078] CPU: 0 PID: 6557 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 809.337091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 809.337098] Call Trace: [ 809.337123] dump_stack+0x107/0x167 [ 809.337148] should_fail.cold+0x5/0xa [ 809.337172] ? create_object.isra.0+0x3a/0xa30 [ 809.337195] should_failslab+0x5/0x20 [ 809.344406] kmem_cache_alloc+0x5b/0x310 [ 809.344431] create_object.isra.0+0x3a/0xa30 [ 809.344447] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 809.344472] kmem_cache_alloc_trace+0x151/0x320 [ 809.344497] io_uring_alloc_task_context+0x99/0x6a0 [ 809.344518] ? io_import_iovec+0x1120/0x1120 03:36:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x1064, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:36:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40086602, &(0x7f00000005c0)={'wlan0\x00'}) [ 809.344537] ? lock_downgrade+0x6d0/0x6d0 [ 809.344554] ? do_raw_spin_lock+0x121/0x260 [ 809.344571] ? rwlock_bug.part.0+0x90/0x90 [ 809.344596] __io_uring_add_tctx_node+0x2c6/0x520 [ 809.344616] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 809.344633] ? alloc_fd+0x2e7/0x670 [ 809.344662] io_uring_setup+0x1fbb/0x2980 [ 809.344689] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 809.344705] ? wait_for_completion_io+0x270/0x270 [ 809.344723] ? perf_trace_preemptirq_template+0x26d/0x400 [ 809.344740] ? perf_trace_preemptirq_template+0x26d/0x400 [ 809.344777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 809.344797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 809.344818] do_syscall_64+0x33/0x40 [ 809.344838] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 809.344850] RIP: 0033:0x7ff1de49fb19 [ 809.344868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:36:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 31) [ 809.344878] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 809.344897] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 809.344908] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 809.344919] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 809.344931] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 809.344941] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 809.366931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 809.382270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:36:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5451, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:15 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x610080) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9, 0x1}}, './file0\x00'}) dup2(r2, r1) write$bt_hci(r1, &(0x7f0000000040)={0x1, @link_key_reply={{0x40b, 0x16}, {@none, "b44aca6d958b530ea2135ef4f3db4b50"}}}, 0x1a) 03:36:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40087602, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 809.429846] FAULT_INJECTION: forcing a failure. [ 809.429846] name failslab, interval 1, probability 0, space 0, times 0 03:36:15 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8912, &(0x7f00000005c0)={'wlan0\x00'}) [ 809.429879] CPU: 1 PID: 6569 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 809.429886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 809.429890] Call Trace: [ 809.429907] dump_stack+0x107/0x167 [ 809.429920] should_fail.cold+0x5/0xa [ 809.429934] ? io_wq_create+0x6ef/0xc00 [ 809.429945] should_failslab+0x5/0x20 [ 809.429957] kmem_cache_alloc_node_trace+0x59/0x340 [ 809.429971] io_wq_create+0x6ef/0xc00 [ 809.429986] io_uring_alloc_task_context+0x1f1/0x6a0 [ 809.429997] ? io_import_iovec+0x1120/0x1120 [ 809.430008] ? io_apoll_task_func+0x2d0/0x2d0 [ 809.430017] ? __io_req_find_next+0x300/0x300 [ 809.430033] io_uring_setup+0x1dd1/0x2980 [ 809.430047] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 809.430057] ? wait_for_completion_io+0x270/0x270 [ 809.430068] ? perf_trace_preemptirq_template+0x26d/0x400 [ 809.430077] ? perf_trace_preemptirq_template+0x26d/0x400 [ 809.430099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 809.430110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 809.430122] do_syscall_64+0x33/0x40 [ 809.430132] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 809.430140] RIP: 0033:0x7ff8e0e10b19 [ 809.430150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:36:15 executing program 1: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x20, &(0x7f0000000080)={[0x5]}, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 809.430156] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 809.430167] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 809.430173] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 809.430179] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 809.430185] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 809.430191] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:36:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x52013f4705edfba7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x28}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ce133c5063c2"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x7f, 0x6, 0x50, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x7, 0x10001, 0x10001}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r7 = perf_event_open(0x0, 0x0, 0x800000000000002, 0xffffffffffffffff, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000040)) r8 = getpgrp(0x0) pidfd_open(r8, 0x0) perf_event_open(0x0, r8, 0x3, r7, 0x9) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f0000000000)={0x3, 0x3f}) 03:36:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8913, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 32) 03:36:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4020940d, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, &(0x7f00000005c0)={'wlan0\x00'}) [ 823.321621] FAULT_INJECTION: forcing a failure. [ 823.321621] name failslab, interval 1, probability 0, space 0, times 0 [ 823.324130] CPU: 0 PID: 6595 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 823.325667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 823.327510] Call Trace: [ 823.328091] dump_stack+0x107/0x167 [ 823.328910] should_fail.cold+0x5/0xa [ 823.329756] ? create_object.isra.0+0x3a/0xa30 [ 823.330776] should_failslab+0x5/0x20 [ 823.331622] kmem_cache_alloc+0x5b/0x310 [ 823.332531] ? io_wq_create+0x114/0xc00 [ 823.333405] create_object.isra.0+0x3a/0xa30 [ 823.334385] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 823.335520] kmem_cache_alloc_node_trace+0x16d/0x340 [ 823.336655] io_wq_create+0x6ef/0xc00 [ 823.337505] io_uring_alloc_task_context+0x1f1/0x6a0 [ 823.338648] ? io_import_iovec+0x1120/0x1120 [ 823.339623] ? io_apoll_task_func+0x2d0/0x2d0 [ 823.340624] ? __io_req_find_next+0x300/0x300 [ 823.341627] io_uring_setup+0x1dd1/0x2980 [ 823.341935] FAULT_INJECTION: forcing a failure. [ 823.341935] name failslab, interval 1, probability 0, space 0, times 0 [ 823.342572] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 823.342601] ? perf_trace_preemptirq_template+0x266/0x400 [ 823.347294] ? perf_trace_preemptirq_template+0x26d/0x400 [ 823.348532] ? perf_trace_preemptirq_template+0x26d/0x400 [ 823.349761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 823.350936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 823.352077] do_syscall_64+0x33/0x40 [ 823.352914] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 823.354057] RIP: 0033:0x7ff8e0e10b19 [ 823.354879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 823.358978] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 823.360664] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 823.362240] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 823.363815] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 823.365382] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 823.366969] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 823.368584] CPU: 1 PID: 6604 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 823.370041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 823.371804] Call Trace: [ 823.372366] dump_stack+0x107/0x167 [ 823.373135] should_fail.cold+0x5/0xa [ 823.373955] ? create_object.isra.0+0x3a/0xa30 [ 823.374917] should_failslab+0x5/0x20 [ 823.375719] kmem_cache_alloc+0x5b/0x310 [ 823.376579] create_object.isra.0+0x3a/0xa30 [ 823.377513] kmemleak_alloc_percpu+0xa0/0x100 [ 823.378473] pcpu_alloc+0x4e2/0x1240 [ 823.379275] __percpu_counter_init+0x10d/0x2d0 [ 823.380243] io_uring_alloc_task_context+0xcc/0x6a0 [ 823.381298] ? io_import_iovec+0x1120/0x1120 [ 823.382236] ? lock_downgrade+0x6d0/0x6d0 [ 823.383109] ? do_raw_spin_lock+0x121/0x260 [ 823.384015] ? rwlock_bug.part.0+0x90/0x90 [ 823.384914] __io_uring_add_tctx_node+0x2c6/0x520 [ 823.385939] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 823.387034] ? alloc_fd+0x2e7/0x670 [ 823.387802] io_uring_setup+0x1fbb/0x2980 [ 823.388675] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 823.389729] ? wait_for_completion_io+0x270/0x270 [ 823.390742] ? perf_trace_preemptirq_template+0x26d/0x400 [ 823.391885] ? perf_trace_preemptirq_template+0x26d/0x400 [ 823.393046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 823.394148] ? syscall_enter_from_user_mode+0x1d/0x50 [ 823.395226] do_syscall_64+0x33/0x40 [ 823.396004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 823.397071] RIP: 0033:0x7ff1de49fb19 [ 823.397847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 823.401682] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 823.403273] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 823.404755] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 823.406245] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 823.407729] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 823.409210] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:36:29 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 49) 03:36:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4004, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:36:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x1, 0x7f) fadvise64(r1, 0x1000, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x800448d2, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5460, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:29 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x21c080, 0x0) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14, 0x80000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ce133c5063c2"}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @link_local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8970, &(0x7f0000000080)={'wlan0\x00'}) 03:36:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8901, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x800448d5, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4018, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:36:30 executing program 5: fcntl$setsig(0xffffffffffffffff, 0xa, 0x1a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci_express', 0x408000, 0x15) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r2, 0x8, 0xffffffffffffffff, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) r4 = signalfd4(r2, &(0x7f00000000c0)={[0x8]}, 0x8, 0x800) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000100)) poll(&(0x7f0000000300)=[{r2, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r2, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wg0\x00'}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0xffffffffffffff5f) 03:36:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 33) 03:36:30 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891d, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2537}}, 0x0, 0x0, 0x15, 0x0, "37e40b3ba365de40219687274a54aad9892c9b989aa881d5f6a4754c80227865a811921304eb11b2e59d617b329aed0e10cb4899de404ea538698cac8ae8de0e0d4a4ab236949a693cee6800c76312cc"}, 0xd8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 823.725562] FAULT_INJECTION: forcing a failure. [ 823.725562] name failslab, interval 1, probability 0, space 0, times 0 03:36:30 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 50) [ 823.725595] CPU: 0 PID: 6639 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 823.725610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 823.725619] Call Trace: [ 823.725651] dump_stack+0x107/0x167 03:36:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x800448d7, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8902, &(0x7f00000005c0)={'wlan0\x00'}) [ 823.725682] should_fail.cold+0x5/0xa [ 823.725707] ? create_object.isra.0+0x3a/0xa30 [ 823.725725] should_failslab+0x5/0x20 [ 823.725744] kmem_cache_alloc+0x5b/0x310 [ 823.725768] create_object.isra.0+0x3a/0xa30 [ 823.725785] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 823.725808] __kmalloc+0x16e/0x390 [ 823.725834] io_wq_create+0xeb/0xc00 [ 823.725880] io_uring_alloc_task_context+0x1f1/0x6a0 [ 823.725900] ? io_import_iovec+0x1120/0x1120 [ 823.725921] ? io_apoll_task_func+0x2d0/0x2d0 [ 823.725937] ? __io_req_find_next+0x300/0x300 [ 823.725967] io_uring_setup+0x1dd1/0x2980 [ 823.725994] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 823.726012] ? perf_trace_preemptirq_template+0x266/0x400 [ 823.726030] ? perf_trace_preemptirq_template+0x26d/0x400 [ 823.726046] ? perf_trace_preemptirq_template+0x26d/0x400 [ 823.726084] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 823.726105] ? syscall_enter_from_user_mode+0x1d/0x50 [ 823.726127] do_syscall_64+0x33/0x40 [ 823.726146] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 823.726159] RIP: 0033:0x7ff8e0e10b19 [ 823.726178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 823.726189] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 823.726209] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 823.726221] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 823.726232] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 823.726243] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 823.726254] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 823.814284] FAULT_INJECTION: forcing a failure. [ 823.814284] name failslab, interval 1, probability 0, space 0, times 0 [ 823.814303] CPU: 1 PID: 6653 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 823.814312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 823.814317] Call Trace: [ 823.814344] dump_stack+0x107/0x167 [ 823.814361] should_fail.cold+0x5/0xa [ 823.814377] ? create_object.isra.0+0x3a/0xa30 [ 823.814392] should_failslab+0x5/0x20 [ 823.814406] kmem_cache_alloc+0x5b/0x310 [ 823.814424] create_object.isra.0+0x3a/0xa30 [ 823.814444] kmemleak_alloc_percpu+0xa0/0x100 [ 823.814462] pcpu_alloc+0x4e2/0x1240 [ 823.814488] __percpu_counter_init+0x10d/0x2d0 [ 823.814506] io_uring_alloc_task_context+0xcc/0x6a0 [ 823.814520] ? io_import_iovec+0x1120/0x1120 [ 823.814536] ? lock_downgrade+0x6d0/0x6d0 [ 823.814548] ? do_raw_spin_lock+0x121/0x260 [ 823.814560] ? rwlock_bug.part.0+0x90/0x90 [ 823.814578] __io_uring_add_tctx_node+0x2c6/0x520 [ 823.814593] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 823.814606] ? alloc_fd+0x2e7/0x670 [ 823.814627] io_uring_setup+0x1fbb/0x2980 [ 823.814647] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 823.814659] ? wait_for_completion_io+0x270/0x270 [ 823.814688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 823.814703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 823.814720] do_syscall_64+0x33/0x40 [ 823.814734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 823.814744] RIP: 0033:0x7ff1de49fb19 [ 823.814758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 823.814765] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 823.814781] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 823.814789] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 823.814797] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 823.814805] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 823.814813] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 837.966974] FAULT_INJECTION: forcing a failure. [ 837.966974] name failslab, interval 1, probability 0, space 0, times 0 [ 837.968523] CPU: 0 PID: 6664 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 837.969450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 837.971108] Call Trace: [ 837.971786] dump_stack+0x107/0x167 [ 837.972705] should_fail.cold+0x5/0xa [ 837.973661] ? io_wq_create+0xeb/0xc00 [ 837.974646] should_failslab+0x5/0x20 [ 837.975492] __kmalloc+0x72/0x390 [ 837.976297] io_wq_create+0xeb/0xc00 [ 837.977135] io_uring_alloc_task_context+0x1f1/0x6a0 [ 837.978314] ? io_import_iovec+0x1120/0x1120 [ 837.979297] ? io_apoll_task_func+0x2d0/0x2d0 [ 837.980330] ? __io_req_find_next+0x300/0x300 [ 837.981356] ? do_raw_spin_lock+0x121/0x260 [ 837.982353] ? rwlock_bug.part.0+0x90/0x90 [ 837.983337] __io_uring_add_tctx_node+0x2c6/0x520 [ 837.984446] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 837.985649] ? alloc_fd+0x2e7/0x670 [ 837.986477] io_uring_setup+0x1fbb/0x2980 [ 837.987441] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 837.988602] ? wait_for_completion_io+0x270/0x270 [ 837.989741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 837.990954] ? syscall_enter_from_user_mode+0x1d/0x50 [ 837.992142] do_syscall_64+0x33/0x40 [ 837.992998] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 837.994184] RIP: 0033:0x7ff1de49fb19 [ 837.995038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 837.999270] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 838.001019] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 838.002665] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 838.004299] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 838.005934] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 838.007578] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:36:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8903, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4048, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:36:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:44 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 51) 03:36:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 34) 03:36:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x800448f0, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2e4, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0xe7b, 0x27}}}}, [@NL80211_ATTR_VENDOR_DATA={0xc3, 0xc5, "de74faa76cd1c903841b1ad278c515c67aec8425a6d2759d939773c02423ab5c63ba57c8f16962e4abcdc11364030cec79b0423825f63b18ef975b7c2bf98a98d5a2d6e7d0a28cd3ee7c87b8afa784b0704c2e15b3723f14464e34e92250d682d13a1826f9b135dca25d6b1c09e8178eba2bd2f292b9e654a5e0c33ef51dba8c6295f3dce76dbc36959677241f5ee32c11a85377c949ab8119a2d42f6dc9f1cd8a5ba1cc2a18e12a8ef409945c2154550bb1bf8267a6b55fae3b282b5c6314"}, @NL80211_ATTR_VENDOR_DATA={0x32, 0xc5, "f5af1abd60ff24b34df1bd6235ebe546b446e81662183c1a616328b944f8b8c2a80f72f25540898e85b2f042cbad"}, @NL80211_ATTR_VENDOR_DATA={0x82, 0xc5, "b7d85e53261ee935ede51303799439623c63cee6a67826cb932aabac5075179eae501e75329b23b13b915f6bdeb61dcf1137f8c72d9fc167c6064019c30af7aa1d26c697c802013696970b4b7126a1a94ede74656e39875a2324c28361b7b207ce65cfb3eed8f150b09d6b1c940b10095f4c069660a3147870b0d6118c22"}, @NL80211_ATTR_VENDOR_DATA={0xf7, 0xc5, "30ae40ef4f577852b32e65244eb965ebab137559023bcaf47f14451ed15c773a9d1c8a6344187d59992aac90acfc37b9bbe967d28af59235cbbe7fe3137ca0f632ecabf24f93a8e028bfe3b0ce569ef767ed8275be05fd59ea1e84899d92d1232902c46671daa6a7cee6e7050e0092cffeda8f177b1e1dd64b8c9a8b121ebdf1974b4a60610cc12d6da8e1a4318fef14d6c00fecb51a0853f64fe14b9358eb664f01e2778fc8d7fb6d54bc3173c3d6a70a979c16bbe9c989501e01c56529d081c159157e80ad3299a04a3649e9d1b1f7bc14c09e9b6755d85446568dfdafe7b9e62e18fb55ca91944d653bcd22a1de95c8b552"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x45, 0xc5, "bd06cecf38a13f7471ce9250670971ff1d27f032887d6e8dcb1dfc7fcae55f7644e91730e90b6c805203c2a5890c1fbe4e8cd69159ccf098ad70fac5961f888f3e"}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 03:36:44 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891e, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8904, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:44 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6(0xa, 0xa, 0x54) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) [ 838.064175] FAULT_INJECTION: forcing a failure. [ 838.064175] name failslab, interval 1, probability 0, space 0, times 0 [ 838.065522] CPU: 1 PID: 6680 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 838.066363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 838.067335] Call Trace: [ 838.067645] dump_stack+0x107/0x167 [ 838.068073] should_fail.cold+0x5/0xa [ 838.068520] ? create_object.isra.0+0x3a/0xa30 [ 838.069063] should_failslab+0x5/0x20 [ 838.069507] kmem_cache_alloc+0x5b/0x310 [ 838.069978] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 838.070584] ? trace_hardirqs_on+0x5b/0x180 [ 838.071085] create_object.isra.0+0x3a/0xa30 [ 838.071593] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 838.072183] kmem_cache_alloc_trace+0x151/0x320 [ 838.072731] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 838.073359] io_uring_setup+0x14f6/0x2980 [ 838.073846] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 838.074447] ? wait_for_completion_io+0x270/0x270 [ 838.075029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 838.075643] ? syscall_enter_from_user_mode+0x1d/0x50 [ 838.076244] do_syscall_64+0x33/0x40 [ 838.076679] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 838.077273] RIP: 0033:0x7ff8e0e10b19 [ 838.077704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 838.079851] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 838.080739] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 838.081569] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 838.082415] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 838.083246] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 838.084080] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:36:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8906, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80086601, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:59 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000040)=0x40) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:59 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 52) 03:36:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x404c, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 853.186704] FAULT_INJECTION: forcing a failure. [ 853.186704] name failslab, interval 1, probability 0, space 0, times 0 [ 853.186726] CPU: 0 PID: 6702 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 853.186737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 853.186743] Call Trace: [ 853.186769] dump_stack+0x107/0x167 [ 853.186791] should_fail.cold+0x5/0xa [ 853.186813] ? create_object.isra.0+0x3a/0xa30 [ 853.186831] should_failslab+0x5/0x20 03:36:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80087601, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8907, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:59 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 03:36:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 35) [ 853.186851] kmem_cache_alloc+0x5b/0x310 [ 853.186870] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 853.186894] create_object.isra.0+0x3a/0xa30 03:36:59 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891f, &(0x7f00000005c0)={'wlan0\x00'}) [ 853.186911] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 853.186935] __kmalloc+0x16e/0x390 [ 853.186962] io_wq_create+0xeb/0xc00 [ 853.186992] io_uring_alloc_task_context+0x1f1/0x6a0 [ 853.187013] ? io_import_iovec+0x1120/0x1120 [ 853.187033] ? io_apoll_task_func+0x2d0/0x2d0 03:36:59 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 53) [ 853.187050] ? __io_req_find_next+0x300/0x300 [ 853.187066] ? do_raw_spin_lock+0x121/0x260 [ 853.187084] ? rwlock_bug.part.0+0x90/0x90 [ 853.187109] __io_uring_add_tctx_node+0x2c6/0x520 [ 853.187130] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 853.187146] ? alloc_fd+0x2e7/0x670 [ 853.187178] io_uring_setup+0x1fbb/0x2980 [ 853.187206] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 853.187223] ? wait_for_completion_io+0x270/0x270 03:36:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4068, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 853.187267] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 853.187288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 853.187311] do_syscall_64+0x33/0x40 [ 853.187330] entry_SYSCALL_64_after_hwframe+0x67/0xd1 03:36:59 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8920, &(0x7f00000005c0)={'wlan0\x00'}) [ 853.187352] RIP: 0033:0x7ff1de49fb19 [ 853.187370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 853.187381] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 853.187401] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 853.187413] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 853.187426] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 853.187442] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 03:36:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 36) [ 853.187459] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 853.261768] FAULT_INJECTION: forcing a failure. [ 853.261768] name failslab, interval 1, probability 0, space 0, times 0 [ 853.261791] CPU: 0 PID: 6711 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 853.261800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 853.261807] Call Trace: [ 853.261832] dump_stack+0x107/0x167 [ 853.261854] should_fail.cold+0x5/0xa [ 853.261876] ? create_object.isra.0+0x3a/0xa30 [ 853.261893] should_failslab+0x5/0x20 [ 853.261914] kmem_cache_alloc+0x5b/0x310 [ 853.261934] ? io_wq_create+0x114/0xc00 [ 853.261956] create_object.isra.0+0x3a/0xa30 [ 853.261973] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 853.261998] kmem_cache_alloc_node_trace+0x16d/0x340 [ 853.262024] io_wq_create+0x6ef/0xc00 [ 853.262052] io_uring_alloc_task_context+0x1f1/0x6a0 [ 853.262072] ? io_import_iovec+0x1120/0x1120 [ 853.262091] ? io_apoll_task_func+0x2d0/0x2d0 [ 853.262108] ? __io_req_find_next+0x300/0x300 [ 853.262137] io_uring_setup+0x1dd1/0x2980 [ 853.262164] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 853.262199] ? perf_trace_preemptirq_template+0x266/0x400 [ 853.262217] ? perf_trace_preemptirq_template+0x26d/0x400 [ 853.262233] ? perf_trace_preemptirq_template+0x26d/0x400 [ 853.262271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 853.262292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 853.262314] do_syscall_64+0x33/0x40 [ 853.262339] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 853.262352] RIP: 0033:0x7ff8e0e10b19 [ 853.262371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 853.262385] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 853.262407] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 853.262418] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 853.262433] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 853.262449] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 853.262465] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 853.374222] FAULT_INJECTION: forcing a failure. [ 853.374222] name failslab, interval 1, probability 0, space 0, times 0 [ 853.425822] CPU: 1 PID: 6722 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 853.425833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 853.425840] Call Trace: [ 853.425867] dump_stack+0x107/0x167 [ 853.425889] should_fail.cold+0x5/0xa [ 853.425913] ? io_wq_create+0x6ef/0xc00 [ 853.425932] should_failslab+0x5/0x20 [ 853.425954] kmem_cache_alloc_node_trace+0x59/0x340 [ 853.425980] io_wq_create+0x6ef/0xc00 [ 853.426008] io_uring_alloc_task_context+0x1f1/0x6a0 [ 853.426029] ? io_import_iovec+0x1120/0x1120 [ 853.426049] ? io_apoll_task_func+0x2d0/0x2d0 03:36:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8910, &(0x7f00000005c0)={'wlan0\x00'}) [ 853.426066] ? __io_req_find_next+0x300/0x300 [ 853.426082] ? do_raw_spin_lock+0x121/0x260 03:36:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80108906, &(0x7f00000005c0)={'wlan0\x00'}) [ 853.426099] ? rwlock_bug.part.0+0x90/0x90 [ 853.426123] __io_uring_add_tctx_node+0x2c6/0x520 03:36:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x406c, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 853.426143] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 853.426160] ? alloc_fd+0x2e7/0x670 [ 853.426199] io_uring_setup+0x1fbb/0x2980 03:36:59 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8921, &(0x7f00000005c0)={'wlan0\x00'}) [ 853.426226] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 853.426243] ? wait_for_completion_io+0x270/0x270 [ 853.426284] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 853.426304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 853.426326] do_syscall_64+0x33/0x40 [ 853.426351] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 853.426365] RIP: 0033:0x7ff1de49fb19 [ 853.426383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 853.426393] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 853.426414] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 853.426425] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 853.426436] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 853.426447] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 853.426458] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 853.449984] FAULT_INJECTION: forcing a failure. [ 853.449984] name failslab, interval 1, probability 0, space 0, times 0 [ 853.450004] CPU: 1 PID: 6728 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 853.450014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 853.450020] Call Trace: [ 853.450041] dump_stack+0x107/0x167 [ 853.450062] should_fail.cold+0x5/0xa [ 853.450083] ? create_object.isra.0+0x3a/0xa30 [ 853.450099] should_failslab+0x5/0x20 [ 853.450118] kmem_cache_alloc+0x5b/0x310 [ 853.450142] create_object.isra.0+0x3a/0xa30 [ 853.450183] kmemleak_alloc_percpu+0xa0/0x100 [ 853.450206] pcpu_alloc+0x4e2/0x1240 [ 853.450237] ? io_async_queue_proc+0x80/0x80 [ 853.450256] percpu_ref_init+0x31/0x3d0 [ 853.450280] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 853.450300] io_uring_setup+0x14f6/0x2980 [ 853.450327] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 853.450350] ? wait_for_completion_io+0x270/0x270 [ 853.450369] ? perf_trace_preemptirq_template+0x26d/0x400 [ 853.450385] ? perf_trace_preemptirq_template+0x26d/0x400 [ 853.450422] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 853.450441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 853.450463] do_syscall_64+0x33/0x40 [ 853.450482] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 853.450494] RIP: 0033:0x7ff8e0e10b19 [ 853.450512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 853.450522] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 853.450541] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 853.450552] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 853.450563] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 853.450574] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 853.450585] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:37:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 03:37:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8911, &(0x7f00000005c0)={'wlan0\x00'}) [ 868.938141] FAULT_INJECTION: forcing a failure. [ 868.938141] name failslab, interval 1, probability 0, space 0, times 0 [ 868.940475] CPU: 1 PID: 6750 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 868.941819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 868.943502] Call Trace: [ 868.944032] dump_stack+0x107/0x167 [ 868.944771] should_fail.cold+0x5/0xa [ 868.945538] ? io_wq_create+0x6ef/0xc00 [ 868.946353] should_failslab+0x5/0x20 [ 868.947147] kmem_cache_alloc_node_trace+0x59/0x340 [ 868.948152] io_wq_create+0x6ef/0xc00 [ 868.948932] io_uring_alloc_task_context+0x1f1/0x6a0 [ 868.949956] ? io_import_iovec+0x1120/0x1120 [ 868.950844] ? io_apoll_task_func+0x2d0/0x2d0 [ 868.951745] ? __io_req_find_next+0x300/0x300 [ 868.952637] ? do_raw_spin_lock+0x121/0x260 [ 868.953502] ? rwlock_bug.part.0+0x90/0x90 [ 868.954365] __io_uring_add_tctx_node+0x2c6/0x520 [ 868.955331] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 868.956375] ? alloc_fd+0x2e7/0x670 [ 868.957107] io_uring_setup+0x1fbb/0x2980 [ 868.957952] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 868.958979] ? wait_for_completion_io+0x270/0x270 [ 868.959965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 868.961021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 868.962058] do_syscall_64+0x33/0x40 [ 868.962831] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 868.963862] RIP: 0033:0x7ff1de49fb19 03:37:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4074, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:37:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 37) 03:37:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80108907, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:15 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 54) 03:37:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = getpgrp(0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x62) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140)=0x200, 0x4) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) pidfd_open(r3, 0x0) r4 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x70d, 0x400000f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000000}, 0x4005) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB='\f\x00#'], 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a0, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0xb}}}}, [@NL80211_ATTR_TX_RATES={0x178, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x1ff, 0x800, 0x5, 0x2, 0x1, 0x3]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7134, 0xf19, 0x40, 0x4, 0x1, 0x40, 0x7d, 0x862]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x3, 0x5}, {0x5, 0x4}, {0x4, 0x6}, {0x0, 0x6}, {0x4, 0x2}, {0x6, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0x3}]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x4}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x5}, {}, {0x6, 0x3}, {0x0, 0xa}, {0x6, 0x4}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0x3}, {0x3, 0x1}, {0x7, 0x7}, {0x3, 0x7}, {0x7, 0x2}, {0x3}, {0x3, 0x6}, {0x1, 0x3}, {0x1}, {0x7, 0x3}, {0x3, 0x4}, {0x5, 0x3}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x5}, {0x6, 0x7}, {0x7, 0x2}, {0x5, 0x8}, {0x5, 0x6}, {0x4, 0x3}, {0x5}, {0x5, 0x6}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x80, 0xfff, 0x9, 0xff, 0x50, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x3, 0x1b, 0x3, 0x9, 0x1b, 0x36, 0x0, 0x3, 0x3, 0x48, 0x3, 0x12, 0x3, 0x30, 0xc, 0x9, 0x1, 0x5, 0x30, 0x30, 0xc, 0x48, 0x18, 0x24, 0x6, 0x1]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x0, 0x1, 0x5, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x4, 0x2, 0x4, 0x100, 0x3, 0xdb, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0x7, 0x4, 0x1, 0x1, 0x3, 0x7f]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff80, 0x0, 0x7fff, 0x2, 0x4, 0xff, 0x8000, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x1000, 0x200, 0x3, 0x7fff, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x0, 0x1b, 0x9, 0x3, 0x18, 0x2, 0xb, 0x3, 0x1, 0x48, 0x6c, 0x12, 0x1, 0x12, 0x48, 0x1, 0x0, 0x9, 0x6c, 0x3, 0x5, 0x9, 0xc, 0x60, 0x12, 0x5, 0xc]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x2, 0x24, 0xc, 0x36, 0x16, 0x60, 0x962ce5622ff7dce7, 0xc, 0x6c, 0x5, 0x1, 0x5, 0x9, 0x6, 0x36, 0xc, 0x3, 0x36, 0x48, 0x6]}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4048881}, 0x20008000) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x66, 0x0, 0x7, 0x6c, 0x0, 0x10001, 0x800, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x3ff, 0xfffffffffffffff7}, 0x0, 0x3, 0x1, 0x9, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7}, r1, 0xffffffffffffffff, r4, 0x3) r9 = getpgrp(0x0) pidfd_open(r9, 0x0) rt_tgsigqueueinfo(r1, r9, 0x23, &(0x7f0000000080)={0x27, 0x4, 0x1}) 03:37:15 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8922, &(0x7f00000005c0)={'wlan0\x00'}) [ 868.964853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 868.968730] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 868.970260] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 868.971698] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 868.973126] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 868.974563] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 868.975987] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 868.977924] wlan0: mtu less than device minimum [ 868.995545] FAULT_INJECTION: forcing a failure. [ 868.995545] name failslab, interval 1, probability 0, space 0, times 0 [ 868.997875] CPU: 1 PID: 6761 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 868.999248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 869.000908] Call Trace: [ 869.001440] dump_stack+0x107/0x167 [ 869.001745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 869.002172] should_fail.cold+0x5/0xa [ 869.002194] ? percpu_ref_init+0xd8/0x3d0 [ 869.002219] should_failslab+0x5/0x20 [ 869.006456] kmem_cache_alloc_trace+0x55/0x320 [ 869.007371] ? io_async_queue_proc+0x80/0x80 [ 869.008250] percpu_ref_init+0xd8/0x3d0 [ 869.009054] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 869.010154] io_uring_setup+0x14f6/0x2980 [ 869.010997] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 869.012001] ? wait_for_completion_io+0x270/0x270 [ 869.012945] ? perf_trace_preemptirq_template+0x26d/0x400 [ 869.013989] ? perf_trace_preemptirq_template+0x26d/0x400 [ 869.015079] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 869.016094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 869.017129] do_syscall_64+0x33/0x40 [ 869.017861] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 869.018879] RIP: 0033:0x7ff8e0e10b19 [ 869.019616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 869.023292] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 869.024791] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 869.026204] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 869.027627] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 869.029055] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 869.030483] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 869.039482] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:37:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8912, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:15 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8924, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48f1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x3, 0x40, "6997d7", 0x1, 0x1}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r3, 0x8, 0xffffffffffffffff, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r3, 0x8000}, {r1, 0xc286}, {r4, 0x3000}, {r3, 0x6000}], 0x4, 0x1f) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000000c0)={0x0, 0x1, 0x1f, 0x1, 0x1dd, &(0x7f0000000840)="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"}) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) write$nbd(r1, &(0x7f0000000000)={0x67446698, 0x0, 0x3, 0x3, 0x4, "490a99752923ca95faf6398a8bb37eabd32d19b30e19b85a7243ae0093bb5280868d68bdea5d0ad1d116b685e91baedd92f74701d557428fdc4631b06d1f210a6220195d2788f8a03dbd88dd5324df604a697bcfd972ae939c40b8f52ba2"}, 0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={r5, @local, @private=0xa010100}, 0xc) 03:37:15 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 55) 03:37:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x407a, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:37:15 executing program 1: setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)="db8c41b9e2af7379c7ddd87c766fca6d88f7a7faf837c6e317a687bc32039a5d9875b028fbe30e6c1d62cdd0a99d7cf2d25a2a9b15b51c7fec13d52c6112bba3d8f65cabf576a3b675b5bade0e301a2797c4ab69cf32c78945f1219d8e156170906e0b0140d613c045f7af431a95b5984303725b48d6ab0343cdb4168262ff397708c747516761af7dc3051942", 0x8d, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) 03:37:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 38) [ 869.193415] FAULT_INJECTION: forcing a failure. [ 869.193415] name failslab, interval 1, probability 0, space 0, times 0 [ 869.195955] CPU: 0 PID: 6778 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 869.197481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 869.199346] Call Trace: [ 869.199943] dump_stack+0x107/0x167 [ 869.200758] should_fail.cold+0x5/0xa [ 869.201611] ? __io_uring_add_tctx_node+0x15c/0x520 [ 869.202724] should_failslab+0x5/0x20 [ 869.203578] kmem_cache_alloc_trace+0x55/0x320 [ 869.204608] __io_uring_add_tctx_node+0x15c/0x520 [ 869.205695] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 869.206880] ? alloc_fd+0x2e7/0x670 [ 869.207711] io_uring_setup+0x1fbb/0x2980 [ 869.208660] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 869.209810] ? wait_for_completion_io+0x270/0x270 [ 869.210896] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 869.212063] ? syscall_enter_from_user_mode+0x1d/0x50 [ 869.213201] do_syscall_64+0x33/0x40 [ 869.214031] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 869.215169] RIP: 0033:0x7ff1de49fb19 [ 869.216007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 869.220007] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 869.221655] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 869.223202] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 869.224753] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 869.226354] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 869.227976] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:37:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8913, &(0x7f00000005c0)={'wlan0\x00'}) [ 869.249723] FAULT_INJECTION: forcing a failure. [ 869.249723] name failslab, interval 1, probability 0, space 0, times 0 [ 869.251682] CPU: 1 PID: 6785 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 869.252815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 869.254169] Call Trace: [ 869.254622] dump_stack+0x107/0x167 [ 869.255223] should_fail.cold+0x5/0xa [ 869.255854] ? create_object.isra.0+0x3a/0xa30 [ 869.256606] should_failslab+0x5/0x20 [ 869.257225] kmem_cache_alloc+0x5b/0x310 [ 869.257906] create_object.isra.0+0x3a/0xa30 [ 869.258629] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 869.259471] kmem_cache_alloc_trace+0x151/0x320 [ 869.260231] ? io_async_queue_proc+0x80/0x80 [ 869.260960] percpu_ref_init+0xd8/0x3d0 [ 869.261615] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 869.262515] io_uring_setup+0x14f6/0x2980 [ 869.263201] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 869.264032] ? wait_for_completion_io+0x270/0x270 [ 869.264836] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 869.265688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 869.266553] do_syscall_64+0x33/0x40 [ 869.267156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 869.267985] RIP: 0033:0x7ff8e0e10b19 [ 869.268592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 869.271600] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 869.272848] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 869.274013] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 869.275192] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 869.276360] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 869.277521] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:37:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan1\x00'}) clone3(&(0x7f0000000180)={0x1100, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {}, &(0x7f0000001600)=""/4096, 0x1000, &(0x7f00000000c0)=""/115, &(0x7f0000000140)}, 0x58) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)=r1) 03:37:15 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8927, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:15 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8929, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891d, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0189436, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x43004000, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:37:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 39) 03:37:15 executing program 5: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000), 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r2, 0x8, 0xffffffffffffffff, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r2, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r2, 0x6000}], 0x4, 0x1f) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="ce133c5063c2"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', r5, 0x29, 0x86, 0x87, 0xc9f, 0x68, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x40, 0xfffffffe, 0x8}}) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r6, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r6, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000002c0)) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x18, 0x0, "5b3393b2016214b1949490321dbca0878f1f9c91d187a7b58ab7eb49d947702dc0efad50df84fd158cb5331e550d245fc07560dec8390b3534e8bdf531f78e33277c43594410b34da0248abd9aac1e67"}, 0xd8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:15 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8930, &(0x7f00000005c0)={'wlan0\x00'}) [ 869.475042] FAULT_INJECTION: forcing a failure. [ 869.475042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.475060] CPU: 1 PID: 6813 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 869.475068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 869.475073] Call Trace: [ 869.475092] dump_stack+0x107/0x167 [ 869.475107] should_fail.cold+0x5/0xa [ 869.475126] _copy_to_user+0x2e/0x180 [ 869.475144] io_uring_setup+0x11b5/0x2980 [ 869.475163] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 869.475175] ? wait_for_completion_io+0x270/0x270 [ 869.475188] ? perf_trace_preemptirq_template+0x26d/0x400 [ 869.475199] ? perf_trace_preemptirq_template+0x26d/0x400 [ 869.475228] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 869.475241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 869.475257] do_syscall_64+0x33/0x40 [ 869.475270] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 869.475280] RIP: 0033:0x7ff8e0e10b19 [ 869.475293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 869.475300] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 869.475314] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 869.475322] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 869.475329] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 869.475343] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 869.475350] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:37:29 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 56) [ 883.315574] FAULT_INJECTION: forcing a failure. [ 883.315574] name failslab, interval 1, probability 0, space 0, times 0 [ 883.317083] CPU: 1 PID: 6828 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 883.317955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 883.319033] Call Trace: [ 883.319376] dump_stack+0x107/0x167 [ 883.319847] should_fail.cold+0x5/0xa [ 883.320347] ? create_object.isra.0+0x3a/0xa30 [ 883.320941] should_failslab+0x5/0x20 [ 883.321441] kmem_cache_alloc+0x5b/0x310 [ 883.321962] create_object.isra.0+0x3a/0xa30 [ 883.322533] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 883.323187] kmem_cache_alloc_trace+0x151/0x320 [ 883.323783] __io_uring_add_tctx_node+0x15c/0x520 [ 883.324393] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 883.325058] ? alloc_fd+0x2e7/0x670 [ 883.325531] io_uring_setup+0x1fbb/0x2980 [ 883.326059] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 883.326721] ? wait_for_completion_io+0x270/0x270 [ 883.327354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 883.328033] ? syscall_enter_from_user_mode+0x1d/0x50 [ 883.328699] do_syscall_64+0x33/0x40 [ 883.329175] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 883.329831] RIP: 0033:0x7ff1de49fb19 [ 883.330305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 883.332653] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 883.333614] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 883.334530] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 883.335431] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 883.336334] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 883.337239] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:37:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 03:37:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x1fffed1dc000, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:37:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 40) 03:37:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8931, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000000)="b0253cc1340034230d6e49b10d95bab763196f0eaea8c8b7693b8a765c82bb66202fd8c88b10f84315f8f3146936c6bd64202a8b65f253de8a5e14dea8cb37ecba45991c3aae3c4c4330dcf6d7c4bffd3b3f91dd4b179b784c18f1197badfd99ca3dcb02") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x10000000) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x40d84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000ff2000/0xd000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x7, 0x81, 0x5, 0x0, 0x0, 0x45a01c2, 0xd0442, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x0, 0x8001}, 0x4000, 0x5, 0x10001, 0x1, 0x2, 0x7, 0x5, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x2) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[0xffffffffffffffff, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r6, r2, r2], 0x8, 0x0, 0x1, {0x0, r7}}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r8, 0x8, 0xffffffffffffffff, 0xc) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r9, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r8, 0x8000}, {0xffffffffffffffff, 0xc286}, {r9, 0x1000}, {r8, 0x6000}], 0x4, 0x1f) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0xc286}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x6000}], 0x4, 0x1f) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe) syz_io_uring_setup(0x367, &(0x7f0000000300)={0x0, 0x31dd, 0x4, 0x0, 0x118, 0x0, r8}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0xa, 0x0, 0x0, 0x101, 0x6, 0x1, {0x0, r7, r0}}, 0x7422) 03:37:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891e, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc020660b, &(0x7f00000005c0)={'wlan0\x00'}) [ 883.369992] FAULT_INJECTION: forcing a failure. [ 883.369992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 883.373171] CPU: 0 PID: 6843 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 883.374911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 883.377059] Call Trace: [ 883.377740] dump_stack+0x107/0x167 [ 883.378674] should_fail.cold+0x5/0xa [ 883.379553] __alloc_pages_nodemask+0x182/0x600 [ 883.380518] ? lock_chain_count+0x20/0x20 [ 883.381372] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 883.382680] alloc_pages_vma+0xbb/0x410 [ 883.383534] wp_page_copy+0xee7/0x1f00 [ 883.384378] ? print_bad_pte+0x5a0/0x5a0 [ 883.385242] ? lock_downgrade+0x6d0/0x6d0 [ 883.386116] ? vm_normal_page+0x162/0x2e0 [ 883.386976] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 883.388090] do_wp_page+0x27b/0x1390 [ 883.388874] handle_mm_fault+0x1cc7/0x3500 [ 883.389742] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 883.390773] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 883.391795] ? __pmd_alloc+0x630/0x630 [ 883.392600] ? vmacache_find+0x55/0x2a0 [ 883.393427] do_user_addr_fault+0x56e/0xc60 [ 883.394349] exc_page_fault+0xa2/0x1a0 [ 883.395167] asm_exc_page_fault+0x1e/0x30 [ 883.396039] RIP: 0010:copy_user_generic_string+0x2c/0x40 [ 883.397189] Code: cb 83 fa 08 72 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 48 a5 89 d1 f3 a4 31 c0 0f 01 ca e9 93 0b 1d 02 0f 1f 00 0f 01 [ 883.400970] RSP: 0018:ffff88804408fd90 EFLAGS: 00050246 [ 883.402098] RAX: 0000000000000001 RBX: 0000000000000078 RCX: 0000000000000007 [ 883.403620] RDX: 0000000000000000 RSI: ffff88804408fe90 RDI: 0000000020001000 [ 883.405131] RBP: 0000000020000fc0 R08: 0000000000000000 R09: ffff88804408fec7 [ 883.406652] R10: ffffed1008811fd8 R11: 0000000000000001 R12: 0000000020001038 [ 883.408155] R13: ffff88804408fe50 R14: 00007ffffffff000 R15: 0000000000000000 [ 883.409694] _copy_to_user+0x13d/0x180 [ 883.410529] io_uring_setup+0x11b5/0x2980 [ 883.411431] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 883.412512] ? perf_trace_preemptirq_template+0x266/0x400 [ 883.413664] ? perf_trace_preemptirq_template+0x26d/0x400 [ 883.414822] ? perf_trace_preemptirq_template+0x26d/0x400 [ 883.415995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 883.417078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 883.418153] do_syscall_64+0x33/0x40 [ 883.418956] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 883.420032] RIP: 0033:0x7ff8e0e10b19 [ 883.420811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 883.424634] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 883.426206] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 883.427665] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 883.429167] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 883.430665] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 883.432119] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:37:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8932, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 41) 03:37:42 executing program 1: ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r0 = getpgrp(0x0) pidfd_open(r0, 0x0) r1 = perf_event_open(0x0, r0, 0x800000000000002, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xb, r1, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={0x1ff, 0x7fff, 0x1, 0x0, 0x0, [{{r1}, 0x8dc}]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:42 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 57) 03:37:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891f, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0xfc, 0xff, 0x0, 0xfff, 0x2001, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x7ffb, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {0xffffffffffffffff, 0x6000}], 0x4, 0x1f) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040)=0x6, 0xffffffffffffff00) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) pread64(r4, &(0x7f0000000080)=""/189, 0xbd, 0xffffffff) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, 0x0) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r6, 0x8, 0xffffffffffffffff, 0xc) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r7, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r6, 0x8000}, {0xffffffffffffffff, 0xc286}, {r7, 0x1000}, {r6, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 03:37:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xffffc8ffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:37:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="e4ff0d000100005200000000", @ANYRES32=r0, @ANYBLOB="00000100000100002e2f66696c653000"]) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x9, 0x20010, 0xffffffffffffffff, 0x10000000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r4, 0x8, 0xffffffffffffffff, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r4, 0x8000}, {0xffffffffffffffff, 0xc286}, {r5, 0x1000}, {r4, 0x6000}], 0x4, 0x1f) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x3, 0x2007, @fd=r5, 0x14000000000000, &(0x7f0000000240)=[{&(0x7f0000000180)="3253f89c3ec42f550bec98225f2e271b9bb78417cd3b431395dc07fa8cc6cfb7560b7e1707b8e05ab7286dc32a18959fc3c502fc605855c87c70db9c741bcd9db0bb6c028352fdbf155d4a443625a1fc0cce5a228b03ae65fe7348139bca232b33640ab3839bcc74a99e9c26fdc4324e10a6db7dd836da02dbe351c4d7df75b7a4e3bbbaf71c83f802ea63562e5c551b8e7ac048fa1a436bd3e1", 0x9a}], 0x1, 0x8, 0x1, {0x3}}, 0x1) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000040)="d54f1775e05e66ffbf84338dac1748ad4bee368ef0a53ab6d1c657ceb0db6a474fae635bd82729344af2a0dbf00e96302b73d17804cb9cb7da546f22bf20438c352600e321b713fb1ffd46b9169d40d60ae1b530dc7285553a1e29bb98f32ed254f10daabd1f35fea5201b8c6bb5e62252aec40fad64873fab5ec0f03014e30656dcd00d472f99bbf575f26666108141ad10d6ca875cc4ec6d3b0808ea443df28df3e0050f485e79300e1bf6e36d603d9231ab345df8fdf8bc0a59f882e8c7927579aa93f415d39637bdd46208fbb30c1a2512f78449542fdf2dac409b08b145a8d40a02d583f95765") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) r6 = syz_open_dev$vcsa(&(0x7f00000002c0), 0xfffffffffffffff9, 0x200000) openat(r6, &(0x7f0000000340)='./file1\x00', 0x200000, 0x135) [ 896.171747] FAULT_INJECTION: forcing a failure. [ 896.171747] name failslab, interval 1, probability 0, space 0, times 0 [ 896.173036] CPU: 0 PID: 6859 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 896.173770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 896.174670] Call Trace: [ 896.174963] dump_stack+0x107/0x167 [ 896.175360] should_fail.cold+0x5/0xa [ 896.175771] ? __d_alloc+0x2a/0x990 [ 896.176186] should_failslab+0x5/0x20 [ 896.176596] kmem_cache_alloc+0x5b/0x310 [ 896.177062] __d_alloc+0x2a/0x990 [ 896.177445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 896.178042] d_alloc_pseudo+0x19/0x70 [ 896.178453] alloc_file_pseudo+0xce/0x250 [ 896.178932] ? alloc_file+0x5a0/0x5a0 [ 896.179376] anon_inode_getfile+0xc8/0x1f0 [ 896.179865] io_uring_setup+0x138b/0x2980 [ 896.180343] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 896.180355] ? perf_trace_preemptirq_template+0x266/0x400 [ 896.180364] ? perf_trace_preemptirq_template+0x26d/0x400 [ 896.180373] ? perf_trace_preemptirq_template+0x26d/0x400 [ 896.180395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 03:37:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8937, &(0x7f00000005c0)={'wlan0\x00'}) [ 896.180407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 896.180419] do_syscall_64+0x33/0x40 [ 896.180430] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 896.180437] RIP: 0033:0x7ff8e0e10b19 [ 896.180448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 896.180454] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 03:37:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8920, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:37:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0xb, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280), 0x0) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 896.180466] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 896.180472] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 896.180478] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 03:37:42 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 58) [ 896.180484] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 896.180490] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 896.186906] FAULT_INJECTION: forcing a failure. [ 896.186906] name failslab, interval 1, probability 0, space 0, times 0 [ 896.186986] CPU: 1 PID: 6873 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 896.186997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 896.187003] Call Trace: [ 896.187025] dump_stack+0x107/0x167 03:37:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 42) [ 896.187048] should_fail.cold+0x5/0xa [ 896.187070] ? xas_alloc+0x336/0x440 [ 896.187088] should_failslab+0x5/0x20 [ 896.187107] kmem_cache_alloc+0x5b/0x310 [ 896.187130] ? stack_trace_consume_entry+0x160/0x160 03:37:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8940, &(0x7f00000005c0)={'wlan0\x00'}) [ 896.187154] xas_alloc+0x336/0x440 [ 896.187177] xas_create+0x34a/0x10d0 [ 896.187206] ? kernel_text_address+0xf2/0x120 [ 896.187229] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 896.187252] xas_store+0x8c/0x1c40 [ 896.187288] __xa_store+0x164/0x2d0 [ 896.187312] ? xa_delete_node+0x280/0x280 [ 896.187351] ? trace_hardirqs_on+0x5b/0x180 [ 896.187380] xa_store+0x31/0x50 [ 896.187401] __io_uring_add_tctx_node+0x1cf/0x520 [ 896.187423] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 896.187441] ? alloc_fd+0x2e7/0x670 [ 896.187473] io_uring_setup+0x1fbb/0x2980 [ 896.187503] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 896.187520] ? wait_for_completion_io+0x270/0x270 [ 896.187539] ? perf_trace_preemptirq_template+0x26d/0x400 [ 896.187556] ? perf_trace_preemptirq_template+0x26d/0x400 [ 896.187598] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 896.187620] ? syscall_enter_from_user_mode+0x1d/0x50 [ 896.187644] do_syscall_64+0x33/0x40 [ 896.187665] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 896.187678] RIP: 0033:0x7ff1de49fb19 [ 896.187697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 896.187708] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 896.187729] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 896.187742] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 896.187758] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 896.187769] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 896.187781] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 896.287624] FAULT_INJECTION: forcing a failure. [ 896.287624] name failslab, interval 1, probability 0, space 0, times 0 [ 896.287647] CPU: 1 PID: 6888 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 896.287657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 896.287664] Call Trace: [ 896.287691] dump_stack+0x107/0x167 [ 896.287714] should_fail.cold+0x5/0xa [ 896.287738] ? create_object.isra.0+0x3a/0xa30 [ 896.287757] should_failslab+0x5/0x20 [ 896.287778] kmem_cache_alloc+0x5b/0x310 [ 896.287804] create_object.isra.0+0x3a/0xa30 [ 896.287822] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 896.287848] kmem_cache_alloc+0x159/0x310 [ 896.287884] xas_alloc+0x336/0x440 [ 896.287912] xas_create+0x34a/0x10d0 [ 896.287941] ? kernel_text_address+0xf2/0x120 [ 896.287965] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 896.287988] xas_store+0x8c/0x1c40 [ 896.288024] __xa_store+0x164/0x2d0 [ 896.288048] ? xa_delete_node+0x280/0x280 [ 896.288076] ? trace_hardirqs_on+0x5b/0x180 [ 896.288105] xa_store+0x31/0x50 [ 896.288128] __io_uring_add_tctx_node+0x1cf/0x520 [ 896.288150] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 896.288168] ? alloc_fd+0x2e7/0x670 [ 896.288201] io_uring_setup+0x1fbb/0x2980 [ 896.288231] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 896.288249] ? wait_for_completion_io+0x270/0x270 [ 896.288294] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 896.288316] ? syscall_enter_from_user_mode+0x1d/0x50 [ 896.288340] do_syscall_64+0x33/0x40 [ 896.288361] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 896.288374] RIP: 0033:0x7ff1de49fb19 [ 896.288394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 896.288405] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 896.288427] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 896.288439] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 896.288451] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 896.288462] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 896.288474] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 896.319611] FAULT_INJECTION: forcing a failure. [ 896.319611] name failslab, interval 1, probability 0, space 0, times 0 [ 896.319628] CPU: 0 PID: 6893 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 896.361603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 896.361608] Call Trace: [ 896.361626] dump_stack+0x107/0x167 [ 896.361638] should_fail.cold+0x5/0xa [ 896.361651] ? create_object.isra.0+0x3a/0xa30 [ 896.361661] should_failslab+0x5/0x20 [ 896.361672] kmem_cache_alloc+0x5b/0x310 [ 896.361685] create_object.isra.0+0x3a/0xa30 [ 896.361694] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 896.361707] kmem_cache_alloc+0x159/0x310 [ 896.361721] __d_alloc+0x2a/0x990 [ 896.361733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 896.361745] d_alloc_pseudo+0x19/0x70 [ 896.361763] alloc_file_pseudo+0xce/0x250 [ 896.369501] ? alloc_file+0x5a0/0x5a0 [ 896.369520] anon_inode_getfile+0xc8/0x1f0 [ 896.369534] io_uring_setup+0x138b/0x2980 [ 896.369549] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 896.369559] ? perf_trace_preemptirq_template+0x266/0x400 [ 896.369568] ? perf_trace_preemptirq_template+0x26d/0x400 [ 896.369577] ? perf_trace_preemptirq_template+0x26d/0x400 03:37:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 896.369597] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 03:37:42 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 59) 03:37:42 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8921, &(0x7f00000005c0)={'wlan0\x00'}) [ 896.369609] ? syscall_enter_from_user_mode+0x1d/0x50 [ 896.369620] do_syscall_64+0x33/0x40 [ 896.369631] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 896.369638] RIP: 0033:0x7ff8e0e10b19 03:37:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) write$bt_hci(r4, &(0x7f0000000040)={0x1, @io_capability_neg_reply={{0x434, 0x7}, {@none, 0x7}}}, 0xb) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 896.369648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:37:42 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 60) [ 896.369654] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 896.369665] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 896.369671] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 896.369677] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 896.369683] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 896.369689] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 896.402881] FAULT_INJECTION: forcing a failure. [ 896.402881] name failslab, interval 1, probability 0, space 0, times 0 [ 896.402895] CPU: 0 PID: 6904 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 896.402901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 896.402904] Call Trace: [ 896.402921] dump_stack+0x107/0x167 [ 896.402933] should_fail.cold+0x5/0xa [ 896.402946] ? xas_alloc+0x336/0x440 [ 896.402957] should_failslab+0x5/0x20 [ 896.402968] kmem_cache_alloc+0x5b/0x310 [ 896.402981] xas_alloc+0x336/0x440 [ 896.402993] xas_create+0x34a/0x10d0 [ 896.403009] ? kernel_text_address+0xf2/0x120 [ 896.403022] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 896.403033] xas_store+0x8c/0x1c40 [ 896.403051] __xa_store+0x164/0x2d0 [ 896.403063] ? xa_delete_node+0x280/0x280 [ 896.403078] ? trace_hardirqs_on+0x5b/0x180 [ 896.403092] xa_store+0x31/0x50 [ 896.403105] __io_uring_add_tctx_node+0x1cf/0x520 [ 896.403116] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 896.403125] ? alloc_fd+0x2e7/0x670 [ 896.403142] io_uring_setup+0x1fbb/0x2980 [ 896.403157] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 896.403167] ? wait_for_completion_io+0x270/0x270 [ 896.403176] ? perf_trace_preemptirq_template+0x26d/0x400 [ 896.403185] ? perf_trace_preemptirq_template+0x26d/0x400 [ 896.403205] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 896.403216] ? syscall_enter_from_user_mode+0x1d/0x50 [ 896.403228] do_syscall_64+0x33/0x40 [ 896.403239] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 896.403246] RIP: 0033:0x7ff1de49fb19 [ 896.403256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 896.403262] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 896.403273] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 896.403279] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 896.403285] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 896.403290] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 896.403297] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 896.476657] FAULT_INJECTION: forcing a failure. [ 896.476657] name failslab, interval 1, probability 0, space 0, times 0 [ 896.502925] CPU: 0 PID: 6916 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 896.502931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 896.502935] Call Trace: [ 896.502951] dump_stack+0x107/0x167 [ 896.502964] should_fail.cold+0x5/0xa [ 896.502976] ? create_object.isra.0+0x3a/0xa30 [ 896.502987] should_failslab+0x5/0x20 [ 896.502997] kmem_cache_alloc+0x5b/0x310 [ 896.503009] ? mark_held_locks+0x9e/0xe0 [ 896.503021] create_object.isra.0+0x3a/0xa30 [ 896.503031] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 896.503053] kmem_cache_alloc+0x159/0x310 [ 896.509985] xas_alloc+0x336/0x440 [ 896.509997] xas_create+0x34a/0x10d0 [ 896.510013] ? kernel_text_address+0xf2/0x120 [ 896.510024] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 896.510036] xas_store+0x8c/0x1c40 [ 896.510054] __xa_store+0x164/0x2d0 [ 896.510066] ? xa_delete_node+0x280/0x280 [ 896.510081] ? trace_hardirqs_on+0x5b/0x180 [ 896.510095] xa_store+0x31/0x50 [ 896.510107] __io_uring_add_tctx_node+0x1cf/0x520 [ 896.510118] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 896.510127] ? alloc_fd+0x2e7/0x670 [ 896.510145] io_uring_setup+0x1fbb/0x2980 [ 896.510160] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 896.510169] ? wait_for_completion_io+0x270/0x270 [ 896.510179] ? perf_trace_preemptirq_template+0x26d/0x400 [ 896.510188] ? perf_trace_preemptirq_template+0x26d/0x400 [ 896.510209] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 896.510220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 896.510232] do_syscall_64+0x33/0x40 [ 896.510242] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 896.510250] RIP: 0033:0x7ff1de49fb19 [ 896.510261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 896.510266] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 896.510278] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 896.510285] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 896.510291] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 896.510297] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 896.510303] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 908.457718] FAULT_INJECTION: forcing a failure. [ 908.457718] name failslab, interval 1, probability 0, space 0, times 0 [ 908.459339] CPU: 1 PID: 6930 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 908.460115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 908.461055] Call Trace: [ 908.461363] dump_stack+0x107/0x167 [ 908.461782] should_fail.cold+0x5/0xa [ 908.462214] ? __alloc_file+0x21/0x320 [ 908.462667] should_failslab+0x5/0x20 [ 908.463114] kmem_cache_alloc+0x5b/0x310 [ 908.463568] __alloc_file+0x21/0x320 [ 908.463992] alloc_empty_file+0x6d/0x170 [ 908.464437] alloc_file+0x5e/0x5a0 [ 908.464828] alloc_file_pseudo+0x16a/0x250 [ 908.465309] ? alloc_file+0x5a0/0x5a0 [ 908.465751] anon_inode_getfile+0xc8/0x1f0 [ 908.466221] io_uring_setup+0x138b/0x2980 [ 908.466704] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 908.467297] ? wait_for_completion_io+0x270/0x270 [ 908.467844] ? perf_trace_preemptirq_template+0x26d/0x400 [ 908.468471] ? perf_trace_preemptirq_template+0x26d/0x400 [ 908.469115] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 908.469696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 908.470281] do_syscall_64+0x33/0x40 [ 908.470695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 908.471325] RIP: 0033:0x7ff8e0e10b19 [ 908.471747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 908.474235] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 908.475097] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 908.475905] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 03:37:54 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8941, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r3, 0x8, 0xffffffffffffffff, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r3, 0x8000}, {0xffffffffffffffff, 0xc286}, {r4, 0x1000}, {r3, 0x6000}], 0x4, 0x1f) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000440)=""/49) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="f90ccda275d13409541a47433cdf4399da92eb48f6a197cb96f143be5d4cd67011b3b4768114092e9ee20eb77bbeb5f144eab2f70d4290aece6f47cb2c140cf781a1da4a2325746aed0123d8c93e574a183433c8dda9ef4b815d487aa47c16dab533", 0x62}, {&(0x7f0000000140)="aa59e03e45f7d9872d301e7913e535fb7c4d071549222ee24c905b89cbd0", 0x1e}, {&(0x7f0000000340)="c605a6973c9239dd9e15a59bae4202c622675a282c41313a00480ffdb0318bb08fae3183e6569a029e315c42913b06f5394ea47f93520e768fb104b1bf152dcea395b0caf72d056b3a3584", 0x4b}], 0x3, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x58}, 0x20000800) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000000)="a382ed59da707f57674d4317b37742e38121845d3859c3fa21cefbf26ba139f1f6353ea9d4a45a82780c48b669cd6bd045b832ff539a36379bff6580e01ea8d7fde06c66781ff608e69c45b532857cd911d7835325ed0d29efcf265f6a5d5407fef4721075a1e19bdb0656e790495722be6ff3d7a561a67bd2685f") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:37:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000080)={0x2, 0x0, 0x2}) 03:37:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8922, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 43) 03:37:54 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 61) 03:37:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) [ 908.476686] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 908.477776] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 908.478709] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 908.480680] FAULT_INJECTION: forcing a failure. [ 908.480680] name failslab, interval 1, probability 0, space 0, times 0 [ 908.482233] CPU: 1 PID: 6923 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 908.483190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 908.484164] Call Trace: [ 908.484179] dump_stack+0x107/0x167 [ 908.484191] should_fail.cold+0x5/0xa [ 908.484204] ? xas_alloc+0x336/0x440 [ 908.484214] should_failslab+0x5/0x20 [ 908.484225] kmem_cache_alloc+0x5b/0x310 03:37:54 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 62) [ 908.484239] xas_alloc+0x336/0x440 [ 908.484251] xas_create+0x34a/0x10d0 [ 908.484270] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 03:37:54 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) [ 908.484282] xas_store+0x8c/0x1c40 [ 908.484303] __xa_store+0x164/0x2d0 [ 908.484315] ? xa_delete_node+0x280/0x280 [ 908.484330] ? trace_hardirqs_on+0x5b/0x180 [ 908.484345] xa_store+0x31/0x50 [ 908.484358] __io_uring_add_tctx_node+0x1cf/0x520 [ 908.484370] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 908.484379] ? alloc_fd+0x2e7/0x670 [ 908.484397] io_uring_setup+0x1fbb/0x2980 [ 908.484413] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 908.484422] ? wait_for_completion_io+0x270/0x270 [ 908.484432] ? perf_trace_preemptirq_template+0x26d/0x400 [ 908.484441] ? perf_trace_preemptirq_template+0x26d/0x400 03:37:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8923, &(0x7f00000005c0)={'wlan0\x00'}) 03:37:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 44) [ 908.484467] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 908.484479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 908.484494] do_syscall_64+0x33/0x40 [ 908.484504] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 908.484511] RIP: 0033:0x7ff1de49fb19 [ 908.484522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 908.484528] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 908.484539] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 908.484545] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 908.484551] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 908.484557] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 908.484564] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 908.484778] wlan0: mtu less than device minimum [ 908.528366] FAULT_INJECTION: forcing a failure. [ 908.528366] name failslab, interval 1, probability 0, space 0, times 0 [ 908.528379] CPU: 1 PID: 6946 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 908.528385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 908.528388] Call Trace: [ 908.528406] dump_stack+0x107/0x167 [ 908.528418] should_fail.cold+0x5/0xa [ 908.528431] ? create_object.isra.0+0x3a/0xa30 [ 908.528442] should_failslab+0x5/0x20 [ 908.528453] kmem_cache_alloc+0x5b/0x310 [ 908.528465] ? mark_held_locks+0x9e/0xe0 [ 908.528478] create_object.isra.0+0x3a/0xa30 [ 908.528487] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 908.528500] kmem_cache_alloc+0x159/0x310 [ 908.528516] xas_alloc+0x336/0x440 [ 908.528528] xas_create+0x34a/0x10d0 [ 908.528544] ? kernel_text_address+0xf2/0x120 [ 908.528555] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 908.528568] xas_store+0x8c/0x1c40 [ 908.528586] __xa_store+0x164/0x2d0 [ 908.528598] ? xa_delete_node+0x280/0x280 [ 908.528613] ? trace_hardirqs_on+0x5b/0x180 [ 908.528627] xa_store+0x31/0x50 [ 908.528640] __io_uring_add_tctx_node+0x1cf/0x520 [ 908.528651] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 908.528661] ? alloc_fd+0x2e7/0x670 [ 908.528678] io_uring_setup+0x1fbb/0x2980 [ 908.528693] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 908.528703] ? wait_for_completion_io+0x270/0x270 [ 908.528712] ? perf_trace_preemptirq_template+0x26d/0x400 [ 908.528721] ? perf_trace_preemptirq_template+0x26d/0x400 [ 908.528743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 908.528755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 908.528767] do_syscall_64+0x33/0x40 [ 908.528778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 908.528785] RIP: 0033:0x7ff1de49fb19 [ 908.528796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 908.528801] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 908.528813] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 908.528819] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 908.528825] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 908.528831] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 908.528837] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 908.650299] FAULT_INJECTION: forcing a failure. [ 908.650299] name failslab, interval 1, probability 0, space 0, times 0 [ 908.650324] CPU: 0 PID: 6956 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 908.650346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 908.650353] Call Trace: [ 908.650379] dump_stack+0x107/0x167 [ 908.650403] should_fail.cold+0x5/0xa [ 908.650426] ? create_object.isra.0+0x3a/0xa30 [ 908.650445] should_failslab+0x5/0x20 [ 908.650465] kmem_cache_alloc+0x5b/0x310 [ 908.650491] create_object.isra.0+0x3a/0xa30 [ 908.650509] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 908.650535] kmem_cache_alloc+0x159/0x310 [ 908.650559] __alloc_file+0x21/0x320 [ 908.650579] alloc_empty_file+0x6d/0x170 [ 908.650599] alloc_file+0x5e/0x5a0 [ 908.650621] alloc_file_pseudo+0x16a/0x250 [ 908.650640] ? alloc_file+0x5a0/0x5a0 [ 908.650676] anon_inode_getfile+0xc8/0x1f0 [ 908.650702] io_uring_setup+0x138b/0x2980 [ 908.650731] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 908.650763] ? perf_trace_preemptirq_template+0x266/0x400 [ 908.650783] ? perf_trace_preemptirq_template+0x26d/0x400 [ 908.650800] ? perf_trace_preemptirq_template+0x26d/0x400 [ 908.650841] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 908.650862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 908.650885] do_syscall_64+0x33/0x40 [ 908.650906] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 908.650920] RIP: 0033:0x7ff8e0e10b19 [ 908.650939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 908.650951] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 908.650972] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 908.650984] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 908.650996] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 908.651007] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 908.651019] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:38:07 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 63) 03:38:07 executing program 1: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0xfffffffffffffffe, 0x10a40) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r2, 0x8, 0xffffffffffffffff, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r2, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r2, 0x6000}], 0x4, 0x1f) r4 = syz_open_dev$mouse(&(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000340)=0x27b1c0d3) readv(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)=""/128, 0x80}, {&(0x7f0000000180)=""/188, 0xbc}], 0x3) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0x1, @none}}}, 0xb) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x4, [0x100, 0x2], 0x5}, 0x10) 03:38:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x101082, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8942, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000000)="becac8cbe9b5765e2cc6dae0ef15cb495e934121b5c2aeb13d5a5c4a8e3342daa7dc7e2c09d6b9596a45a03b44250fcbd37c5078bbfaad74423a31b9079288cc78d8851ed1a6892f1a933dd7f95a1ddc04bdb33ee9947a7734065e88921e7c8336b55892968a") 03:38:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 45) 03:38:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x18) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:38:07 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8924, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x401, 0x2000) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6) [ 920.847899] FAULT_INJECTION: forcing a failure. [ 920.847899] name failslab, interval 1, probability 0, space 0, times 0 [ 920.850336] CPU: 0 PID: 6966 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 920.851798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 920.853544] Call Trace: [ 920.854105] dump_stack+0x107/0x167 [ 920.854885] should_fail.cold+0x5/0xa [ 920.855696] ? create_object.isra.0+0x3a/0xa30 [ 920.856666] should_failslab+0x5/0x20 [ 920.857480] kmem_cache_alloc+0x5b/0x310 [ 920.858336] ? mark_held_locks+0x9e/0xe0 [ 920.859206] create_object.isra.0+0x3a/0xa30 [ 920.860133] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 920.861225] kmem_cache_alloc+0x159/0x310 [ 920.862111] xas_alloc+0x336/0x440 [ 920.862877] xas_create+0x34a/0x10d0 [ 920.863670] ? kernel_text_address+0xf2/0x120 [ 920.864625] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 920.865737] xas_store+0x8c/0x1c40 [ 920.866510] __xa_store+0x164/0x2d0 [ 920.867303] ? xa_delete_node+0x280/0x280 [ 920.868202] ? trace_hardirqs_on+0x5b/0x180 [ 920.869120] xa_store+0x31/0x50 [ 920.869820] __io_uring_add_tctx_node+0x1cf/0x520 [ 920.870837] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 920.871959] ? alloc_fd+0x2e7/0x670 [ 920.872740] io_uring_setup+0x1fbb/0x2980 [ 920.873635] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 920.874708] ? wait_for_completion_io+0x270/0x270 [ 920.875789] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 920.876898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 920.877989] do_syscall_64+0x33/0x40 [ 920.878793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 920.879890] RIP: 0033:0x7ff1de49fb19 [ 920.880679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 920.884577] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 920.886197] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 920.887694] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 920.889199] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 920.890701] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 920.892232] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:38:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8927, &(0x7f00000005c0)={'wlan0\x00'}) [ 920.933125] FAULT_INJECTION: forcing a failure. [ 920.933125] name failslab, interval 1, probability 0, space 0, times 0 [ 920.935678] CPU: 1 PID: 6981 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 920.937132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 920.938886] Call Trace: [ 920.939446] dump_stack+0x107/0x167 [ 920.940226] should_fail.cold+0x5/0xa [ 920.941035] ? security_file_alloc+0x34/0x170 [ 920.941985] should_failslab+0x5/0x20 [ 920.942789] kmem_cache_alloc+0x5b/0x310 [ 920.943664] security_file_alloc+0x34/0x170 [ 920.944565] __alloc_file+0xb7/0x320 [ 920.945342] alloc_empty_file+0x6d/0x170 [ 920.946206] alloc_file+0x5e/0x5a0 [ 920.946961] alloc_file_pseudo+0x16a/0x250 [ 920.947863] ? alloc_file+0x5a0/0x5a0 [ 920.948683] anon_inode_getfile+0xc8/0x1f0 [ 920.949584] io_uring_setup+0x138b/0x2980 [ 920.950467] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 920.951544] ? wait_for_completion_io+0x270/0x270 [ 920.952574] ? perf_trace_preemptirq_template+0x26d/0x400 [ 920.953718] ? perf_trace_preemptirq_template+0x26d/0x400 [ 920.954900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 920.956004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 920.957106] do_syscall_64+0x33/0x40 [ 920.957886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 920.958962] RIP: 0033:0x7ff8e0e10b19 [ 920.959746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 920.963645] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 920.965249] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 920.966744] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 920.968264] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 920.969771] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 920.971274] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:38:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)="1a2cc7c1958faa0abdf827957017b9c9257ba95ec74e5ba546e6052747b04a2607aa402ebec437870a40464e8a011e2fce1b0d6075b7e11fec81a6fb5ef9c444f0716e5e7e5fe4d5d6ee06018ca84d3a38a199d5c14b77967a2329c6d2d6fc853981036509349bfdd43dd0bea268a51e79caa8b6925535d9ec4cb3f16f9ba733bba0e6f65028f0875ba7b8", 0x8b) 03:38:07 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8946, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1000, 0x73}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$bt_hci(r4, &(0x7f0000000180)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc8}}}, 0x6) 03:38:23 executing program 5: sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x168, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x168}, 0x1, 0x0, 0x0, 0x693194b5aa643697}, 0x20048800) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xfffffa56}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}]}, 0x40}, 0x1, 0x0, 0x0, 0xc8d0}, 0x80) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:23 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 46) 03:38:23 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8947, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:38:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8929, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @empty, @broadcast}, 0xc) 03:38:23 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 64) [ 936.831879] FAULT_INJECTION: forcing a failure. [ 936.831879] name failslab, interval 1, probability 0, space 0, times 0 [ 936.834551] CPU: 0 PID: 7014 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 936.836043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 936.837836] Call Trace: [ 936.838409] dump_stack+0x107/0x167 [ 936.839215] should_fail.cold+0x5/0xa [ 936.840036] ? create_object.isra.0+0x3a/0xa30 [ 936.841020] should_failslab+0x5/0x20 [ 936.841842] kmem_cache_alloc+0x5b/0x310 [ 936.842713] ? mark_held_locks+0x9e/0xe0 [ 936.843589] create_object.isra.0+0x3a/0xa30 [ 936.844512] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 936.845586] kmem_cache_alloc+0x159/0x310 [ 936.846485] xas_alloc+0x336/0x440 [ 936.847242] xas_create+0x34a/0x10d0 [ 936.848039] ? kernel_text_address+0xf2/0x120 [ 936.848983] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 936.850098] xas_store+0x8c/0x1c40 [ 936.850859] __xa_store+0x164/0x2d0 [ 936.851632] ? xa_delete_node+0x280/0x280 [ 936.852507] ? trace_hardirqs_on+0x5b/0x180 [ 936.853421] xa_store+0x31/0x50 [ 936.854117] __io_uring_add_tctx_node+0x1cf/0x520 [ 936.855141] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 936.856260] ? alloc_fd+0x2e7/0x670 [ 936.857034] io_uring_setup+0x1fbb/0x2980 [ 936.857920] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 936.858987] ? wait_for_completion_io+0x270/0x270 [ 936.860039] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 936.861142] ? syscall_enter_from_user_mode+0x1d/0x50 [ 936.862228] do_syscall_64+0x33/0x40 [ 936.863017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 936.864108] RIP: 0033:0x7ff1de49fb19 [ 936.864899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 936.868785] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 936.870388] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 936.871904] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 936.873400] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 936.874897] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 936.876408] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:38:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8930, &(0x7f00000005c0)={'wlan0\x00'}) [ 936.897697] FAULT_INJECTION: forcing a failure. [ 936.897697] name failslab, interval 1, probability 0, space 0, times 0 [ 936.900179] CPU: 1 PID: 7020 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 936.901627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 936.903385] Call Trace: [ 936.903952] dump_stack+0x107/0x167 [ 936.904725] should_fail.cold+0x5/0xa [ 936.905539] ? create_object.isra.0+0x3a/0xa30 [ 936.906505] should_failslab+0x5/0x20 [ 936.907343] kmem_cache_alloc+0x5b/0x310 [ 936.908219] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 936.909393] create_object.isra.0+0x3a/0xa30 [ 936.910326] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 936.911410] kmem_cache_alloc+0x159/0x310 [ 936.912290] security_file_alloc+0x34/0x170 [ 936.913206] __alloc_file+0xb7/0x320 [ 936.913989] alloc_empty_file+0x6d/0x170 [ 936.914843] alloc_file+0x5e/0x5a0 [ 936.915624] alloc_file_pseudo+0x16a/0x250 [ 936.916550] ? alloc_file+0x5a0/0x5a0 [ 936.917386] anon_inode_getfile+0xc8/0x1f0 [ 936.918303] io_uring_setup+0x138b/0x2980 [ 936.919208] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 936.920274] ? wait_for_completion_io+0x270/0x270 [ 936.921332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 936.922461] ? syscall_enter_from_user_mode+0x1d/0x50 [ 936.923590] do_syscall_64+0x33/0x40 [ 936.924393] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 936.925488] RIP: 0033:0x7ff8e0e10b19 [ 936.926267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 936.930211] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 936.931899] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 936.933464] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 936.935011] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 936.936580] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 936.938130] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:38:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000100)="9fe6aec893fa8babe7027bfd93feec6e57fcacf2aa52410ae8fd21bc06921a6f772128cb83e16844ab09cd908fbf3b78de6e069d092c72bbc19de50f5192554f55555e05731bdc76cf293eed917b7157a0f631f3d2735ee7cb8f8a6711d322") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000000)="83a6aa468f778bb57718649e685cf38a2f173fb8df9e7b91f9717bff646e5741dafb1a5adf42c149d2d091c814decbee7d4f97f1ff338d64d91486ceec36d2939e2a30af56b985f62c1a82631a4c7c774b3064b4e8b0b1c3d61142c4c43acac828879a670ed8654426e0ffb8ba4d610cb17d8f52612228f2439347f566edbe8062f642276e8ffb5602c203b72afb03b0fc70179dc53bb2f64e5454295431a2e46be02d562b0034dafed33d24d7f24823dd8f78c994d18a7d12a0e177fda3e0bbf2ee29b78942d0233f61") 03:38:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x16c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc000}, 0x400888c) 03:38:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x4c) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:38:23 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8948, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:23 executing program 1: fdatasync(0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) r1 = syz_mount_image$iso9660(&(0x7f00000005c0), &(0x7f0000000740)='./file1/file0\x00', 0x8, 0x3, &(0x7f00000009c0)=[{&(0x7f0000000780)="6d453a70d9af11200fefaf3a148f5f34e5098d8af080a10d46080e84a428ef080e409acb1f1a024f559d7f720494d4171dd2393fba173b9e09fcd5b3b1fdb2a6a0fbd000ce565f45d35bf83ec083c3bcaf5d08956b0dce6d06b2b95f876f5b8aceb478b822df0c5887607e9b", 0x6c, 0x3ff}, {&(0x7f0000000800)="c52a8845de722ec7a663bbb1d831bd2e4c2120b25439649cda96babda8c2a445648aefe9d517699fe1c8e754a6600830360f31bea1a64540f48d214582aa3a6287abba4ebd37ec79c79e33e14ea06775f259f5ac976c5018c925218aa5f28dce8b84fadb1df350f0892ad6de497e00bfe16d34d2b06033f5f63926fb93e0ebe414a32235f699a7db1c1960c4d8e886e5b383053fd3129d53087870784db5478858861334e3e555f0ac09149e69c04739d4413db4826aa0847370fe92c2d6", 0xbe, 0x3}, {&(0x7f00000008c0)="d92d448a1a6743faf90ac495ffc83aae4bd041843f690f13bf0696fd3d6ee2ba76206946921b75c3d7d5d20748f68775e938a47bf7f582f6cfeddd2bf76c4f9fd172ba57d3cb21f7b69f0a1a92340540022f8d2f588d0a1f155b545ee622162662ff17bbb536a04586acba3ccd189ee038844bb20d01dc6a48b11261b49a6dc2cd9e660596801b5aa44f80711a024d7fe93bd993da9dc2b25ae9681bafbfbc6f06d74f73bf9a34307bfa2fb54654074e2680e25db8fc3ceacebafa10b428535b1696e86a450a3fdc23cb0cc5583174b67e79033e8579a384a6aa0afb2cbf0ff1b088a96c13348f8f730d2d623293ef700184", 0xf2, 0xffffffffffffffff}], 0x20, &(0x7f0000000a40)={[{@check_strict}, {@dmode={'dmode', 0x3d, 0x7fff}}], [{@appraise}]}) openat(r1, &(0x7f0000000180)='./file1\x00', 0x120c1, 0x40) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000400)=""/69, 0x45}], 0x3, &(0x7f0000000600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}, 0x60) sendfile(r3, r4, &(0x7f0000000580)=0x9, 0x8) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000500), &(0x7f0000000540), 0x2, 0x3) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x4007, @fd_index=0x9, 0xff, &(0x7f00000000c0)=""/58, 0x3a, 0x10, 0x1}, 0x3f) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)=0xa0b) 03:38:23 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 65) 03:38:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8931, &(0x7f00000005c0)={'wlan0\x00'}) [ 937.147951] FAULT_INJECTION: forcing a failure. [ 937.147951] name failslab, interval 1, probability 0, space 0, times 0 [ 937.150550] CPU: 1 PID: 7042 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 937.151998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 937.153734] Call Trace: [ 937.154288] dump_stack+0x107/0x167 [ 937.155069] should_fail.cold+0x5/0xa [ 937.155862] ? xas_alloc+0x336/0x440 [ 937.156648] should_failslab+0x5/0x20 [ 937.157439] kmem_cache_alloc+0x5b/0x310 [ 937.158288] xas_alloc+0x336/0x440 [ 937.159025] xas_create+0x34a/0x10d0 [ 937.159832] ? kernel_text_address+0xf2/0x120 [ 937.160763] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 937.161844] xas_store+0x8c/0x1c40 [ 937.162596] __xa_store+0x164/0x2d0 [ 937.163366] ? xa_delete_node+0x280/0x280 [ 937.164230] ? trace_hardirqs_on+0x5b/0x180 [ 937.165129] xa_store+0x31/0x50 [ 937.165825] __io_uring_add_tctx_node+0x1cf/0x520 [ 937.166823] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 937.167919] ? alloc_fd+0x2e7/0x670 [ 937.168690] io_uring_setup+0x1fbb/0x2980 [ 937.169578] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 937.170632] ? wait_for_completion_io+0x270/0x270 [ 937.171667] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 937.172757] ? syscall_enter_from_user_mode+0x1d/0x50 [ 937.173837] do_syscall_64+0x33/0x40 [ 937.174624] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 937.175705] RIP: 0033:0x7ff1de49fb19 [ 937.176479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 937.180295] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 937.181890] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 937.183401] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 937.184915] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 937.186407] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 937.187888] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:38:38 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 66) 03:38:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8949, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) 03:38:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8932, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 47) 03:38:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)="4d57c67799e1f026e392") 03:38:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x68) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:38:38 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 952.047676] FAULT_INJECTION: forcing a failure. [ 952.047676] name failslab, interval 1, probability 0, space 0, times 0 [ 952.049124] CPU: 0 PID: 7060 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 952.049978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.050997] FAULT_INJECTION: forcing a failure. [ 952.050997] name failslab, interval 1, probability 0, space 0, times 0 [ 952.051018] Call Trace: [ 952.051044] dump_stack+0x107/0x167 [ 952.054129] should_fail.cold+0x5/0xa [ 952.054613] ? io_uring_alloc_task_context+0x99/0x6a0 [ 952.055257] should_failslab+0x5/0x20 [ 952.055730] kmem_cache_alloc_trace+0x55/0x320 [ 952.056312] io_uring_alloc_task_context+0x99/0x6a0 [ 952.056931] ? io_import_iovec+0x1120/0x1120 [ 952.057490] ? lock_downgrade+0x6d0/0x6d0 [ 952.058011] ? do_raw_spin_lock+0x121/0x260 [ 952.058550] ? rwlock_bug.part.0+0x90/0x90 [ 952.059086] __io_uring_add_tctx_node+0x2c6/0x520 [ 952.059705] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 952.060355] ? alloc_fd+0x2e7/0x670 [ 952.060812] io_uring_setup+0x1fbb/0x2980 [ 952.061343] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 952.061980] ? perf_trace_preemptirq_template+0x266/0x400 [ 952.062668] ? perf_trace_preemptirq_template+0x26d/0x400 [ 952.063364] ? perf_trace_preemptirq_template+0x26d/0x400 [ 952.064065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 952.064723] ? syscall_enter_from_user_mode+0x1d/0x50 [ 952.065372] do_syscall_64+0x33/0x40 [ 952.065838] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 952.066472] RIP: 0033:0x7ff8e0e10b19 [ 952.066932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.069249] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 952.070191] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 952.071079] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 952.071987] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 952.072877] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 952.073761] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 952.074692] CPU: 1 PID: 7066 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 952.076150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.077881] Call Trace: [ 952.078443] dump_stack+0x107/0x167 [ 952.079225] should_fail.cold+0x5/0xa [ 952.080051] ? create_object.isra.0+0x3a/0xa30 [ 952.081036] should_failslab+0x5/0x20 [ 952.081860] kmem_cache_alloc+0x5b/0x310 [ 952.082741] ? mark_held_locks+0x9e/0xe0 [ 952.083654] create_object.isra.0+0x3a/0xa30 [ 952.084601] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 952.085706] kmem_cache_alloc+0x159/0x310 [ 952.086608] xas_alloc+0x336/0x440 [ 952.087385] xas_create+0x34a/0x10d0 [ 952.088202] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 952.089337] xas_store+0x8c/0x1c40 [ 952.090125] __xa_store+0x164/0x2d0 [ 952.090914] ? xa_delete_node+0x280/0x280 [ 952.091802] ? trace_hardirqs_on+0x5b/0x180 [ 952.092728] xa_store+0x31/0x50 [ 952.093425] __io_uring_add_tctx_node+0x1cf/0x520 [ 952.094435] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 952.095541] ? alloc_fd+0x2e7/0x670 [ 952.096321] io_uring_setup+0x1fbb/0x2980 [ 952.097200] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 952.098258] ? wait_for_completion_io+0x270/0x270 [ 952.099274] ? perf_trace_preemptirq_template+0x26d/0x400 [ 952.100423] ? perf_trace_preemptirq_template+0x26d/0x400 [ 952.101597] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 952.102703] ? syscall_enter_from_user_mode+0x1d/0x50 [ 952.103795] do_syscall_64+0x33/0x40 [ 952.104578] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 952.105649] RIP: 0033:0x7ff1de49fb19 [ 952.106432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.110291] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 952.111907] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 952.113400] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 952.114898] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 952.116399] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 952.117908] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:38:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x2}, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r2, 0x8, 0xffffffffffffffff, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r2, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r2, 0x6000}], 0x4, 0x1f) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000001c0), 0x4) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe44584e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f707e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82bf6b"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="01008a527bb46ecd14ae0000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x70d, 0x400000f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000000}, 0x4005) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r5, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3a}, @void, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "00eafd5bcce6c1ac0e204211df28086c5054401d7cae9b78"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x64}}, 0x4008000) 03:38:38 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 67) 03:38:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x894c, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0x101, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0xfffffffc, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0xb, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = perf_event_open(0x0, 0x0, 0x800000000000002, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xb, r3, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000040), &(0x7f0000000240)={'L-', 0xc0}, 0x16, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pread64(r4, &(0x7f0000000140)=""/58, 0x3a, 0x4f) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf253d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900810000002c00000008005d0001000000f51beefa0aa2713b6eb312"], 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000) [ 952.211817] FAULT_INJECTION: forcing a failure. [ 952.211817] name failslab, interval 1, probability 0, space 0, times 0 [ 952.213169] CPU: 0 PID: 7073 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 952.213982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.214950] Call Trace: [ 952.215278] dump_stack+0x107/0x167 [ 952.215707] should_fail.cold+0x5/0xa [ 952.216160] ? xas_alloc+0x336/0x440 [ 952.216599] should_failslab+0x5/0x20 [ 952.217048] kmem_cache_alloc+0x5b/0x310 [ 952.217525] xas_alloc+0x336/0x440 [ 952.217948] xas_create+0x34a/0x10d0 [ 952.218384] ? kernel_text_address+0xf2/0x120 [ 952.218882] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 952.219505] xas_store+0x8c/0x1c40 [ 952.219925] __xa_store+0x164/0x2d0 [ 952.220347] ? xa_delete_node+0x280/0x280 [ 952.220833] ? trace_hardirqs_on+0x5b/0x180 [ 952.221339] xa_store+0x31/0x50 03:38:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 48) [ 952.221730] __io_uring_add_tctx_node+0x1cf/0x520 [ 952.222416] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 952.223022] ? alloc_fd+0x2e7/0x670 [ 952.223471] io_uring_setup+0x1fbb/0x2980 [ 952.223958] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 952.224548] ? wait_for_completion_io+0x270/0x270 [ 952.225119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 952.225737] ? syscall_enter_from_user_mode+0x1d/0x50 [ 952.226353] do_syscall_64+0x33/0x40 [ 952.226786] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 952.227386] RIP: 0033:0x7ff1de49fb19 [ 952.227821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.229958] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 952.230847] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 952.231680] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 952.232514] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 952.233336] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 952.234155] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:38:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x6c) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:38:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) [ 952.241213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 952.262877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 952.284843] FAULT_INJECTION: forcing a failure. [ 952.284843] name failslab, interval 1, probability 0, space 0, times 0 [ 952.286189] CPU: 0 PID: 7089 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 952.286975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.287937] Call Trace: [ 952.288243] dump_stack+0x107/0x167 [ 952.288658] should_fail.cold+0x5/0xa [ 952.289093] ? create_object.isra.0+0x3a/0xa30 [ 952.289617] should_failslab+0x5/0x20 [ 952.290058] kmem_cache_alloc+0x5b/0x310 [ 952.290525] create_object.isra.0+0x3a/0xa30 [ 952.291039] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 952.291633] kmem_cache_alloc_trace+0x151/0x320 [ 952.292175] io_uring_alloc_task_context+0x99/0x6a0 [ 952.292747] ? io_import_iovec+0x1120/0x1120 [ 952.293254] ? lock_downgrade+0x6d0/0x6d0 [ 952.293725] ? do_raw_spin_lock+0x121/0x260 [ 952.294211] ? rwlock_bug.part.0+0x90/0x90 [ 952.294711] __io_uring_add_tctx_node+0x2c6/0x520 [ 952.295277] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 952.295878] ? alloc_fd+0x2e7/0x670 [ 952.296299] io_uring_setup+0x1fbb/0x2980 [ 952.296777] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 952.297357] ? perf_trace_preemptirq_template+0x266/0x400 [ 952.297983] ? perf_trace_preemptirq_template+0x26d/0x400 [ 952.298612] ? perf_trace_preemptirq_template+0x26d/0x400 [ 952.299254] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 952.299855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 952.300446] do_syscall_64+0x33/0x40 [ 952.300872] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 952.301457] RIP: 0033:0x7ff8e0e10b19 [ 952.301882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.303992] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 952.304860] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 952.305673] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 952.306489] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 952.307311] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 952.308126] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:38:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:38 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:38:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8937, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:38 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="8f6217026d5cfb58d72d5eb836d6394c45bb0c4622db751055a44620184ea5e384c338053bb39671df48298d160ca5762f1fa890372332dfd53ab7f7b8f995552492334ff6aa8c7863be26a94fe7534e5e7b", 0x52}, {&(0x7f0000000080)="a9c0d79ce31100241de5deffd5764abdb4ffbb3caffc", 0x16}, {&(0x7f00000000c0)="6ab3a7952adb13612155da2edcbb", 0xe}, {&(0x7f0000000100)}], 0x4}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="ce133c5063c2"}, 0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:38 executing program 0: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)={0x10a0, 0x34, 0x20, 0x70bd2a, 0x25dfdbfd, {0x1c}, [@generic="9f66f0bfe5c834ab0e368ae2527c73bb5540bfca04c5fa23509adde19d5b1296251db8709f9290adaeafc6147894757267a520704eb885df93ccf651f45df3f90c451150181190dabb1ef560c6b81d6c0366a234a7a38811c0039ea8", @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}}, @nested={0x18, 0x32, 0x0, 0x1, [@typed={0xc, 0x9, 0x0, 0x0, @u64=0x200}, @typed={0x7, 0x5f, 0x0, 0x0, @str='}!\x00'}]}, @nested={0x1004, 0x38, 0x0, 0x1, [@generic="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"]}]}, 0x10a0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:38 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 68) [ 952.413589] FAULT_INJECTION: forcing a failure. [ 952.413589] name failslab, interval 1, probability 0, space 0, times 0 [ 952.414935] CPU: 0 PID: 7104 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 952.415722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.416672] Call Trace: [ 952.416980] dump_stack+0x107/0x167 [ 952.417398] should_fail.cold+0x5/0xa [ 952.417833] ? create_object.isra.0+0x3a/0xa30 [ 952.418354] should_failslab+0x5/0x20 [ 952.418788] kmem_cache_alloc+0x5b/0x310 [ 952.419259] ? mark_held_locks+0x9e/0xe0 [ 952.419723] create_object.isra.0+0x3a/0xa30 [ 952.420224] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 952.420805] kmem_cache_alloc+0x159/0x310 [ 952.421286] xas_alloc+0x336/0x440 [ 952.421698] xas_create+0x34a/0x10d0 [ 952.422126] ? kernel_text_address+0xf2/0x120 [ 952.422644] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 952.423253] xas_store+0x8c/0x1c40 [ 952.423668] __xa_store+0x164/0x2d0 [ 952.424087] ? xa_delete_node+0x280/0x280 [ 952.424567] ? trace_hardirqs_on+0x5b/0x180 [ 952.425066] xa_store+0x31/0x50 [ 952.425447] __io_uring_add_tctx_node+0x1cf/0x520 [ 952.425999] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 952.426597] ? alloc_fd+0x2e7/0x670 [ 952.427023] io_uring_setup+0x1fbb/0x2980 [ 952.427508] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 952.428090] ? wait_for_completion_io+0x270/0x270 [ 952.428637] ? perf_trace_preemptirq_template+0x26d/0x400 [ 952.429264] ? perf_trace_preemptirq_template+0x26d/0x400 [ 952.429900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 952.430499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 952.431090] do_syscall_64+0x33/0x40 [ 952.431522] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 952.432113] RIP: 0033:0x7ff1de49fb19 [ 952.432540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.434635] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 952.435513] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 952.436329] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 952.437146] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 952.437957] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 952.438771] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 966.564892] FAULT_INJECTION: forcing a failure. [ 966.564892] name failslab, interval 1, probability 0, space 0, times 0 [ 966.566791] CPU: 1 PID: 7126 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 966.567857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 966.569128] Call Trace: [ 966.569548] dump_stack+0x107/0x167 [ 966.570125] should_fail.cold+0x5/0xa [ 966.570715] ? create_object.isra.0+0x3a/0xa30 03:38:52 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 69) 03:38:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x74) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:38:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2d4e, 0x10001}, 0x48b1, 0x1000000000000, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x19}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x6d) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r4, 0x8, 0xffffffffffffffff, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r4, 0x8000}, {0xffffffffffffffff, 0xc286}, {r5, 0x1000}, {r4, 0x6000}], 0x4, 0x1f) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000180)={0x400, 0x7fff, 0x500000, 0x7ff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000140)={0x200, 0xffff, 0x0, 0x26c, 0x0, [0x8000, 0x1, 0x6, 0x5]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f0000000040)={'wlan0\x00'}) 03:38:52 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x10001, 0x20000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0xa, 0x20) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0xc9) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r3, 0x8, 0xffffffffffffffff, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r3, 0x8000}, {0xffffffffffffffff, 0xc286}, {r5, 0x1000}, {r3, 0x6000}], 0x4, 0x1f) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4}, {}, {r0, 0x200}, {r1, 0x100}, {}, {r2}, {0xffffffffffffffff, 0x4405}, {r5, 0x1294}, {0xffffffffffffffff, 0xc0}, {0xffffffffffffffff, 0xc200}], 0xa, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0x5]}, 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8940, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:52 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8971, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 49) [ 966.571429] should_failslab+0x5/0x20 [ 966.572205] kmem_cache_alloc+0x5b/0x310 [ 966.572839] create_object.isra.0+0x3a/0xa30 [ 966.573525] kmemleak_alloc_percpu+0xa0/0x100 [ 966.574211] pcpu_alloc+0x4e2/0x1240 [ 966.574799] __percpu_counter_init+0x10d/0x2d0 [ 966.575510] io_uring_alloc_task_context+0xcc/0x6a0 [ 966.576277] ? io_import_iovec+0x1120/0x1120 [ 966.576936] ? lock_downgrade+0x6d0/0x6d0 [ 966.577577] ? do_raw_spin_lock+0x121/0x260 [ 966.578223] ? rwlock_bug.part.0+0x90/0x90 [ 966.578858] __io_uring_add_tctx_node+0x2c6/0x520 [ 966.579597] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 966.580379] ? alloc_fd+0x2e7/0x670 [ 966.580943] io_uring_setup+0x1fbb/0x2980 [ 966.581574] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 966.582332] ? wait_for_completion_io+0x270/0x270 [ 966.583075] ? perf_trace_preemptirq_template+0x26d/0x400 [ 966.583898] ? perf_trace_preemptirq_template+0x26d/0x400 [ 966.584744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 966.585535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 966.586320] do_syscall_64+0x33/0x40 [ 966.586908] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 966.587686] RIP: 0033:0x7ff8e0e10b19 [ 966.588256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 966.591038] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 966.592197] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 966.593264] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 966.594336] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 966.595413] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 966.596489] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 966.611132] FAULT_INJECTION: forcing a failure. [ 966.611132] name failslab, interval 1, probability 0, space 0, times 0 [ 966.613687] CPU: 0 PID: 7132 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 966.615129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 966.616876] Call Trace: [ 966.617434] dump_stack+0x107/0x167 [ 966.618214] should_fail.cold+0x5/0xa [ 966.619015] ? xas_alloc+0x336/0x440 [ 966.619811] should_failslab+0x5/0x20 [ 966.620612] kmem_cache_alloc+0x5b/0x310 [ 966.621467] xas_alloc+0x336/0x440 [ 966.622219] xas_create+0x34a/0x10d0 [ 966.623015] ? kernel_text_address+0xf2/0x120 [ 966.623982] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 966.625087] xas_store+0x8c/0x1c40 [ 966.625851] __xa_store+0x164/0x2d0 [ 966.626615] ? xa_delete_node+0x280/0x280 [ 966.627510] ? trace_hardirqs_on+0x5b/0x180 [ 966.628425] xa_store+0x31/0x50 [ 966.629119] __io_uring_add_tctx_node+0x1cf/0x520 [ 966.630145] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 966.631243] ? alloc_fd+0x2e7/0x670 [ 966.632025] io_uring_setup+0x1fbb/0x2980 [ 966.632903] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 966.633964] ? wait_for_completion_io+0x270/0x270 [ 966.634983] ? perf_trace_preemptirq_template+0x26d/0x400 [ 966.636143] ? perf_trace_preemptirq_template+0x26d/0x400 03:38:53 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x2}, 0x1) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000340)={0x2, 0x5, 0x5, 0x1, 0x3, [{0xfc, 0x4, 0x6, '\x00', 0x8c}, {0x3ce, 0x7, 0x101, '\x00', 0x83}, {0x7, 0x1, 0x4, '\x00', 0x2805}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="17"]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000040)={0x0, 0x3938700}, 0x1, 0x1}, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) [ 966.637318] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 966.638597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 966.639703] do_syscall_64+0x33/0x40 [ 966.640487] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 966.641575] RIP: 0033:0x7ff1de49fb19 [ 966.642367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 966.646258] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 966.647879] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 966.649395] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 966.650899] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 966.652412] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 966.653915] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:38:53 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8980, &(0x7f00000005c0)={'wlan0\x00'}) 03:38:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r2, 0x8, 0xffffffffffffffff, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r2, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r2, 0x6000}], 0x4, 0x1f) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x40}}}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "07c17d07545e81866d0810da38c1250d732fc6bd405656919caa8fe155fe7637c01ebc13a03788d55e56"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) 03:38:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8941, &(0x7f00000005c0)={'wlan0\x00'}) [ 980.231729] FAULT_INJECTION: forcing a failure. [ 980.231729] name failslab, interval 1, probability 0, space 0, times 0 [ 980.234310] CPU: 1 PID: 7159 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 980.235810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 980.237620] Call Trace: [ 980.238196] dump_stack+0x107/0x167 [ 980.238987] should_fail.cold+0x5/0xa [ 980.239835] ? create_object.isra.0+0x3a/0xa30 [ 980.240836] should_failslab+0x5/0x20 [ 980.241657] kmem_cache_alloc+0x5b/0x310 [ 980.242551] create_object.isra.0+0x3a/0xa30 [ 980.243528] kmemleak_alloc_percpu+0xa0/0x100 [ 980.244507] pcpu_alloc+0x4e2/0x1240 [ 980.245567] __percpu_counter_init+0x10d/0x2d0 [ 980.246836] io_uring_alloc_task_context+0xcc/0x6a0 [ 980.247943] ? io_import_iovec+0x1120/0x1120 [ 980.248905] ? lock_downgrade+0x6d0/0x6d0 [ 980.249812] ? do_raw_spin_lock+0x121/0x260 [ 980.250758] ? rwlock_bug.part.0+0x90/0x90 [ 980.251772] __io_uring_add_tctx_node+0x2c6/0x520 03:39:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 50) 03:39:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x6) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) 03:39:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000140)="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") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 03:39:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:06 executing program 0: setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x1212, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000002ac0)={0x2000200e}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r5, 0x8, 0xffffffffffffffff, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r6, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r5, 0x8000}, {0xffffffffffffffff, 0xc286}, {r6, 0x1000}, {r5, 0x6000}], 0x4, 0x1f) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000004240)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002b40)={&(0x7f0000003f40)={0x2d4, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x61}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x1}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x6}]}, @NL80211_ATTR_TX_RATES={0x26c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x2}, {0x3, 0x5}, {0x0, 0x2}, {0x7, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x60, 0x48, 0x18, 0x1b, 0x1b, 0x1b, 0x6, 0x18, 0x5, 0x30, 0x36, 0x6, 0x60, 0x6, 0x1, 0x3, 0x36]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x2}, {0x5, 0x7}, {0x4}, {0x1, 0x7}, {0x2, 0xa}, {0x3}, {0x4, 0x7}, {0x4, 0x9}, {0x2, 0xa}, {0x5, 0x1}, {0x7, 0x8}, {0x0, 0x6}, {0x7, 0x4}, {0x3, 0x2}, {0x3, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x4, 0x6}, {0x1, 0xa}, {0x5, 0x5}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x3}, {0x6}, {0x4}, {0x3, 0x4}, {0x6, 0x9}, {0x4}, {0x3, 0x2}, {0x4, 0x3}, {0x6, 0xa}, {0x6, 0x9}, {0x3, 0x7}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x1}, {0x5, 0x3}, {0x3, 0x9}, {0x3, 0x5}, {0x5, 0xa}, {0x5, 0x3}, {}, {0x5, 0x1}, {0x2, 0x7}, {0x4, 0x6}, {0x1, 0x8}, {0x7, 0x1}, {0x0, 0x6}, {0x5, 0x1}, {0x7}, {0x4, 0x7}, {0x1, 0x2}, {0x3, 0x7}, {0x5, 0x3}, {0x6, 0x6}, {0x0, 0x5}, {0x6, 0x4}, {0x6, 0x6}, {}, {0x4, 0xa}, {0x3, 0x7}, {0x3, 0x7}, {0x7, 0x1}, {0x1, 0x8}, {0x4, 0x8}, {0x7, 0x3}, {0x5, 0x1}, {0x7, 0x4}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1ff, 0xfffb, 0x0, 0x8001, 0x2, 0x3ff, 0x6]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x7}, {0x1, 0x8}, {0x5}, {0x1, 0x3}, {0x7, 0x6}, {0x0, 0x6}, {0x7, 0x2}, {0x0, 0x7}, {0x6, 0x7}, {0x6, 0x2}, {0x6, 0x5}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x8}, {0x7, 0x8}, {0x7}, {0x1, 0x6}, {0x1, 0x9}, {0x0, 0x6}, {0x7, 0x1}, {0x6}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x2, 0x8}, {0x6, 0x5}, {0x0, 0x3}, {0x7, 0x5}, {0x2, 0x8}]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x1b, 0x5, 0x60, 0x4, 0x60, 0x1, 0xc, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1271, 0xefea, 0x8001, 0x9a3e, 0x1, 0x8, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x3, 0x6c, 0x6c, 0x2, 0x60, 0x2, 0x1b, 0xf, 0x6c, 0x16, 0x9, 0x4, 0x30, 0x30, 0x2, 0x6, 0x18, 0x3, 0x16, 0x2]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6, 0x9}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x4}, {0x0, 0x1}, {0x6}, {0x4}, {0x0, 0x7}, {0x4, 0x5}, {0x7, 0x1}, {0x2, 0x6}, {0x3, 0x5}, {0x4, 0x4}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x0, 0x4}, {0x3, 0x3}, {0x6, 0x4}, {0x4, 0x5}, {0x7, 0xa}, {0x4, 0x1}, {0x5, 0x9}, {0x7, 0x9}, {0x4, 0x8}, {0x6, 0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x8}, {0x0, 0x2}, {0x2, 0xa}, {0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {}, {0x6, 0x6}, {0x4, 0x2}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0xa}, {0x4, 0x3}, {0x1, 0x4}, {0x6, 0x14}, {0x5, 0x2}, {0x1, 0x9}, {0x2, 0x15}, {0x6, 0x9}, {0x1, 0x8}, {0x5, 0x5}, {0x2, 0x1}, {0x5, 0x8}, {0x3, 0x7}, {0x7}, {0x6, 0x9}, {0x2}, {0x7, 0x7}, {0x6}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0x7}, {0x7, 0x4}, {0x5}, {0x5, 0x7}, {0x7, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x3}]}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x60, 0xb, 0x60, 0x1b, 0x60, 0x18, 0x6c, 0x6c, 0x1b, 0x44, 0x28, 0x60, 0x4, 0x16, 0x60, 0x18, 0x12, 0x60, 0x24, 0x34, 0x9, 0x6c, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x2, 0x2, 0x200, 0x6, 0x80, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{}, {0x5, 0x8}, {0x4}, {0x6, 0x6}, {0x1, 0x7}, {0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x9}, {0x6, 0x7}, {0x5, 0x6}, {0x2, 0x5}, {0x7, 0x4}, {0x6, 0x8}, {0x6, 0x9}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x7, 0x6}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0x1}, {0x5, 0x4}, {0x0, 0x4}, {0x0, 0x3}, {0x3, 0x8}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0xa}, {0x1, 0x7}, {0x6, 0xa}, {0x1, 0x5}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x8}, {0x5, 0x1}, {0x1, 0x5}, {0x4, 0x4}, {0x4}, {0x6, 0x8}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x9}, {0x0, 0x2}, {0x3, 0x6}, {}, {0x1, 0x2}, {0x3, 0x3}, {0x4, 0x6}, {0x3, 0x5}, {0x3, 0x7}, {0x3, 0x2}, {0x0, 0x4}, {0x5, 0x8}, {0x1, 0x5}, {0x0, 0x2}, {0x3, 0xa}, {0x7, 0x6}, {0x2, 0x7}, {0x5, 0x2}, {0x3, 0x9}, {0x5, 0x1}, {0x7, 0x6}, {0x4, 0x1}, {0x5, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x2, 0x4}, {0x7, 0x3}, {0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x5, 0x7}, {0x1, 0x8}, {0x3, 0x9}, {0x3, 0x2}, {0x1}, {0x5, 0x2}, {0x1, 0x4}, {}, {0x0, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x6}, {0x5, 0xa}, {0x3, 0x7}, {0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x0, 0x101, 0x9b, 0x10, 0x8, 0xc1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2e6a, 0x5, 0x5971, 0x5, 0x5, 0x1, 0x5, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x16, 0x9, 0x6, 0x16, 0x30, 0x30, 0x18, 0x30, 0x24, 0x9, 0x50, 0x6, 0x48, 0x60, 0xc, 0x6, 0xb, 0x2, 0xc, 0x1, 0xc, 0x30, 0x36, 0x12, 0x16, 0x1, 0xc, 0x3, 0xc, 0x48]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x81}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x3}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2de}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ce133c5063c2"}, 0x14) [ 980.253046] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 980.254428] ? alloc_fd+0x2e7/0x670 [ 980.255230] io_uring_setup+0x1fbb/0x2980 [ 980.256152] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 980.257260] ? wait_for_completion_io+0x270/0x270 [ 980.258317] ? perf_trace_preemptirq_template+0x26d/0x400 [ 980.259533] ? perf_trace_preemptirq_template+0x26d/0x400 [ 980.260761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 980.261912] ? syscall_enter_from_user_mode+0x1d/0x50 [ 980.263042] do_syscall_64+0x33/0x40 [ 980.263872] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 980.264994] RIP: 0033:0x7ff8e0e10b19 [ 980.265799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 980.269812] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 980.271462] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 980.273010] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 980.274499] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 980.276014] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 980.277510] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 980.287597] FAULT_INJECTION: forcing a failure. sendmmsg$inet(r0, &(0x7f0000003c40)=[{{&(0x7f0000000040)={0x2, 0x2, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="45e21df45baff23f3830545f8e9651ae57ddc0bbcd988e7e76617cfa292561bbc132d490a9ce2c5351fd76611224892815c3c681e776f7a6a14074d1ccce2ea88ca622ad4cef7e0a3c3ee0b1486ae47e2aaa6cee2bada9a301f7bd2ed00f49745585c0fa0f", 0x65}, {&(0x7f0000000100)="17b752e4ad73825449c7bd4d0fad64cad2d9b24ca87f9f54025a0f23f78e24b8d976d25808dd0d1cb12a76845ad9c73c292283576f43b0dd7213448a41a8e2527125b7a5640be734399ad796f3652299a945b1ef61aea9dd573eae320f3f396f8d402b62ee017721b9eb5c29823ab92abeef3292da9889", 0x77}, {&(0x7f0000000180)="12966689ef8702a1164d7284538ded26185a548e8533f63c5cab874761bf9aa7a0024d953b7f7c290fe9d6194db6978b3a85d95173aead059d54387e737dc075713c4f98c8ade2c0", 0x48}, {&(0x7f0000000200)="19e0b7ca3fe34de9f0de31c9f5199839f90eebb75da54660a942649d110cc980bc5d6896c8c82d125eb50180f56d", 0x2e}, {&(0x7f0000000240)="ecba8eff00312da4bee43ecf631ebd7e2ee4c8e60758e3915503120bb450c9f79b17cddabd6c06ac0932be530789e6f5d7106d9f6dd7adf4c1c35127ef055967d906fe1cf2a6d2382be7391fde5ceae38f2f6d707c1f55ea83e812d20b3f809a9160e9d3c54115e6e71ea3ef957a84cefdbed767735a26673fba76dcce259d158abcb54be646febdd1bc091bad23ca6268fd4cad2777b15fa47563846121d599", 0xa0}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000300)="9347cbad2ba11add7b51d14ea15237e88a7803dcb8e6e4ed65129f50456bd8", 0x1f}, {&(0x7f0000000340)="5a6ed710f073bf4408aaf8ba4f4592b7bfb072665a22510206c8ad4c5346bcdd63846db3ef15ea6608835e9afc9650c97ffa708bc0be36e80b79902fa8a324716df9f4f298dfce07aeb824a45c770df25bc8454fe8e461092bf60d63ff5e2f853d7fc8574870e411779a399a8a87687ae2319415aae2", 0x76}], 0x8, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}}, {{&(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002a00)=[{&(0x7f00000004c0)="9645f185ef646a770621852f7ab6df8aa448ee25b491bd18aa3d845c74220ea819c17a15f9a5fcd5193c55d472abf4702d9b5ea0b1f3ebc194360e4de4360ac65f837444a97da9dfae173c5e999a906f71435328a7d26528c986d722a7123ecd7154f46621f7fbef40f653cb18c185f41d0bd25ae63b3f2fada74add9287103457304110d6800280c1618b7ba2035f2ac0", 0x91}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000580)="14f1a4354cf6e7cd5ba60cb567efe81c24226d6fdcf192", 0x17}, {&(0x7f0000002600)="af2c750144f6cfded6a41df36eb44a084fc3fde9610f66f1fcf194a216d378c2f1163d3837005745ce01187a33572f1da76de8050ad1787c8d3753ca3cdd773b498ff4aced12812a15a06959b33f313cacc03de432efc9bb5b0db8c77dfe95e2ef3167f2a678ec1505898c0ae2381f9457642c101d1707acc911f237373c73eaae9e9ec06fd7c10a561ec52c357b32809d2f16642718f8bc60199143c952da11ee84c2d149edde138021c70d0f323568860687a96e1fa022dc2ceca8bee5b1683117b73df303ea821d", 0xc9}, {&(0x7f0000002700)="0d195d000ec19f9cc7b715a93a25a3e92053a3795017711b4230a4976b85741a1a19f1b582e087aa5ce1f0eab0d4988e8cc1e5d5356d77562c1fc86b5fa00114f27e2aef8b4068b465e85bfd93b59da069cd4b645dbbf5589be4a3707dca25c7a6385f9fb8652a07bb8ff8aa859b63b77e5e1f8d1bc97c874bcb0f790e9edbc355514ff1721d738bee4de17239731adbbecf5310806feb2dc8fd0760627d491ddef366ac0cf026df969969f72c369a0a210bd694455022752df266b636244de8efc794b8236b4d3cea0a1368da3bdf6e2a86904f8d21a7a48b3507e6668d0e4639ad6ccbdce81ada", 0xe8}, {&(0x7f0000002800)="04af6057b9d2a503f4db1f20677b77fe1e5f863201829ab01617cd3e370ca29672a1dccdfbbfa09831556a535e916e9a238e82b3c9c3de", 0x37}, {&(0x7f0000002840)="fc74f51e458b7c77f732f32e07f079d206e2d28d30da3b392a19c5081edf275def16402e2b0c34388ad9fd43d213c6e46683a9e7993603bf39e18196c5b68cb437364cc5fcfffd2e0f14a4638b3bb525ac53271ecf819de0d1924a85da042b4382b864a470ee7ce8eb906d9f551bfe1de81fb781bd2bb8165767889009d7a3d37e584d3d2eee0451f62060f157b657c34a285ee0eede37f844b1ce6151297d012d552c46a56ff4ee8aee8ac56602de4717173a4e6b342908449593ae5bc33d10cb05da9454f062f41f558b", 0xcb}, {&(0x7f0000002940)="5bfd44dbc152e9bb3d8e3c6a3af2f13a5a5908303e7e8224c72f52bd693df6845fb4b58ead0fcdaded9067090277f22135606cce7a778a2afb3d1fc67d1b9ef0dc368ecebee2fd580c9e3f0541266370768059b050f12d53b76826d2d8abb986113f152c0a4418ad29bf1472e617a0d2218883024b61fd437028632201d43a3f07a32653787c6a936a83a22a2ebe55", 0x8f}], 0x8, &(0x7f0000003e40)=[@ip_retopts={{0x40, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xe6, 0x0, 0x5, [0x20, 0x6, 0x1ff, 0x80]}, @timestamp_prespec={0x44, 0x1c, 0xc6, 0x3, 0x3, [{@multicast1, 0x8}, {@empty, 0x6}, {@multicast1}]}]}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x29, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@broadcast, 0xfc}, {@multicast1, 0x9}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}]}, @rr={0x7, 0xb, 0xb1, [@loopback, @private=0xa010100]}]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ra={0x94, 0x4}, @cipso={0x86, 0x18, 0x1, [{0x2, 0x12, "890741ae56081059af7e7191894b6600"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002b80)="96a0c12bc8f04bb33e9a2754735bd09edf7d4c39acda8b4f068c103287afd2288bdbe294b9fc21d1f2dc2de5e0c2eb0a04181b72be08e60b62b5965836aecf13c57880e4e0e34af45b8b3e68", 0x4c}, {&(0x7f0000002c00)="0d28affb071091a014d8f6e84255ff90290dc22f841ed6e17af84e358d950b68216c95149cf030decd7be31b2152d4061c1b11156fb36f76783665a6800931ac22c7ffe25911e7d208692337ed99f614755c1a7124c3b4e8f4c604abaf5c39a43fc2054835fcc69f0649009e2f8b35033fe57482036039f4d92c25f7a7de6f4787ac00a8c402a0d928e4db07001433b0f5bf", 0x92}, {&(0x7f0000002cc0)="e4ed4c3fcbbd02848f4c4552795ce2a4aea0e165b0ded7abcfbae367109f12bbb51e579044d630ebc82184b254c7de40aeecb87b05fc04644bf8bb84536e2a5b", 0x40}, {&(0x7f0000002d00)="1bb70f8f8724a8e432945a55591fe4f75ff1b9594984d19f2298d2d6fd6f1614854b67f6bdbca6254f6d75c97211339bb21a2d63e921c3fdd12355b94020beba5f294bdcffe3282019ad100e9182624609dd1a500ac7d4130c47bf0d9106849a6170a512d97794939dca72c11e7d6da0e8f19683b1eab96b45dda0e467c5ed35eff268a623b6df9d53fcf99f12027e7356a8bdd4008ac96e030899f97a169c326e7d08c7378082a4c02c375870dcf89ec73528542428bdb48e0461a2a11a211e6cf1321fe3156c", 0xc7}, {&(0x7f0000002e00)="61e7c570c25be962eb116586fb90f14d722aba4062f3c1a3ee1256574b552f8b34116d779606cbb98a6276b54da12f2dd2240f25e847a4f83fa93536fa9f858645e7e27e3ce1f08b8d43188e66563b3ba5b305d7907580aa58b984d1ee9d6472019e3a17721f817b443edee715f2bbef2fa091625de6d94d4282d645f261dc4e708e651aab0ec1ec397d64afb551acf58fa4c88da43438e60a0031cdb3df17246331cc9aed8ffd1606fe488846a85815", 0xb0}], 0x5, &(0x7f0000002f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x19}, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x862e}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}], 0x50}}, {{&(0x7f0000002fc0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000034c0)=[{&(0x7f0000003000)="a1f83b2029568771b518918b5e2f6ce1d0a9aa476df0b6ae2361bb2ec9edf4081b9e78f43a72deb29ead3ac613effeff401d2e187d8d28c4b98967775a139b8416ccc77096e4590f4caa61e85df4097af70e28555348e1720daae10a62f0d653054901d14670eefefb1deaa9d4", 0x6d}, {&(0x7f0000003080)="ced6c2606ba73171d6d2883d75f33da846a5c7cc188f06a4be9f2bb08db3fc56d59cf02e0c517a48602d49cb3c0c89a4ae116ccee99d4729aa52e61fd3073a5b261410e315b329a88baba1d4bd1589576049de760e5700c53064f03296cc252e760f2e25f357f35cb08428c0201306b794ef3ce940aff6962d7dfe4858b0a4c611578f34ad67d2bf0636c2cc059a2c465cc094cc7ea9c755195bb8", 0x9b}, {&(0x7f0000003140)="feac6c60ffad2362948f9963bedc96d70f0b1541bde8ed522440454a9fa0458bae9a4693b7abd8386f0cc6db8a922ef572bb03159213f1303d4edc967f81aadec327cf9581326ff38c1128ecc9bd30be3a80ad123c188359b766342bcac0d8459c655db4fc74718d7c23fa6a81605fcf90d1b0ed652ee846272b331eb37c673af24123539f59cf16666e81d0d7923f01cc2076d5534f84e270d503f0a4865b7b091ee27b258b1b7df5933a602dc84e330b680af1b424fd8c8d997549c6f20cc05806092eb83a10ef6f468f0850dde61e80a5dffc02250f4856ef3b0ac7bac065027e3cb9c08bc70a3e444a3ff02a4282da631b95", 0xf4}, {&(0x7f0000003240)="5442347c75d28a673243d13feb14e7b1dd730f892bec0b6a22f93ec8cfa0c4d25639a693b2bcee479ce277ed0950314291beec45f00ae6da22541f63524a2e79f98a3dbc1449a48b8d754c8db255c5870f49a543e39f7e2cb34b64200ab6ab88f6654229ba7827ec9d9f0b29575aa9093908dac8f05994aecc4db804d5a836e6503f1bd03430944f5dcfd1efdf06e2bb110be1b49a960e8f02be080eebc3363d2926b218e3b83587487bc42e9f2aa79765547e7fe4fb077731ce0f68e44d6bfb0a7cf1b0240a0269c9ced93ecc511fcb2efe646bfe873ce64a689fabd1fbd1ca16942de6bab8dd91e2755541cf2b0e778990b71c84d5", 0xf6}, {&(0x7f0000003340)="09b18fa888a9290f34e897315ec3327dde00782c783ab820fccee01e4a8f9ff08aa31a1e61223fb2a2a4737a5d82d890506f4df7f4931bc6b3ea2abc72dd014e54776729f290e13927", 0x49}, {&(0x7f00000033c0)="3963967ee96676f386f8964bb891747ee04f3eb7d4d20c227fd36f4e656200fc6a4a722a60b7c420b7da0d1d86fea6e8960efefba9b44de73f48fc2d7a4d2567909e1f5c", 0x44}, {&(0x7f0000003440)="bc80806e565d06f75bc65f8ac118d2e682f3f712f95fe777341b41ec522a8d9e901d3229ca3a4e9fe1a0e9f3c1c928d76ab7ae004ecc89a949a5d34c13972cc36558bff9782d765b328569", 0x4b}], 0x7, &(0x7f0000003540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x58, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x45, [@private=0xa010101, @private=0xa010100, @empty, @local, @multicast1, @multicast1, @rand_addr=0x64010101, @multicast2]}, @timestamp={0x44, 0x24, 0x7b, 0x0, 0xe, [0x1, 0x4, 0x1, 0x1, 0x3, 0x7fffffff, 0x6348, 0x55]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_retopts={{0x88, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xc9, 0x0, 0xb, [0x8001, 0x5, 0x5, 0x40, 0x10000, 0x0]}, @ssrr={0x89, 0x13, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x23, 0xe4, [@multicast2, @private=0xa010100, @private=0xa010101, @loopback, @private=0xa010102, @multicast2, @empty, @multicast1]}, @ssrr={0x89, 0x1b, 0xf8, [@remote, @multicast2, @rand_addr=0x64010100, @private=0xa010101, @multicast2, @empty]}, @ssrr={0x89, 0x7, 0xe8, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x110}}, {{&(0x7f0000003680)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000003880)=[{&(0x7f00000036c0)="405b21308b553db6154665dd78a2c882624edfd1d17a212fada310529253c76376c51723b5434c1ca4c4a925709fe3f7a0b897a264cda52488a6dcdfec65a2e82517af77ff975e948d6c29d173caf73c7c4cb55c39b8d1dec9cf0815a4891da0f9c4715a3074d5b09d4aa7605351d5a8380b25a332204348e25387d269ea6ee065bddbb5217cf90150e432eed52340d72cff59dbbfb02efabc01a683037793e3e9aadaf2be6d8e8145338a0797fc903e09c1d21ac8040fb7c96cbe9e9f3662257255ef7b6b4f2f4ac4af8db34ba02608892f471a", 0xd4}, {&(0x7f00000037c0)="11ee61564efb0aa1fdb0082e175882ed0a956c408b5971eb5196e074b20c51c498afab594c43e75a1a5b1ac37f2b95e8aa322e5d837f98a0e7960984f89b43033e04e1d00f271d761496f97aa33629391ba7db196b8418bc9a5e1044dec6b07eb30ffef52c44ea8d5acf2d448aed8e988d550dbcda9e3a5d81", 0x79}, {&(0x7f0000003840)="da0d1e", 0x3}], 0x3, &(0x7f00000038c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe21}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x38}}, {{&(0x7f0000003900)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000003b40)=[{&(0x7f0000003940)="0864a725a02e9ff7778b9255f7dc853496c12e103a9aee47043e80d57305d327e14c5783dbf98f8902746ac91a3a73d1dd72f37954ccafd68eb7eadc59c568914d9f4411c092d5913bd235c09a285b4c8ba70bcf91da7e76e051d9619288c93e17227ed1eafcc506b8f34252cc0821947e487463722cd314ad437b670428865bcc58c3d852a486f9ee53cccbf54d4e2563f6304f5212655bd4683c12393f92669a8826277a63fc042aaf04eb472e754a12057116af62957b0fd26849543bd9", 0xbf}, {&(0x7f0000003a00)="ec843b2a9ba3ab4c67c925e40dc24572f47e8fb0c8bb406ff68c9c39aab491920e9ddc68588e304ad45c96e1ca78735a015ec4ecb60a5c339b0a9b0dbfd0a5a201acdaf50263a7d39d8e60", 0x4b}, {&(0x7f0000003a80)="5eeb5c48de38d104c51daf1bfbd3bb729938aa5327e912eede63d30d419cd647f2d889d3d09156c942d45234", 0x2c}, {&(0x7f0000003ac0)}, {&(0x7f0000003b00)}], 0x5, &(0x7f0000003bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3f}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe90}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x60}}], 0x6, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000003e00)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003b00)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xc5, 0x4a}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x18) bind$packet(0xffffffffffffffff, &(0x7f0000002a80)={0x11, 0x1b, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x14) 03:39:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x7a) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:39:06 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8981, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:06 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 70) [ 980.287597] name failslab, interval 1, probability 0, space 0, times 0 [ 980.290282] CPU: 1 PID: 7165 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 980.291875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 980.293683] Call Trace: [ 980.294261] dump_stack+0x107/0x167 [ 980.295066] should_fail.cold+0x5/0xa [ 980.295906] ? create_object.isra.0+0x3a/0xa30 [ 980.296900] should_failslab+0x5/0x20 [ 980.297729] kmem_cache_alloc+0x5b/0x310 [ 980.298618] ? mark_held_locks+0x9e/0xe0 [ 980.299513] create_object.isra.0+0x3a/0xa30 [ 980.300472] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 980.301587] kmem_cache_alloc+0x159/0x310 [ 980.302498] xas_alloc+0x336/0x440 [ 980.303277] xas_create+0x34a/0x10d0 [ 980.304112] ? kernel_text_address+0xf2/0x120 [ 980.305092] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 980.306231] xas_store+0x8c/0x1c40 [ 980.307022] __xa_store+0x164/0x2d0 [ 980.307823] ? xa_delete_node+0x280/0x280 [ 980.308737] ? trace_hardirqs_on+0x5b/0x180 [ 980.309682] xa_store+0x31/0x50 [ 980.310407] __io_uring_add_tctx_node+0x1cf/0x520 [ 980.311457] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 980.312600] ? alloc_fd+0x2e7/0x670 [ 980.313408] io_uring_setup+0x1fbb/0x2980 [ 980.314320] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 980.315423] ? wait_for_completion_io+0x270/0x270 [ 980.316482] ? perf_trace_preemptirq_template+0x26d/0x400 [ 980.317678] ? perf_trace_preemptirq_template+0x26d/0x400 [ 980.318895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 980.320048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 980.321171] do_syscall_64+0x33/0x40 [ 980.321983] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 980.323094] RIP: 0033:0x7ff1de49fb19 [ 980.323916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 980.327946] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 980.329615] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 980.331179] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 980.332752] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 980.334317] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 980.335882] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:39:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3, 0x3f, 0x3, 0x9, 0x0, 0x7, 0xb0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0xd0, 0xe3, 0x0, 0x6, 0x8001, 0x5, 0x4aa, 0x0, 0x2, 0x0, 0x9}, r1, 0xd, 0xffffffffffffffff, 0x3) 03:39:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x3, 0x7}, {0x0, 0x3ba392c4}]}, 0x14, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x7, 0x55b, 0x45}) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000100)) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0x171080, 0x40) dup2(0xffffffffffffffff, r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002abd7000fddbdf25210000000c00990009000000670000000600f7001c0500000a00f50050505050505000000400ec00080077000200000008009e0000120000aab33b8ff365465b6374a53293a9968667b48c92ce17a0894242fb6ba1a169897ad98d9a962143687f9be26bcf2b2384101fd90ee12a5f29545280155c2d3390a8a544a3220905d10fd72dd0fa76814c43b6dcde7ca31e56ef082cd139520e9884166ec1"], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 03:39:06 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8946, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 51) 03:39:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0xf0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:39:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4010000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf257d00000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x51}, 0x4000000) 03:39:06 executing program 1: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x26c25f0721a8634, 0x0) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x800, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4c21, &(0x7f0000000000)={0x0, 0xd079, 0x8, 0x1, 0x1b0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000100)=@IORING_OP_NOP={0x0, 0x4}, 0x800) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 980.574045] FAULT_INJECTION: forcing a failure. [ 980.574045] name failslab, interval 1, probability 0, space 0, times 0 [ 980.576527] CPU: 1 PID: 7192 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 980.578023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 980.579855] Call Trace: [ 980.580437] dump_stack+0x107/0x167 [ 980.581239] should_fail.cold+0x5/0xa [ 980.582073] ? io_wq_create+0xeb/0xc00 [ 980.582926] should_failslab+0x5/0x20 [ 980.583773] __kmalloc+0x72/0x390 [ 980.584538] io_wq_create+0xeb/0xc00 [ 980.585362] io_uring_alloc_task_context+0x1f1/0x6a0 [ 980.586478] ? io_import_iovec+0x1120/0x1120 [ 980.587442] ? io_apoll_task_func+0x2d0/0x2d0 [ 980.588432] ? __io_req_find_next+0x300/0x300 [ 980.589412] ? do_raw_spin_lock+0x121/0x260 [ 980.590352] ? rwlock_bug.part.0+0x90/0x90 [ 980.591288] __io_uring_add_tctx_node+0x2c6/0x520 [ 980.592352] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 980.593506] ? alloc_fd+0x2e7/0x670 [ 980.594310] io_uring_setup+0x1fbb/0x2980 [ 980.595226] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 980.596342] ? perf_trace_preemptirq_template+0x266/0x400 [ 980.597547] ? perf_trace_preemptirq_template+0x26d/0x400 [ 980.598745] ? perf_trace_preemptirq_template+0x26d/0x400 [ 980.599969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 980.601109] ? syscall_enter_from_user_mode+0x1d/0x50 [ 980.602235] do_syscall_64+0x33/0x40 [ 980.603045] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 980.604172] RIP: 0033:0x7ff8e0e10b19 [ 980.604984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 980.609011] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 980.610668] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 980.612227] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 980.613782] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 980.615333] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 980.616894] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:39:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8947, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:18 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 71) 03:39:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 52) [ 992.278019] FAULT_INJECTION: forcing a failure. [ 992.278019] name failslab, interval 1, probability 0, space 0, times 0 [ 992.280443] CPU: 1 PID: 7214 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 992.281885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.283665] Call Trace: [ 992.284365] dump_stack+0x107/0x167 [ 992.285350] should_fail.cold+0x5/0xa [ 992.286387] ? xas_alloc+0x336/0x440 [ 992.287392] should_failslab+0x5/0x20 [ 992.288437] kmem_cache_alloc+0x5b/0x310 [ 992.289544] xas_alloc+0x336/0x440 [ 992.290518] xas_create+0x34a/0x10d0 [ 992.291546] ? kernel_text_address+0xf2/0x120 [ 992.292548] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 992.293674] xas_store+0x8c/0x1c40 [ 992.294465] __xa_store+0x164/0x2d0 [ 992.295263] ? xa_delete_node+0x280/0x280 [ 992.296174] ? trace_hardirqs_on+0x5b/0x180 [ 992.297117] xa_store+0x31/0x50 [ 992.297839] __io_uring_add_tctx_node+0x1cf/0x520 [ 992.298888] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 992.300102] ? alloc_fd+0x2e7/0x670 [ 992.300972] io_uring_setup+0x1fbb/0x2980 [ 992.301883] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 992.302992] ? wait_for_completion_io+0x270/0x270 [ 992.304106] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 992.305211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 992.306299] do_syscall_64+0x33/0x40 [ 992.307078] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 992.308202] RIP: 0033:0x7ff1de49fb19 [ 992.308989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 992.312838] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 992.314436] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 992.315948] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 992.317446] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 992.318946] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 992.320451] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:39:18 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8983, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) kcmp(r1, r2, 0x6, r0, r0) write$bt_hci(r0, &(0x7f0000000240)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@none}}}, 0xa) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e23, 0x3, @remote, 0x7fffffff}, {0xa, 0x4e23, 0x8, @local, 0x2}, 0x1000, [0x44, 0x0, 0x0, 0xffff7615, 0xffff521e, 0x4, 0x2]}, 0x5c) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="000425bd7000fcdbdf25430000000c009900cc0a00003f0000000c00580068000000000000000c0058002900000000000000"], 0x38}}, 0x40080) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0xc286}, {r5, 0x1000}, {0xffffffffffffffff, 0x6000}], 0x4, 0x1f) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe44584e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f707e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82bf6b"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="01008a527bb46ecd14ae0000", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x70d, 0x400000f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000000}, 0x4005) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r8, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80) [ 992.329703] FAULT_INJECTION: forcing a failure. [ 992.329703] name failslab, interval 1, probability 0, space 0, times 0 [ 992.332116] CPU: 1 PID: 7218 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 992.333558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.335306] Call Trace: 03:39:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x1800) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 992.335875] dump_stack+0x107/0x167 [ 992.336736] should_fail.cold+0x5/0xa [ 992.337544] ? create_object.isra.0+0x3a/0xa30 [ 992.338509] should_failslab+0x5/0x20 [ 992.339308] kmem_cache_alloc+0x5b/0x310 [ 992.340179] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 992.341265] create_object.isra.0+0x3a/0xa30 03:39:18 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ce133c5063c2"}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8942, &(0x7f0000000040)={'wlan0\x00'}) [ 992.342193] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 992.343391] __kmalloc+0x16e/0x390 [ 992.343418] io_wq_create+0xeb/0xc00 [ 992.343445] io_uring_alloc_task_context+0x1f1/0x6a0 [ 992.343465] ? io_import_iovec+0x1120/0x1120 [ 992.343486] ? io_apoll_task_func+0x2d0/0x2d0 [ 992.343503] ? __io_req_find_next+0x300/0x300 [ 992.343518] ? do_raw_spin_lock+0x121/0x260 [ 992.343534] ? rwlock_bug.part.0+0x90/0x90 [ 992.343559] __io_uring_add_tctx_node+0x2c6/0x520 [ 992.343579] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 992.343595] ? alloc_fd+0x2e7/0x670 [ 992.343636] io_uring_setup+0x1fbb/0x2980 [ 992.343663] ? __do_sys_io_uring_enter+0x1890/0x1890 03:39:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8948, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r1 = perf_event_open(0x0, 0x0, 0x800000000000002, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xb, r1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000200)={0x7, 0xa5d, 0x7ff, 0xfffffff8, 0x6}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x130, 0x0, 0x618, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x57}}}}, [@NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x5, 0x9}, {0x7, 0x3}, {0x4, 0x6}, {0x0, 0x1}, {0x1}, {0x2, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x6c, 0x9, 0xc, 0x6c, 0x24, 0x36, 0x12, 0x60]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x9}, {0x4, 0x3}, {0x1, 0x3}, {0x4, 0x4}, {0x2, 0x7}, {0x4, 0x9}, {0x5, 0xa}, {0x0, 0x2}, {0x2, 0x8}, {0x2, 0x2}, {0x3, 0x7}, {0x4, 0x3}, {0x1, 0x8}, {0x3, 0x2}, {0x1, 0x2}, {0x5, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4, 0x3}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x8}, {0x0, 0x3}, {0x4, 0x3}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x2}, {0x0, 0x1}, {0x6, 0x8}, {0x5, 0x7}, {0x5, 0x9}, {0x3, 0x5}, {0x5, 0x6}, {0x6, 0x8}, {0x5, 0x1}, {0x5, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0xa}, {0x4}, {0x0, 0x3}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x6}, {0x7, 0x1}, {0x3, 0x6}, {0x5, 0x1}, {0x2, 0x7}, {0x5, 0x4}, {0x4}, {0x5, 0x12}, {0x4, 0x3}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x7}, {0x4, 0x2}, {0x0, 0x1}, {0x7, 0x5}, {0x1, 0x7}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x6c, 0x2, 0x18, 0x2, 0x60, 0x2, 0x4, 0x30, 0x30, 0xb, 0xc, 0xb, 0xe, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x5, 0xb, 0x69, 0x1b, 0x16]}]}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0xb}, {0x12}, {0x1c}, {0x12, 0x1}, {0x30, 0x1}, {0x3, 0x1}, {0x16, 0x1}, {0x12, 0x1}, {0x6, 0x1}, {0x36}, {0x18, 0x1}, {0xc}, {0x60, 0x1}, {0x6c, 0x1}, {0x1b}, {0xc, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x60}, {0x2}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7fff}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7f}]}, 0x130}, 0x1, 0x0, 0x0, 0x4048052}, 0x20000041) [ 992.343679] ? wait_for_completion_io+0x270/0x270 [ 992.343719] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 992.343739] ? syscall_enter_from_user_mode+0x1d/0x50 [ 992.343760] do_syscall_64+0x33/0x40 [ 992.343780] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 992.343792] RIP: 0033:0x7ff8e0e10b19 [ 992.343811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 992.343821] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 03:39:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8949, &(0x7f00000005c0)={'wlan0\x00'}) [ 992.343841] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 992.343852] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 992.343863] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 992.343874] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 992.343885] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 992.364535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:39:18 executing program 1: getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x32, 0x0, 0x2, 0x8, 0xff]}, &(0x7f0000000080)=0x54) lseek(0xffffffffffffffff, 0x3, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x22c740, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fbdbdf2531000000080001001b0000000800db00", @ANYRES32=r1, @ANYBLOB="f67ad34498925e4294c725548cac9cc14c88e86680d43a2dec0d6615a5ff5d690417d6e10c01000000000000008696c6314a509c0d94258910a60cb1ccd17c6fb15541695968ec0146c05ef0a7c33f2322e34fd1d407b3c73359fcffa82c5b4a1f63ec50fd1970c36616bb1fe8603add13774265ead7c1d3286a616cb4bdb6d0ad20f0ddd39296eb285f55dba96ae089e5fe026a96b20000"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) [ 992.368534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:39:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 03:39:18 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 72) 03:39:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x894c, &(0x7f00000005c0)={'wlan0\x00'}) [ 992.479530] FAULT_INJECTION: forcing a failure. [ 992.479530] name failslab, interval 1, probability 0, space 0, times 0 [ 992.480850] CPU: 0 PID: 7241 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 992.481638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.482591] Call Trace: [ 992.482902] dump_stack+0x107/0x167 [ 992.483322] should_fail.cold+0x5/0xa [ 992.483770] ? create_object.isra.0+0x3a/0xa30 [ 992.484294] should_failslab+0x5/0x20 [ 992.484730] kmem_cache_alloc+0x5b/0x310 [ 992.485198] ? mark_held_locks+0x9e/0xe0 [ 992.485664] create_object.isra.0+0x3a/0xa30 [ 992.486174] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 992.486764] kmem_cache_alloc+0x159/0x310 [ 992.487245] xas_alloc+0x336/0x440 [ 992.487663] xas_create+0x34a/0x10d0 [ 992.488100] ? kernel_text_address+0xf2/0x120 [ 992.488618] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 992.489223] xas_store+0x8c/0x1c40 [ 992.489641] __xa_store+0x164/0x2d0 [ 992.490062] ? xa_delete_node+0x280/0x280 [ 992.490543] ? trace_hardirqs_on+0x5b/0x180 [ 992.491045] xa_store+0x31/0x50 [ 992.491426] __io_uring_add_tctx_node+0x1cf/0x520 [ 992.491989] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 992.492594] ? alloc_fd+0x2e7/0x670 [ 992.493018] io_uring_setup+0x1fbb/0x2980 [ 992.493502] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 992.494088] ? wait_for_completion_io+0x270/0x270 [ 992.494653] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 992.495260] ? syscall_enter_from_user_mode+0x1d/0x50 [ 992.495859] do_syscall_64+0x33/0x40 [ 992.496285] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 992.496871] RIP: 0033:0x7ff1de49fb19 [ 992.497296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 992.499397] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 992.500278] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 992.501093] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 992.501908] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 992.502722] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 992.503537] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:39:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x4000) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:39:18 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8990, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 53) 03:39:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:18 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8992, &(0x7f00000005c0)={'wlan0\x00'}) [ 992.560873] FAULT_INJECTION: forcing a failure. [ 992.560873] name failslab, interval 1, probability 0, space 0, times 0 [ 992.562271] CPU: 0 PID: 7255 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 992.563053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.564004] Call Trace: [ 992.564306] dump_stack+0x107/0x167 [ 992.564725] should_fail.cold+0x5/0xa [ 992.565166] ? io_wq_create+0x6ef/0xc00 [ 992.565622] should_failslab+0x5/0x20 [ 992.566059] kmem_cache_alloc_node_trace+0x59/0x340 [ 992.566633] io_wq_create+0x6ef/0xc00 [ 992.567070] io_uring_alloc_task_context+0x1f1/0x6a0 [ 992.567657] ? io_import_iovec+0x1120/0x1120 [ 992.568159] ? io_apoll_task_func+0x2d0/0x2d0 [ 992.568670] ? __io_req_find_next+0x300/0x300 [ 992.569177] ? do_raw_spin_lock+0x121/0x260 [ 992.569667] ? rwlock_bug.part.0+0x90/0x90 [ 992.570154] __io_uring_add_tctx_node+0x2c6/0x520 [ 992.570705] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 992.571308] ? alloc_fd+0x2e7/0x670 [ 992.571737] io_uring_setup+0x1fbb/0x2980 [ 992.572215] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 992.572791] ? perf_trace_preemptirq_template+0x266/0x400 [ 992.573420] ? perf_trace_preemptirq_template+0x26d/0x400 [ 992.574050] ? perf_trace_preemptirq_template+0x26d/0x400 [ 992.574688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 992.575285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 992.575885] do_syscall_64+0x33/0x40 [ 992.576309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 992.576894] RIP: 0033:0x7ff8e0e10b19 [ 992.577316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 992.579425] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 992.580297] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 992.581113] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 992.581924] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 992.582743] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 992.583558] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:39:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 03:39:32 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x1, 0x6, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8942, &(0x7f00000005c0)={'wlan1\x00'}) 03:39:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0200000000dbb3002e2f66696c653040"]) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000040)="5c462db5a0af42094ed05416243915452bdda75903a44dc7235e4bd60334ee446012f1460f12f409ab8205a8ff6e65b7a21120740a714255ba65a1cdee2ad69aa057f875f857e58a5593758d145883d5e1187d05c8fb7bdc95028a7abf751f2cfc41078d0b02508196671057fcd723f415c67a375e0cc0faf9938722f82eb0d73e7c6fddb19289de1cd35fbf5ef2") 03:39:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 54) 03:39:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8971, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:32 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8993, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240), 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fbdbdf251600000008000300e64848f9fc24bd895856408fd481f709135604b1a1677788a14a2bc721330aa5164e639925bd20a65cbf0ae55eae2ec10001e8c6e197d50dae36d5bac9b62c51b3c63adcb9fccd7b78339ebf3cf0b84bd330e7ce74733cea9098cdd35c61b37e35bfc0dacfdfa7ddd83265c3dc18c7c2332f857a0a8bfb839b3dfcb2e21b63098528433db84099ecba9cde3386c3b9c52c036a32c33a3b2591b7f895fd1f95b1affc4c9065c05a7bf7efc2524c9f08353f3d9e8d985103db527fa132acf58ec8d44e2935be2c9fda99154a605df99a81", @ANYRES32=r2, @ANYBLOB="0c0006000200000002000000"], 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x80) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x20008001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r5) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1401005}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3e}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250300000050000c804c000b8008000a0032d1000008000a0001e5000008000a008c7c00000800090005f4bf08000009004f145e5208000900f160d50708000900a74b1456080009009031ce0e08000a00ab3f0000080002000200000008000200030000000c0004800500030007000000"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x8894) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:32 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 73) 03:39:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x4800) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 1006.325902] FAULT_INJECTION: forcing a failure. [ 1006.325902] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.327399] CPU: 1 PID: 7286 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 1006.328273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1006.329350] Call Trace: [ 1006.329693] dump_stack+0x107/0x167 [ 1006.330161] should_fail.cold+0x5/0xa [ 1006.330651] ? xas_alloc+0x336/0x440 [ 1006.331125] should_failslab+0x5/0x20 [ 1006.331617] kmem_cache_alloc+0x5b/0x310 [ 1006.332151] xas_alloc+0x336/0x440 [ 1006.332605] xas_create+0x34a/0x10d0 [ 1006.333093] ? kernel_text_address+0xf2/0x120 [ 1006.333670] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1006.334344] xas_store+0x8c/0x1c40 [ 1006.334805] __xa_store+0x164/0x2d0 [ 1006.335276] ? xa_delete_node+0x280/0x280 [ 1006.335820] ? trace_hardirqs_on+0x5b/0x180 [ 1006.336372] xa_store+0x31/0x50 [ 1006.336802] __io_uring_add_tctx_node+0x1cf/0x520 [ 1006.337421] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1006.338082] ? alloc_fd+0x2e7/0x670 [ 1006.338554] io_uring_setup+0x1fbb/0x2980 [ 1006.339091] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1006.339729] ? wait_for_completion_io+0x270/0x270 [ 1006.340359] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1006.341034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1006.341689] do_syscall_64+0x33/0x40 [ 1006.342181] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1006.342834] RIP: 0033:0x7ff1de49fb19 [ 1006.343314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1006.345649] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1006.346611] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 1006.347507] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1006.348444] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1006.349346] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1006.350245] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:39:32 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 74) [ 1006.378435] FAULT_INJECTION: forcing a failure. [ 1006.378435] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.379880] CPU: 1 PID: 7293 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 1006.380738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1006.381778] Call Trace: [ 1006.382116] dump_stack+0x107/0x167 [ 1006.382569] should_fail.cold+0x5/0xa [ 1006.383053] ? create_object.isra.0+0x3a/0xa30 [ 1006.383619] should_failslab+0x5/0x20 [ 1006.384102] kmem_cache_alloc+0x5b/0x310 [ 1006.384606] ? mark_held_locks+0x9e/0xe0 [ 1006.385112] create_object.isra.0+0x3a/0xa30 [ 1006.385652] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1006.386277] kmem_cache_alloc+0x159/0x310 [ 1006.386791] xas_alloc+0x336/0x440 [ 1006.387231] xas_create+0x34a/0x10d0 [ 1006.387700] ? kernel_text_address+0xf2/0x120 [ 1006.388263] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1006.388915] xas_store+0x8c/0x1c40 [ 1006.389369] __xa_store+0x164/0x2d0 [ 1006.389820] ? xa_delete_node+0x280/0x280 [ 1006.390346] ? trace_hardirqs_on+0x5b/0x180 [ 1006.390883] xa_store+0x31/0x50 [ 1006.391302] __io_uring_add_tctx_node+0x1cf/0x520 [ 1006.391904] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1006.392554] ? alloc_fd+0x2e7/0x670 [ 1006.393017] io_uring_setup+0x1fbb/0x2980 [ 1006.393532] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1006.394164] ? wait_for_completion_io+0x270/0x270 [ 1006.394777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1006.395425] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1006.396069] do_syscall_64+0x33/0x40 [ 1006.396532] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1006.397164] RIP: 0033:0x7ff1de49fb19 [ 1006.397623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1006.399919] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1006.400863] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 1006.401742] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1006.402618] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1006.403498] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1006.404383] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1006.406761] FAULT_INJECTION: forcing a failure. [ 1006.406761] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.408160] CPU: 1 PID: 7295 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 1006.408997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1006.410023] Call Trace: [ 1006.410358] dump_stack+0x107/0x167 [ 1006.410804] should_fail.cold+0x5/0xa [ 1006.411280] ? create_object.isra.0+0x3a/0xa30 [ 1006.411852] should_failslab+0x5/0x20 [ 1006.412317] kmem_cache_alloc+0x5b/0x310 [ 1006.412814] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 1006.413452] create_object.isra.0+0x3a/0xa30 [ 1006.413993] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1006.414626] __kmalloc+0x16e/0x390 [ 1006.415061] io_wq_create+0xeb/0xc00 [ 1006.415522] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1006.416198] ? io_import_iovec+0x1120/0x1120 [ 1006.416736] ? io_apoll_task_func+0x2d0/0x2d0 [ 1006.417291] ? __io_req_find_next+0x300/0x300 [ 1006.417838] ? do_raw_spin_lock+0x121/0x260 [ 1006.418365] ? rwlock_bug.part.0+0x90/0x90 [ 1006.418888] __io_uring_add_tctx_node+0x2c6/0x520 [ 1006.419491] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1006.420143] ? alloc_fd+0x2e7/0x670 [ 1006.420597] io_uring_setup+0x1fbb/0x2980 [ 1006.421106] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1006.421727] ? wait_for_completion_io+0x270/0x270 [ 1006.422333] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1006.422977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1006.423609] do_syscall_64+0x33/0x40 [ 1006.424069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1006.424691] RIP: 0033:0x7ff8e0e10b19 [ 1006.425146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1006.427378] RSP: 002b:00007ff8de365108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1006.428305] RAX: ffffffffffffffda RBX: 00007ff8e0f24020 RCX: 00007ff8e0e10b19 [ 1006.429167] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1006.430028] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1006.430895] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1006.431774] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:39:32 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8970, &(0x7f00000005c0)={'wlan1\x00'}) 03:39:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) 03:39:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8980, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:32 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8994, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x280000f, 0x50, 0xffffffffffffffff, 0x8000000) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x10000000) r3 = socket$netlink(0x10, 0x3, 0x5) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[0xffffffffffffffff, r4, r4, 0xffffffffffffffff, 0xffffffffffffffff, r8, r4, r4], 0x8, 0x0, 0x1, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000640)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="97d8bd7291bd9a5b91768fcb41350c343aa405a15e31e1f87cab24cfbc9a4f87da9255f63b62420f27150d130734e3bf144693730932b9a6ed5da5f03eba73022726c90975d51192aa417926983752ed305d579d33c37ab6dcbc158b7a481d3ad24ce75cba48b42d95ef743d323141908bb2beba24f55e5d110c2a8644f3e67764190bcab5eb931122ad8da62162fc77e176ddd7ef3364fe923f0ac625f2bfcd368943d2689628110177a4d8d3e2006738210dbd7835340f39b2e5edccd4eb9928d39effc6565861d5c9e405468e0a4fdef34cc731e8ba921367fd12142bc0bec1dd86b4372420b211075a148ce5fc556cc253fee1617726bffc", 0xfa}, {&(0x7f0000000180)="744deb0433cf168b5a4ec9714f2b31f02f37a4dae447050bd79181457bedb3376a618d5942ae72a8cc885de43630cfc7d5b363433117b6e68ca665fb806d60094ebcf4c1845a9c01d5", 0x49}], 0x2, &(0x7f0000000240)=[{0x60, 0x117, 0x7f, "2f3e065cb66e0a69dec483e7677baf80ddd4e7da40442ef616f48915cb02e15c3c712cf15c9d8ec59e913b545573f190dbe55178a2e137d353502e36f98356ff76a7dca9fce265dad75e"}, {0x98, 0xd, 0xe39d, "f39f5669eb799d90e0bf11c78d2ae366b43bbbb03f07416c44162696de7902a06ad3bccb699a5c6c599061a5779fea8b980c96cb59e7f513cb72fe574b2e617b6133b40c1de540f2a345f9a23fbb839de547009ed05543faf17f40155ab8e2b304f3da251a1037aa40f28103149fa01f5cea8eb9595e2096aa060224306e18d35a"}, {0x88, 0x29, 0x3ff, "5d959aaa44d8708caf7d4337d6a699e48bd07dec82af3f7512ff28ec09d9e161d65093fe1001c9469ece1c6ac23d449e4c9841fe70a4c2a85ea681e7c97c244a82d2ae1d931ff2475578540002f82c1108511d23237a9c2cc58e69af0083966245fa811a39293ef37ccacc43d0d8dabf91"}, {0x40, 0x10, 0xea, "ac79e3495063deb69cab74fc5a9e4c90f35a5c1eacb7e8b8491b065afbdd0c41aa30f9af8b36d1e5af2cf9f8ce88"}, {0x100, 0x29, 0xffffff80, "348c5a6714614f0088f7b70d1491a20c4ffba1914d82ea8d8ea81f343646b9b128cfedcc4ab0170806e6d8d11430f529a623c6b1a77a717674b6afcbe3e9a8e8639b572d15284b57a6d751b40823b127be823acfe4c6dc3507a7318a618a3ce27d2a65d04c6a9fba1aa1036b41d75eb1a569bfba87c4ced7d67ca9e1003321a9c9ea044719af5e79f37f9d1f2adb84ca513cc5a926fa2b30d4d7b1cfdd69dc4c286a1764078c2e8c5861b0acf5e45e80616a491f3ac5492f3f337c9195ce242c154bec82c94637aa6a48198eaf87e11d95b95ab52310e34d369a7e99d73af3aaeaa3364849725835347cb8"}, {0xb8, 0x113, 0x7fff, "063aa70a92440241375dcf87bd49fab60d89472df2f2adff32caa3aedc5ab3b7b9eb019547eed3a26a9979df0745883d9bcd95ea8c794d6d4f90a2d28d361e6de371a042452ba5929aa0460d524ab3103dcf5bacc29656e7003391fcd38f48dc57748b1843574d1c53677906d7b42bc77a055deb2b7be1cb523c360d19d53f45c5d42ad8adac335961c54509df1771528731349d408c063545da3803d7a127e0e8"}], 0x378}, 0x0, 0x20040040, 0x0, {0x0, r9}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x7, 0xe0, 0x9, 0x20, @loopback, @mcast2, 0x7800, 0x7, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl0\x00', r2, 0x29, 0x1d, 0xa9, 0x7fffffff, 0x20, @private0, @local, 0x80, 0x80, 0x0, 0x4}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x80, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r3, 0x8, 0xffffffffffffffff, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r3, 0x8000}, {0xffffffffffffffff, 0xc286}, {r4, 0x1000}, {r3, 0x6000}], 0x4, 0x1f) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000003f5b50a7d2478b641167c603e0827c7f052676ca542d126c6c49d87d22c2a36f8ff718a2220684df00c4a06a5e6053dcc414a954", @ANYRES16=0x0, @ANYBLOB="170026bd7000fddbdf254400000008000d0000ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x80) 03:39:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 55) 03:39:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8981, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:33 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8995, &(0x7f00000005c0)={'wlan0\x00'}) [ 1006.613738] FAULT_INJECTION: forcing a failure. [ 1006.613738] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.615170] CPU: 1 PID: 7322 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 1006.615961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1006.616911] Call Trace: [ 1006.617217] dump_stack+0x107/0x167 [ 1006.617637] should_fail.cold+0x5/0xa [ 1006.618077] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1006.618649] should_failslab+0x5/0x20 [ 1006.619086] kmem_cache_alloc_trace+0x55/0x320 [ 1006.619612] __io_uring_add_tctx_node+0x15c/0x520 [ 1006.620169] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1006.620772] ? alloc_fd+0x2e7/0x670 [ 1006.621199] io_uring_setup+0x1fbb/0x2980 [ 1006.621677] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1006.622260] ? wait_for_completion_io+0x270/0x270 [ 1006.622811] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1006.623437] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1006.624090] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1006.624692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1006.625284] do_syscall_64+0x33/0x40 [ 1006.625718] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1006.626306] RIP: 0033:0x7ff8e0e10b19 [ 1006.626732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1006.628836] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1006.629710] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 1006.630529] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1006.631345] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1006.632169] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1006.632988] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:39:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 56) 03:39:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:46 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 75) 03:39:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan1\x00'}) 03:39:46 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:46 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a0, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x4c00) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 1019.691530] FAULT_INJECTION: forcing a failure. [ 1019.691530] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.692862] FAULT_INJECTION: forcing a failure. [ 1019.692862] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.694013] CPU: 1 PID: 7351 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 1019.697830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1019.699602] Call Trace: [ 1019.700181] dump_stack+0x107/0x167 [ 1019.700948] should_fail.cold+0x5/0xa [ 1019.701752] ? xas_alloc+0x336/0x440 [ 1019.702537] should_failslab+0x5/0x20 [ 1019.703342] kmem_cache_alloc+0x5b/0x310 [ 1019.704213] xas_alloc+0x336/0x440 [ 1019.704967] xas_create+0x34a/0x10d0 [ 1019.705741] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 1019.706802] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1019.707875] xas_store+0x8c/0x1c40 [ 1019.708660] __xa_store+0x164/0x2d0 [ 1019.709424] ? xa_delete_node+0x280/0x280 [ 1019.710312] ? trace_hardirqs_on+0x5b/0x180 [ 1019.711223] xa_store+0x31/0x50 [ 1019.711936] __io_uring_add_tctx_node+0x1cf/0x520 [ 1019.712944] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1019.714055] ? alloc_fd+0x2e7/0x670 [ 1019.714823] io_uring_setup+0x1fbb/0x2980 [ 1019.715710] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1019.716774] ? wait_for_completion_io+0x270/0x270 [ 1019.717825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1019.718910] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1019.720017] do_syscall_64+0x33/0x40 [ 1019.720793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1019.721880] RIP: 0033:0x7ff1de49fb19 [ 1019.722655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1019.726553] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1019.728145] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 1019.729598] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1019.731057] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1019.732541] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1019.734006] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1019.735548] CPU: 0 PID: 7352 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 1019.737057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1019.738816] Call Trace: [ 1019.739386] dump_stack+0x107/0x167 [ 1019.740184] should_fail.cold+0x5/0xa [ 1019.741013] ? create_object.isra.0+0x3a/0xa30 [ 1019.742006] should_failslab+0x5/0x20 [ 1019.742818] kmem_cache_alloc+0x5b/0x310 [ 1019.743681] create_object.isra.0+0x3a/0xa30 [ 1019.744624] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1019.745704] kmem_cache_alloc_trace+0x151/0x320 [ 1019.746698] __io_uring_add_tctx_node+0x15c/0x520 [ 1019.747721] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1019.748839] ? alloc_fd+0x2e7/0x670 [ 1019.749622] io_uring_setup+0x1fbb/0x2980 [ 1019.750511] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1019.751603] ? perf_trace_preemptirq_template+0x266/0x400 [ 1019.752791] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1019.753957] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1019.755164] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1019.756288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1019.757386] do_syscall_64+0x33/0x40 [ 1019.758174] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1019.759254] RIP: 0033:0x7ff8e0e10b19 [ 1019.760057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1019.764058] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1019.765661] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 1019.767163] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1019.768711] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1019.770225] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1019.771735] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:39:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_accept_cis={{0x2066, 0x2}, {0xc9}}}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x6800) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:39:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f0000000000)={'wlan0\x00'}) 03:39:46 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a1, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8983, &(0x7f00000005c0)={'wlan0\x00'}) 03:39:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f0000000080)={'wlan0\x00'}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @remote_name_req={{0x419, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xa4, 0x8, 0x3f}}}, 0xe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x10000}}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB='\f\x00#'], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) 03:39:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0xc041000}, @ethernet={0x306, @broadcast}, @l2={0x1f, 0x55, @none, 0x6, 0x2}, 0x1ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0xcb, 0x4, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, 0x1}, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000f, 0x4010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r7}}, 0xbe01) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="ce133c5063c2"}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf250b0000001c0001800800030c0000000008000101", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4c00018008000300020000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r9, @ANYBLOB="080003100000000014000200766574683000100000001c01004aa800000078e4e772fdd5cb0659505d43ed06892acad0ed6349c6798a0b1292417aa5ab95ccbfce7696058ffeb9b5a038789201922f7470e39bb08a06552e26a8d870bd7292a7448cb37cb07c80321a3811016ea1b60280d6e81148feac2c1f3a779a38f2", @ANYRES32=0x0, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4048005}, 0x4004) [ 1020.057921] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:40:01 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 76) 03:40:01 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 57) 03:40:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8990, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:01 executing program 5: newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r1 = add_key$user(&(0x7f0000000300), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000340)="cc", 0x1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r2, 0x0) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000080, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,privport,euid>', @ANYRESDEC=r0, @ANYBLOB=',obj_user=wlan0\x00,dont_appraise,smackfsfloor=wlan0\x00,defcontext=user_u,dont_measure,uid=', @ANYRESDEC=r2, @ANYBLOB="0d2381f7ff731b3b2c00"]) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x6c00) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:40:01 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a2, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)="5bbbcb46573e5c6840e2cc6ace0014a5d6eb8fffbde02b27d520b0363224f6a5b08c1eff840bfc90d18302021ad9036e05dd921389eec25a518a32f80ba779d42b5558dd35d9dcbcf2087a3ffdca43d2598f14bcf93f43571ac0d3853dda65362aa001346d5903") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 1035.174875] FAULT_INJECTION: forcing a failure. [ 1035.174875] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.174904] CPU: 0 PID: 7400 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 1035.174921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1035.174930] Call Trace: [ 1035.174967] dump_stack+0x107/0x167 [ 1035.175000] should_fail.cold+0x5/0xa [ 1035.175032] ? create_object.isra.0+0x3a/0xa30 [ 1035.175060] should_failslab+0x5/0x20 [ 1035.175090] kmem_cache_alloc+0x5b/0x310 [ 1035.175120] ? mark_held_locks+0x9e/0xe0 [ 1035.175153] create_object.isra.0+0x3a/0xa30 [ 1035.175177] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1035.175214] kmem_cache_alloc+0x159/0x310 [ 1035.175255] xas_alloc+0x336/0x440 [ 1035.175289] xas_create+0x34a/0x10d0 [ 1035.175342] ? kernel_text_address+0xf2/0x120 [ 1035.175375] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1035.175407] xas_store+0x8c/0x1c40 [ 1035.175461] __xa_store+0x164/0x2d0 [ 1035.175494] ? xa_delete_node+0x280/0x280 [ 1035.175537] ? trace_hardirqs_on+0x5b/0x180 [ 1035.175572] xa_store+0x31/0x50 [ 1035.175602] __io_uring_add_tctx_node+0x1cf/0x520 [ 1035.175628] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1035.175652] ? alloc_fd+0x2e7/0x670 [ 1035.175699] io_uring_setup+0x1fbb/0x2980 [ 1035.175743] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1035.175768] ? wait_for_completion_io+0x270/0x270 [ 1035.175831] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1035.175862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1035.175897] do_syscall_64+0x33/0x40 [ 1035.175926] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1035.175944] RIP: 0033:0x7ff1de49fb19 [ 1035.175971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1035.175987] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1035.176017] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 1035.176034] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1035.176051] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1035.176085] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1035.176183] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1035.189935] FAULT_INJECTION: forcing a failure. [ 1035.189935] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.189957] CPU: 0 PID: 7404 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 1035.189967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1035.189974] Call Trace: [ 1035.189995] dump_stack+0x107/0x167 [ 1035.190017] should_fail.cold+0x5/0xa [ 1035.190037] ? xas_alloc+0x336/0x440 [ 1035.190055] should_failslab+0x5/0x20 [ 1035.190073] kmem_cache_alloc+0x5b/0x310 [ 1035.190095] ? stack_trace_consume_entry+0x160/0x160 [ 1035.190118] xas_alloc+0x336/0x440 [ 1035.190142] xas_create+0x34a/0x10d0 [ 1035.190167] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1035.190191] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1035.190214] xas_store+0x8c/0x1c40 [ 1035.190250] __xa_store+0x164/0x2d0 [ 1035.190273] ? xa_delete_node+0x280/0x280 [ 1035.190300] ? trace_hardirqs_on+0x5b/0x180 [ 1035.190336] xa_store+0x31/0x50 [ 1035.190357] __io_uring_add_tctx_node+0x1cf/0x520 [ 1035.190378] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1035.190394] ? alloc_fd+0x2e7/0x670 [ 1035.190427] io_uring_setup+0x1fbb/0x2980 [ 1035.190456] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1035.190473] ? perf_trace_preemptirq_template+0x266/0x400 [ 1035.190491] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1035.190508] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1035.190550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1035.190570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1035.190593] do_syscall_64+0x33/0x40 [ 1035.190613] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1035.190625] RIP: 0033:0x7ff8e0e10b19 [ 1035.190643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1035.190654] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1035.190675] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 1035.190686] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1035.190698] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1035.190709] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1035.190721] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1050.787142] FAULT_INJECTION: forcing a failure. [ 1050.787142] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.789712] CPU: 0 PID: 7420 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 1050.791250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1050.793134] Call Trace: [ 1050.793738] dump_stack+0x107/0x167 [ 1050.794562] should_fail.cold+0x5/0xa [ 1050.795442] ? xas_alloc+0x336/0x440 [ 1050.796303] should_failslab+0x5/0x20 [ 1050.797180] kmem_cache_alloc+0x5b/0x310 [ 1050.798120] xas_alloc+0x336/0x440 [ 1050.798937] xas_create+0x34a/0x10d0 [ 1050.799794] ? kernel_text_address+0xf2/0x120 [ 1050.800768] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1050.801979] xas_store+0x8c/0x1c40 [ 1050.802823] __xa_store+0x164/0x2d0 [ 1050.803672] ? xa_delete_node+0x280/0x280 [ 1050.804654] ? trace_hardirqs_on+0x5b/0x180 [ 1050.805660] xa_store+0x31/0x50 [ 1050.806426] __io_uring_add_tctx_node+0x1cf/0x520 [ 1050.807540] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1050.808755] ? alloc_fd+0x2e7/0x670 [ 1050.809601] io_uring_setup+0x1fbb/0x2980 [ 1050.810565] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1050.811748] ? wait_for_completion_io+0x270/0x270 [ 1050.812903] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1050.814110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1050.815536] do_syscall_64+0x33/0x40 [ 1050.816415] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1050.817627] RIP: 0033:0x7ff1de49fb19 [ 1050.818501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1050.822666] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1050.824440] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 1050.826062] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1050.827684] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1050.829223] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1050.830882] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:40:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'hsr0\x00', {0x100}, 0x100}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept4(r0, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80, 0x800) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r2, 0x8, 0xffffffffffffffff, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r2, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r2, 0x6000}], 0x4, 0x1f) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xfc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 58) 03:40:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8992, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:17 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 77) 03:40:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x7400) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:40:17 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a3, &(0x7f00000005c0)={'wlan0\x00'}) [ 1050.883916] FAULT_INJECTION: forcing a failure. [ 1050.883916] name failslab, interval 1, probability 0, space 0, times 0 03:40:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8993, &(0x7f00000005c0)={'wlan0\x00'}) [ 1050.883940] CPU: 1 PID: 7431 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 1050.883951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1050.883958] Call Trace: [ 1050.883984] dump_stack+0x107/0x167 03:40:17 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89b0, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) [ 1050.884007] should_fail.cold+0x5/0xa [ 1050.884029] ? create_object.isra.0+0x3a/0xa30 [ 1050.884048] should_failslab+0x5/0x20 [ 1050.884068] kmem_cache_alloc+0x5b/0x310 03:40:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x7a00) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 1050.884094] create_object.isra.0+0x3a/0xa30 03:40:17 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x81, 0x5, 0x7ff, 0x4, @loopback, @private0, 0x7, 0x20, 0x9, 0x8}}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000054) 03:40:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 59) [ 1050.884111] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1050.884136] kmem_cache_alloc+0x159/0x310 [ 1050.884163] xas_alloc+0x336/0x440 [ 1050.884185] xas_create+0x34a/0x10d0 [ 1050.884214] ? kernel_text_address+0xf2/0x120 03:40:17 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 78) [ 1050.884255] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1050.884277] xas_store+0x8c/0x1c40 [ 1050.884311] __xa_store+0x164/0x2d0 [ 1050.884339] ? xa_delete_node+0x280/0x280 [ 1050.884371] ? trace_hardirqs_on+0x5b/0x180 [ 1050.884398] xa_store+0x31/0x50 [ 1050.884421] __io_uring_add_tctx_node+0x1cf/0x520 [ 1050.884441] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1050.884458] ? alloc_fd+0x2e7/0x670 [ 1050.884489] io_uring_setup+0x1fbb/0x2980 03:40:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8994, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x280, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2a}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_DATA={0x63, 0xc5, "2e38172d08af5088d8b8806588ec37ab698d0094e54eff4dd2637b0dbb4c7c217ec45e18a05d55123f413784ed818ed7f5bffd76f19e2ddcd85b8ceed55a6cdcd8c627565928de14210ec264a4d00eeb7c67f58a492595fd27b99b0d4a5679"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x27, 0xc5, "2ecbaffbdfe64ea5517faa73c696afcc1261b9b5cdb2da275144b7f9fa1493b24612e1"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x18}, @NL80211_ATTR_VENDOR_DATA={0x81, 0xc5, "57eb86ed8e71f340fb96f4fa9cbde9547831ceffd09327b378bfbfbe390c4ce8448be4690121dccc75e33ae1db6649a26140393b35c4e793b7285a03eb7afd5bcf67ecac1c0086d0a97dfa8601d4e8b8cf2e12495baf17adc0dd112db17ec64be3622348317d5cc391c9a3190b978475829fc594d2d287370ee9a9d73d"}, @NL80211_ATTR_VENDOR_DATA={0x59, 0xc5, "1f0c641c8ed4f14faad48a5c90259ad786b9abc3e5d55cd2ad01870a2111bea203b5554755d2520c692760f3c321a7e53110db3cbb69388230b3d99c6bafac744e411475b61051e9004344eb0dc98f69d5215bf73c"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xcd, 0xc5, "619572fe6e4fa3e73678d7b3e261b2de9b9c0b46d4317f8adce64a215d5f0ff5b2b4a8638d24cae852d001d42b8107185eda9a5d1edbd66a2e0c8cf531288e8611bd08473aaed459de0e20cf1e03065f27745925a3aa06c5a49372ddee2a59123c2c53c64bc8fa5d0da64a72bc8675c80477535abe83625531663c7b870066b424e5963981254073b4c94ea2afeb5920965fab9f5bc1551b2fe9980caba528264df6a8e1840daaa3c3acee5e103f7ee65126991ec0bb328d50e3bc323221caa7c3573751d92417ba89"}]}, 0x280}, 0x1, 0x0, 0x0, 0x40800}, 0x810) [ 1050.884517] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1050.884535] ? wait_for_completion_io+0x270/0x270 [ 1050.884552] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1050.884569] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1050.884607] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1050.884628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1050.884651] do_syscall_64+0x33/0x40 [ 1050.884671] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1050.884683] RIP: 0033:0x7ff8e0e10b19 [ 1050.884702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:40:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0xf000) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 1050.884713] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1050.884734] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 1050.884745] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1050.884756] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1050.884767] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1050.884779] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1051.064425] FAULT_INJECTION: forcing a failure. [ 1051.064425] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.064449] CPU: 1 PID: 7454 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 1051.064471] FAULT_INJECTION: forcing a failure. [ 1051.064471] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.064482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1051.064489] Call Trace: [ 1051.064516] dump_stack+0x107/0x167 [ 1051.064538] should_fail.cold+0x5/0xa [ 1051.064560] ? create_object.isra.0+0x3a/0xa30 [ 1051.064578] should_failslab+0x5/0x20 [ 1051.064598] kmem_cache_alloc+0x5b/0x310 [ 1051.064622] create_object.isra.0+0x3a/0xa30 [ 1051.064638] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1051.064663] kmem_cache_alloc_trace+0x151/0x320 [ 1051.064690] __io_uring_add_tctx_node+0x15c/0x520 [ 1051.064709] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1051.064732] ? alloc_fd+0x2e7/0x670 [ 1051.064761] io_uring_setup+0x1fbb/0x2980 [ 1051.064788] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1051.064805] ? wait_for_completion_io+0x270/0x270 [ 1051.064823] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1051.064839] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1051.064878] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1051.064899] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1051.064920] do_syscall_64+0x33/0x40 [ 1051.064940] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1051.064952] RIP: 0033:0x7ff8e0e10b19 [ 1051.064971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1051.064981] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1051.065001] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 1051.065013] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1051.065024] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1051.065036] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1051.065047] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1051.065085] CPU: 0 PID: 7455 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 1051.065096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1051.065103] Call Trace: [ 1051.065128] dump_stack+0x107/0x167 [ 1051.065151] should_fail.cold+0x5/0xa [ 1051.065173] ? create_object.isra.0+0x3a/0xa30 [ 1051.065191] should_failslab+0x5/0x20 [ 1051.065210] kmem_cache_alloc+0x5b/0x310 [ 1051.065230] ? mark_held_locks+0x9e/0xe0 [ 1051.065252] create_object.isra.0+0x3a/0xa30 [ 1051.065268] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1051.065293] kmem_cache_alloc+0x159/0x310 [ 1051.065319] xas_alloc+0x336/0x440 [ 1051.065347] xas_create+0x34a/0x10d0 [ 1051.065379] ? kernel_text_address+0xf2/0x120 [ 1051.065400] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1051.065421] xas_store+0x8c/0x1c40 [ 1051.065455] __xa_store+0x164/0x2d0 [ 1051.065476] ? xa_delete_node+0x280/0x280 [ 1051.065503] ? trace_hardirqs_on+0x5b/0x180 [ 1051.065530] xa_store+0x31/0x50 [ 1051.065559] __io_uring_add_tctx_node+0x1cf/0x520 [ 1051.065579] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1051.065596] ? alloc_fd+0x2e7/0x670 [ 1051.065626] io_uring_setup+0x1fbb/0x2980 [ 1051.065655] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1051.065671] ? wait_for_completion_io+0x270/0x270 [ 1051.065689] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1051.065706] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1051.065745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1051.065765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1051.065788] do_syscall_64+0x33/0x40 [ 1051.065807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1051.065820] RIP: 0033:0x7ff1de49fb19 [ 1051.065839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1051.065851] RSP: 002b:00007ff1dba15108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1051.065882] RAX: ffffffffffffffda RBX: 00007ff1de5b2f60 RCX: 00007ff1de49fb19 [ 1051.065893] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1051.065904] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1051.065916] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1051.065927] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:40:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x401, 0x2e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x971a46589031b072}, 0x200480c1) 03:40:30 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 79) 03:40:30 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448c9, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:30 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x2, 0x1}, 0x6) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r3, 0x8, 0xffffffffffffffff, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r3, 0x8000}, {0xffffffffffffffff, 0xc286}, {r4, 0x1000}, {r3, 0x6000}], 0x4, 0x1f) io_uring_enter(r3, 0x223c, 0xec23, 0x3, &(0x7f00000000c0)={[0xff]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd_index=0x3, 0x1, 0x1ff, 0xfffffffb, 0x1, 0x1, {0x2, r2}}, 0x0) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f0000000000)={'wlan0\x00'}) 03:40:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x80000) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:40:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 60) 03:40:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8995, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0xffff, "e21ac6", 0x5, 0x40}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) [ 1064.185214] FAULT_INJECTION: forcing a failure. [ 1064.185214] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.185269] CPU: 1 PID: 7486 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 1064.185276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1064.185280] Call Trace: 03:40:30 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="90010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="060006004e220000"], 0x190}, 0x1, 0x0, 0x0, 0x20044840}, 0x48000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) fallocate(r1, 0xca, 0x8, 0xffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x6, 0x9, 0x9e, 0x9, 0x0, 0x2, 0x100, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0x9}, 0x8047, 0x3, 0xfffffffe, 0x7, 0x4, 0x4, 0x101, 0x0, 0xfffff001, 0x0, 0xeba2}, 0xffffffffffffffff, 0x7, r1, 0x2) 03:40:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a0, &(0x7f00000005c0)={'wlan0\x00'}) [ 1064.185297] dump_stack+0x107/0x167 [ 1064.185311] should_fail.cold+0x5/0xa 03:40:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000040)="c3053c404bd2a65fd4da669c4a49e7bd187b94491ab0a0b67b548ee83b0fc6f4899b7427b5") 03:40:30 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 80) [ 1064.185330] ? vm_area_dup+0x78/0x290 [ 1064.185342] should_failslab+0x5/0x20 [ 1064.185354] kmem_cache_alloc+0x5b/0x310 03:40:30 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448cc, &(0x7f00000005c0)={'wlan0\x00'}) [ 1064.185371] vm_area_dup+0x78/0x290 [ 1064.185385] ? lock_release+0x680/0x680 [ 1064.185399] ? mark_lock+0xf5/0x2df0 [ 1064.185414] ? lock_chain_count+0x20/0x20 03:40:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 61) [ 1064.185426] ? mark_lock+0xf5/0x2df0 [ 1064.185440] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1064.185452] ? lock_chain_count+0x20/0x20 [ 1064.185466] ? mark_lock+0xf5/0x2df0 [ 1064.185478] ? vm_area_alloc+0x110/0x110 03:40:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x400000) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) [ 1064.185492] ? __lock_acquire+0x1657/0x5b00 [ 1064.185514] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1064.185526] ? vmacache_find+0x55/0x2a0 [ 1064.185539] __split_vma+0xa8/0x4e0 [ 1064.185551] __do_munmap+0x365/0x1260 03:40:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a1, &(0x7f00000005c0)={'wlan0\x00'}) [ 1064.185565] ? arch_get_unmapped_area+0x450/0x450 [ 1064.185577] ? lock_release+0x680/0x680 [ 1064.185590] mmap_region+0x7cc/0x1500 [ 1064.185609] do_mmap+0x868/0x1370 [ 1064.185626] vm_mmap_pgoff+0x198/0x1f0 [ 1064.185641] ? randomize_page+0xb0/0xb0 [ 1064.185660] ksys_mmap_pgoff+0x41c/0x560 [ 1064.185673] ? find_mergeable_anon_vma+0x250/0x250 03:40:30 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 81) 03:40:30 executing program 1: getitimer(0x2, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) close_range(r0, r2, 0x2) [ 1064.185687] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1064.185700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1064.185714] do_syscall_64+0x33/0x40 [ 1064.185726] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1064.185734] RIP: 0033:0x7ff1de49fb62 [ 1064.185745] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1064.185751] RSP: 002b:00007ff1dba150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 03:40:30 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448dc, &(0x7f00000005c0)={'wlan0\x00'}) [ 1064.185764] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff1de49fb62 [ 1064.185770] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1064.185777] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1064.185783] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020001080 [ 1064.185790] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1064.187303] FAULT_INJECTION: forcing a failure. [ 1064.187303] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.187336] CPU: 0 PID: 7485 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 1064.187346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1064.187353] Call Trace: [ 1064.187379] dump_stack+0x107/0x167 [ 1064.187401] should_fail.cold+0x5/0xa [ 1064.187421] ? ___slab_alloc+0x155/0x700 [ 1064.187441] ? create_object.isra.0+0x3a/0xa30 [ 1064.187461] should_failslab+0x5/0x20 [ 1064.187484] kmem_cache_alloc+0x5b/0x310 [ 1064.187510] create_object.isra.0+0x3a/0xa30 [ 1064.187527] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1064.187552] kmem_cache_alloc+0x159/0x310 [ 1064.187578] xas_alloc+0x336/0x440 [ 1064.187601] xas_create+0x34a/0x10d0 [ 1064.187626] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1064.187651] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1064.187674] xas_store+0x8c/0x1c40 [ 1064.187708] __xa_store+0x164/0x2d0 [ 1064.187730] ? xa_delete_node+0x280/0x280 [ 1064.187757] ? trace_hardirqs_on+0x5b/0x180 [ 1064.187783] xa_store+0x31/0x50 [ 1064.187805] __io_uring_add_tctx_node+0x1cf/0x520 [ 1064.187826] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1064.187843] ? alloc_fd+0x2e7/0x670 [ 1064.187874] io_uring_setup+0x1fbb/0x2980 [ 1064.187903] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1064.187920] ? perf_trace_preemptirq_template+0x266/0x400 [ 1064.187938] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1064.187955] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1064.187994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1064.188016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1064.188038] do_syscall_64+0x33/0x40 [ 1064.188058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1064.188071] RIP: 0033:0x7ff8e0e10b19 [ 1064.188094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1064.188104] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1064.188125] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 1064.188137] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1064.188148] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1064.188159] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1064.188170] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1064.274144] FAULT_INJECTION: forcing a failure. [ 1064.274144] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.274158] CPU: 1 PID: 7502 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 1064.274169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1064.274173] Call Trace: [ 1064.274191] dump_stack+0x107/0x167 [ 1064.274204] should_fail.cold+0x5/0xa [ 1064.274217] ? vm_area_dup+0x78/0x290 [ 1064.274228] should_failslab+0x5/0x20 [ 1064.274241] kmem_cache_alloc+0x5b/0x310 [ 1064.274255] vm_area_dup+0x78/0x290 [ 1064.274269] ? lock_release+0x680/0x680 [ 1064.274281] ? mark_lock+0xf5/0x2df0 [ 1064.274296] ? lock_chain_count+0x20/0x20 [ 1064.274308] ? mark_lock+0xf5/0x2df0 [ 1064.274322] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1064.274333] ? lock_chain_count+0x20/0x20 [ 1064.274347] ? mark_lock+0xf5/0x2df0 [ 1064.274362] ? vm_area_alloc+0x110/0x110 [ 1064.274375] ? __lock_acquire+0x1657/0x5b00 [ 1064.274397] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1064.274408] ? vmacache_find+0x55/0x2a0 [ 1064.274421] __split_vma+0xa8/0x4e0 [ 1064.274433] __do_munmap+0x365/0x1260 [ 1064.274446] ? arch_get_unmapped_area+0x450/0x450 [ 1064.274458] ? lock_release+0x680/0x680 [ 1064.274469] mmap_region+0x7cc/0x1500 [ 1064.274488] do_mmap+0x868/0x1370 [ 1064.274505] vm_mmap_pgoff+0x198/0x1f0 [ 1064.274519] ? randomize_page+0xb0/0xb0 [ 1064.274538] ksys_mmap_pgoff+0x41c/0x560 [ 1064.274550] ? find_mergeable_anon_vma+0x250/0x250 [ 1064.274564] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1064.274576] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1064.274589] do_syscall_64+0x33/0x40 [ 1064.274601] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1064.274608] RIP: 0033:0x7ff1de49fb62 [ 1064.274619] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1064.274626] RSP: 002b:00007ff1dba150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1064.274638] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff1de49fb62 [ 1064.274644] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1064.274650] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1064.274656] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020001080 [ 1064.274662] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1064.350443] FAULT_INJECTION: forcing a failure. [ 1064.350443] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.350466] CPU: 0 PID: 7513 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 1064.350477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1064.350484] Call Trace: [ 1064.350508] dump_stack+0x107/0x167 [ 1064.350531] should_fail.cold+0x5/0xa [ 1064.350551] ? xas_alloc+0x336/0x440 [ 1064.350570] should_failslab+0x5/0x20 [ 1064.350590] kmem_cache_alloc+0x5b/0x310 [ 1064.350614] xas_alloc+0x336/0x440 [ 1064.350636] xas_create+0x34a/0x10d0 [ 1064.350660] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 1064.350685] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1064.350707] xas_store+0x8c/0x1c40 [ 1064.350747] __xa_store+0x164/0x2d0 [ 1064.350769] ? xa_delete_node+0x280/0x280 [ 1064.350796] ? trace_hardirqs_on+0x5b/0x180 [ 1064.350822] xa_store+0x31/0x50 [ 1064.350844] __io_uring_add_tctx_node+0x1cf/0x520 [ 1064.350864] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1064.350881] ? alloc_fd+0x2e7/0x670 [ 1064.350912] io_uring_setup+0x1fbb/0x2980 [ 1064.350940] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1064.350957] ? perf_trace_preemptirq_template+0x266/0x400 [ 1064.350975] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1064.350991] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1064.351030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1064.351052] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1064.351075] do_syscall_64+0x33/0x40 [ 1064.351095] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1064.351107] RIP: 0033:0x7ff8e0e10b19 [ 1064.351127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1064.351138] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1064.351158] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 1064.351170] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1064.351181] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1064.351192] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1064.351204] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1064.374770] FAULT_INJECTION: forcing a failure. [ 1064.374770] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.374783] CPU: 1 PID: 7519 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 1064.374789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1064.374793] Call Trace: [ 1064.374811] dump_stack+0x107/0x167 [ 1064.374824] should_fail.cold+0x5/0xa [ 1064.374838] ? anon_vma_clone+0xdc/0x590 [ 1064.374849] should_failslab+0x5/0x20 [ 1064.374861] kmem_cache_alloc+0x5b/0x310 [ 1064.374875] anon_vma_clone+0xdc/0x590 [ 1064.374891] __split_vma+0x17c/0x4e0 [ 1064.374902] __do_munmap+0x365/0x1260 [ 1064.374916] ? arch_get_unmapped_area+0x450/0x450 [ 1064.374929] ? lock_release+0x680/0x680 [ 1064.374940] mmap_region+0x7cc/0x1500 [ 1064.374958] do_mmap+0x868/0x1370 [ 1064.374975] vm_mmap_pgoff+0x198/0x1f0 [ 1064.374987] ? randomize_page+0xb0/0xb0 [ 1064.375006] ksys_mmap_pgoff+0x41c/0x560 [ 1064.375017] ? find_mergeable_anon_vma+0x250/0x250 [ 1064.375030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1064.375044] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1064.375056] do_syscall_64+0x33/0x40 [ 1064.375068] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1064.375075] RIP: 0033:0x7ff1de49fb62 [ 1064.375086] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1064.375091] RSP: 002b:00007ff1dba150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1064.375103] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff1de49fb62 [ 1064.375109] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1064.375114] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1064.375120] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020001080 [ 1064.375127] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1077.322512] FAULT_INJECTION: forcing a failure. [ 1077.322512] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.323859] CPU: 1 PID: 7539 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 1077.324637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.325576] Call Trace: [ 1077.325879] dump_stack+0x107/0x167 [ 1077.326294] should_fail.cold+0x5/0xa [ 1077.326725] ? xas_alloc+0x336/0x440 [ 1077.327145] should_failslab+0x5/0x20 [ 1077.327576] kmem_cache_alloc+0x5b/0x310 [ 1077.328033] xas_alloc+0x336/0x440 [ 1077.328439] xas_create+0x34a/0x10d0 [ 1077.328872] ? kernel_text_address+0xf2/0x120 [ 1077.329380] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1077.329973] xas_store+0x8c/0x1c40 [ 1077.330380] __xa_store+0x164/0x2d0 [ 1077.330797] ? xa_delete_node+0x280/0x280 [ 1077.331273] ? trace_hardirqs_on+0x5b/0x180 [ 1077.331763] xa_store+0x31/0x50 [ 1077.332139] __io_uring_add_tctx_node+0x1cf/0x520 [ 1077.332690] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1077.333279] ? alloc_fd+0x2e7/0x670 [ 1077.333698] io_uring_setup+0x1fbb/0x2980 [ 1077.334169] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1077.334499] FAULT_INJECTION: forcing a failure. [ 1077.334499] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.334743] ? wait_for_completion_io+0x270/0x270 [ 1077.334752] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1077.334761] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1077.334782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1077.334794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1077.334814] do_syscall_64+0x33/0x40 [ 1077.334824] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1077.334832] RIP: 0033:0x7ff8e0e10b19 [ 1077.334842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1077.344488] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1077.345348] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 1077.346152] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1077.346952] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1077.347754] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1077.348555] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1077.349391] CPU: 0 PID: 7541 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 1077.351136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.353504] Call Trace: [ 1077.354164] dump_stack+0x107/0x167 [ 1077.355087] should_fail.cold+0x5/0xa [ 1077.356046] ? create_object.isra.0+0x3a/0xa30 [ 1077.357206] should_failslab+0x5/0x20 [ 1077.358171] kmem_cache_alloc+0x5b/0x310 [ 1077.359204] create_object.isra.0+0x3a/0xa30 [ 1077.360319] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1077.361620] kmem_cache_alloc+0x159/0x310 [ 1077.362675] anon_vma_clone+0xdc/0x590 [ 1077.363671] __split_vma+0x17c/0x4e0 [ 1077.364638] __do_munmap+0x365/0x1260 [ 1077.365609] ? arch_get_unmapped_area+0x450/0x450 [ 1077.366828] ? lock_release+0x680/0x680 [ 1077.367843] mmap_region+0x7cc/0x1500 [ 1077.368843] do_mmap+0x868/0x1370 [ 1077.369736] vm_mmap_pgoff+0x198/0x1f0 [ 1077.370722] ? randomize_page+0xb0/0xb0 [ 1077.371744] ksys_mmap_pgoff+0x41c/0x560 [ 1077.372791] ? find_mergeable_anon_vma+0x250/0x250 [ 1077.374073] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1077.375412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1077.376737] do_syscall_64+0x33/0x40 [ 1077.377696] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1077.379007] RIP: 0033:0x7ff1de49fb62 [ 1077.379961] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1077.384184] RSP: 002b:00007ff1dba150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1077.385895] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff1de49fb62 [ 1077.387492] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1077.389095] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1077.390693] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020001080 [ 1077.392289] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:40:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x7ffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xb, r2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fallocate(r0, 0x1e, 0x5, 0xfffffffffffffffd) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r3, 0x8, 0xffffffffffffffff, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000340)={0x1, 0x8, 0x8}) writev(r4, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r3, 0x8000}, {0xffffffffffffffff, 0xc286}, {r4, 0x1000}, {r3, 0x6000}], 0x4, 0x1f) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r5, 0x8, 0xffffffffffffffff, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x20142) fsetxattr(r7, &(0x7f0000000240)=@random={'user.', '\x00'}, &(0x7f00000002c0)='/\xd9{&[G-\x00', 0x8, 0x2) writev(r6, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r5, 0x8000}, {0xffffffffffffffff, 0xc286}, {r6, 0x1000}, {r5, 0x6000}], 0x4, 0x1f) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="b0d52a4077ae37613ef300a0ae24d657a14b47a0ae9d285eb976e017175eb782ab3d382f9afe1845d661e90197956d41f2f5064e2ea98885e5012c40bb1d66", @ANYRESOCT=r1, @ANYRES32=r6], 0xa) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:43 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x8, 0xffffffffffffffff, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000000)="71361b65780eff8fd0e597510b17f7b8a0e697866dc4f228da08d78e7e7bbbe458d497e97db3674f136773554d381af531042674c6a5852d485bd6b8bf382647bddff069fa7ca668") r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r3, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r4, 0x8, 0xffffffffffffffff, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r4, 0x8000}, {0xffffffffffffffff, 0xc286}, {r5, 0x1000}, {r4, 0x6000}], 0x4, 0x1f) preadv(r5, &(0x7f0000000840)=[{&(0x7f0000000080)=""/232, 0xe8}, {&(0x7f0000000180)}, {&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000000400)=""/146, 0x92}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f0000000700)=""/140, 0x8c}], 0x8, 0x5, 0x5) 03:40:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r3, 0x8, 0xffffffffffffffff, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r3, 0x8000}, {0xffffffffffffffff, 0xc286}, {r4, 0x1000}, {r3, 0x6000}], 0x4, 0x1f) tee(r3, 0xffffffffffffffff, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8970, &(0x7f0000000000)={'wlan0\x00'}) dup2(r5, r5) 03:40:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0xf0ffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:40:43 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 82) 03:40:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a2, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 62) 03:40:43 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448e4, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:43 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 83) 03:40:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 63) [ 1077.442745] FAULT_INJECTION: forcing a failure. [ 1077.442745] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.442758] CPU: 1 PID: 7556 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 1077.442763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.442767] Call Trace: [ 1077.442784] dump_stack+0x107/0x167 [ 1077.442796] should_fail.cold+0x5/0xa [ 1077.442809] ? anon_vma_clone+0xdc/0x590 [ 1077.442819] should_failslab+0x5/0x20 [ 1077.442830] kmem_cache_alloc+0x5b/0x310 [ 1077.442844] anon_vma_clone+0xdc/0x590 [ 1077.442859] __split_vma+0x17c/0x4e0 [ 1077.442870] __do_munmap+0x365/0x1260 [ 1077.442883] ? arch_get_unmapped_area+0x450/0x450 [ 1077.442896] ? lock_release+0x680/0x680 [ 1077.442907] mmap_region+0x7cc/0x1500 [ 1077.442924] do_mmap+0x868/0x1370 [ 1077.442939] vm_mmap_pgoff+0x198/0x1f0 [ 1077.442952] ? randomize_page+0xb0/0xb0 [ 1077.442970] ksys_mmap_pgoff+0x41c/0x560 [ 1077.442981] ? find_mergeable_anon_vma+0x250/0x250 [ 1077.442994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1077.443010] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1077.443023] do_syscall_64+0x33/0x40 [ 1077.443034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1077.443041] RIP: 0033:0x7ff1de49fb62 [ 1077.443052] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1077.443057] RSP: 002b:00007ff1dba150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1077.443069] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff1de49fb62 [ 1077.443075] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1077.443081] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1077.443087] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020001080 [ 1077.443093] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1077.476807] FAULT_INJECTION: forcing a failure. [ 1077.476807] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.494899] CPU: 1 PID: 7562 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 1077.494905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.494909] Call Trace: [ 1077.494926] dump_stack+0x107/0x167 [ 1077.494938] should_fail.cold+0x5/0xa [ 1077.494951] ? xas_alloc+0x336/0x440 [ 1077.494962] should_failslab+0x5/0x20 [ 1077.494974] kmem_cache_alloc+0x5b/0x310 [ 1077.494987] xas_alloc+0x336/0x440 [ 1077.494999] xas_create+0x34a/0x10d0 [ 1077.495015] ? kernel_text_address+0xf2/0x120 [ 1077.495028] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1077.495039] xas_store+0x8c/0x1c40 [ 1077.495058] __xa_store+0x164/0x2d0 [ 1077.495069] ? xa_delete_node+0x280/0x280 [ 1077.495084] ? trace_hardirqs_on+0x5b/0x180 [ 1077.495098] xa_store+0x31/0x50 [ 1077.495111] __io_uring_add_tctx_node+0x1cf/0x520 [ 1077.495122] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1077.495132] ? alloc_fd+0x2e7/0x670 [ 1077.495148] io_uring_setup+0x1fbb/0x2980 [ 1077.495163] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1077.495173] ? wait_for_completion_io+0x270/0x270 [ 1077.495182] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1077.495191] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1077.495212] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1077.495223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1077.495236] do_syscall_64+0x33/0x40 [ 1077.495246] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1077.495254] RIP: 0033:0x7ff8e0e10b19 [ 1077.495264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1077.495270] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1077.495281] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 1077.495287] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1077.495293] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1077.495300] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1077.495306] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 03:40:58 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r0, 0x7, 0xffffffffffffffff, 0xf) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="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", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r0, 0x8000}, {0xffffffffffffffff, 0xc286}, {r1, 0x1000}, {r0, 0x6000}], 0x4, 0x1f) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8942, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r1 = perf_event_open(0x0, 0x0, 0x800000000000002, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xb, r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 03:40:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448e6, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f0000000040)={'wlan0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0x1f, 0x0, 0xff, 0x0, 0xfff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48b1, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8, 0x0, 0x86a, 0x0, 0x7fff}, r1, 0x8, 0xffffffffffffffff, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000007c0)="08c08baab78868ce0e7b276e83f64d02059edc4edbfe6e3fa69a13e2f785ad479def81fc1b0af53339e4c20c1010f0af533e0da21eb9d24e17190a0835623360b0c7ca830876b5ab6125feb9f8a028ee216882a67207ed", 0x57}, {&(0x7f0000001a00)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc92383bd58732222eaadd229698d80e0f1df2450a2078bcacfdc596099ef7925565a7c88c5be941f89552c507d0dcb4c4e1844e049665bac4e17b8db2f44fdd5375154f2bc49fed9c2f2a56b6bc9d0486608918389a17f710128f144d95a2abf613651f4a7fb4eb78242f13c66b022a97f422de3efbb5313283a34e7c0ee64f807ba5f6eab023dfa67044b1ad61aab33f450e0ac3200c89c305f99ebf618538635", 0x199}, {0x0}], 0x3) poll(&(0x7f0000000300)=[{r1, 0x8000}, {0xffffffffffffffff, 0xc286}, {r2, 0x1000}, {r1, 0x6000}], 0x4, 0x1f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe44584e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f707e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82bf6b"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="01008a527bb46ecd14ae0000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x70d, 0x400000f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000000}, 0x4005) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40000) 03:40:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a3, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:58 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 84) 03:40:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x1000000) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:40:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 64) [ 1091.937929] FAULT_INJECTION: forcing a failure. [ 1091.937929] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.937953] CPU: 1 PID: 7592 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 1091.937964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1091.937971] Call Trace: [ 1091.937998] dump_stack+0x107/0x167 [ 1091.938023] should_fail.cold+0x5/0xa [ 1091.938047] ? create_object.isra.0+0x3a/0xa30 [ 1091.938066] should_failslab+0x5/0x20 [ 1091.938087] kmem_cache_alloc+0x5b/0x310 03:40:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x400448e7, &(0x7f00000005c0)={'wlan0\x00'}) [ 1091.938114] create_object.isra.0+0x3a/0xa30 [ 1091.938132] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1091.938159] kmem_cache_alloc+0x159/0x310 [ 1091.938188] vm_area_alloc+0x1c/0x110 [ 1091.938215] mmap_region+0x982/0x1500 [ 1091.938251] do_mmap+0x868/0x1370 [ 1091.938282] vm_mmap_pgoff+0x198/0x1f0 03:40:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89b0, &(0x7f00000005c0)={'wlan0\x00'}) 03:40:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x2000000) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) poll(0x0, 0x0, 0x0) 03:40:58 executing program 3: syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 85) 03:40:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe44584e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f707e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82bf6b"], 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xfc, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008064}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="01008a527bb46ecd14ae0000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x70d, 0x400000f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000000}, 0x4005) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x68, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x243a4704, 0x75}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "7f6ecb94e8eddd8cae5ac40f1143a20d"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_SSID={0x12, 0x34, @random="f1c47faacc77b5ec3a4a3ce694a7"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3b}]}, 0x68}}, 0x20004080) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000004da928b52e460ad12bf10c6a0d82201e8bbc3b733339a04e03e12437ed5b55b7bc878b902bcec08141e245891409c76787ac6847d8675a5cfab06ad827bd840ca59f53b46499024503614564576e621d37fec9b3d89f3bdd5875a5d1d58361214c392aa07b454e670dd5e129c925acf716f8f514f358e6bdfdffc0c634", @ANYRES16=0x0, @ANYBLOB="020028bd7000fbdbdf2507000000080001002f0000000c009900010100001700000005005300010000000a00180003030303030300000400cc000400cc0014000400697036746e6c300000000000000000000400cc00"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4040011) 03:40:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3714, &(0x7f0000000fc0)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001040), &(0x7f0000001080)) (fail_nth: 65) [ 1091.938308] ? randomize_page+0xb0/0xb0 [ 1091.938344] ksys_mmap_pgoff+0x41c/0x560 03:40:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0x80, 0x7f, 0xfffa, 0x5}}}, 0xa) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan0\x00'}) [ 1091.938368] ? find_mergeable_anon_vma+0x250/0x250 [ 1091.938394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1091.938417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1091.938442] do_syscall_64+0x33/0x40 [ 1091.938464] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1091.938478] RIP: 0033:0x7ff1de49fb62 [ 1091.938497] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1091.938508] RSP: 002b:00007ff1dba150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1091.938531] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff1de49fb62 [ 1091.938543] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1091.938555] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1091.938567] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020001080 [ 1091.938579] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1091.939725] FAULT_INJECTION: forcing a failure. [ 1091.939725] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.939751] CPU: 0 PID: 7586 Comm: syz-executor.4 Not tainted 5.10.251 #1 [ 1091.939762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1091.939769] Call Trace: [ 1091.939796] dump_stack+0x107/0x167 [ 1091.939819] should_fail.cold+0x5/0xa [ 1091.939840] ? xas_alloc+0x336/0x440 [ 1091.939859] should_failslab+0x5/0x20 [ 1091.939879] kmem_cache_alloc+0x5b/0x310 [ 1091.939904] xas_alloc+0x336/0x440 [ 1091.939926] xas_create+0x34a/0x10d0 [ 1091.939954] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 1091.939977] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1091.939999] xas_store+0x8c/0x1c40 [ 1091.940033] __xa_store+0x164/0x2d0 [ 1091.940055] ? xa_delete_node+0x280/0x280 [ 1091.940082] ? trace_hardirqs_on+0x5b/0x180 [ 1091.940109] xa_store+0x31/0x50 [ 1091.940132] __io_uring_add_tctx_node+0x1cf/0x520 [ 1091.940166] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1091.940183] ? alloc_fd+0x2e7/0x670 [ 1091.940214] io_uring_setup+0x1fbb/0x2980 [ 1091.940242] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1091.940259] ? perf_trace_preemptirq_template+0x266/0x400 [ 1091.940277] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1091.940293] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1091.940340] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1091.940361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1091.940384] do_syscall_64+0x33/0x40 [ 1091.940404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1091.940417] RIP: 0033:0x7ff8e0e10b19 [ 1091.940436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1091.940447] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1091.940467] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 1091.940479] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1091.940490] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1091.940501] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1091.940512] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1091.967505] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1092.073234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1092.088014] selinux_netlink_send: 38 callbacks suppressed [ 1092.088031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7602 comm=syz-executor.5 [ 1092.094565] FAULT_INJECTION: forcing a failure. [ 1092.094565] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1092.094585] CPU: 0 PID: 7605 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 1092.094595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1092.094602] Call Trace: [ 1092.094628] dump_stack+0x107/0x167 [ 1092.094650] should_fail.cold+0x5/0xa [ 1092.094674] __alloc_pages_nodemask+0x182/0x600 [ 1092.094699] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1092.094726] ? walk_mem_res+0x170/0x170 [ 1092.094754] alloc_pages_current+0x187/0x280 [ 1092.094777] pte_alloc_one+0x16/0x1a0 [ 1092.094797] __pte_alloc+0x1d/0x330 [ 1092.094822] remap_pfn_range_internal+0x9a3/0xf60 [ 1092.094850] ? lookup_memtype+0x5b/0x200 [ 1092.094883] ? apply_to_existing_page_range+0x40/0x40 [ 1092.094915] remap_pfn_range+0xcd/0x160 [ 1092.094937] ? remap_pfn_range_notrack+0x70/0x70 [ 1092.094960] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1092.094986] io_uring_mmap+0x398/0x530 [ 1092.095010] mmap_file+0x5e/0xe0 [ 1092.095029] mmap_region+0xc4d/0x1500 [ 1092.095061] do_mmap+0x868/0x1370 [ 1092.095088] vm_mmap_pgoff+0x198/0x1f0 [ 1092.095112] ? randomize_page+0xb0/0xb0 [ 1092.095145] ksys_mmap_pgoff+0x41c/0x560 [ 1092.095166] ? find_mergeable_anon_vma+0x250/0x250 [ 1092.095191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1092.095212] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1092.095234] do_syscall_64+0x33/0x40 [ 1092.095253] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1092.095266] RIP: 0033:0x7ff1de49fb62 [ 1092.095285] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1092.095295] RSP: 002b:00007ff1dba150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1092.095315] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff1de49fb62 [ 1092.095334] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1092.095345] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1092.095356] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020001080 [ 1092.095367] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1092.098920] ------------[ cut here ]------------ [ 1092.098960] WARNING: CPU: 0 PID: 7605 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1092.098981] Modules linked in: [ 1092.099019] CPU: 0 PID: 7605 Comm: syz-executor.3 Not tainted 5.10.251 #1 [ 1092.099031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1092.099051] RIP: 0010:get_pat_info+0x216/0x270 03:40:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8970, &(0x7f00000005c0)={'wlan1\x00'}) [ 1092.099070] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 81 8b 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 6a 8b 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 75 a8 5a 00 e9 [ 1092.099082] RSP: 0018:ffff88802022f890 EFLAGS: 00010212 [ 1092.099100] RAX: 000000000000b2b1 RBX: ffff88800e9d0600 RCX: ffffc90001df2000 [ 1092.099113] RDX: 0000000000040000 RSI: ffffffff81125466 RDI: 0000000000000007 [ 1092.099125] RBP: ffff88802022f948 R08: 0000000000000000 R09: ffff88802022f818 [ 1092.099137] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1092.099149] R13: 1ffff11004045f12 R14: 0000000000000000 R15: ffff88800e9d0650 [ 1092.099169] FS: 00007ff1dba15700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1092.099184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1092.099197] CR2: 0000000020001000 CR3: 00000000487e2000 CR4: 0000000000350ef0 [ 1092.099204] Call Trace: [ 1092.099228] ? pgprot_writethrough+0xc0/0xc0 [ 1092.099245] ? finish_task_switch+0x126/0x5d0 [ 1092.099262] ? finish_task_switch+0xef/0x5d0 [ 1092.099295] untrack_pfn+0xdc/0x240 [ 1092.099317] ? track_pfn_insert+0x150/0x150 [ 1092.099779] ? lock_downgrade+0x6d0/0x6d0 [ 1092.099800] ? uprobe_munmap+0x1c/0x560 [ 1092.099826] unmap_single_vma+0x1bc/0x300 [ 1092.099861] zap_page_range_single+0x2ce/0x450 [ 1092.099907] ? unmap_single_vma+0x300/0x300 [ 1092.099927] ? remap_pfn_range_internal+0xc56/0xf60 [ 1092.099957] ? lookup_memtype+0x5b/0x200 [ 1092.099994] ? apply_to_existing_page_range+0x40/0x40 [ 1092.100029] remap_pfn_range+0x139/0x160 [ 1092.100051] ? remap_pfn_range_notrack+0x70/0x70 [ 1092.100076] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1092.100103] io_uring_mmap+0x398/0x530 [ 1092.100127] mmap_file+0x5e/0xe0 [ 1092.100146] mmap_region+0xc4d/0x1500 [ 1092.100182] do_mmap+0x868/0x1370 [ 1092.100212] vm_mmap_pgoff+0x198/0x1f0 [ 1092.100237] ? randomize_page+0xb0/0xb0 [ 1092.100274] ksys_mmap_pgoff+0x41c/0x560 [ 1092.100297] ? find_mergeable_anon_vma+0x250/0x250 [ 1092.100327] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1092.100378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1092.100403] do_syscall_64+0x33/0x40 [ 1092.100423] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1092.100436] RIP: 0033:0x7ff1de49fb62 [ 1092.100455] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1092.100466] RSP: 002b:00007ff1dba150f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1092.100486] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff1de49fb62 [ 1092.100498] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1092.100510] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1092.100522] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020001080 [ 1092.100533] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 [ 1092.100566] irq event stamp: 1059 [ 1092.286632] hardirqs last enabled at (1659): [] console_unlock+0x92d/0xb40 [ 1092.286655] hardirqs last disabled at (1664): [] vprintk_emit+0x422/0x4e0 [ 1092.286679] softirqs last enabled at (1084): [] asm_call_irq_on_stack+0x12/0x20 [ 1092.286701] softirqs last disabled at (1073): [] asm_call_irq_on_stack+0x12/0x20 [ 1092.286711] ---[ end trace 498852d9fb2877b0 ]--- [ 1092.305706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1092.306165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7614 comm=syz-executor.5 [ 1092.336088] FAULT_INJECTION: forcing a failure. [ 1092.336088] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.338516] CPU: 1 PID: 7617 Comm: syz-executor.4 Tainted: G W 5.10.251 #1 [ 1092.340239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1092.341961] Call Trace: [ 1092.342512] dump_stack+0x107/0x167 [ 1092.343261] should_fail.cold+0x5/0xa [ 1092.344064] ? xas_alloc+0x336/0x440 [ 1092.344853] should_failslab+0x5/0x20 [ 1092.345654] kmem_cache_alloc+0x5b/0x310 [ 1092.346511] xas_alloc+0x336/0x440 [ 1092.347262] xas_create+0x34a/0x10d0 [ 1092.348039] ? kernel_text_address+0xf2/0x120 [ 1092.348974] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1092.350059] xas_store+0x8c/0x1c40 [ 1092.350093] __xa_store+0x164/0x2d0 [ 1092.350115] ? xa_delete_node+0x280/0x280 [ 1092.350142] ? trace_hardirqs_on+0x5b/0x180 [ 1092.350168] xa_store+0x31/0x50 [ 1092.350190] __io_uring_add_tctx_node+0x1cf/0x520 [ 1092.350210] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1092.350227] ? alloc_fd+0x2e7/0x670 [ 1092.350258] io_uring_setup+0x1fbb/0x2980 [ 1092.350286] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1092.350303] ? wait_for_completion_io+0x270/0x270 [ 1092.350321] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1092.350338] ? perf_trace_preemptirq_template+0x26d/0x400 [ 1092.350376] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1092.350396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1092.350419] do_syscall_64+0x33/0x40 [ 1092.350439] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1092.350452] RIP: 0033:0x7ff8e0e10b19 [ 1092.350470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1092.350481] RSP: 002b:00007ff8de386108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1092.350502] RAX: ffffffffffffffda RBX: 00007ff8e0f23f60 RCX: 00007ff8e0e10b19 [ 1092.350514] RDX: 0000000020ffc000 RSI: 0000000020000fc0 RDI: 0000000000003714 [ 1092.350525] RBP: 0000000020000fc0 R08: 0000000020001080 R09: 0000000020001080 [ 1092.350536] R10: 0000000020001040 R11: 0000000000000202 R12: 0000000020001080 [ 1092.350547] R13: 0000000020ffc000 R14: 0000000020001040 R15: 0000000020fff000 VM DIAGNOSIS: 07:13:50 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e8001 RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff88802022f300 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000030 R13=0000000000000030 R14=ffffffff879fa200 R15=dffffc0000000000 RIP=ffffffff822e8058 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff1dba15700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001000 CR3=00000000487e2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff814161d3 RDX=ffff88800fdc8000 RSI=ffffffff81416108 RDI=0000000000000001 RBP=ffffffffa0008000 RSP=ffff88800ef4f8d0 R8 =0000000000000000 R9 =ffffffff868736a7 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=dffffc0000000000 R14=ffffffff85037008 R15=ffff888041b94400 RIP=ffffffff81416114 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff319d7c900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff3196d4500 CR3=000000000ce62000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=2851cf91ec98891d00000000001584c8 XMM05=6b1e99b806172e3b00000000000ae990 XMM06=8ca0b852b1c7c8e100000000000ae7c0 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000